Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
Loading…
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic HONA Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
377 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock Airoha AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-27873 2026-10-01- Use of Hard-coded Credentials vulnerability in Johnson Controls Eas…
-
CVE-2026-64893 2026-10-01- Cleartext Transmission of Sensitive Information vulnerability in Jo…
-
CVE-2026-64892 2026-10-01- Exposure of Sensitive Information vulnerability in Johnson Controls…
-
CVE-2026-34494 2026-10-01- On-Chip Debug Interface vulnerability in Johnson Controls Neo Serie…
-
CVE-2026-34493 2026-10-01- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS…
-
CVE-2026-71449 2026-10-01: Use of Hard-coded Cryptographic Key vulnerability in Johnson Contro…
-
CVE-2026-71448 2026-10-01: Insecure Default Initialization of Resource vulnerability in Johnso…
-
CVE-2026-71454 2026-10-01Improper neutralization of input during web page generation ('cross-s…
-
CVE-2026-71453 2026-10-01- External Control of File Name or Path vulnerability in Johnson Cont…
-
CVE-2026-71452 2026-10-01- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 …
-
CVE-2026-103858 2026-10-01MISP Incomplete Thread Authorization Allows Unauthorized Read and Pos…
-
CVE-2026-103664 2026-10-01MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed…
-
CVE-2026-103662 2026-10-01MISP Reflected XSS in Taxonomy Tag Confirmation Forms
-
CVE-2026-103659 2026-10-01MISP: Object Distribution ACL Bypass via Event Flattening Exposes Org…
-
CVE-2026-103655 2026-10-01MISP TOTP Code Replay Allows Duplicate Authentication Within Validity…
-
CVE-2026-103651 2026-10-01MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second…
-
CVE-2026-80275 2026-10-01Comelit 1456B gateway allows low priviledge user to overwrite install…
-
CVE-2026-80276 2026-10-01Comelit 1456B gateway exposes remote configuration password via unaut…
-
CVE-2026-102490 2026-09-30Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha
-
CVE-2026-102489 2026-09-30Undisclosed RCE in Zammad v6.3 and higher
-
CVE-2026-55396 2026-10-01Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2
-
CVE-2026-55395 2026-10-01Hardcoded Passwords in Teledyne FLIR Robots running Aware2
-
CVE-2026-55394 2026-10-01Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2
-
CVE-2026-55393 2026-10-01Local File Inclusion in Teledyne FLIR Robots running Aware2
-
CVE-2026-14984 2026-10-01Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2
-
CVE-2026-14983 2026-10-01Missing Authentication in Teledyne FLIR Robots running Aware2
-
CVE-2026-102305 2026-09-29UI misrepresentation in SignIn in Google Chrome on on iOS prior to 15…
-
CVE-2026-102314 2026-09-29UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037…
-
CVE-2026-102330 2026-09-29Incorrect authorization in SiteIsolation in Google Chrome prior to 15…
-
CVE-2026-102327 2026-09-29Incorrect authorization in WebView in Google Chrome on on Android pri…
-
CVE-2026-27873 2026-10-01- Use of Hard-coded Credentials vulnerability in Johnson Controls Eas…
-
CVE-2026-64893 2026-10-01- Cleartext Transmission of Sensitive Information vulnerability in Jo…
-
CVE-2026-64892 2026-10-01- Exposure of Sensitive Information vulnerability in Johnson Controls…
-
CVE-2026-34494 2026-10-01- On-Chip Debug Interface vulnerability in Johnson Controls Neo Serie…
-
CVE-2026-34493 2026-10-01- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS…
-
CVE-2026-71449 2026-10-01: Use of Hard-coded Cryptographic Key vulnerability in Johnson Contro…
-
CVE-2026-71448 2026-10-01: Insecure Default Initialization of Resource vulnerability in Johnso…
-
CVE-2026-71454 2026-10-01Improper neutralization of input during web page generation ('cross-s…
-
CVE-2026-71453 2026-10-01- External Control of File Name or Path vulnerability in Johnson Cont…
-
CVE-2026-71452 2026-10-01- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 …
-
CVE-2026-102514 2026-10-01Out-of-bounds write in PeaZip PEA extractor allows code execution via…
-
CVE-2026-7176 2026-10-01Multiple vulnerabilities in Entradium by Crocantickets
-
CVE-2026-7175 2026-10-01Multiple vulnerabilities in Entradium by Crocantickets
-
CVE-2026-7174 2026-10-01Multiple vulnerabilities in Entradium by Crocantickets
-
CVE-2026-7173 2026-10-01Multiple vulnerabilities in Entradium by Crocantickets
-
CVE-2026-75786 2026-10-01SQL Injection in Grafana Integration Endpoint (query.php)
-
CVE-2026-64950 2026-10-01Stored Cross-Site Scripting via Directory Name in File Manager Create…
-
CVE-2026-64949 2026-10-01Unrestricted File Upload Leading to Remote Code Execution in Admin To…
-
CVE-2026-64948 2026-10-01Missing Authorization in get_module_detail AJAX Endpoint Allows Cross…
-
CVE-2026-64947 2026-10-01CSRF Bypass Leading to Remote Code Execution via Unrestricted File Up…
