by Kastro CVE-2026-78797 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
4,832 matching vulnerabilities · Page 25 of 97
mitre
nearform
NetScaler
Microsoft
CVE-2026-88131 · Microsoft Microsoft Dataverse
Microsoft Dataverse Remote Code Execution Vulnerability
CVE-2026-77900 · Microsoft Azure App Service for Linux
Azure App Service Remote Code Execution Vulnerability
CVE-2026-96207 · Microsoft Microsoft Partner Center
Microsoft Partner Center Elevation of Privilege Vulnerability
CVE-2026-94510 · Microsoft Microsoft Bookings
Microsoft Bookings Elevation of Privilege Vulnerability
CVE-2026-69435 · Microsoft Azure SRE Agent
Azure SRE Agent Elevation of Privilege Vulnerability
FalkorDB
CVE-2026-107908 · FalkorDB FalkorDB
Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message
CVE-2026-5759 · FalkorDB FalkorDB
Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB
CVE-2026-7827 · FalkorDB FalkorDB
Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB
CVE-2026-107910 · FalkorDB FalkorDB
Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling
CVE-2026-107909 · FalkorDB FalkorDB
Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length
CVE-2026-7826 · FalkorDB FalkorDB
Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
Go standard library
CVE-2026-56857 · Go standard library os
Root.Mkdir(All) can follow junctions out of the root on Windows in os
CVE-2026-78663 · Go standard library net/http
Double flow control refund on HTTP/2 server streams in net/http
Grid Protection Alliance
CVE-2026-100730 · Grid Protection Alliance openPDC
Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted Data
CVE-2026-105278 · Grid Protection Alliance openPDC (Docker image)
Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials
IBM
CVE-2026-75875 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-16916 · IBM Security Verify Access
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
CVE-2026-84249 · IBM Guardium Data Protection
IBM Guardium Data Protection is affected by vulnerability
CVE-2026-82895 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-84035 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-84057 · IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84058 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-84198 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-84246 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-16823 · IBM Security Verify Access
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
CVE-2026-84209 · IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-80381 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-81932 · IBM Guardium Data Protection
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
CVE-2026-82900 · IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
PX-lab
hazelcast
Apache Software Foundation
CVE-2026-71575 · Apache Software Foundation Apache CXF
Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
CVE-2026-97468 · Apache Software Foundation Apache CXF
Apache CXF: Authentication bypass via weak cache keys for validated STS tokens
CVE-2026-107938 · Apache Software Foundation Apache CXF
Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
Dell
CVE-2026-76779 · Dell Secure Connect Gateway (SCG) Policy Manager
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authenticat…
jegtheme
CVE-2026-96328 · jegtheme JNews - Pay Writer
WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
MultiNet Interactive AB
CVE-2026-96809 · MultiNet Interactive AB EduAdmin Booking
WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability
Red Hat
CVE-2026-107935 · Red Hat Red Hat Build of Podman Desktop
Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
Shinetheme
Sipay Electronic Money and Payment Services Inc.
CVE-2026-85531 · Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module
Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x
CVE-2026-86405 · Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module
Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop
tagDiv
CVE-2026-96330 · tagDiv tagDiv Opt-In Builder
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
VibeThemes
wpdreams
CVE-2026-96331 · wpdreams Ajax Search Pro
WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability
Red Lion Controls
CVE-2026-32645 · Red Lion Controls 700 Series