Vulnerabilities
Newly published CVEs, actively exploited ones (CISA KEV) and exploit probability (EPSS).
CVEs on record424,627
Added in the last 7 days4,592
Technologies affected in the last 30 days
40- Microsoft Windows 909
- Microsoft Windows Server 904
- Google Chrome 628
- Linux 450
- Microsoft Azl3 Kernel 412
- Apple Macos 307
- Windows 11 version 23H2 306
- Thunderbird 261
- Firefox 247
- Firefox ESR 207
- Apple Ipados 185
- Apple Iphone Os 185
- Windows Server 2025 172
- Windows Server 2025 (Server Core installation) 172
- Windows 11 Version 24H2 164
- Windows 11 Version 25H2 164
- Microsoft 365 Apps 163
- Microsoft Office 162
- Windows 11 Version 26H2 162
- Windows 11 version 26H1 162
- Windows Server 2022 158
- Windows Server 2019 148
- Windows Server 2019 (Server Core installation) 148
- Windows 10 Version 1809 141
- Windows 10 Version 21H2 141
- Windows 10 Version 22H2 141
- Junos OS 139
- Android 138
- Apple Visionos 133
- Chrome 133
- Windows Server 2016 130
- Windows Server 2016 (Server Core installation) 130
- Windows 10 Version 1607 125
- Freerdp 125
- Junos OS Evolved 119
- Windows Server 2012 R2 117
- Windows Server 2012 R2 (Server Core installation) 117
- Windows Server 2012 113
- Windows Server 2012 (Server Core installation) 113
- Microsoft 365 113
Added in the last 30 days
17,36634 added to KEV
- Critical
- 1,470
- High
- 6,653
- Medium
- 7,160
- Low
- 913
- Unknown
- 1,170
1,768Actively exploited
361Used in ransomware
DescriptionA newline
injection vulnerability exists in the UPnP service of Archer BE805 v1 such that
an adjacent attacker can supply newline characters in a UPnP port-mapping
description due to improper sanitization, resulting in possible injection o…ProductArcher BE805 v1Affected versionsv < V1.6_1.5.1 Build 261102CVSS5.3PublishedNov 6, 2026First seenNov 6, 2026Fixed inV1.6_1.5.1 Build 261102
DescriptionRejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a reservation duplicate. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.Affected versionsNo range specifiedPublishedNov 6, 2026First seenNov 6, 2026
DescriptionRejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-119167 Reason: This candidate is a reservation duplicate of CVE-2026-119167. Notes: All CVE users should reference CVE-2026-119167 instead of this candida…Affected versionsNo range specifiedPublishedNov 6, 2026First seenNov 6, 2026
DescriptionIn all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.ProductTorchServeAffected versions0CVSS7.8PublishedNov 6, 2026First seenNov 6, 2026
DescriptionFaveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the pdfThread endpoint that fails to verify ticket department or assignment. Authenticated agents can request arbitrary ticke…ProductFaveosuite Faveo-helpdeskAffected versionsv ≤ 2.0.3CVSS4.3PublishedNov 6, 2026First seenNov 6, 2026
DescriptionBar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails…ProductKarlomikus Bar-assistantAffected versions6.0.0-rc1 ≤ v < 6.11.0CVSS4.3PublishedNov 6, 2026First seenNov 6, 2026Fixed in6.11.0
DescriptionChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id a…ProductZhimaai ChatwikiAffected versionsv < 2.10.0CVSS7.5PublishedNov 6, 2026First seenNov 6, 2026Fixed in2.10.0
Descriptionmistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool out…ProductEriclbuehler Mistral.rsAffected versionsv < 0.9.5CVSS4.2PublishedNov 6, 2026First seenNov 6, 2026Fixed in0.9.5
DescriptionKopia through 0.23.1 contains a path traversal vulnerability in copyDirectoryContent that allows users with repository write access to escape the restore directory via crafted entry names. Attackers can create snapshots whose directory man…ProductKopiaAffected versionsv ≤ 0.23.1CVSS5.7PublishedNov 6, 2026First seenNov 6, 2026
DescriptionGPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file open…ProductGpacAffected versionsv ≤ 26.07.0CVSS5.5PublishedNov 6, 2026First seenNov 6, 2026
DescriptionGPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() that casts a Shape's appearance node to M_Appearance without checking its node tag. Attackers can supply a crafted XMT file…ProductGpacAffected versionsv ≤ 26.07.0CVSS5.5PublishedNov 6, 2026First seenNov 6, 2026
DescriptionGitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is pa…ProductGitleaksAffected versionsv ≤ 8.30.1CVSS3.3PublishedNov 6, 2026First seenNov 6, 2026
DescriptionCivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in handle_http2() that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame…ProductCivetwebAffected versionsv ≤ 1.16CVSS8.1PublishedNov 6, 2026First seenNov 6, 2026
DescriptionCloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts project identifiers without validating that they are safe path components. An authenticated user with resource-management privileg…ProductCloudbeaverAffected versions< 26.1.0CVSS5.3PublishedNov 6, 2026First seenNov 6, 2026
DescriptionTracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty val…ProductTracecatAffected versions>= 0.37.0, < 1.0.0-beta.49CVSS9.8PublishedNov 6, 2026First seenNov 6, 2026
DescriptionCloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open f…ProductCloudbeaverAffected versions>= 23.2.3, < 26.1.2CVSS6.5PublishedNov 6, 2026First seenNov 6, 2026
DescriptionCloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a s…ProductCloudbeaverAffected versions< 26.1.2CVSS6.5PublishedNov 6, 2026First seenNov 6, 2026
DescriptionTetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An att…ProductCilium TetragonAffected versions< 1.7.0CVSS8.8PublishedNov 6, 2026First seenNov 6, 2026
DescriptionCRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area and resumes the target process to execute parasite code. Malicious code in the t…ProductCheckpoint-restore CriuAffected versions< 4.2.1CVSS5.4PublishedNov 6, 2026First seenNov 6, 2026
DescriptionSensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS5.3Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionSensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS3.1Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionCross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS5.7Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionProtection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS3.6Exploit probability0.1%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionSensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS6.2Exploit probability0.1%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionSensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.ProductAcronis Cyber Protect 17Affected versionsv < 42587CVSS5.9Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in42587
DescriptionThe ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arb…ProductKalifastAffected versionsv < 2026.02.1CVSS9.8Exploit probability1.1%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.02.1
DescriptionAxel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f (URL-encoded…ProductAxelAffected versionsv ≤ 2.17.14CVSS8.1Exploit probability0.6%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticated attacker to termi…ProductTelerik Document Processing LibrariesAffected versionsv < 2026.3.1027CVSS7.5Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summari…ProductTelerik Document Processing LibrariesAffected versionsv < 2026.3.1027CVSS7.5Exploit probability0.4%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular expression vulnerabilities in RadSpreadProcessing and RadSpreadStream…ProductTelerik Document Processing LibrariesAffected versionsv < 2026.3.1027CVSS7.5Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to…ProductTelerik Document Processing LibrariesAffected versions2026.1.210 ≤ v < 2026.3.1027CVSS7.1Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG…ProductTelerik Document Processing LibrariesAffected versions2024.3.802 ≤ v < 2026.3.1027CVSS7.5Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticat…ProductTelerik Document Processing LibrariesAffected versionsv < 2026.3.1027CVSS7.5Exploit probability0.1%PublishedOct 28, 2026First seenNov 6, 2026Fixed in2026.3.1027
DescriptionHCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potenti…ProductBigFix AEXAffected versionsv13.0.0.1CVSS8.6Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionHCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system c…ProductBigFix AEXAffected versionsv13.0.0.1CVSS9.1Exploit probability0.5%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionHCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintend…ProductBigFix AEXAffected versionsv13.0.0.1CVSS4.2Exploit probability0.1%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionHCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system deta…ProductBigFix AEXAffected versionsv13.0.0.1CVSS6.5Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionOpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.ProductOpenvpn Ovpn-dco-winAffected versions0.6.5 ≤ v ≤ 2.8.13CVSS5.7Exploit probability0.1%PublishedOct 28, 2026First seenNov 6, 2026
DescriptionAn Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS5.3Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite a…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS8.8Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and es…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS8.8Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS8.8Exploit probability1.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tm…ProductSession Smart ConductorAffected versionsv < 7.0.5CVSS6.8Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitra…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS5.8Exploit probability0.2%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionAn Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially craft…ProductSession Smart ConductorAffected versionsv < 7.0.5CVSS9.8Exploit probability0.5%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionA Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply.ProductSession Smart RouterAffected versionsv < 7.0.5CVSS8.8Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
DescriptionA Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure end…ProductSession Smart RouterAffected versionsv < 7.0.5CVSS9.8Exploit probability0.3%PublishedOct 28, 2026First seenNov 6, 2026Fixed in7.0.5
Showing 50 of 50 results
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.