Live · 98 sources · updated 8m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

5,153 matching records, 5 with confirmed exploitation.

  1. KEV NVD

    IBM Aspera Faspex Incorrect Authorization Vulnerability

    IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.

    KEV · due 12 Nov 2026 (overdue) CVSS 9.8 Fix available CVE-2026-123218 IBM File transfer
  2. KEV CISA KEV

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.

    KEV · due 24 Nov 2026 CVSS 6.5 Fix available CVE-2026-124194 Microsoft Collaboration
  3. KEV NVD

    SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

    SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful…

    KEV · due 20 Nov 2026 Fix available CVE-2026-19868 SonicWall Edge / VPN / firewall
  4. KEV NVD

    Google Chromium Use-After-Free Vulnerability

    Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect…

    KEV · due 24 Nov 2026 Fix available CVE-2026-125350 Google Browser
  5. CVE NVD

    A security flaw has been discovered in Linksys EA8100 1.0.3.216940.

    A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument…

    PoC public CVSS 10.0 CVE-2026-127277 Linksys Edge / VPN / firewall
  6. CVE NVD

    Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    CVSS 9.3 CVE-2026-120868 Citrix Edge / VPN / firewall
  7. CVE NVD

    Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-96078 Microsoft Operating system
  8. CVE NVD

    Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

    Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-95901 Microsoft Operating system
  9. CVE NVD

    Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

    Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-95882 Microsoft Operating system
  10. CVE NVD

    Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

    Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-88218 Microsoft Operating system
  11. CVE NVD

    Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

    Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

    CVSS 9.8 CVE-2026-119990 Microsoft Cloud platform
  12. CVE NVD

    Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

    Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-119958 Microsoft Operating system
  13. CVE NVD

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-116928 Microsoft Operating system
  14. CVE NVD

    The third-party RMM+ extension for ConnectWise ScreenConnect uses a static API secret by default.

    The third-party RMM+ extension for ConnectWise ScreenConnect uses a static API secret by default. The value can be changed by an administrator; however, environments retaining the default value may allow unauthorized access to…

    CVSS 9.3 CVE-2026-127063 DataComm Remote access
  15. CVE NVD

    Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler…

    Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 9.3 CVE-2026-120864 Citrix Edge / VPN / firewall
  16. CVE NVD

    Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and…

    Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 9.3 CVE-2026-111334 Citrix Edge / VPN / firewall
  17. CVE NVD

    Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix…

    Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 9.3 CVE-2026-107415 Citrix Edge / VPN / firewall
  18. CVE NVD

    Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix…

    Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 9.5 CVE-2026-107412 Citrix Edge / VPN / firewall
  19. CVE NVD

    Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    CVSS 9.3 CVE-2026-107410 Citrix Edge / VPN / firewall
  20. CVE NVD

    Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler…

    Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway.

    CVSS 9.3 CVE-2026-107409 Citrix Edge / VPN / firewall
  21. CVE NVD

    Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler…

    Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    CVSS 9.3 CVE-2026-107408 Citrix Edge / VPN / firewall
  22. CVE NVD

    Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

    CVSS 9.3 CVE-2026-107407 Citrix Edge / VPN / firewall
  23. CVE NVD

    Algernon is a small self-contained pure-Go web server.

    Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authorization gate matches its protected prefixes (/admin, /repo, /data) with case-sensitive strings.HasPrefix, while the…

    CVSS 9.4 Fix available CVE-2026-68548 Xyproto Operating system
  24. CVE NVD

    Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

    Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

    CVSS 9.8 CVE-2026-85844 Microsoft Operating system
  25. CVE NVD

    Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

    Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118207 Microsoft Email
  26. CVE NVD

    Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

    Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

    CVSS 7.5 CVE-2026-118148 Microsoft Identity
  27. CVE NVD

    Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

    Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118146 Microsoft Identity
  28. CVE NVD

    In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.1015`, the server-side FilterParser processes nested expressions in…

    In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.1015`, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth…

    CVSS 8.6 Fix available CVE-2026-106154 Progress Software Developer platform
  29. CVE NVD

