HackZoneLabs News
Newsletter

CVE records

39839 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-128241libexpat xmlwf through 2.10.0 Symlink Following via -d Output Directory13 Nov 20264.4
CVE-2026-128242actix-http before 3.20.1 and actix-web before 4.18.2 Decompression Bomb DoS via encoding::Decoder13 Nov 20268.7
CVE-2026-128328Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoDirectories repoPath13 Nov 20265.3
CVE-2026-128329Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoFile13 Nov 20268.3
CVE-2026-128330Miniflux before 2.3.5 Insufficient Session Expiration After Password Change13 Nov 20264.2
CVE-2026-128331Miniflux before 2.3.5 Password Change Without Current Password via Settings Form13 Nov 20266.0
CVE-2026-128332listmonk 6.0.0 before 7.0.0-beta.2 TOTP Brute-Force via /admin/login/twofa13 Nov 20269.1
CVE-2026-128333listmonk 6.0.0 before 7.0.0-beta.2 2FA Bypass via Password Reset Flow13 Nov 20269.1
CVE-2026-128334listmonk 6.2.0 before 7.0.0-beta.2 Missing Authentication via Azure Bounce Webhook13 Nov 20266.3
CVE-2026-128335Contao before 5.3.54, 5.7.17, and 6.0.6 Session Invalidation Failure on 2FA Change13 Nov 20263.7
CVE-2026-128336ExcelJS through 4.4.0 Prototype Pollution via __proto__ Defined Name13 Nov 20266.3
CVE-2026-128337ExcelJS through 4.4.0 Prototype Pollution via x14 Conditional Formatting Rule ID13 Nov 20268.3
CVE-2026-128338ExcelJS through 4.4.0 Memory Exhaustion via Unbounded Worksheet Column Range13 Nov 20268.7
CVE-2026-128339ExcelJS through 4.4.0 Memory Exhaustion via Oversized Merged Cell Range13 Nov 20268.7
CVE-2026-128340ExcelJS through 4.4.0 Memory Exhaustion via Oversized Defined Name Range13 Nov 20268.7
CVE-2026-128341ExcelJS through 4.4.0 Denial of Service via Oversized Data Validation sqref13 Nov 20268.7
CVE-2026-128342ExcelJS through 4.4.0 Denial of Service via Oversized Worksheet sheetId13 Nov 20268.7
CVE-2026-128343ExcelJS through 4.4.0 Denial of Service via Oversized Row Number13 Nov 20268.7
CVE-2026-128344ExcelJS through 4.4.0 Memory Exhaustion via Oversized Image Anchor Column13 Nov 20268.7
CVE-2026-128345ExcelJS through 4.4.0 ReDoS via slideFormula Shared Formula Translation13 Nov 20266.9
CVE-2026-128346ExcelJS through 4.4.0 Resource Exhaustion via Streaming WorkbookReader Temporary Files13 Nov 20268.7
CVE-2026-128347ExcelJS through 4.4.0 Arbitrary File Read via WorkbookWriter addImage Filename13 Nov 20268.7
CVE-2026-128348ExcelJS through 4.4.0 Formula Injection via Table Totals Row Column Names13 Nov 20264.2
CVE-2026-6141813 Nov 20267.5
CVE-2026-6141713 Nov 20266.5
CVE-2026-11641813 Nov 20267.5
CVE-2026-11643313 Nov 20264.3
CVE-2026-11642513 Nov 20265.4
CVE-2026-11642013 Nov 20266.4
CVE-2026-11643113 Nov 20264.3
CVE-2026-11643013 Nov 20264.3
CVE-2026-128824Quay: quay: reflected xss via image_id in v1 registry error responses13 Nov 20265.4
CVE-2026-11642413 Nov 20265.4
CVE-2026-11641713 Nov 20268.1
CVE-2026-11642213 Nov 20266.3
CVE-2026-11645313 Nov 20265.4
CVE-2026-11641913 Nov 20266.4
CVE-2026-11642313 Nov 20265.4
CVE-2026-11642613 Nov 20264.3
CVE-2026-11643813 Nov 20265.4
CVE-2026-11642113 Nov 20266.4
CVE-2026-11642713 Nov 20265.4
CVE-2026-120867Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway13 Nov 20268.7
CVE-2026-120866Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway13 Nov 20267.7
CVE-2026-11643613 Nov 20264.3
CVE-2026-120865Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway13 Nov 20268.7
CVE-2026-120864Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway13 Nov 20269.3
CVE-2026-120863Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway13 Nov 20268.7
CVE-2026-11643213 Nov 20264.3
CVE-2026-120862Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler13 Nov 20268.7