CVE records
39839 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.
| CVE | Title | Published | Top score | KEV |
|---|---|---|---|---|
| CVE-2026-120861 | Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler | 13 Nov 2026 | 8.7 | |
| CVE-2026-120860 | Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-111339 | Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 6.9 | |
| CVE-2026-111338 | Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 6.9 | |
| CVE-2026-111337 | Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-111336 | Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.3 | |
| CVE-2026-111335 | Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 6.9 | |
| CVE-2026-111334 | Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 9.3 | |
| CVE-2026-111333 | Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 6.9 | |
| CVE-2026-59081 | Deserialization of untrusted data in Edito CMS | 13 Nov 2026 | 8.4 | |
| CVE-2026-59080 | JWT Exposure via GET Request in Edito CMS | 13 Nov 2026 | 2.1 | |
| CVE-2026-59079 | Unrestricted File Upload in Edito CMS | 13 Nov 2026 | 7.1 | |
| CVE-2026-59078 | Stored XSS in Edito CMS | 13 Nov 2026 | 5.1 | |
| CVE-2026-59077 | Stored XSS in Edito CMS | 13 Nov 2026 | 5.1 | |
| CVE-2026-59076 | Stored XSS in Edito CMS | 13 Nov 2026 | 5.1 | |
| CVE-2026-59075 | Dynamic LINQ Injection in Edito CMS | 13 Nov 2026 | 7.1 | |
| CVE-2026-59074 | Improper Cryptographic Signature Verification in Edito CMS | 13 Nov 2026 | 8.7 | |
| CVE-2026-128637 | Open Redirect in MISP Modules Website Login via Unvalidated next Parameter | 13 Nov 2026 | 5.1 | |
| CVE-2026-128424 | Kroxylicious-authorizer-acl: kroxylicious: acl rule file regex escapes are stripped, broadening 'matching' authorization rules | 13 Nov 2026 | 5.3 | |
| CVE-2026-126119 | Streamit Plugin < 1.3.10 - Unauthenticated Remote Code Execution via Arbitrary Function Call | 13 Nov 2026 | 9.8 | |
| CVE-2026-125912 | WP Ultimate CSV Importer < 9.2 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via Media Import | 13 Nov 2026 | 7.2 | |
| CVE-2026-125711 | Trustindex Review Widget Plugins < 14.3 - Editor+ Stored XSS via Business Name | 13 Nov 2026 | 3.5 | |
| CVE-2026-124833 | Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload | 13 Nov 2026 | 9.8 | |
| CVE-2026-124822 | Easy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path Traversal | 13 Nov 2026 | 10.0 | |
| CVE-2026-124763 | AM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_file | 13 Nov 2026 | 9.1 | |
| CVE-2026-124664 | Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure | 13 Nov 2026 | 5.3 | |
| CVE-2026-123711 | WPCOM Member < 1.8.3 - Unauthenticated Account Takeover via WeChat Login Code Brute-Force | 13 Nov 2026 | 8.1 | |
| CVE-2026-123670 | Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning | 13 Nov 2026 | 4.3 | |
| CVE-2026-123124 | WooCommerce Vindi Pagamento <= 0.8.3 - Unauthenticated Stored XSS via 'code' Parameter | 13 Nov 2026 | 7.5 | |
| CVE-2026-123097 | WP Remote Users Sync < 2.2.1 - Privilege Escalation to Administrator via 'create' and 'update' Sync Actions | 13 Nov 2026 | 7.5 | |
| CVE-2026-123093 | WP Remote Users Sync < 2.2.1 - Subscriber+ Activity Log Deletion | 13 Nov 2026 | 4.3 | |
| CVE-2026-121853 | AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure | 13 Nov 2026 | 5.3 | |
| CVE-2026-120407 | Contact Form 7 < 6.2.5 - Editor+ Sensitive User Data Disclosure via Form Default Values | 13 Nov 2026 | 4.5 | |
| CVE-2026-118065 | Advance Guest Post <= 1.9 - Unauthenticated Arbitrary Attachment Deletion | 13 Nov 2026 | 7.5 | |
| CVE-2026-118064 | Advance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via featured_action | 13 Nov 2026 | 9.8 | |
| CVE-2026-118063 | Advance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via gallery_action | 13 Nov 2026 | 9.8 | |
| CVE-2026-116059 | LetsRecover <= 1.2.0 - Unauthenticated SQL Injection | 13 Nov 2026 | 8.6 | |
| CVE-2026-111342 | Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-111341 | Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-111340 | Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-107415 | Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 9.3 | |
| CVE-2026-127286 | Zackriya-Solutions Meetily main.py missing authentication | 13 Nov 2026 | 7.5 | |
| CVE-2026-107414 | Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-107413 | Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 8.7 | |
| CVE-2026-74911 | 13 Nov 2026 | |||
| CVE-2026-107412 | Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway | 13 Nov 2026 | 9.5 | |
| CVE-2026-107411 | Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler | 13 Nov 2026 | 8.7 | |
| CVE-2026-49747 | GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon | 13 Nov 2026 | ||
| CVE-2026-127285 | Cairo-dock Glx-Dock href Attribute bg_forum.php cross site scripting | 13 Nov 2026 | 5.3 | |
| CVE-2026-15465 | GPU DDK - Write UAF in OSDebugSignalPID due to incorrect management of PID resources | 13 Nov 2026 |