Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-53803 |
8.5 (4.0)
7.8 (3.1)
|
rsync < 3.5.0 Symlink Following Arbitrary File Overwrite |
RsyncProject |
rsync |
2026-08-13T14:33:18.552Z | 2026-08-14T12:40:40.829Z |
| CVE-2026-67614 |
9.3 (4.0)
9.8 (3.1)
|
CyberPanel < 3.0.0 Hard-coded JWT Secret Authenticatio… |
usmannasir |
cyberpanel |
2026-08-13T17:08:40.038Z | 2026-08-14T12:40:28.474Z |
| CVE-2026-18071 |
7.8 (3.1)
|
IBM i is Affected By An Improper Management Vulnerabil… |
IBM |
i |
2026-08-13T18:48:31.331Z | 2026-08-14T12:40:15.306Z |
| CVE-2026-17223 |
8.8 (3.1)
|
IBM i is Affected By Multiple Vulnerabilities in Host … |
IBM |
i |
2026-08-13T18:56:07.766Z | 2026-08-14T12:40:02.929Z |
| CVE-2026-17206 |
8.1 (3.1)
|
IBM i is Affected By Multiple Vulnerabilities in Host … |
IBM |
i |
2026-08-13T18:55:41.032Z | 2026-08-14T12:39:50.571Z |
| CVE-2026-17029 |
8.8 (3.1)
|
IBM i is Affected By Multiple Vulnerabilities in Java … |
IBM |
i |
2026-08-13T19:54:29.760Z | 2026-08-14T12:39:38.065Z |
| CVE-2026-16987 |
8.8 (3.1)
|
IBM i is Affected By An Improper Validation Vulnerabil… |
IBM |
i |
2026-08-13T19:54:15.657Z | 2026-08-14T12:39:25.378Z |
| CVE-2026-16975 |
8.8 (3.1)
|
IBM i is Affected By A Remote Code Execution Vulnerabi… |
IBM |
i |
2026-08-13T19:54:00.358Z | 2026-08-14T12:39:13.057Z |
| CVE-2026-16967 |
8.5 (3.1)
|
IBM i is Affected By Multiple SQL Vulnerabilities [, ] |
IBM |
i |
2026-08-13T19:53:38.867Z | 2026-08-14T12:39:00.381Z |
| CVE-2026-17069 |
8.1 (3.1)
|
IBM i is Affected By Multiple Vulnerabilities in Digit… |
IBM |
i |
2026-08-13T19:55:20.545Z | 2026-08-14T12:38:47.444Z |
| CVE-2026-8715 |
9.6 (3.1)
|
Vault Secrets Operator vulnerable to arbitrary file re… |
HashiCorp |
Tooling |
2026-08-13T20:27:39.489Z | 2026-08-14T12:38:35.051Z |
| CVE-2026-17101 |
8.3 (3.1)
|
IBM i is Affected By Multiple Vulnerabilities in Navig… |
IBM |
i |
2026-08-13T20:27:28.496Z | 2026-08-14T12:38:21.601Z |
| CVE-2026-19824 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda W20E addIpMacBind ipMacBindListStore stack-based… |
Tenda |
W20E |
2026-08-14T12:30:09.845Z | 2026-08-14T12:30:09.845Z |
| CVE-2026-73673 |
8.7 (4.0)
8.8 (3.1)
|
Netis NC63 V3.0.0.3327 Unauthenticated Firmware Update… |
Netis Systems Co., Ltd. |
Netis NC63 Wireless AC1200 Router |
2026-08-14T12:21:05.797Z | 2026-08-14T12:21:05.797Z |
| CVE-2026-19823 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda W20E QoS Rule Deletion delQos formQOSRuleDel sta… |
Tenda |
W20E |
2026-08-14T12:15:10.480Z | 2026-08-14T12:15:10.480Z |
| CVE-2026-19870 |
8.6 (4.0)
|
