Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-97360 |
10 (4.0)
10 (3.1)
|
HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write v… |
rejetto |
hfs2 |
2026-09-24T13:32:32.185Z | 2026-09-24T15:00:30.695Z |
| CVE-2026-97359 |
10 (4.0)
10 (3.1)
|
HFS2 2.4.0 RCE via Multipart Upload Filename Template … |
rejetto |
hfs2 |
2026-09-24T13:28:18.818Z | 2026-09-29T02:44:54.569Z |
| CVE-2026-97163 |
10 (4.0)
|
Joomla Extension - lomart.fr - Unauthenticated remote … |
lomart.fr |
UP plugin for Joomla |
2026-09-26T14:33:44.748Z | 2026-09-27T04:47:20.414Z |
| CVE-2026-96587 |
10 (4.0)
10 (3.1)
|
Use of Hard-coded Credentials in Viidure Dashcam Andro… |
Viidure |
Dashcam Android Application |
2026-09-29T20:42:38.270Z | 2026-09-29T21:02:00.222Z |
| CVE-2026-96349 |
10 (3.1)
|
WordPress SiteSkite plugin <= 2.1.8 - Remote Code Exec… |
SiteSkite |
SiteSkite |
2026-09-30T12:27:24.923Z | 2026-09-30T13:27:06.769Z |
| CVE-2026-96257 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Fast FAC1203R Gigabit Edition Device Discovery Service… |
Fast |
FAC1203R Gigabit Edition |
2026-09-23T03:00:10.174Z | 2026-09-23T14:07:16.689Z |
| CVE-2026-9508 |
10 (4.0)
|
Incorrect Permission Assignment for Critical Resource … |
Suprema |
BioStar 2 (server) |
2026-05-29T12:09:02.026Z | 2026-05-29T13:33:31.937Z |
| CVE-2026-94493 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Gigatech PDV5701 WebSocket Service index.html missing … |
Gigatech |
PDV5701 |
2026-09-22T01:00:18.544Z | 2026-09-24T22:55:54.918Z |
| CVE-2026-94097 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Netcore NBR200V2 CGI Diagnostic Endpoint network_tools… |
Netcore |
NBR200V2 |
2026-09-20T23:45:10.912Z | 2026-09-24T12:43:07.627Z |
| CVE-2026-94089 |
10 (4.0)
10 (3.1)
10 (3.0)
|
D-Link DIR-868L Authentication webfa_authentication.cg… |
D-Link |
DIR-868L |
2026-09-20T20:45:10.159Z | 2026-09-22T15:42:13.561Z |
| CVE-2026-94003 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Comfast CF-N1-S Web Management mbox-config get_css_pat… |
Comfast |
CF-N1-S |
2026-09-20T11:30:08.209Z | 2026-09-24T11:55:06.904Z |
| CVE-2026-93952 |
10 (3.1)
9.5 (4.0)
|
Security Advisory 0183 |
Arista Networks |
VeloCloud Orchestrator (VCO) On-Prem |
2026-09-22T07:37:24.300Z | 2026-09-23T03:55:40.823Z |
| CVE-2026-93741 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Totolink A3002MU formWlWds buffer overflow |
Totolink |
A3002MU |
2026-09-19T05:45:12.599Z | 2026-09-22T15:54:46.600Z |
| CVE-2026-93740 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Totolink A3002MU formWlEncrypt buffer overflow |
Totolink |
A3002MU |
2026-09-18T21:45:12.370Z | 2026-09-21T15:59:54.262Z |
| CVE-2026-93606 |
10 (4.0)
10 (3.1)
|
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species |
patriksimek |
vm2 |
2026-09-18T13:20:15.036Z | 2026-09-18T17:48:56.766Z |
| CVE-2026-93605 |
10 (4.0)
10 (3.1)
|
vm2 NodeVM before 3.12.1 Remote Code Execution via chi… |
patriksimek |
vm2 |
2026-09-18T13:20:14.332Z | 2026-09-21T20:51:52.937Z |
| CVE-2026-93603 |
10 (4.0)
10 (3.1)
|
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Ho… |
patriksimek |
vm2 |
2026-09-18T13:20:12.955Z | 2026-09-22T14:25:29.801Z |
| CVE-2026-92960 |
10 (4.0)
10 (3.1)
|
vm2 before 3.11.6 Process-wide State Exposure via os and dns |
patriksimek |
vm2 |
2026-09-17T13:46:16.952Z | 2026-09-17T14:22:01.645Z |
| CVE-2026-92956 |
10 (4.0)
10 (3.1)
|
vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssemb… |
patriksimek |
vm2 |
2026-09-17T13:46:14.202Z | 2026-09-17T19:20:26.124Z |
| CVE-2026-92955 |
10 (4.0)
10 (3.1)
|
vm2 before 3.11.8 Sandbox Escape via NodeVM |
patriksimek |
vm2 |
2026-09-17T13:46:13.508Z | 2026-09-17T14:23:35.469Z |
| CVE-2026-92953 |
9.3 (4.0)
10 (3.1)
|
vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray |
patriksimek |
vm2 |
2026-09-17T13:46:12.146Z | 2026-09-18T19:49:31.925Z |
| CVE-2026-92947 |
10 (4.0)
10 (3.1)
|
vm2 before 3.11.7 Memory Disclosure via Buffer Pool |
patriksimek |
vm2 |
2026-09-17T13:46:08.167Z | 2026-09-17T15:47:14.117Z |
| CVE-2026-92946 |
10 (4.0)
10 (3.1)
|
vm2 before 3.11.7 Remote Code Execution via require.external |
patriksimek |
vm2 |
2026-09-17T13:46:07.498Z | 2026-09-17T19:20:46.387Z |
| CVE-2026-92941 |
10 (4.0)
10 (3.1)
|
vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation |
patriksimek |
vm2 |
2026-09-17T13:46:04.885Z | 2026-09-17T15:48:59.103Z |
| CVE-2026-92940 |
10 (4.0)
10 (3.1)
|
vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure vi… |
patriksimek |
vm2 |
2026-09-17T13:46:04.218Z | 2026-09-17T19:20:52.899Z |
| CVE-2026-92937 |
10 (4.0)
10 (3.1)
|
vm2 3.11.6 Remote Code Execution via Promise call/apply |
patriksimek |
vm2 |
2026-09-17T13:46:02.195Z | 2026-09-18T19:25:51.435Z |
| CVE-2026-92808 |
10 (4.0)
|
Server-Side Request Forgery in Altium Enterprise Serve… |
Altium |
Altium Enterprise Server |
2026-09-16T20:06:28.498Z | 2026-09-17T14:56:49.460Z |
| CVE-2026-9152 |
10 (4.0)
|
Unauthenticated SOAP Endpoint in Altium 365 SearchServ… |
Altium |
Altium 365 |
2026-05-21T00:47:24.365Z | 2026-05-21T12:41:39.633Z |
| CVE-2026-8985 |
10 (4.0)
|
Unauthenticated Command Injection |
Autel |
MaxiCharger Single |
2026-07-21T21:11:25.089Z | 2026-07-22T19:37:37.583Z |
| CVE-2026-8984 |
10 (4.0)
|
Unauthenticated RCE |
Autel |
MaxiCharger Single |
2026-07-21T21:08:49.622Z | 2026-07-22T19:38:02.292Z |