    In Progress® Telerik® UI for ASP.NET MVC versions `2012.2.710` through `2026.3.1015`, server-side filter processing does not properly validate…

    In Progress® Telerik® UI for ASP.NET MVC versions `2012.2.710` through `2026.3.1015`, server-side filter processing does not properly validate descriptor types, null values, or stack state in FilterNodeVisitor and does not catch…

    CVSS 8.6 Fix available CVE-2026-106146 Progress Software Developer platform
  30. CVE NVD

    An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance

    An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance

    CVSS 9.3 CVE-2026-120869 Citrix Edge / VPN / firewall
  31. CVE NVD

    Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.

    Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1.

    CVSS 9.3 CVE-2026-125883 N-able Remote access
  32. CVE NVD

    Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery.

    Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery. This issue affects N-central: before 26.4.1.

    CVSS 9.3 CVE-2026-125881 N-able Remote access
  33. CVE NVD

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-96157 Microsoft Operating system
  34. CVE NVD

    Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-96067 Microsoft Operating system
  35. CVE NVD

    Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

    Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-88234 Microsoft Operating system
  36. CVE NVD

    No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.

    No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.

    CVSS 9.8 CVE-2026-114160 Microsoft Cloud platform
  37. CVE NVD

    Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-112967 Microsoft Operating system
  38. CVE NVD

    Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System…

    Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk &…

    CVSS 9.8 CVE-2026-125855 Elextensions Web platform
  39. CVE NVD

    A vulnerability was determined in Linksys EA8100 1.0.3.216940.

    A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument…

    CVSS 10.0 CVE-2026-127275 Linksys Edge / VPN / firewall
  40. CVE NVD

    In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary…

    In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that…

    CVSS 8.6 Fix available CVE-2026-106137 Progress Software Developer platform
  41. CVE NVD

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    CVSS 9.9 CVE-2026-120002 Microsoft Collaboration
  42. CVE NVD

    Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

    Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

    CVSS 9.0 CVE-2026-114146 Microsoft Developer platform
  43. CVE NVD

    C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply() in ckcftp.c that allows malicious FTP servers to overwrite…

    C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply() in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or…

    CVSS 8.8 CVE-2026-129123 OpenKermit Identity
  44. CVE NVD

    Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler…

    Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-120867 Citrix Edge / VPN / firewall
  45. CVE NVD

    Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…

    Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 7.7 CVE-2026-120866 Citrix Edge / VPN / firewall
  46. CVE NVD

    Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler…

    Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-120865 Citrix Edge / VPN / firewall
  47. CVE NVD

    Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix…

    Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-120863 Citrix Edge / VPN / firewall
  48. CVE NVD

    Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in…

    Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

    CVSS 8.7 CVE-2026-120862 Citrix Edge / VPN / firewall
  49. CVE NVD

    Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or…

    Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

    CVSS 8.7 CVE-2026-120861 Citrix Edge / VPN / firewall
  50. CVE NVD

    Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or…

    Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-120860 Citrix Edge / VPN / firewall
  51. CVE NVD

    Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix…

    Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-111337 Citrix Edge / VPN / firewall
  52. CVE NVD

    Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler…

    Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.3 CVE-2026-111336 Citrix Edge / VPN / firewall
  53. CVE NVD

    Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix…

    Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-111342 Citrix Edge / VPN / firewall
  54. CVE NVD

    Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and…

    Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-111341 Citrix Edge / VPN / firewall
  55. CVE NVD

    Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC…

    Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-111340 Citrix Edge / VPN / firewall
  56. CVE NVD

    Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix…

    Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-107414 Citrix Edge / VPN / firewall
  57. CVE NVD

    Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix…

    Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVSS 8.7 CVE-2026-107413 Citrix Edge / VPN / firewall
  58. CVE NVD

    Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

    Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

    CVSS 8.7 CVE-2026-107411 Citrix Edge / VPN / firewall
  59. CVE NVD

    Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.5 CVE-2026-119960 Microsoft Operating system
  60. CVE NVD

    Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

    Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-119957 Microsoft Operating system
  61. CVE NVD