IDOR in Prospero Flow CRM allows cross-tenant payroll … |
Roskus |
Prospero Flow CRM |
2026-08-14T12:08:30.457Z | 2026-08-14T12:08:30.457Z |
| CVE-2026-32286 |
7.5 (3.1)
|
Denial of service in github.com/jackc/pgproto3/v2 |
github.com/jackc/pgproto3/v2 |
github.com/jackc/pgproto3/v2 |
2026-03-26T19:40:51.974Z | 2026-08-14T12:04:43.510Z |
| CVE-2026-32285 |
7.5 (3.1)
|
Denial of service in github.com/buger/jsonparser |
github.com/buger/jsonparser |
github.com/buger/jsonparser |
2026-03-26T19:40:51.837Z | 2026-08-14T12:04:43.458Z |
| CVE-2026-41604 |
8.2 (3.1)
|
Apache Thrift: Swift Range crash in skip() |
Apache Software Foundation |
Apache Thrift |
2026-04-28T09:20:13.996Z | 2026-08-14T12:04:43.409Z |
| CVE-2026-45416 |
7.5 (3.1)
|
Netty: SNI handler pre-allocates up to 16 MiB from nin… |
netty |
netty |
2026-06-12T14:10:05.585Z | 2026-08-14T12:04:43.335Z |
| CVE-2026-39821 |
9.6 (3.1)
8.2 (3.1)
|
Invoking failure to reject ASCII-only Punycode-encoded… |
Go standard library |
net/http |
2026-05-22T15:01:21.462Z | 2026-08-14T12:04:43.325Z |
| CVE-2026-42044 |
6.5 (3.1)
7.4 (3.1)
|
Axios: Invisible JSON Response Tampering via Prototype… |
axios |
axios |
2026-04-24T17:49:49.517Z | 2026-08-14T12:04:43.161Z |
| CVE-2026-33216 |
8.6 (3.1)
|
NATS has MQTT plaintext password disclosure |
nats-io |
nats-server |
2026-03-25T19:41:55.670Z | 2026-08-14T12:04:43.078Z |
| CVE-2025-69873 |
2.9 (3.1)
7.5 (3.1)
|
ajv (Another JSON Schema Validator) before 8.18.0… |
ajv.js |
ajv |
2026-02-11T00:00:00.000Z | 2026-08-14T12:04:43.007Z |
| CVE-2026-12143 |
8.7 (4.0)
7.5 (3.1)
|
form-data does not escape CR/LF/quote in multipart fie… |
form-data |
form-data |
2026-06-12T18:01:30.362Z | 2026-08-14T12:04:42.555Z |
| CVE-2026-33810 |
7.5 (3.1)
8.8 (3.1)
|
Case-sensitive excludedSubtrees name constraints cause… |
Go standard library |
crypto/x509 |
2026-04-08T01:06:56.546Z | 2026-08-14T12:04:42.463Z |
| CVE-2026-44496 |
7.5 (3.1)
|
Axios: Regular Expression Denial of Service (ReDoS) vi… |
axios |
axios |
2026-06-11T15:34:28.492Z | 2026-08-14T12:04:42.456Z |
| CVE-2026-33816 |
9.8 (3.1)
8.3 (3.1)
|
CVE-2026-33816 in github.com/jackc/pgx |
github.com/jackc/pgx/v5 |
github.com/jackc/pgx/v5/pgproto3 |
2026-04-07T15:19:24.529Z | 2026-08-14T12:04:42.351Z |
| CVE-2026-25679 |
7.5 (3.1)
|
Incorrect parsing of IPv6 host literals in net/url |
Go standard library |
net/url |
2026-03-06T21:28:14.211Z | 2026-08-14T12:04:41.999Z |
| CVE-2026-42499 |
7.5 (3.1)
|
Quadratic string concatenation in consumePhrase in net/mail |
Go standard library |
net/mail |
2026-05-07T19:41:18.615Z | 2026-08-14T12:04:41.754Z |