| CVE-2026-73709 | 8.3 | — | — | — | arubanetworks / fabric composer | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticate | 56d ago |
| CVE-2026-73708 | 8.3 | — | — | — | arubanetworks / fabric composer | A business logic vulnerability exists in the API of HPE Networking Fabric Composer. | 56d ago |
| CVE-2026-63137 | 8.3 | — | — | — | elastic / kibana | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured | 56d ago |
| CVE-2026-8712 | 8.3 | — | — | — | — | Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers wi | 56d ago |
| CVE-2026-84115 | 8.3 | — | — | — | — | A vulnerability was found in Cleo Harmony up to 5.8.1.10. | 56d ago |
| CVE-2026-82549 | 8.3 | — | — | — | — | A vulnerability was identified in Linux Foundation Magma 1.9.0. | 58d ago |
| CVE-2026-82021 | 8.3 | — | — | — | — | Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a | 60d ago |
| CVE-2026-38820 | 8.3 | — | — | — | — | openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through t | 61d ago |
| CVE-2026-79912 | 8.3 | — | — | — | — | A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. | 63d ago |
| CVE-2026-79292 | 8.3 | — | — | — | google / chrome | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromis | 63d ago |
| CVE-2026-79256 | 8.3 | — | — | — | google / chrome | Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote | 63d ago |
| CVE-2026-79247 | 8.3 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who h | 63d ago |
| CVE-2026-79224 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 63d ago |
| CVE-2026-79218 | 8.3 | — | — | — | google / chrome | Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compr | 63d ago |
| CVE-2026-79210 | 8.3 | — | — | — | google / chrome | Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had co | 63d ago |
| CVE-2026-79175 | 8.3 | — | — | — | google / chrome | Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker wh | 63d ago |
| CVE-2026-79155 | 8.3 | — | — | — | google / chrome | Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 63d ago |
| CVE-2026-79132 | 8.3 | — | — | — | google / chrome | Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker | 63d ago |
| CVE-2026-79121 | 8.3 | — | — | — | google / chrome | Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had | 63d ago |
| CVE-2026-79109 | 8.3 | — | — | — | google / chrome | Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had co | 63d ago |
| CVE-2026-79071 | 8.3 | — | — | — | google / chrome | Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the re | 63d ago |
| CVE-2026-79054 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 63d ago |
| CVE-2026-79008 | 8.3 | — | — | — | google / chrome | Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker w | 63d ago |
| CVE-2026-78999 | 8.3 | — | — | — | google / chrome | Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who | 63d ago |
| CVE-2026-78983 | 8.3 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the | 63d ago |
| CVE-2026-78952 | 8.3 | — | — | — | google / chrome | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker wh | 63d ago |
| CVE-2026-78934 | 8.3 | — | — | — | google / chrome | Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social en | 63d ago |
| CVE-2026-78911 | 8.3 | — | — | — | google / chrome | Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromis | 63d ago |
| CVE-2026-17006 | 8.3 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a hea | 68d ago |
| CVE-2026-76394 | 8.3 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk r | 69d ago |
| CVE-2026-76391 | 8.3 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run | 69d ago |
| CVE-2026-18848 | 8.3 | — | — | — | ibm / power system e1080 \(9080-hex\) firmware | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu | 69d ago |
| CVE-2026-52877 | 8.3 | — | — | — | — | Streambert is a cross-platform Electron Desktop App to stream and download video content. | 70d ago |
| CVE-2026-76046 | 8.3 | — | — | — | google / chrome | Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had | 70d ago |
| CVE-2026-76044 | 8.3 | — | — | — | google / chrome | Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the r | 70d ago |
| CVE-2026-73931 | 8.3 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 70d ago |
| CVE-2026-73929 | 8.3 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 70d ago |
| CVE-2026-71095 | 8.3 | — | — | — | oracle / business intelligence | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Pl | 70d ago |
| CVE-2026-70770 | 8.3 | — | — | — | oracle / warehouse management | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operation | 70d ago |
| CVE-2026-62455 | 8.3 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). | 70d ago |
| CVE-2026-61305 | 8.3 | — | — | — | oracle / bi publisher | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). | 70d ago |
| CVE-2026-71573 | 8.3 | — | — | — | joomla / joomla\! | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper imple | 70d ago |
| CVE-2026-49225 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 70d ago |
| CVE-2026-49224 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 70d ago |
| CVE-2026-49226 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 70d ago |
| CVE-2026-45733 | 8.3 | — | — | — | — | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowled | 70d ago |
| CVE-2026-9816 | 8.3 | — | — | — | mattermost / mattermost server | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fi | 71d ago |
| CVE-2026-19983 | 8.3 | — | — | — | — | A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. | 72d ago |
| CVE-2026-19979 | 8.3 | — | — | — | — | A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, | 72d ago |
| CVE-2026-16708 | 8.3 | — | — | — | ibm / db2 mirror for i | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to extern | 74d ago |
| CVE-2026-72970 | 8.3 | — | — | — | microsoft / edge chromium | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over | 74d ago |
| CVE-2026-17101 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive informati | 75d ago |
| CVE-2026-73618 | 8.3 | — | — | — | — | Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint whe | 76d ago |
| CVE-2026-13433 | 8.3 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code | 76d ago |
| CVE-2026-18235 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language com | 76d ago |
| CVE-2026-17095 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to un | 76d ago |
| CVE-2026-73292 | 8.3 | — | — | — | — | Semaphore UI is a web interface for managing DevOps tools. | 76d ago |
| CVE-2026-19557 | 8.3 | — | — | — | google / chrome | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compr | 77d ago |
| CVE-2026-66154 | 8.3 | — | — | — | — | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application | 77d ago |
| CVE-2026-69119 | 8.3 | — | — | — | — | Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows a | 77d ago |
