by Kastro CVE-2026-77683 · Comfast CF-N1-S
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,777 matching vulnerabilities · Page 83 of 776
Comfast
lxc
CVE-2026-48749 · lxc incus
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
CVE-2026-48753 · lxc incus
Incus has an arbitrary file write via path traversal in S3 multipart upload
CVE-2026-48769 · lxc incus
Incus has an arbitrary file write on its client due to trusted image hash
CVE-2026-48751 · lxc incus
Incus has a restricted project bypass leading to arbitrary command execution
CVE-2026-63125 · lxc incus
Incus vulnerable to root RCE via image backup.yaml symlink
CVE-2026-62941 · lxc incus
Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CVE-2026-48750 · lxc incus
Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
CVE-2026-48752 · lxc incus
Incus has arbitrary file read+write on host via templates/ symlink in malicious image
CVE-2026-48755 · lxc incus
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
CVE-2026-62867 · lxc incus
Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
CVE-2026-63343 · lxc incus
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
CVE-2026-62940 · lxc incus
Incus has a project restriction bypass via instance migration config override
SPIP
CVE-2026-77806 · SPIP SPIP
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.
CVE-2026-77647 · SPIP SPIP
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.
paperclipai
IBM
CVE-2026-17142 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17436 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-18832 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17152 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17157 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17160 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-18835 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17145 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-19437 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-18670 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17423 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-18716 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-17422 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
Datiphy Inc.
CVE-2026-76156 · Datiphy Inc. Data Management Center
Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command
CVE-2026-76158 · Datiphy Inc. Data Management Center
Datiphy Data Management Center - External Control of File Name or Path
CVE-2026-76155 · Datiphy Inc. Data Management Center
Datiphy Data Management Center - Use of Default Credentials
droundy
CVE-2026-77649 · droundy internment
The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has…
CVE-2026-77650 · droundy append-only-vec
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it…
CVE-2026-77651 · droundy arrayref
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a…
evershopcommerce
Microsoft
CVE-2026-69502 · Microsoft Azure SQL Database
Azure SQL Database Elevation of Privilege Vulnerability
101gen
CVE-2026-77264 · 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code
Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
Headroom Labs
Apache Software Foundation
CVE-2026-59085 · Apache Software Foundation Apache CloudStack
Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module
CVE-2026-61398 · Apache Software Foundation Apache CloudStack
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI
CVE-2026-62440 · Apache Software Foundation Apache CloudStack
Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation
PTC
CVE-2026-77645 · PTC Windchill PDMLink
Critical Remote Code Execution (RCE) vulnerability reported in Windchill
CVE-2026-77644 · PTC Windchill Risk and Reliability Enterprise Edition (Formerly Relex)
Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition
Spring
FreeRTOS
CVE-2026-77234 · FreeRTOS FreeRTOS-Kernel