| CVE-2026-47615 | 7.5 | — | — | — | nvidia / dynamo | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supply | 69d ago |
| CVE-2026-47614 | 7.5 | — | — | — | nvidia / dynamo | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. | 69d ago |
| CVE-2026-47613 | 7.5 | — | — | — | nvidia / dynamo | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to | 69d ago |
| CVE-2026-47612 | 7.5 | — | — | — | nvidia / dynamo | NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improp | 69d ago |
| CVE-2026-24255 | 7.5 | — | — | — | nvidia / dynamo | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause | 69d ago |
| CVE-2026-56848 | 7.5 | — | — | — | — | A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_ses | 69d ago |
| CVE-2026-15314 | 7.5 | — | — | — | tp-link / tapo p110 firmware | Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authentica | 69d ago |
| CVE-2026-24084 | 7.5 | — | — | — | qualcomm / sdx57m firmware | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replay | 69d ago |
| CVE-2026-67200 | 7.5 | — | — | — | — | Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arb | 69d ago |
| CVE-2026-67198 | 7.5 | — | — | — | — | Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows | 69d ago |
| CVE-2026-63252 | 7.5 | — | — | — | eclipse / milo | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial mess | 69d ago |
| CVE-2026-62927 | 7.5 | — | — | — | eclipse / milo | In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-spac | 69d ago |
| CVE-2026-61387 | 7.5 | — | — | — | eclipse / milo | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creat | 69d ago |
| CVE-2026-56846 | 7.5 | — | — | — | — | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote | 69d ago |
| CVE-2026-56845 | 7.5 | — | — | — | — | An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is co | 69d ago |
| CVE-2026-66315 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 70d ago |
| CVE-2026-67978 | 7.5 | — | — | — | — | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via trans | 70d ago |
| CVE-2026-48399 | 7.5 | — | — | — | adobe / campaign | Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could resul | 70d ago |
| CVE-2026-67977 | 7.5 | — | — | — | — | An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to | 70d ago |
| CVE-2026-67975 | 7.5 | — | — | — | — | Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add | 70d ago |
| CVE-2026-67974 | 7.5 | — | — | — | — | A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA | 70d ago |
| CVE-2026-67973 | 7.5 | — | — | — | — | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via repla | 70d ago |
| CVE-2026-67970 | 7.5 | — | — | — | — | Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensit | 70d ago |
| CVE-2026-67969 | 7.5 | — | — | — | — | An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to r | 70d ago |
| CVE-2026-67976 | 7.5 | — | — | — | — | The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters | 70d ago |
| CVE-2026-67972 | 7.5 | — | — | — | — | An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content an | 70d ago |
| CVE-2026-69185 | 7.5 | — | — | — | — | Socket.IO enables bidirectional and low-latency communication for every platform. | 70d ago |
| CVE-2026-68981 | 7.5 | — | — | — | apache / nifi | Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey en | 70d ago |
| CVE-2025-15629 | 7.5 | — | — | — | tp-link / omada oc200 v3 firmware | A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect commu | 70d ago |
| CVE-2025-15628 | 7.5 | — | — | — | tp-link / omada oc200 v3 firmware | Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between | 70d ago |
| CVE-2025-15627 | 7.5 | — | — | — | tp-link / omada oc200 v3 firmware | A cryptographic weakness exists in the Omada adoption protocol. | 70d ago |
| CVE-2026-69152 | 7.5 | — | — | — | juliangruber / brace-expansion | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. | 70d ago |
| CVE-2026-61372 | 7.5 | — | — | — | apache / jena fuseki | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki | 70d ago |
| CVE-2026-18568 | 7.5 | — | — | — | xml\ / \ | XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true w | 70d ago |
| CVE-2026-69095 | 7.5 | — | — | — | — | OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerabili | 70d ago |
| CVE-2026-69091 | 7.5 | — | — | — | — | Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login | 70d ago |
| CVE-2026-69089 | 7.5 | — | — | — | — | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized | 70d ago |
| CVE-2026-18089 | 7.5 | — | — | — | timlegge / net\ | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the respo | 70d ago |
| CVE-2026-21555 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21554 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21553 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21552 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21551 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21550 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21549 | 7.5 | — | — | — | — | In modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-21548 | 7.5 | — | — | — | — | In nr modem, there is a possible improper input validation. | 70d ago |
| CVE-2026-18587 | 7.5 | — | — | — | — | A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. | 70d ago |
| CVE-2026-14682 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. | 70d ago |
| CVE-2026-13586 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). | 70d ago |
| CVE-2026-13506 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. | 70d ago |
| CVE-2026-12852 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds ch | 70d ago |
| CVE-2026-12816 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. | 70d ago |
| CVE-2026-12803 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEA | 70d ago |
| CVE-2026-12802 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. | 70d ago |
| CVE-2026-58061 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. | 70d ago |
| CVE-2026-58060 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. | 70d ago |
| CVE-2026-58059 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. | 70d ago |
| CVE-2026-20479 | 7.5 | — | — | — | mediatek / mt2735 firmware | In Modem, there is a possible out of bounds read due to a missing bounds check. | 70d ago |
| CVE-2026-59651 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. | 70d ago |
| CVE-2026-59649 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. | 70d ago |
