by Kastro CVE-2026-72529 · TrueConf TrueConf Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,786 matching vulnerabilities · Page 86 of 776
TrueConf
ICEcoder
FreeRDP
CVE-2026-55191 · FreeRDP FreeRDP
FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation
CVE-2026-55194 · FreeRDP FreeRDP
FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch
CVE-2026-63633 · FreeRDP FreeRDP
FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client
ether
orval-labs
CVE-2026-62681 · orval-labs orval
Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)
CVE-2026-62682 · orval-labs orval
Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)
CVE-2026-71864 · orval-labs orval
Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
CVE-2026-71866 · orval-labs orval
Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client
CVE-2026-71867 · orval-labs orval
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
CVE-2026-71868 · orval-labs orval
Orval: Import-time RCE via enum-typed default -> zod module-level template literal
CVE-2026-71869 · orval-labs orval
Orval: Import-time RCE via array-items default -> zod module-level template literal
CVE-2026-72716 · orval-labs orval
Orval: Import-time RCE via query-parameter default -> zod module-level template literal
CVE-2026-72717 · orval-labs orval
Orval: Import-time RCE via schema default -> zod module-level template literal
CVE-2026-71865 · orval-labs orval
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
CVE-2026-71871 · orval-labs orval
Orval: Import-time RCE via header-parameter default -> zod module-level template literal
themetechmount
CVE-2026-18315 · themetechmount TrueBooker – Appointment Booking and Scheduler System
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter
Elementor
Ozols Grupa
RDK
IBM
CVE-2026-16840 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16845 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16862 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16864 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16872 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16882 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16885 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16894 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16834 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16839 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
CVE-2026-16687 · IBM Power Systems Firmware
Power System Buffer Overflow
CVE-2026-16835 · IBM Power Systems Firmware
Power System Improper Certificate Validation
CVE-2026-16822 · IBM AIX
Vulnerabilities in IBM AIX and PowerVM VIOS
Cisco
CVE-2026-20357 · Cisco Cisco Crosswork Planning
Cisco Crosswork Security Hardening Release: August 2026
CVE-2026-20231 · Cisco Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
CVE-2026-20315 · Cisco Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
CVE-2026-20317 · Cisco Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities
CVE-2026-20358 · Cisco Cisco Crosswork Planning
Cisco Crosswork Security Hardening Release: August 2026
CVE-2026-20318 · Cisco Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities
CVE-2026-20359 · Cisco Cisco Crosswork Planning
Cisco Crosswork Security Hardening Release: August 2026
FFmpeg
Red Hat
CVE-2026-70496 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11
Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork
CVE-2026-66794 · Red Hat multicluster engine for Kubernetes 2.10
Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route
CVE-2026-71470 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11