HackZoneLabs News
Newsletter

CVE records

39839 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-107410Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler13 Nov 20269.3
CVE-2026-107409Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler13 Nov 20269.3
CVE-2026-107408Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler13 Nov 20269.3
CVE-2026-107407Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler13 Nov 20269.3
CVE-2026-127284SourceCodester Food Ordering System Admin Write add_category.php sql injection13 Nov 20267.5
CVE-2026-127283SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload13 Nov 20267.5
CVE-2026-127282SourceCodester Smart Attendance System with QR Code Scanner reset_password.php cross site scripting13 Nov 20265.3
CVE-2026-127281lanyulei ferry JWT Validation auth.go improper authentication13 Nov 20267.5
CVE-2026-127279AIP-PUB ACPs-community Discovery Server main.py missing authentication13 Nov 20267.5
CVE-2026-127278AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication13 Nov 20267.5
CVE-2026-127277Linksys EA8100 SMB Service service_smbd.sh initialization13 Nov 202610.0
CVE-2026-127916MCUboot image hash span is not bounded against the slot, allowing a read past the flash area during image validation13 Nov 20262.9
CVE-2026-127915TLV iterator does not bound each entry against the declared TLV area in MCUboot bootutil13 Nov 20262.0
CVE-2026-16664Unchecked serial-recovery image index causes out-of-bounds slot-table read in MCUboot Zephyr port13 Nov 20265.1
CVE-2026-16659Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)13 Nov 20264.0
CVE-2026-16671Out-of-bounds stack write in MCUboot split-image validation with SHA-384/SHA-512 builds13 Nov 20262.9
CVE-2026-16662Uninitialised bootloader stack disclosed into the measured-boot attestation record via a short EXPECTED_HASH TLV in MCUboot13 Nov 20262.4
CVE-2026-128091AES key schedule not cleared by the TinyCrypt AES-CTR backend in MCUboot bootutil13 Nov 20262.0
CVE-2026-127928AES image key left on the stack after serial-recovery encrypted-image handling in MCUboot13 Nov 20262.0
CVE-2026-127276Linksys EA8100 Web UI cookie httponly flag13 Nov 20266.3
CVE-2026-128321Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow vulnerability13 Nov 2026
CVE-2026-126982Remote code execution via generic-type allow-list bypass in BSON object deserialization13 Nov 20267.7
CVE-2026-126839Deserialization allow-list bypass via anonymous-type misdetection in BSON object deserialization12 Nov 20264.2
CVE-2026-126792Heap overflow via oversized RSA signature in GCP KMS signing callback12 Nov 20265.6
CVE-2026-127275Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication12 Nov 202610.0
CVE-2026-120868Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway12 Nov 20269.3
CVE-2026-127274Linksys EA8100 CheckAdminPassword excessive authentication12 Nov 20266.3
CVE-2026-127273Linksys EA8100 JNAP API IsAdminPasswordDefault missing authentication12 Nov 20265.3
CVE-2026-128067Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size12 Nov 20268.4
CVE-2026-128066Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data12 Nov 20268.7
CVE-2026-128065@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied12 Nov 20266.9
CVE-2026-126367@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternation12 Nov 20264.8
CVE-2026-126366msgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOM12 Nov 20267.5
CVE-2026-126365Astro: XSS via unescaped code for unsupported languages in @astrojs/prism12 Nov 20265.4
CVE-2026-126364Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems12 Nov 20266.3
CVE-2026-93333Vault audit device prefix vulnerable to log injection12 Nov 20262.7
CVE-2026-93335Vault vulnerable to ACL deny bypass via trailing slash12 Nov 20266.5
CVE-2026-126363Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js12 Nov 20262.3
CVE-2026-92735Vault integrated storage join may disclose server environment credentials12 Nov 20265.9
CVE-2026-126362Astro: Reflected XSS via unescaped slot names in @astrojs/svelte12 Nov 20262.3
CVE-2026-126361Astro: XSS via attribute injection in dynamic tag names12 Nov 20262.3
CVE-2026-126360OpenTelemetry Python: Denial of service through quadratic-time traceparent parsing in opentelemetry-api12 Nov 20265.3
CVE-2026-126359Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection12 Nov 20263.4
CVE-2026-126358Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminator12 Nov 20265.3
CVE-2026-127212Dokploy < 0.31.1 Broken Access Control via readAppMonitoring12 Nov 20265.3
CVE-2026-126357Hono: `mount()` and `app.mount()` can forward a path that bypasses middleware scoped inside the mount prefix12 Nov 20265.3
CVE-2026-126356Hono: `validator('form')` skips validation for `multipart/form-data` requests with extra parameters12 Nov 20265.3
CVE-2026-126355Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)12 Nov 20265.3
CVE-2026-126354Addressable URI normalization resolves some dotted path segments to the wrong path12 Nov 20264.8
CVE-2026-126353Addressable: Regular Expression Denial of Service in Addressable templates with several exploded variables12 Nov 20265.9