by Kastro CVE-2026-45321 · @tanstack arktype-adapter
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,935 matching vulnerabilities · Page 173 of 779
@tanstack
ThinkInAIXYZ
Apache Software Foundation
CVE-2026-41293 · Apache Software Foundation Apache Tomcat
Apache Tomcat: HTTP/2 request headers not validated
CVE-2026-43512 · Apache Software Foundation Apache Tomcat
Apache Tomcat: Digest authenticator will authenticate any unknown user
CVE-2026-43515 · Apache Software Foundation Apache Tomcat
Apache Tomcat: Security constraints not correctly applied
dani-garcia
CVE-2026-43914 · dani-garcia vaultwarden
Vaultwarden: Brute-force protection bypass vulnerability
Exim
mitre
CVE-2026-31226 · mitre
The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerabilit…
CVE-2026-31220 · mitre
PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandb…
CVE-2026-31231 · mitre
Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.
CVE-2026-31233 · mitre
Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.
CVE-2026-31234 · mitre
Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.
CVE-2025-65719 · mitre
An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with…
CVE-2026-31229 · mitre
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow compone…
CVE-2026-31237 · mitre
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method.
CVE-2026-31214 · mitre
The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) conta…
CVE-2026-31235 · mitre
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py…
CVE-2026-31238 · mitre
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component.
CVE-2026-31217 · mitre
The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d3…
CVE-2026-31239 · mitre
The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from Hu…
CVE-2026-31242 · mitre
The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memo…
CVE-2026-31215 · mitre
The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface.
CVE-2026-31216 · mitre
The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API.
Cribl
CVE-2026-45391 · Cribl Cribl Edge
Local privilege escalation in Cribl Edge for Linux
CVE-2026-45392 · Cribl Cribl Stream
DOM-based XSS in Cribl Stream
CVE-2026-45393 · Cribl Cribl Edge
Local privilege escalation to SYSTEM in Cribl Edge for Windows
ivanti
Red Hat
CVE-2026-31228 · Red Hat Red Hat OpenShift AI (RHOAI)
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.
CVE-2026-31230 · Red Hat Red Hat OpenShift AI (RHOAI)
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (…
CVE-2026-31236 · Red Hat Red Hat OpenShift AI (RHOAI)
The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.
SAP_SE
CVE-2026-34263 · SAP_SE SAP Commerce cloud configuration
Missing authentication check in SAP Commerce cloud configuration
CVE-2026-34260 · SAP_SE SAP S/4HANA (SAP Enterprise Search for ABAP)
SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP)
Fortinet
Siemens
CVE-2025-40949 · Siemens RUGGEDCOM ROX MX5000
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RU…
CVE-2026-41551 · Siemens ROS#
A vulnerability has been identified in ROS# (All versions < V2.2.2).
CVE-2026-25786 · Siemens SIMATIC Drive Controller CPU 1504D TF
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interf…
CVE-2026-25787 · Siemens SIMATIC Drive Controller CPU 1504D TF
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of t…
CVE-2026-22924 · Siemens SIMATIC CN 4100
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).
Mozilla
Open-Xchange GmbH
Akilli Commerce Software Technologies Ltd. Co.
CVE-2025-6577 · Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website
SQLi in Akilli Commerce's E-Commerce Website
davidalmeidac
CVE-2026-45091 · davidalmeidac sealed-env
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
Pandora FMS
CVE-2026-30805 · Pandora FMS Pandora FMS
Insecure Default Initialization in API Authentication leads to Authentication Bypass
CVE-2026-34187 · Pandora FMS Pandora FMS
SQL Injection in Graph Container Parameter
Dragonmonk111
Google Cloud
CVE-2026-7428 · Google Cloud AlloyDB for PostgreSQL
Insecure default administrative credentials in AlloyDB for PostgreSQL
Ingeteam
CVE-2026-8072 · Ingeteam Ingecon Sun EMS Board
Insecure generation of SAT access credentials in Ingecon EMS Board
EPG, Inc.
CVE-2026-41872 · EPG, Inc. "Kura Sushi Official App" for Android