Historical CVEs
-
CVE.orgCVE-2026-115931
Arbitrary file read and backend crash through unrestricted provider method calls
Published · Source snapshot
-
CVE.orgCVE-2026-115938
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
Published · Source snapshot
-
CVE.orgCVE-2026-115937
Unauthenticated payment reuse allows unpaid orders to be marked as paid
Published · Source snapshot
-
CVE.orgCVE-2026-115801
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
Published · Source snapshot
-
CVE.orgCVE-2026-115935
Control panel only API response emulation replaces "securityKey" and reaches server RCE
Published · Source snapshot
-
CVE.orgCVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
Published · Source snapshot
-
CVE.orgCVE-2026-115895
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
Published · Source snapshot
-
CVE.orgCVE-2026-115893
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Published · Source snapshot
-
CVE.orgCVE-2026-115892
Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type
Published · Source snapshot
-
CVE.orgCVE-2026-115889
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Published · Source snapshot
-
CVE.orgCVE-2026-115887
graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
Published · Source snapshot
-
CVE.orgCVE-2026-115886
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Published · Source snapshot
-
CVE.orgCVE-2026-115885
LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
Published · Source snapshot
-
CVE.orgCVE-2026-115883
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
Published · Source snapshot
-
CVE.orgCVE-2026-113951
Published · Source snapshot
-
CVE.orgCVE-2026-75525
OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant
Published · Source snapshot
-
CVE.orgCVE-2026-115800
UbiquitousLearning mllm Convertor __init__.py load_model path traversal
Published · Source snapshot
-
CVE.orgCVE-2026-75524
OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent
Published · Source snapshot
-
CVE.orgCVE-2026-65825
OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
Published · Source snapshot
-
CVE.orgCVE-2026-65824
OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie
Published · Source snapshot
-
CVE.orgCVE-2026-58202
OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`
Published · Source snapshot
-
CVE.orgCVE-2026-115877
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Published · Source snapshot
-
CVE.orgCVE-2026-83813
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Published · Source snapshot
-
CVE.orgCVE-2026-115778
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Published · Source snapshot
-
CVE.orgCVE-2026-115776
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Published · Source snapshot
-
CVE.orgCVE-2026-115775
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Published · Source snapshot
-
CVE.orgCVE-2026-115774
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Published · Source snapshot
-
CVE.orgCVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
Published · Source snapshot
-
CVE.orgCVE-2026-115797
Tenda F6 Web Management cleartext transmission
Published · Source snapshot
-
CVE.orgCVE-2026-79982
Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size
Published · Source snapshot
-
CVE.orgCVE-2026-79981
DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing
Published · Source snapshot
-
CVE.orgCVE-2026-79980
Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS
Published · Source snapshot
-
CVE.orgCVE-2026-79979
Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames
Published · Source snapshot
-
CVE.orgCVE-2026-79978
Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path
Published · Source snapshot
-
CVE.orgCVE-2026-79977
WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr
Published · Source snapshot
-
CVE.orgCVE-2026-19741
OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)
Published · Source snapshot
-
CVE.orgCVE-2026-115796
Tenda F6 Web Management cross-site request forgery
Published · Source snapshot
-
CVE.orgCVE-2026-115586
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
Published · Source snapshot
-
CVE.orgCVE-2026-115585
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
Published · Source snapshot
-
CVE.orgCVE-2026-115580
pypdf: Possible long runtimes for large xref table header limits
Published · Source snapshot
-
CVE.orgCVE-2026-115572
pypdf: Possible long runtimes for repeated references to the same missing object
Published · Source snapshot
-
CVE.orgCVE-2026-115845
Incomplete validation in the run_script Python sandbox in AWS MCP Server
Published · Source snapshot
-
CVE.orgCVE-2026-91093
HP One Agent Software – Security Update
Published · Source snapshot
-
CVE.orgCVE-2026-112342
Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning
Published · Source snapshot
-
CVE.orgCVE-2026-115570
Electron: Mitigation for compromised eMudhra intermediate certificates
Published · Source snapshot
-
CVE.orgCVE-2026-115569
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
Published · Source snapshot
-
CVE.orgCVE-2026-115863
Published · Source snapshot
-
CVE.orgCVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
Published · Source snapshot
-
CVE.orgCVE-2026-115812
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
Published · Source snapshot
-
CVE.orgCVE-2026-115567
Tokio: Race condition in `tokio::time::Interval`
Published · Source snapshot
Coverage
Coverage and delta continuity unverified
The latest snapshot does not prove the catalogue is caught up.
- Current published records
- 395207
- Current rejected records
- 18635
- Unknown publication date (subset)
- 6436
Import details
cve_2026-10-24_midnight_baseline
- Import kind
- Baseline
- Declared scope
{"kind":"baseline","partitions":[1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026],"expectedRecords":413842}- Identifier partitions observed (not coverage proof)
[1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026]- Checkpoint
- 413842
- Declared input
- Declared input complete
- Import result
- No failure recorded
- Published input documents
- 395207
- Rejected input documents
- 18635
- Unknown publication date (subset)
- 6436