by Kastro CVE-2026-37751 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,711 matching vulnerabilities · Page 74 of 775
mitre
CVE-2026-51611 · mitre
Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitr…
CVE-2026-51645 · mitre
Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain t…
CVE-2026-51663 · mitre
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigge…
CVE-2026-37236 · mitre
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.
CVE-2026-51622 · mitre
Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN co…
CVE-2026-51626 · mitre
Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WP…
CVE-2026-51628 · mitre
Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to g…
CVE-2026-51636 · mitre
Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…
CVE-2026-51643 · mitre
Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP co…
CVE-2026-51646 · mitre
Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…
CVE-2026-51649 · mitre
Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…
CVE-2026-51657 · mitre
Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sys…
CVE-2026-51660 · mitre
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to ob…
CVE-2026-51661 · mitre
Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt…
ServiceNow
CVE-2026-18885 · ServiceNow ServiceNow AI Platform
Unauthenticated Remote Code Execution in GraphQL Composite Data API
CVE-2026-18886 · ServiceNow ServiceNow AI Platform
Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
CVE-2026-74820 · ServiceNow ServiceNow AI Platform
Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
CVE-2026-6876 · ServiceNow ServiceNow AI Platform
Sandbox Escape in ServiceNow AI Platform
Unknown
labring
GitLab
CVE-2026-75871 · GitLab GitLab AI Gateway
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
Xiiaozet
CVE-2026-76943 · Xiiaozet Xiiaozet LK100W
Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
CVE-2026-78239 · Xiiaozet Xiiaozet LK100W
Xiiaozet LK100W Missing Authentication for Critical Function
bytedance
DangerBlack
CVE-2026-54687 · DangerBlack n8n-node-sqlite3
n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)
Ebyte
CVE-2026-71187 · Ebyte Ebyte NA111-M Firmware
Ebyte NA111-M Use of Client-Side Authentication
CVE-2026-73125 · Ebyte Ebyte NA111-M Firmware
Ebyte NA111-M Missing Authentication for Critical Function
CVE-2026-76179 · Ebyte Ebyte NA111-M Firmware
Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings
CVE-2026-69658 · Ebyte Ebyte NA111-M Firmware
Ebyte NA111-M Cleartext Transmission of Sensitive Information
TriliumNext
CVE-2026-48996 · TriliumNext Trilium
Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
CVE-2026-53578 · TriliumNext Trilium
Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
CVE-2026-53579 · TriliumNext Trilium
Trilium: Note Import to RCE via Book Note
wazuh
jahlives
CVE-2026-81707 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email
CVE-2026-81701 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
CVE-2026-81719 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
CVE-2026-81702 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Key Substitution via Identity Load
CVE-2026-81714 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
CVE-2026-81706 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing
CVE-2026-81717 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
Spring
CVE-2026-59313 · Spring Spring Framework
Server Sent Event stream corruption in Spring MVC functional web framework
CVE-2026-59283 · Spring Spring Framework
Spring Framework Safety Guard Bypass via SpEL Expression Compilation
WatchGuard
CVE-2026-19313 · WatchGuard Fireware OS
Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution
CVE-2026-19315 · WatchGuard Fireware OS
Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution
CVE-2026-19318 · WatchGuard Fireware OS
Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution
CVE-2026-13086 · WatchGuard Fireware OS
Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint
CVE-2026-78174 · WatchGuard Dimension
WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs
Applied Systems Engineering
CVE-2026-18717 · Applied Systems Engineering ASE2000 V2