-
CVE-2026-78249 2026-10-01A path traversal vulnerability exists in the web management interface…
-
CVE-2026-82824 2026-10-01Path traversal may allow arbitrary files to be viewed, created, modif…
-
CVE-2026-82825 2026-10-01Missing proper authentication for critical APIs may allow sensitive i…
-
CVE-2026-82826 2026-10-01Authentication information or sensitive data may be intercepted in transit
-
CVE-2026-82827 2026-10-01A hard-coded JWT signing secret key may allow administrative function…
-
CVE-2026-82828 2026-10-01Improper authorization may allow a general user to perform operations…
-
CVE-2026-82829 2026-10-01Hidden accounts or hard-coded credentials may permit unauthorized acc…
-
CVE-2026-92873 2026-09-30Pgpool-II contains an incorrect implementation of an authentication a…
-
CVE-2026-92872 2026-09-30Pgpool-II inserts sensitive information into log file, which may allo…
-
CVE-2026-92871 2026-09-30A NULL pointer dereference vulnerability exists in Pgpool-II, which m…
-
CVE-2026-86344 2026-10-01389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhausti…
-
CVE-2026-104356 2026-10-01PictShare < 3.7.1 Predictable Delete Code via rand()
-
CVE-2026-104051 2026-10-01PictShare < 3.7.1 Sensitive Information Disclosure via info API
-
CVE-2026-104002 2026-10-01Fail-open error handling in the data masking utility in Powertools fo…
-
CVE-2026-102370 2026-10-01Physical UART Access Leading to an Unauthenticated Root Shell in TP-L…
-
CVE-2026-104020 2026-10-01Uncontrolled recursion in the Ion reader in Amazon Ion Python
-
CVE-2026-96780 2026-10-01figlet is vulnerable to denial of service via unbounded loop when whi…
-
CVE-2026-104183 2026-10-01stream-json: Prototype pollution: Assembler writes this.current[this.…
-
CVE-2026-104182 2026-10-01stream-json: JSONC parser and verifier re-scan the whole accumulated …
-
CVE-2026-104181 2026-10-01Filament: Multi-factor authentication (app) management actions do not…
-
CVE-2026-86344 2026-10-01389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhausti…
-
CVE-2026-103484 2026-10-01pgvector buffer overflow in IVFFlat index build
-
CVE-2026-103884 2026-10-01Keycloak-services: keycloak-services: path traversal in x.509 crl dis…
-
CVE-2026-56098 2026-10-01Rubygem-katello: improper authorization logic allows resource enumeration
-
CVE-2026-56097 2026-10-01Rubygem-katello: sql injection in registry proxy via labels
-
CVE-2026-12542 2026-10-01Foreman: command injection in foreman-tail
-
CVE-2026-12545 2026-10-01Rubygem-hammer_cli: command injection via insecure editor invocation
-
CVE-2026-96658 2026-10-01Foreman: safemode bypass leading to rce
-
CVE-2026-96659 2026-10-01Foreman: excessive permissions for viewer role on preview
-
CVE-2026-12544 2026-10-01Foreman: ssti and insecure deserialization in foreman-rake configuration
-
CVE-2026-18825 2026-09-28Origin validation error in the connect-xcors npm package
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
46
GNAs registered
3
GNA feeds pulled
397
Publications pulled
295
Published here (GNA-1)
-
GCVE-1-2026-20244 2026-10-01MISP Incomplete Thread Authorization Allows Unauthorized Read and Pos…
-
GCVE-1-2026-20241 2026-10-01MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed…
-
GCVE-1-2026-20300 2026-10-01MISP Reflected XSS in Taxonomy Tag Confirmation Forms
-
GCVE-1-2026-20257 2026-10-01MISP: Object Distribution ACL Bypass via Event Flattening Exposes Org…
-
GCVE-1-2026-20194 2026-10-01MISP TOTP Code Replay Allows Duplicate Authentication Within Validity…
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
-
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
-
Hardcoded credentials in Yarbo robot firmware
-
Persistent undocumented backdoor access in Yarbo robot
-
NSA Ghidra Auto-Analysis Annotation Command Execution
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0382 2026-09-11Dovecot Security Advisory 3/2026
-
GCVE-1988-2026-0381 2026-09-11Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation
-
GCVE-1988-2026-0380 2026-09-11FD - Half-click unauthenticated remote code execution on Horde Groupw…
-
GCVE-1988-2026-0379 2026-09-11[ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (C…
-
GCVE-1988-2026-0378 2026-09-11CyberDanube Security Research 20260611-0 | Multiple Denial of Service…
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
295 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
9 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
387 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-129 |
Edgewatch
Occentus Network SL
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |
Latest records imported from the sources outside the CVE and GCVE programs — GitHub advisories, PyPI, OSV ecosystems, national databases, CSAF providers… — grouped as the recent vulnerabilities page lists them. The CVE Program mirrors are covered per root in the CNA Roots tab, the GNA feeds in the GNAs tab.