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.5 CVE-2026-119947 Microsoft Operating system
  62. CVE NVD

    Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-113865 Microsoft Operating system
  63. CVE NVD

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.5 CVE-2026-113861 Microsoft Operating system
  64. CVE NVD

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-113860 Microsoft Operating system
  65. CVE NVD

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-113856 Microsoft Operating system
  66. CVE NVD

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1…

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6 may allow an…

    CVSS 9.8 CVE-2026-126263 Fortinet Email
  67. CVE NVD

    A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12…

    A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker with HA FGSP +…

    CVSS 9.8 CVE-2026-126259 Fortinet Edge / VPN / firewall
  68. CVE NVD

    A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…

    A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances…

    CVSS 9.0 CVE-2026-126257 Fortinet Identity
  69. CVE NVD

    A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS…

    A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a configured ibgp neighbor to send…

    CVSS 9.6 CVE-2026-126254 Fortinet Edge / VPN / firewall
  70. CVE NVD

    A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through…

    A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to…

    CVSS 9.3 CVE-2026-126253 Fortinet Edge / VPN / firewall
  71. CVE NVD

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access.

    CVSS 9.1 CVE-2026-126251 Fortinet Identity
  72. CVE NVD

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1…

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all…

    CVSS 9.4 CVE-2026-126164 Fortinet Email
  73. CVE NVD

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8…

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to…

    CVSS 9.1 CVE-2026-126157 Fortinet Email
  74. CVE NVD

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated…

    CVSS 9.1 CVE-2026-126156 Fortinet Email
  75. CVE NVD

    A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8…

    A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an…

    CVSS 9.1 CVE-2026-126155 Fortinet Email
  76. CVE NVD

    A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0…

    A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated…

    CVSS 9.1 CVE-2026-126150 Fortinet Email
  77. CVE NVD

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1…

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow an unauthenticated attacker to execute…

    CVSS 9.8 CVE-2026-126148 Fortinet Email
  78. CVE NVD

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail…

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions…

    CVSS 9.8 CVE-2026-126147 Fortinet Email
  79. CVE NVD

    On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently…

    On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently enabled on management interfaces even when the RIP agent intends to disable it. It…

    CVSS 9.6 CVE-2026-121367 Arista Networks Edge / VPN / firewall
  80. CVE NVD

    On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash.

    On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash. Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP…

    CVSS 9.8 CVE-2026-121289 Arista Networks Edge / VPN / firewall
  81. CVE NVD

    Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

  82. CVE NVD

    Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.

    Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-122194 Microsoft Endpoint security
  83. CVE NVD

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-120003 Microsoft Collaboration
  84. CVE NVD

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-119969 Microsoft Operating system
  85. CVE NVD

    Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

    Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119967 Microsoft Operating system
  86. CVE NVD

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119964 Microsoft Operating system
  87. CVE NVD

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119963 Microsoft Operating system
  88. CVE NVD

    Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.

    Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119962 Microsoft Operating system
  89. CVE NVD

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an…

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119961 Microsoft Web platform
  90. CVE NVD

    Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

    Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119952 Microsoft Operating system
  91. CVE NVD

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119951 Microsoft Operating system
  92. CVE NVD

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-116945 Microsoft Database
  93. CVE NVD

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-116710 Microsoft Operating system
  94. CVE NVD

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-113862 Microsoft Operating system
  95. CVE NVD

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

    CVSS 7.5 CVE-2026-113859 Microsoft Operating system
  96. CVE NVD

    Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.

    Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.

    CVSS 9.0 CVE-2026-95962 Microsoft Operating system
  97. CVE NVD

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-88243 Microsoft Operating system
  98. CVE NVD

    Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

    Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

    CVSS 9.9 CVE-2026-109467 Microsoft Developer platform
  99. CVE NVD

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to…

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    CVSS 9.0 CVE-2026-109454 Microsoft Collaboration
  100. CVE NVD

    Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This…

    Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23.

    CVSS 7.5 CVE-2026-124267 Noor Alam Collaboration

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help