The archive.

CVE-2026-8363 · Gladinet Triofox

Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll

CVE-2026-8364 · Gladinet Triofox

Gladinet Triofox Missing Authentication for Critical Functions

leiweibau2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-44888 · leiweibau Pi.Alert

Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Interger)

CVE-2026-44887 · leiweibau Pi.Alert

Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-4408 · Red Hat Red Hat Enterprise Linux 10

Samba: remote code execution in samr

EPSS 3%CVSS 9.8

free5gc5 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-44327 · free5gc free5gc

free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

EPSS 0.3%public exploit CVSS 10.0

CVE-2026-44329 · free5gc free5gc

free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

EPSS 0.3%public exploit CVSS 10.0

CVE-2026-44330 · free5gc free5gc

free5GC: NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions

EPSS 0.3%public exploit CVSS 10.0

CVE-2026-44315 · free5gc free5gc

free5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions

EPSS 0.3%public exploit CVSS 9.4

CVE-2026-44326 · free5gc free5gc

free5GC: NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions

EPSS 0.3%public exploit CVSS 9.4

Budibase2 vulnerabilities on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-46425 · Budibase budibase

Budibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant users

EPSS 0.3%public exploit CVSS 9.9

CVE-2026-48150 · Budibase budibase

Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign

EPSS 0.3%public exploit CVSS 9.0

OneUptime1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-45102 · OneUptime oneuptime

OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion

EPSS 0.3%public exploit CVSS 9.9

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-38702 · mitre

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118,…

CVE-2026-38703 · mitre

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118,…

CVE-2026-38704 · mitre

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118…

CVE-2026-38707 · mitre

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR…

IBM4 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-7524 · IBM Langflow OSS

Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution

EPSS 0.8%CVSS 9.8

CVE-2026-8175 · IBM Aspera High-Speed Transfer Endpoint

Multiple vulnerabilities in Aspera applications.

EPSS 0.6%CVSS 9.8

CVE-2024-40684 · IBM Operations Analytics - Log Analysis

IBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism

CVE-2026-7876 · IBM Aspera HSTS for CP4I

Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

EPSS 0.3%CVSS 9.1

Linux12 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-46195 · Linux Linux

smb: client: validate dacloffset before building DACL pointers

EPSS 0.7%CVSS 9.8

CVE-2026-45898 · Linux Linux

RDMA/iwcm: Fix workqueue list corruption by removing work_list

CVE-2026-46115 · Linux Linux

block: add pgmap check to biovec_phys_mergeable

CVE-2026-46137 · Linux Linux

mptcp: pm: ADD_ADDR rtx: fix potential data-race

CVE-2026-45988 · Linux Linux

rxrpc: Fix re-decryption of RESPONSE packets

CVE-2026-46039 · Linux Linux

rxgk: Fix potential integer overflow in length check

CVE-2026-46043 · Linux Linux

RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

CVE-2026-46119 · Linux Linux

libceph: Fix slab-out-of-bounds access in auth message processing

CVE-2026-46135 · Linux Linux

nvmet-tcp: fix race between ICReq handling and queue teardown

CVE-2026-46155 · Linux Linux

smb/client: fix out-of-bounds read in smb2_compound_op()

CVE-2026-46185 · Linux Linux

smb/client: fix out-of-bounds read in symlink_data()

CVE-2026-45972 · Linux Linux

smb: client: fix potential UAF and double free in smb2_open_file()

EPSS 0.3%CVSS 9.8

Slican2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-35087 · Slican IPx

Authentication Bypass in Slican telephone exchanges

EPSS 0.7%CVSS 9.3

CVE-2026-35090 · Slican CCT-1668

Authentication Bypass in Slican telephone exchanges

EPSS 0.6%CVSS 9.3

intranda1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-45083 · intranda goobi-viewer-core

Goobi viewer: Unauthenticated Solr Streaming Expression Proxy