Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsCVE-2026-110769 · holaboss-ai · holaOS · CVE.org · NIST NVDOct 14, 2026
Medium6.3holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username AllowlistCVE-2026-110768 · holaboss-ai · holaOS · CVE.org · NIST NVDOct 14, 2026
High8.7Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob IngestionCVE-2026-110767 · coderamp-labs · gitingest · CVE.org · NIST NVDOct 14, 2026
Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteCVE-2026-110766 · colanode · colanode · CVE.org · NIST NVDOct 14, 2026
High8.2FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted.CVE-2026-110765 · flexprice · flexprice · CVE.org · NIST NVDOct 14, 2026
Medium6.0AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadCVE-2026-110764 · iflytek · astron-rpa · CVE.org · NIST NVDOct 14, 2026
Low2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability.CVE-2026-82153 · Dell · OS Recovery Tool · CVE.org · NIST NVDOct 14, 2026
Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsCVE-2026-59180 · CVE.org · FIRST EPSS · GitHub Advisory Database · pypiEPSS 0.3%Oct 14, 2026
High8.8Mongoose is an embedded web server and network library.CVE-2026-63626 · cesanta · mongoose · CVE.org · NIST NVDOct 14, 2026
High7.5Mongoose is an embedded web server and network library.CVE-2026-73261 · cesanta · mongoose · CVE.org · NIST NVDOct 14, 2026
High7.5Mongoose is an embedded web server and network library.CVE-2026-73260 · cesanta · mongoose · CVE.org · NIST NVDOct 14, 2026
High7.5Mongoose is an embedded web server and network library.CVE-2026-73252 · cesanta · mongoose · CVE.org · NIST NVDOct 14, 2026
Critical9.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.CVE-2026-85714 · Stirling-Tools · Stirling-PDF · CVE.org · NIST NVDOct 14, 2026
Medium6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92160 · CVE.org · NIST NVDOct 14, 2026
Medium6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92159 · CVE.org · NIST NVDOct 14, 2026
High7.2F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92158 · CVE.org · NIST NVDOct 14, 2026
Medium6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92157 · CVE.org · NIST NVDOct 14, 2026
Medium6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92156 · CVE.org · NIST NVDOct 14, 2026
High7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92155 · CVE.org · NIST NVDOct 14, 2026
High8.1F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92154 · CVE.org · NIST NVDOct 14, 2026
Critical9.3F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92152 · CVE.org · NIST NVDOct 14, 2026
High7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.CVE-2026-92150 · CVE.org · NIST NVDOct 14, 2026
Medium6.5A flaw was found in the DPDK nfp vDPA driver.CVE-2026-86856 · CVE.org · NIST NVDOct 14, 2026
Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.CVE-2026-86849 · CVE.org · NIST NVDOct 14, 2026
High8.8A flaw was found in DPDK lib/vhost vhost-crypto.CVE-2026-86848 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026