The archive.

CVE-2026-42374 · D-Link DIR-600L Firmware

D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials

CVE-2026-42375 · D-Link DIR-600L Firmware

D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials

CVE-2026-42376 · D-Link DIR-456U Firmware

D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials

mitre11 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-42484 · mitre

A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service…

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-42483 · mitre

A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly ex…

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-37541 · mitre

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.

EPSS 0.7%CVSS 10.0

CVE-2026-37531 · mitre

AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-…

EPSS 0.7%CVSS 9.8

CVE-2026-37539 · mitre

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in funct…

EPSS 0.5%CVSS 9.8

CVE-2026-37534 · mitre

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Tra…

CVE-2026-42472 · mitre

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

CVE-2026-42473 · mitre

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

CVE-2026-42482 · mitre

A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to…

CVE-2025-70067 · mitre

Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer.

CVE-2026-37540 · mitre

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing.

GeoVision Inc.6 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-42364 · GeoVision Inc. GV-LPC2011/LPC2211

GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability

EPSS 2%CVSS 9.9

CVE-2026-42369 · GeoVision Inc. GV-VMS V20.0.2

GeoVision GV-VMS V20 WebCam Server stack overflow vulnerability

EPSS 0.5%CVSS 10.0

CVE-2026-42370 · GeoVision Inc. GV-VMS V20.0.2

GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-42368 · GeoVision Inc. GV-LPC2011/LPC2211

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

EPSS 0.4%CVSS 9.9

CVE-2026-7372 · GeoVision Inc. GV-VMS V20.0.2

GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability

EPSS 0.5%CVSS 9.0

CVE-2026-7161 · GeoVision Inc. GV-IP Device Utility

GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability

EPSS 0.2%CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-7598 · Red Hat Red Hat Hardened Images

libssh2 userauth.c userauth_password integer overflow

EPSS 0.5%public exploit CVSS 9.1

ollama1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-7482 · ollama ollama

Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

EPSS 2%CVSS 9.1

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-42779 · Apache Software Foundation Apache MINA

Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)

EPSS 1%CVSS 9.8

CVE-2026-42778 · Apache Software Foundation Apache MINA

Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)

EPSS 0.7%CVSS 9.8

argoproj1 vulnerability on this pageMax CVSS 9.6Priority 43KEV 0

CVE-2026-43824 · argoproj Argo CD

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

EPSS 0.3%public exploit CVSS 9.6

Linux6 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

WPEverest1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-4882 · WPEverest User Registration Advanced Fields

User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

EPSS 0.7%CVSS 9.8

pickplugins1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-7458 · pickplugins User Verification by PickPlugins

User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint

EPSS 0.6%CVSS 9.8

traefik2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-39858 · traefik traefik

Traefik: Forwarded alias spoofing top pre-auth decision bypass

EPSS 0.5%CVSS 10.0

CVE-2026-35051 · traefik traefik

Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth

EPSS 0.3%CVSS 10.0

Tegsoft Management and Information Services Trade Limited Company1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-14320 · Tegsoft Management and Information Services Trade Limited Company Online Support Application

XSS in Tegsoft's Online Support Application

Absolute Software2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-33446 · Absolute Software Secure Access

Buffer overflow in client authentication prior to version 14.50

CVE-2026-33447 · Absolute Software Secure Access

CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50.

Bitwarden1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-42994 · Bitwarden Bitwarden CLI

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.