The archive.

CVE-2026-116234 · Oray Pugongying X5 Pro

Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection

CVE-2026-116237 · Oray Pugongying X5 Pro

Oray Pugongying X5 Pro Dnsmasq crlf injection

EPSS 0.4%CVSS 9.3

huangxd-1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-116485 · huangxd- danmu_api

danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints

EPSS 2%CVSS 9.8

2K Games2 vulnerabilities on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2026-116111 · 2K Games Civilization V

2K Games Civilization V Lua Sandbox loadstring type confusion

EPSS 0.3%public exploit CVSS 9.6

CVE-2026-116370 · 2K Games Sid Meier's Civilization VI

2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion

EPSS 0.4%CVSS 9.6

OpenHands1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-112346 · OpenHands OpenHands Software Agent SDK

OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

EPSS 1%CVSS 9.8

Mautic1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-115188 · Mautic

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7.

EPSS 0.7%CVSS 9.9

Fortinet1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-107656 · Fortinet FortiSandbox

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.…

EPSS 0.9%CVSS 9.6

Hitachi13 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-76938 · Hitachi JP1/Automatic Job Management System 3 - Manager

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

EPSS 0.6%CVSS 9.8

CVE-2026-76934 · Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-76939 · Hitachi JP1/Automatic Job Management System 3 - Manager

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-86574 · Hitachi JP1/Base

Heap-based Buffer Overflow Vulnerability in JP1/Base

CVE-2026-76932 · Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-76933 · Hitachi JP1/Automatic Job Management System 3 - Manager

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-76936 · Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-76937 · Hitachi JP1/Automatic Job Management System 3 - Manager

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE-2026-82122 · Hitachi HiRDB Server Version 10

Stack-based Buffer Overflow Vulnerability in HiRDB

CVE-2026-86575 · Hitachi JP1/Integrated Management 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1 Products

CVE-2026-86576 · Hitachi JP1/Integrated Management 3 - Manager

Heap-based Buffer Overflow Vulnerability in JP1 Products

CVE-2026-86577 · Hitachi JP1/Integrated Management 3 - Manager

Out-of-bounds Write Vulnerability in JP1 Products

CVE-2026-76935 · Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

EPSS 0.3%CVSS 9.4

vllm-project1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-115915 · vllm-project vllm

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

EPSS 0.7%CVSS 9.8

WolfVision2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-59106 · WolfVision Cynap Pure (Next Gen), Cynap Bridge

Unauthenticated RCE Vulnerability in WolfProt interface implementation

CVE-2026-59107 · WolfVision Cynap Pro, Cynap Core Pro

Shared SSH Authentication Key in vSolution Matrix File Sharing

padok-team1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-102649 · padok-team burrito

Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset

EPSS 0.5%CVSS 9.9

rajnandan11 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-116747 · rajnandan1 kener

Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret

EPSS 0.6%CVSS 9.2

Esri1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-10757 · Esri ArcGIS Server

BUG-000187511 - ArcGIS Server has a security vulnerability.

Google Cloud1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-93328 · Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox)

Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write

EPSS 0.5%CVSS 9.3

Vertiv1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-65184 · Vertiv Avocent ACS8000

Avocent ACS8000 wsserver command injection

CreditNirvana1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-110475 · CreditNirvana CreditNirvana Collections Platform (CollectionWorkz)

Improper Authentication Vulnerability in CreditNirvana Collections Platform

EPSS 0.5%CVSS 9.3

HashiCorp1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2026-110720 · HashiCorp Tooling

Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

EPSS 0.4%CVSS 9.9

maccmspro1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-116214 · maccmspro maccms10

MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code

EPSS 0.5%CVSS 9.3

Qode Themes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-92885 · Qode Themes Qode Membership

Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

SMCI1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-18450 · SMCI X12SPI

Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability