Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 34
   CVE NVD 35h ago

   ThingLinks is an enterprise IoT platform.

   ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed `Groovy compilation and loading` flow. An…

   CVSS 9.9 Fix available CVE-2026-62853 Mqttsnet Web platform
2. 29
   CVE NVD 35h ago

   ThingLinks is an enterprise IoT platform.

   ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-controlled JSON field values submitted to `/anyUser/tds/insertTableData` to reach…

   CVSS 9.1 Fix available CVE-2026-62849 Mqttsnet

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Mqttsnet&limit=100. RSS for this section: feed.xml.