| CVE-2026-20157 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 88d ago |
| CVE-2026-20153 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 88d ago |
| CVE-2026-61371 | 7.5 | — | — | — | — | Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing trunc | 88d ago |
| CVE-2026-59762 | 7.5 | — | — | — | f5 / big-ip next cloud-native network functions | When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory res | 88d ago |
| CVE-2026-60085 | 7.5 | — | — | — | — | PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox bac | 88d ago |
| CVE-2026-56339 | 7.5 | — | — | — | — | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SE | 88d ago |
| CVE-2025-56365 | 7.5 | — | — | — | csa-iot / matter | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction mo | 89d ago |
| CVE-2025-56364 | 7.5 | — | — | — | csa-iot / matter | A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `Get | 89d ago |
| CVE-2025-56363 | 7.5 | — | — | — | csa-iot / matter | A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the Re | 89d ago |
| CVE-2025-56362 | 7.5 | — | — | — | csa-iot / matter | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within t | 89d ago |
| CVE-2026-54572 | 7.5 | — | — | — | rclone / rclone | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. | 89d ago |
| CVE-2026-48808 | 7.5 | — | — | — | symfony / twig | Twig is a template language for PHP. | 89d ago |
| CVE-2026-48352 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an applicat | 89d ago |
| CVE-2026-48351 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an applicat | 89d ago |
| CVE-2026-48295 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in | 89d ago |
| CVE-2025-56361 | 7.5 | — | — | — | csa-iot / matter | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within t | 89d ago |
| CVE-2026-52100 | 7.5 | — | — | — | — | Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacke | 89d ago |
| CVE-2026-49855 | 7.5 | — | — | — | — | Tornado is a Python web framework and asynchronous networking library. | 89d ago |
| CVE-2026-49477 | 7.5 | — | — | — | facelessuser / soup sieve | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | 89d ago |
| CVE-2026-49476 | 7.5 | — | — | — | facelessuser / soup sieve | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | 89d ago |
| CVE-2026-48815 | 7.5 | — | — | — | — | sigstore-js provides JavaScript libraries for interacting with Sigstore services. | 89d ago |
| CVE-2026-48801 | 7.5 | — | — | — | markdown-it / linkify-it | linkify-it is a links recognition library with full Unicode support. | 89d ago |
| CVE-2026-47471 | 7.5 | — | — | — | — | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could c | 89d ago |
| CVE-2026-15777 | 7.5 | — | — | — | google / chrome | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a u | 89d ago |
| CVE-2026-15765 | 7.5 | — | — | — | google / chrome | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to | 89d ago |
| CVE-2026-15764 | 7.5 | — | — | — | google / chrome | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced | 89d ago |
| CVE-2026-50651 | 7.5 | — | — | — | microsoft / .net | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 89d ago |
| CVE-2026-50648 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny ser | 89d ago |
| CVE-2026-50527 | 7.5 | — | — | — | microsoft / .net framework | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | 89d ago |
| CVE-2026-50525 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 89d ago |
| CVE-2026-50524 | 7.5 | — | — | — | microsoft / .net | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service o | 89d ago |
| CVE-2026-48489 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-48069 | 7.5 | — | — | — | — | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. | 89d ago |
| CVE-2026-48068 | 7.5 | — | — | — | — | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. | 89d ago |
| CVE-2026-47737 | 7.5 | — | — | — | — | Puma is a Ruby/Rack web server built for parallelism. | 89d ago |
| CVE-2026-47736 | 7.5 | — | — | — | — | Puma is a Ruby/Rack web server built for parallelism. | 89d ago |
| CVE-2026-47482 | 7.5 | — | — | — | — | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of m | 89d ago |
| CVE-2026-47480 | 7.5 | — | — | — | — | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exceptio | 89d ago |
| CVE-2026-47479 | 7.5 | — | — | — | — | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resourc | 89d ago |
| CVE-2026-47478 | 7.5 | — | — | — | — | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expire | 89d ago |
| CVE-2026-47477 | 7.5 | — | — | — | — | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer | 89d ago |
| CVE-2026-47476 | 7.5 | — | — | — | nvidia / triton inference server | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resourc | 89d ago |
| CVE-2026-45071 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-45068 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-15711 | 7.5 | — | — | — | — | A vulnerability was found in libsoup's WebSocket frame parsing implementation. | 89d ago |
| CVE-2026-15709 | 7.5 | — | — | — | — | A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. | 89d ago |
| CVE-2026-47302 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 89d ago |
| CVE-2026-45305 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-45304 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-45133 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-15637 | 7.5 | — | — | — | devolutions / devolutions server | Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 202 | 89d ago |
| CVE-2026-58627 | 7.5 | — | — | — | microsoft / windows 10 1607 | Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a ne | 89d ago |
| CVE-2026-58531 | 7.5 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows | 89d ago |
| CVE-2026-57108 | 7.5 | — | — | — | microsoft / .net | Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny | 89d ago |
| CVE-2026-57089 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to exec | 89d ago |
| CVE-2026-56648 | 7.5 | — | — | — | microsoft / windows 10 1607 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to | 89d ago |
| CVE-2026-50685 | 7.5 | — | — | — | microsoft / windows 10 1607 | Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. | 89d ago |
| CVE-2026-50647 | 7.5 | — | — | — | microsoft / windows 10 1607 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an u | 89d ago |
| CVE-2026-50505 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. | 89d ago |
| CVE-2026-50500 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. | 89d ago |