No source matches this filter.
Community & Open Source Databases
5 sources
GitHub 🐙
GitHub Advisory Database.-
GHSA-X8CV-CG58-3683 2026-10-01
-
GHSA-R959-63HV-GRW3 2026-10-01
-
GHSA-G94X-CW56-C3MR 2026-10-01
-
GHSA-FX8M-H456-HRVQ 2026-10-01
-
GHSA-F87C-7F72-C94R 2026-10-01
PySec 🐍
Advisory database for Python packages published on pypi.org.-
PYSEC-2026-4059 2026-10-01
-
PYSEC-2026-4056 2026-10-01
-
PYSEC-2026-4055 2026-10-01
-
PYSEC-2026-4060 2026-10-01
-
PYSEC-2026-4058 2026-10-01
GSD
Global Security Database of the Cloud Security Alliance (archived).-
GSD-2024-33884 2024-04-29
-
GSD-2024-33901 2024-04-29
-
GSD-2024-33887 2024-04-29
-
GSD-2024-33895 2024-04-29
-
GSD-2024-33894 2024-04-29
OpenSSF Malicious Packages ☠
OpenSSF database of reports about malicious open source packages.-
MAL-2026-17422 2026-10-01
-
MAL-2026-17421 2026-10-01
-
MAL-2026-17362 2026-10-01
-
MAL-2026-17351 2026-10-01
-
MAL-2026-17420 2026-10-01
-
MOKSHA-2026-0089 2026-04-24Raw kbps Value Exposure in Private Xenstore via VIF.qos_algorithm_params
-
MOKSHA-2026-0088 2026-04-24Int64 Overflow in bytes_per_interval via VIF.qos_algorithm_params
-
MOKSHA-2026-0087 2026-04-24QEMU Device Model Selection via VM.platform device-model (Limited by …
-
MOKSHA-2026-0086 2026-04-24License Expiry Manipulation via Host.license_params expiry
-
MOKSHA-2026-0085 2026-04-24Feature Restriction Bypass via Host.license_params restrict_* Keys
National Vulnerability Databases
5 sources
CERT FR Alerte 🇫🇷
French national and governmental CERT.-
CERTFR-2026-ALE-011 2026-09-28
-
CERTFR-2026-ALE-010 2026-09-10
-
CERTFR-2026-ALE-009 2026-09-02
-
CERTFR-2026-ALE-008 2026-07-22
-
CERTFR-2026-ALE-007 2026-07-20
CERT FR Avis 🇫🇷
French national and governmental CERT.-
CERTFR-2026-AVI-1246 2026-10-01
-
CERTFR-2026-AVI-1245 2026-10-01
-
CERTFR-2026-AVI-1244 2026-10-01
-
CERTFR-2026-AVI-1243 2026-10-01
-
CERTFR-2026-AVI-1242 2026-09-30
JVNDB 🇯🇵
The database of vulnerability countermeasure information published on JVN.-
JVNDB-2026-035987 2026-09-30
-
JVNDB-2026-000140 2026-09-29
-
JVNDB-2026-035794 2026-09-29
-
JVNDB-2026-035789 2026-09-28
-
JVNDB-2026-000141 2026-09-25
CNVD 🇨🇳
China National Vulnerability Database.-
CNVD-2026-39098 2026-09-16
-
CNVD-2026-39097 2026-09-16
-
CNVD-2026-39096 2026-09-16
-
CNVD-2026-39095 2026-09-16
-
CNVD-2026-39094 2026-09-16
FSTEC 🇷🇺
Federal Service for Technical and Export Control of Russia.-
BDU:2026-15527 2026-09-28
-
BDU:2026-15526 2026-09-28
-
BDU:2026-15525 2026-09-28
-
BDU:2026-15524 2026-09-28
-
BDU:2026-15523 2026-09-28
CSAF Databases
52 sources
CSAF ABB
ABB cyber security advisories in CSAF format.-
3ADR011566 2026-09-28ABB Automation Builder - Deserialization of untrusted data
-
3ADR011565 2026-09-28AC500 V3 - Invalid type usage in visualization
-
2NGA003179 2026-09-28ABB Protection and Control IED Manager (PCM600) - PCM600 Project Impo…
-
2NGA003170 2026-09-28ABB Protection and Control IED Manager PCM600 Scheduler Service Privi…
-
9AKK108473A3188 2026-09-22Mint Workbench I Path traversal Vulnerability
CSAF CERT-Bund 🇩🇪
Advisories of the German federal CERT (BSI CERT-Bund) in CSAF format.-
WID-SEC-W-2026-3654 2026-09-29Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
-
WID-SEC-W-2026-3606 2026-09-27X.Org X11: Mehrere Schwachstellen ermöglichen Denial of Service
-
WID-SEC-W-2026-3605 2026-09-27Red Hat Enterprise Linux (rhc): Schwachstelle ermöglicht Denial of Service
-
WID-SEC-W-2026-3579 2026-09-24Linux Kernel: Mehrere Schwachstellen
-
WID-SEC-W-2026-3546 2026-09-23Fleet: Mehrere Schwachstellen
CSAF CISA 🇺🇸
CISA ICS advisories in CSAF format.-
ICSA-26-274-06 2026-10-01Meari IoT Cloud Platform OpenAPI Service
-
ICSA-26-274-05 2026-10-01Johnson Controls EasyIO Neo Series EC and CW Controllers
-
ICSA-26-274-04 2026-10-01Johnson Controls EasyIO Neo Series EC and CW Controllers
-
ICSA-26-274-03 2026-10-01ABB Protection and Control IED Manager PCM600
-
ICSA-26-274-02 2026-10-01Monta monta.app
CSAF CISCO
Cisco PSIRT security advisories in CSAF format.-
CISCO-SA-NOTICE-FBN58ELX 2026-09-30Cisco Advance Notification for Publication of October 7, 2026, Securi…
-
CISCO-SA-SDWAN-WEBAUTH-XR8BEUUU 2026-09-30Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
-
CISCO-SA-TEVA-OS-COMMAND-W4GAO6JP 2026-09-16Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Comm…
-
CISCO-SA-ISE-XSS-UZ9VWRQ 2026-09-16Cisco Identity Services Engine Cross-Site Scripting Vulnerability
-
CISCO-SA-ISE-SQL-INJ-3QTKR947 2026-09-16Cisco Identity Services Engine SQL Injection Vulnerabilities
CSAF Microsoft 🪟
Microsoft Security Response Center advisories in CSAF format.-
MSRC_CVE-2026-87643 2026-09-30Chromium CVE-2026-87643: Integer overflow in GPU
-
MSRC_CVE-2026-87640 2026-09-30Chromium CVE-2026-87640: Out of bounds read in WebView
-
MSRC_CVE-2026-87597 2026-09-30Chromium CVE-2026-87597: UI misrepresentation in CustomTabs
-
MSRC_CVE-2026-87576 2026-09-30Chromium CVE-2026-87576: Uninitialized resource in GPU
-
MSRC_CVE-2026-87555 2026-09-30Chromium CVE-2026-87555: Uninitialized resource in GPU
CSAF NCSC-NL 🇳🇱
Advisories of the Dutch National Cyber Security Centre (NCSC-NL) in CSAF format.-
NCSC-2026-0397 2026-10-01Kwetsbaarheid verholpen in Apple CoreGraphics
-
NCSC-2026-0396 2026-09-30Kwetsbaarheden aangetroffen in Zammad
-
NCSC-2026-0395 2026-09-30Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager
-
NCSC-2026-0394 2026-09-27Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway
-
NCSC-2026-0393 2026-09-24Kwetsbaarheden verholpen in Adobe Campaign Classic
CSAF Nozomi Networks
Nozomi Networks security advisories in CSAF format.-
NN-2026:20-01 2026-09-08Disabled and non-configurable certificate/host key validation in Smar…
-
NN-2026:19-01 2026-09-08Incorrect authorization in Credentials Manager in Guardian/CMC before…
-
NN-2026:18-01 2026-09-08Cross-site request forgery in the Guardian/CMC login before 26.3.0
-
NN-2026:17-01 2026-09-08Incorrect authorization in Smart Polling configuration in Guardian/CM…
-
NN-2026:16-01 2026-09-08Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CSAF OpenSuse 🦎
openSUSE security advisories in CSAF format.-
OPENSUSE-SU-2026:21985-1 2026-09-30Security update for valkey
-
OPENSUSE-SU-2026:21984-1 2026-09-30Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat1…
-
OPENSUSE-SU-2026:21983-1 2026-09-30Security update for helm
-
OPENSUSE-SU-2026:21982-1 2026-09-30Security update for sccache
-
OPENSUSE-SU-2026:21980-1 2026-09-30Security update for MozillaFirefox
CSAF Open-Xchange
Open-Xchange security advisories in CSAF format.-
OXDC-ADV-2026-0002 2026-05-05OX Dovecot Security Advisory OXDC-ADV-2026-0002
-
OXDC-ADV-2026-0001 2026-03-27OX Dovecot Security Advisory OXDC-ADV-2026-0001
-
OXDC-ADV-2025-0001 2025-10-31OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001
-
OXAS-ADV-2025-0003 2025-09-23OX App Suite Security Advisory OXAS-ADV-2025-0003
-
OXAS-ADV-2025-0002 2025-08-11OX App Suite Security Advisory OXAS-ADV-2025-0002
CSAF Red Hat 🎩
Red Hat Product Security advisories in CSAF format.-
RHSA-2026:74581 2026-10-01Red Hat Security Advisory: skopeo security update
-
RHSA-2026:73982 2026-10-01Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and…
-
RHSA-2026:74499 2026-10-01Red Hat Security Advisory: dracut security update
-
RHSA-2026:74503 2026-10-01Red Hat Security Advisory: Satellite 6.19.5 Async Update
-
RHSA-2026:74511 2026-10-01Red Hat Security Advisory: Red Hat Quay 3.17.5
CSAF Schneider Electric
Schneider Electric security notifications in CSAF format.-
SEVD-2026-251-04 2026-09-08Incorrect Implementation of Authentication Algorithm vulnerability on…
-
SEVD-2026-251-02 2026-09-08Improper Neutralization of Special Elements used in an OS Command vul…
-
SEVD-2026-251-01 2026-09-08Multiple Vulnerabilities on EcoStruxure IT Data Center Expert
-
SEVD-2026-223-02 2026-08-11Multiple Vulnerabilities on NetBotz 5 750/755 Products
-
SEVD-2026-223-01 2026-08-11Improper Restriction of Excessive Authentication Attempts vulnerabili…
CSAF Sick
SICK PSIRT security advisories in CSAF format.-
SCA-2026-0013 2026-09-11Vulnerabilities Affecting SICK CorivaEngine
-
SCA-2026-0012 2026-09-11Vulnerability Affecting Sentio Creator Extension 'Device Manager'
-
SCA-2026-0011 2026-09-04Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SIC…
-
SCA-2026-0010 2026-08-24AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx …
-
SCA-2026-0009 2026-07-16Vulnerability in several Endress+Hauser products
CSAF Siemens
