| CVE-2026-48568 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 127d ago |
| CVE-2026-47656 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature lo | 127d ago |
| CVE-2026-45654 | 7.9 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 127d ago |
| CVE-2026-45588 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 127d ago |
| CVE-2026-35266 | 7.9 | — | — | — | oracle / rest data services | Vulnerability in Oracle REST Data Services (component: Core). | 139d ago |
| CVE-2026-44711 | 7.9 | — | — | — | — | pam_usb provides hardware authentication for Linux using ordinary removable media. | 140d ago |
| CVE-2026-46076 | 7.9 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Raise #UD if unhandled VMMCALL isn' | 140d ago |
| CVE-2026-41217 | 7.9 | — | — | — | f5 / big-ip access policy manager | A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker | 154d ago |
| CVE-2026-86095 | 7.8 | — | — | — | — | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copie | 39d ago |
| CVE-2026-80119 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 40d ago |
| CVE-2026-80116 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 40d ago |
| CVE-2026-80114 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 40d ago |
| CVE-2026-80112 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 40d ago |
| CVE-2026-85656 | 7.8 | — | — | — | — | An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allo | 40d ago |
| CVE-2026-85654 | 7.8 | — | — | — | — | Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynam | 40d ago |
| CVE-2026-85690 | 7.8 | — | — | — | — | Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write fi | 40d ago |
| CVE-2026-85674 | 7.8 | — | — | — | — | aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it | 40d ago |
| CVE-2026-6958 | 7.8 | — | — | — | — | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability S | 40d ago |
| CVE-2026-81302 | 7.8 | — | — | — | — | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to | 40d ago |
| CVE-2026-85439 | 7.8 | — | — | — | — | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheck | 40d ago |
| CVE-2026-64200 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 40d ago |
| CVE-2026-64199 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 40d ago |
| CVE-2026-64198 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 40d ago |
| CVE-2026-64197 | 7.8 | — | — | — | — | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulti | 40d ago |
| CVE-2026-64196 | 7.8 | — | — | — | — | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulti | 40d ago |
| CVE-2026-64195 | 7.8 | — | — | — | — | There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. | 40d ago |
| CVE-2026-85028 | 7.8 | — | — | — | — | Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation com | 41d ago |
| CVE-2026-83959 | 7.8 | — | — | — | — | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod | 41d ago |
| CVE-2026-80754 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter el | 41d ago |
| CVE-2026-80751 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in | 41d ago |
| CVE-2026-80748 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reord | 41d ago |
| CVE-2026-80737 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown d | 41d ago |
| CVE-2026-80736 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation i | 41d ago |
| CVE-2026-80732 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-af | 41d ago |
| CVE-2026-80731 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_ | 41d ago |
| CVE-2026-76642 | 7.8 | — | — | — | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hoo | 41d ago |
| CVE-2026-73600 | 7.8 | — | — | — | — | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file | 41d ago |
| CVE-2026-84838 | 7.8 | — | — | — | — | A flaw was found in rpmuncompress. | 42d ago |
| CVE-2026-84837 | 7.8 | — | — | — | — | A flaw was found in rpm. | 42d ago |
| CVE-2026-78410 | 7.8 | — | — | — | — | A flaw was found in util-linux. | 42d ago |
| CVE-2026-78604 | 7.8 | — | — | — | elastic / elastic agent | Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escal | 42d ago |
| CVE-2026-83549zero day | 7.8 | 9.9% | 3/3 | same day | sonicwall / sma8200v | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul | 42d ago |
| CVE-2026-73713 | 7.8 | — | — | — | arubanetworks / fabric composer | Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. | 43d ago |
| CVE-2026-45221 | 7.8 | — | — | — | — | Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to exe | 43d ago |
| CVE-2026-61779 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61778 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61777 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61776 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61775 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61774 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61773 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61772 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61771 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61770 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61769 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61768 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61767 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61766 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61765 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
| CVE-2026-61764 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. | 43d ago |
