The archive.

CVE-2026-31020 · mitre

In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chat…

CVE-2026-78745 · mitre

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug…

EPSS 0.8%CVSS 9.8

CVE-2026-75431 · mitre

PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication.

EPSS 1%CVSS 9.1

CVE-2026-79391 · mitre

No authentication exists in the MQTT service of Trueview 6.0.23.4.

EPSS 0.7%CVSS 9.8

CVE-2026-75171 · mitre

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

EPSS 0.6%CVSS 9.8

CVE-2026-75160 · mitre

An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /…

EPSS 0.6%CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-82923 · Unknown AI Website Builder (GitHub build)

AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes

EPSS 0.8%public exploit CVSS 9.8

MladenSU1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-85660 · MladenSU cli-mcp-server

cli-mcp-server 0.2.5 Command Allowlist Bypass via Shell Substitution

EPSS 0.6%public exploit CVSS 9.2

traefik4 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-85595 · traefik traefik

Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

EPSS 2%CVSS 9.8

CVE-2026-85594 · traefik traefik

Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware

CVE-2026-85596 · traefik traefik

Traefik v3.7 Authentication Bypass via TLS Option Conflict

CVE-2026-85597 · traefik traefik

Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

EPSS 0.4%CVSS 9.1

Xing Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-62928 · Xing Inc. XING CPTrans-ME-X

XING CPTrans-ME-X contains an OS Command Injection (CWE-78).

EPSS 2%CVSS 9.8

CVE-2026-69657 · Xing Inc. XING CPTrans-ME-X

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).

CVE-2026-70403 · Xing Inc. XING CPTrans-ME-X

XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).

getgrav1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-85602 · getgrav grav-plugin-form

Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass

EPSS 0.4%public exploit CVSS 9.3

moos-ivp4 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-85437 · moos-ivp moos-ivp

MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

CVE-2026-85438 · moos-ivp moos-ivp

MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts

CVE-2026-85434 · moos-ivp moos-ivp

MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping

EPSS 0.4%CVSS 9.3

CVE-2026-85435 · moos-ivp moos-ivp

MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment

EPSS 0.4%CVSS 9.3

themoos3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-85430 · themoos essential-moos

MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing

EPSS 2%CVSS 9.1

CVE-2026-85440 · themoos core-moos

MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

CVE-2026-85433 · themoos essential-moos

MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

EPSS 0.8%CVSS 9.8

Microsoft5 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-70352 · Microsoft Azure AI Language Authoring

Azure AI Language Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 10.0

CVE-2026-62916 · Microsoft Microsoft Entra

Microsoft Entra ID Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.8

CVE-2026-83711 · Microsoft Entra

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-65818 · Microsoft Microsoft Power Platform

Power Automate Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 9.9

CVE-2026-80098 · Microsoft Microsoft Copilot Studio

Copilot Studio Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 10.0

Divi Engine1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-11613 · Divi Engine Divi Ajax Filter

Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter

EPSS 0.8%CVSS 9.8

Lightstar2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-85148 · Lightstar SmartIT Desktop Manager

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

EPSS 0.6%CVSS 9.8

CVE-2026-85146 · Lightstar SmartIT Desktop Manager

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

EPSS 0.6%CVSS 9.8

crcn1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-85625 · crcn sift.js

sift 17.1.3 Prototype Pollution Remote Code Execution via $where

EPSS 0.7%CVSS 9.2

FreeIPMI5 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-85506 · FreeIPMI FreeIPMI

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idr…

CVE-2026-85509 · FreeIPMI FreeIPMI

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes th…

CVE-2026-85504 · FreeIPMI FreeIPMI

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-str…

CVE-2026-85507 · FreeIPMI FreeIPMI

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cm…

CVE-2026-85508 · FreeIPMI FreeIPMI

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.…