Siemens ProductCERT security advisories in CSAF format.-
SSA-823812 2026-09-16SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices
-
SSA-517424 2026-09-08SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT
-
SSA-503852 2026-09-08SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Ma…
-
SSA-330084 2026-09-08SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family
-
SSA-328642 2026-09-08SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products
CSAF Suse 🦎
SUSE security advisories in CSAF format.-
SUSE-SU-2026:4407-1 2026-09-30Security update for jawn
-
SUSE-SU-2026:4405-1 2026-09-30Security update for wicked2nm
-
SUSE-SU-2026:4402-1 2026-09-30Security update for python-PyYAML
-
SUSE-SU-2026:4399-1 2026-09-30Security update for ntfs-3g_ntfsprogs
-
RHSA-2026:74095 2026-09-30security update for rsync
CERT@VDE
Advisories coordinated by CERT@VDE for industrial automation vendors, in CSAF format.-
VDE-2025-028 2025-08-05Draeger: ICMHelper is vulnerable to a privilege escalation
-
VDE-2019-012 2019-06-04TECSON/GOK: Improper Authentication and Access Control on multiple devices
-
VDE-2026-027 2026-09-16Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 …
-
VDE-2025-056 2026-08-12Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext…
-
VDE-2026-008 2026-07-30Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SE…
-
VDE-2026-060 2026-06-03Phoenix Contact: Unauthenticated log download vulnerability in the fi…
-
VDE-2026-050 2026-05-27Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and…
-
VDE-2025-085 2025-09-10Welotec: Path Traversal in SmartEMS Upload Handling
-
VDE-2025-076 2025-08-26Welotec: Hard-coded JWT secret in egOS WebGUI
-
VDE-2024-043 2024-08-22Welotec: Multiple products are vulnerable to regreSSHion
-
VDE-2024-023 2024-04-23Welotec: Clickjacking Vulnerability in WebUI
-
VDE-2024-009 2024-04-09Welotec: Two vulnerabilities in TK500v1 router series
-
ADVISORY2026-12_VDE-2026-097 2026-09-30CODESYS Control Runtime - Improper Synchronization in Monitoring
-
ADVISORY2026-06_VDE-2026-041 2026-07-29CODESYS PROFINET Controller - Out-of-bounds Write
-
ADVISORY2026-04_VDE-2026-040 2026-07-13CODESYS EtherNetIP - Improper timeout handling
-
ADVISORY2026-10_VDE-2026-057 2026-05-26CODESYS Control - Out-of-bounds Write
-
ADVISORY2026-09_VDE-2026-055 2026-05-26CODESYS Development System - Incorrect Default Permissions
-
VDE-2025-067 2025-08-10Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
-
VDE-2025-024 2025-05-13Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2025-032 2025-05-06Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site…
-
VDE-2025-031 2025-04-28Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2024-018 2024-02-28Wiesemann & Theis: Multiple products prone to unquoted search path
-
VDE-2026-068 2026-06-23MB connect line: Authenticated unintended access to critical program …
-
VDE-2026-054 2026-05-27MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
-
VDE-2026-044 2026-05-27MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-030 2026-04-02MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-024 2026-03-23MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-070 2026-06-23Helmholz: Authenticated unintended access to critical program paramet…
-
VDE-2026-059 2026-05-27Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
-
VDE-2026-058 2026-05-21Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
-
VDE-2026-015 2026-04-21Helmholz: Use of a Broken or Risky Cryptographic Algorithm
-
VDE-2026-043 2026-04-13Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
-
FSA-202601 2026-02-26Several CODESYS vulnerabilities in Festo Automation Suite
-
FSA-202406 2024-12-03Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
-
FSA-202405 2024-09-09Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products co…
-
FSA-202402 2024-02-27Several Vulnerabilities in MES PC (Windows 10)
-
FSA-202401 2024-01-30Festo: Multiple products contain CoDe16 vulnerability
-
VDE-2026-014 2026-09-16Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vu…
-
VDE-2025-011 2025-05-26PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by …
-
VDE-2025-002 2025-02-25PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
-
VDE-2024-065 2024-11-26PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
-
VDE-2024-063 2024-10-08PEPPERL+FUCHS: Multiple products are affected by regreSSHion
-
PPSA-2026-003 2026-08-04Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
-
PPSA-2026-002 2026-04-23Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2026-001 2026-02-02Pilz: Multiple Vulnerabilities affecting the PIT User Authentication …
-
PPSA-2025-004 2025-10-20Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2025-003 2025-07-01Pilz: Authentication Bypass in IndustrialPI Webstatus
-
VDE-2025-102 2026-10-01WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
-
VDE-2025-081 2026-10-01WAGO: Multiple PLCs and Communication Components are Affected by mult…
-
VDE-2026-031 2026-07-13WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
-
VDE-2024-008 2026-04-08Wago: Vulnerability in WBM through Open VPN
-
VDE-2026-021 2026-03-30WAGO: Multiple Vulnerabilities in WAGO VC Hub
-
VDE-2026-005 2026-05-06ifm: Multiple Vulnerabilities in CR3171
-
VDE-2024-061 2025-06-30ifm: Improper Access Control vulnerability
-
VDE-2024-012 2024-07-09ifm: Vulnerabilities in ifm AC14 firmware
-
VDE-2024-028 2024-05-06ifm moneo password reset can be exploited
-
VDE-2022-050 2022-12-12IFM: weak password recovery vulnerability in moneo appliance
-
VDE-2025-092 2026-01-27Beckhoff: Privilege escalation and information leak via Beckhoff Devi…
-
VDE-2025-106 2026-01-26Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
-
VDE-2025-075 2025-09-09Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
-
VDE-2024-064 2024-10-31Beckhoff: Local command injection via TwinCAT Package Manager
-
VDE-2021-008 2024-10-21Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
-
VDE-2026-091 2026-09-15TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
-
VDE-2026-007 2026-02-23TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
-
VDE-2025-078 2025-08-25TRUMPF: Remote support uses an outdated encryption algorithm
-
VDE-2024-004 2025-04-22TRUMPF: Multiple products affected by log4net vulnerability
-
VDE-2024-040 2024-06-25Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerab…
-
VDE-2026-089 2026-09-21Lenze: VPN Client Remote Code Execution in combination with Lenze x50…
-
VDE-2026-077 2026-07-27Lenze: Incorrect signature validation in the enable SSH routine
-
VDE-2025-043 2025-06-25Lenze: PLC Designer V4 with insecure storage of sensitive information
-
VDE-2025-042 2025-05-27Lenze: VPN Client Privilege Escalation in combination with Lenze x500…
-
VDE-2024-053 2024-09-03Lenze: Install Directory with insufficient permissions
-
VDE-2026-028 2026-09-16Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple …
-
VDE-2022-029 2022-09-26Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0
-
VDE-2025-047 2025-06-10AUMA: Incorrect delivery status of the Bluetooth configuration
-
VDE-2025-026 2025-05-12AUMA Riester: Buffer overflow in service telegram
-
VDE-2023-028 2023-08-07AUMA: SIMA Master Station affected by WRECK vulnerability
-
VDE-2023-027 2023-08-07AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
-
VDE-2022-032 2022-08-09AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
-
VDE-2025-084 2025-09-08Bender Charge Controller Vulnerability - Unsecure Communication
-
VDE-2025-061 2025-09-08Bender Charge Controller Vulnerability - Disclosure Of Stored Credent…
-
VDE-2021-047 2022-04-26Bender/ebee: Multiple Charge Controller Vulnerabilities
-
VDE-2020-043 2020-10-16Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vuln…
-
VDE-2026-065 2026-08-03Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package…
-
VDE-2026-045 2026-07-16Endress+Hauser: Multiple products affected by SopasET interface vulne…
-
VDE-2026-032 2026-04-21Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW
-
VDE-2026-003 2026-03-31Endress+Hauser: Multiple products prone to multiple vulnerabilities i…
-
VDE-2026-002 2026-03-02Endress+Hauser: buffer overflow in glibc ld.so leading to privilege e…
-
VDE-2026-078 2026-08-20Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
-
VDE-2025-030 2025-07-07Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerab…
-
VDE-2023-049 2023-12-11Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
-
VDE-2023-038 2023-09-21Frauscher: Multiple Vulnerabilities in FDS101
-
VDE-2023-011 2023-07-05Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vul…
-
VDE-2022-052 2022-11-21Miele: Vulnerability in ease2pay cloud service used by appWash
-
VDE-2022-015 2022-04-27Miele: Security vulnerability in Benchmark Programming Tool
-
VDE-2020-024 2020-07-08Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communicatio…
-
VDE-2019-010 2019-05-20Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
-
VDE-2026-083 2026-08-25Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are af…
-
VDE-2026-085 2026-07-28Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
-
VDE-2026-081 2026-07-28Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by…
-
VDE-2025-096 2026-03-10Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Ener…
-
VDE-2025-052 2025-06-11Weidmueller: Security routers IE-SR-2TX are affected by multiple vuln…
-
VDE-2025-066 2025-08-27SMA: Directory Traversal in Sunny Boy
-
VDE-2025-050 2025-08-19SMA: Sunny Portal limited disclosure of personal data of registered u…
-
VDE-2025-010 2025-05-13SMA: Sunny Portal demo system privilege escalation
-
VDE-2025-012 2025-02-26SMA: Sunny Portal Remote Code Execution
-
VDE-2024-075 2025-01-27SMA: Sunny Webbox clickjacking vulnerability
-
VDE-2024-013 2024-02-13HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
-
VDE-2022-059 2023-01-16HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
-
VDE-2026-061 2026-08-24Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' functio…
-
VDE-2026-063 2026-07-14Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
-
VDE-2026-062 2026-07-14Several Murrelektronik Devices use Default SNMP Community Names
-
VDE-2025-091 2025-10-14Murrelektronik: Cleartext Transmission of Sensitive Information in IM…
-
VDE-2020-016 2020-05-28SWARCO: Critical Vulnerability in CPU LS4000
-
VDE-2026-076 2026-07-28ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
-
VDE-2025-033 2025-04-14ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC…
-
VDE-2024-016 2024-02-19ADS-TEC Industrial IT: Docker vulnerability affects multiple products
-
VDE-2023-009 2023-05-08ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
-
VDE-2022-061 2023-03-15VARTA: Multiple devices prone to hard-coded credentials
-
VDE-2026-093 2026-09-01SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mec…
-
VDE-2025-060 2025-10-21Sauter: Multiple vulnerabilities in SAUTER modulo 6
-
VDE-2025-079 2026-03-10Janitza: Multiple vulnerabilities in UMG 96RM-E
-
VDE-2025-094 2025-11-24Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
-
VDE-2026-088 2026-08-20METTLER TOLEDO: LabX Standard and Enterprise Report on External Compo…
-
VDE-2026-066 2026-07-14METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
-
VDE-2026-064 2026-06-09METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
-
VDE-2026-053 2026-05-26METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnera…
-
VDE-2026-029 2026-04-23METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances
TIBCO
TIBCO security advisories in CSAF format.-
TIBCO-2023-454 2023-05-23TIBCO Security Advisory TIBCO-2023-454
-
TIBCO-2023-453 2023-05-23TIBCO Security Advisory TIBCO-2023-453
-
TIBCO-2023-460 2023-04-18TIBCO Security Advisory TIBCO-2023-460
-
TIBCO-2023-450 2023-02-22TIBCO Security Advisory TIBCO-2023-450
-
TIBCO-2023-446 2023-02-22TIBCO Security Advisory TIBCO-2023-446
Trend Micro
Trend Micro security bulletins in CSAF format.-
2026-0521-TM-A1-001 2026-05-21ITW SECURITY BULLETIN: Apex One and Vision One and Standard Endpoint …
-
2025-0805-TM-A1-002 2025-08-05ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Man…
-
2025-0627-TM-WF-001 2025-06-27SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Secu…
-
2025-0610-TM-TMEE-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Endpoint Encryption PolicySer…
-
2025-0610-TM-AC-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Apex Central (June 2025)
-
VDE-2026-048 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Blueto…
-
VDE-2026-047 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Air products
-
VDE-2026-046 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS two- a…
-
VDE-2026-016 2026-04-22VEGA: Unsecured Configuration Interface Allows Unauthorized Access Le…
-
HBSA-2025-0003 2026-02-18JBL: DoS vulnerability in Flip 4
-
HBSA-2025-0002 2025-12-10BLE ICM Vulnerability in JBL Headphones
-
HBSA-2025-0001 2025-12-10BLE GATT Service Vulnerability in JBL Headphones
-
VDE-2026-071 2026-06-23JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON …
-
VDE-2026-009 2026-05-26JUMO: Multiple products affected by nodejs vulnerability
-
VDE-2025-086 2025-11-10Jumo: Predictable debug-interface password in variTRON series
-
VDE-2025-098 2026-04-02Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in …
-
VDE-2025-097 2025-11-18METZ CONNECT: Config API – Authentication bypass leads to admin takeo…
OSV Sources
13 sources
OSV AlmaLinux
AlmaLinux security advisories in OSV format.-
ALSA-2026:74442 2026-10-01
-
ALSA-2026:74370 2026-10-01
-
ALSA-2026:74133 2026-09-30
-
ALSA-2026:74132 2026-09-30
-
ALSA-2026:74095 2026-09-30
OSV BellSoft
BellSoft advisories for Alpaquita Linux and its hardened containers, in OSV format.-
BELL-CVE-2026-100078 2026-10-01
-
BELL-CVE-2026-100074 2026-10-01
-
BELL-CVE-2026-100073 2026-10-01
-
BELL-CVE-2026-100079 2026-10-01
-
BELL-CVE-2026-100071 2026-10-01
OSV Haskell λ
Haskell Security Advisory Database (HSEC) in OSV format.-
HSEC-2026-0010 2026-09-29
-
HSEC-2026-0008 2026-06-03
-
HSEC-2026-0007 2026-05-22
-
HSEC-2026-0006 2026-04-08
-
HSEC-2026-0004 2026-03-28
OSV Homebrew 🍺
OSV records for Homebrew formulae patched against known vulnerabilities.-
BREW-SNAKEVIZ-GHSA-CHX6-46F5-W4VP 2026-10-01
-
BREW-SNAKEVIZ-GHSA-C2M8-H5V5-343R 2026-10-01
-
BREW-SNAKEVIZ-GHSA-3HV7-MJH2-FV65 2026-10-01
-
BREW-SNAKEMAKE-CVE-2026-100689 2026-10-01
-
BREW-MLX-LM-CVE-2026-80047 2026-10-01
OSV Ocaml 🐫
OCaml security advisories in OSV format.-
OSEC-2026-20 2026-09-10
-
OSEC-2026-19 2026-09-10
-
OSEC-2026-18 2026-09-10
-
OSEC-2026-16 2026-08-20
-
OSEC-2026-17 2026-08-17
OSV openEuler
openEuler security advisories (OESA) in OSV format.-
OESA-2026-4230 2026-09-30
-
OESA-2026-4229 2026-09-30
-
OESA-2026-4228 2026-09-30
-
OESA-2026-4227 2026-09-30
-
OESA-2026-4226 2026-09-30
OSV OSS Fuzz 🧪
Vulnerabilities found by Google OSS-Fuzz, in OSV format.-
OSV-2026-1239 2026-09-06
-
OSV-2026-1235 2026-09-06
-
OSV-2026-1220 2026-08-31
-
OSV-2026-1198 2026-08-25
-
OSV-2026-1196 2026-08-25
OSV Rocky Linux
Rocky Linux security advisories in OSV format, served by the Apollo API.-
RLSA-2026:74132 2026-10-01
-
RLSA-2026:73971 2026-10-01
-
RLSA-2026:74133 2026-10-01
-
RLSA-2026:74095 2026-10-01
-
RLSA-2026:74001 2026-10-01
OSV Rustsec 🦀
RustSec advisory database for Rust crates.-
RUSTSEC-2026-0318 2026-09-29
-
RUSTSEC-2026-0317 2026-09-29
-
RUSTSEC-2026-0311 2026-09-27
-
RUSTSEC-2026-0310 2026-09-25
-
RUSTSEC-2026-0316 2026-09-24
OSV Ubuntu
Ubuntu security notices and CVE records in OSV format.-
USN-8860-1 2026-10-01
-
USN-8858-1 2026-09-30
-
USN-8859-1 2026-09-30
-
USN-8855-1 2026-09-30
-
USN-8856-1 2026-09-30
Bitnami VulnDB
Bitnami vulnerability database for the applications it packages.-
BIT-PARSE-2026-100632 2026-10-01
-
BIT-PARSE-2026-100631 2026-10-01
-
BIT-TOMCAT-2026-87022 2026-10-01
-
BIT-TOMCAT-2026-86350 2026-10-01
-
BIT-TOMCAT-2026-86248 2026-10-01
-
CLEANSTART-2024-XN11840 2026-10-01
-
CLEANSTART-2024-WL06941 2026-10-01
-
CLEANSTART-2024-QY49734 2026-10-01
-
CLEANSTART-2024-EV00180 2026-10-01
-
CLEANSTART-2024-SF85133 2026-10-01
Drupal 💧
Drupal core and contributed project security advisories.-
DRUPAL-CONTRIB-2026-191 2026-09-23
-
DRUPAL-CONTRIB-2026-190 2026-09-23
-
DRUPAL-CONTRIB-2026-189 2026-09-23
-
DRUPAL-CONTRIB-2026-188 2026-09-23
-
DRUPAL-CONTRIB-2026-187 2026-09-23
Specialized Sources
3 sources
Tailscale
Tailscale security bulletins.-
TS-2026-011 2026-08-18
-
TS-2026-010 2026-07-24
-
TS-2026-009 2026-07-13
-
TS-2026-008 2026-07-13
-
TS-2026-007 2026-07-10
AVID 🤖
AI Vulnerability Database of failure reports for AI/ML systems.-
AVID-2023-V028 2023-03-31
-
AVID-2023-V027 2023-03-31
-
AVID-2023-V026 2023-03-31
-
AVID-2023-V016 2023-03-31
-
AVID-2023-V015 2023-03-31
VARIoT 📡
Vulnerability database focused on vulnerabilities in the Internet of Things (IoT) ecosystem.-
VAR-202407-2188 2024-07-23
-
VAR-202406-3119 2024-07-23
-
VAR-202407-1740 2024-07-23
-
VAR-202407-1417 2024-07-23
-
VAR-202407-1103 2024-07-23