Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEVuln · CVE-2026-111376 · Red Hat · Red Hat Enterprise Linux · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Linux, MicrosoftEPSS 0.1%Oct 16, 2026
Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleVuln · CVE-2026-111375 · Red Hat · Red Hat Enterprise Linux · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Linux, Red HatEPSS 0.2%Oct 16, 2026
High7.5EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over…Vuln · CVE-2026-105036 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Medium4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationVuln · CVE-2026-104024 · PeaZip · PeaZip · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…Vuln · CVE-2026-104025 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizVuln · CVE-2026-16437 · Mitsubishi Electric Corporation · GENESIS · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
UnknownMalicious code in py-worm (PyPI)Vuln · MAL-2026-17883 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 15, 2026
UnknownMalicious code in py-sock2 (PyPI)Vuln · MAL-2026-17881 · CIRCL Vulnerability Lookup · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 15, 2026
Medium6.0Improper certificate validation in Cato Client tunnel handshakeVuln · CVE-2026-19377 · Cato Networks · Cato Client for Windows · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, WindowsEPSS 0.1%Oct 15, 2026
High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionVuln · CVE-2026-109430 · Ellucian · WebAdvisor · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 15, 2026
High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.Vuln · CVE-2026-102298 · TP-Link System Inc. · Omada Software Controller (Windows) · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, TP-LinkEPSS 0.4%Oct 14, 2026
High8.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Vuln · CVE-2026-54525 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 14, 2026
Low3.3VeraCrypt provides disk encryption with strong security based on TrueCrypt.Vuln · CVE-2026-77572 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 14, 2026
High7.8mise manages dev tools like node, python, cmake, and terraform.Vuln · CVE-2026-103929 · CVE.org · FIRST EPSS · GitHub Advisory Database · GitLab, PythonEPSS 0.2%Oct 14, 2026
Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.Vuln · CVE-2026-0315 · Palo Alto Networks · CVE.org · FIRST EPSS · NIST NVD · Apple, macOSEPSS 0.1%Oct 14, 2026
Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.Vuln · CVE-2026-0314 · Palo Alto Networks · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Palo AltoEPSS 0.1%Oct 14, 2026
Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Vuln · CVE-2026-110646 · CVE.org · FIRST EPSS · NIST NVD · Microsoft, WindowsEPSS 2.1%Oct 14, 2026
UnknownSecurity update for google-osconfig-agentVuln · SUSE-SU-2026:4661-1 · OpenSSF OSV / OSV Scanner · Google, LinuxOct 14, 2026
UnknownPublished: 2026-08-11 Description Description Severity Notes A vulnerability (CVE-2026-6726, also known as TCGVRT0010) has been identified in the Trusted Computing Gro…Vuln · CVE-2026-6726 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.2%Oct 14, 2026
Medium4.7A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of serv…Vuln · CVE-2026-50217 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 14, 2026
MediumCVE-2026-98420: ksmbd: follow SMB2 session expiration semanticsVuln · CVE-2026-98420 · Linux · Linux Kernel · CVE.org · FIRST EPSS · Linux Kernel CVEEPSS 0.2%Oct 14, 2026
High8.2Metalama allows local code execution through DLL planting in shared temporary directoriesVuln · CVE-2026-62847 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · NuGetOct 14, 2026
UnknownExtended Stable Update for DesktopVuln · CVE-2026-106184 · Google · Chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityVuln · CVE-2026-96230 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityVuln · CVE-2026-96959 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026