HackZoneLabs News
Newsletter

CVE records

39839 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-126352Addressable: Regular Expression Denial of Service in Addressable templates with multiple variables12 Nov 20265.9
CVE-2026-126351Addressable: Denial of service in URI path normalization12 Nov 20265.9
CVE-2026-126350Addressable: Regular Expression Denial of Service in Addressable templates with certain exploded expressions12 Nov 20265.9
CVE-2026-126349Addressable display_uri can show misleading hosts containing bidi and invisible characters12 Nov 20263.1
CVE-2026-126348Addressable display_uri can show misleading hosts with invalid Punycode A-labels12 Nov 20264.3
CVE-2026-126347Tornado: Open redirect via triple-slash redirect paths12 Nov 20263.1
CVE-2026-126823Atlas SQL JDBC driver loads a native library it did not write: NativeLoader tolerates a pre-existing libmongosqltranslate.so in a shared temp dir12 Nov 20267.3
CVE-2026-127211MultiVendorX WordPress Plugin < 5.0.22 Broken Access Control via stores REST Route12 Nov 20267.1
CVE-2026-126346basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF12 Nov 20265.9
CVE-2026-126345basic-ftp: Uncaught TypeError in MLSD directory-listing parser via __proto__ fact name causes DoS in Client.list()12 Nov 20265.3
CVE-2026-126344@hono/node-server: WebSocket upgrade request-target starting with `//` replaces the host in `c.req.url`, bypassing `Origin` checks12 Nov 20265.4
CVE-2026-126343@hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process12 Nov 20265.3
CVE-2026-126210@hono/node-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy12 Nov 20265.3
CVE-2026-127209Xiaomi Mi Browser < 14.66.0 Path Traversal via ThirdDocViewerActivity12 Nov 20265.1
CVE-2026-91141CVE-2026-9114112 Nov 2026
CVE-2026-126793Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper12 Nov 20268.6
CVE-2026-126209Loofah allowed_uri? treats javascript&#x3a alert(1) as safe12 Nov 20265.3
CVE-2026-126208Loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restriction12 Nov 20264.7
CVE-2026-127208datamodel-code-generator < 0.84.0 Code Injection via x-python-type Annotation12 Nov 20268.8
CVE-2026-126207Loofah: CSS url() sanitization bypass via escaped parentheses12 Nov 20264.7
CVE-2026-126206Loofah allowed_uri? treats data:text&sol;html as safe text/plain12 Nov 20265.3
CVE-2026-10601812 Nov 20268.7
CVE-2026-127207Sendcloud for WooCommerce 1.0.41 Missing Authorization via AJAX Actions12 Nov 20265.4
CVE-2026-127206Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA Bypass12 Nov 20266.9
CVE-2026-126205Loofah: Regular expression denial of service in the SVG local-reference check12 Nov 20265.3
CVE-2026-86324Foreman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontroller12 Nov 20264.3
CVE-2026-86323Foreman: authorization flaw in the mail-notification endpoints implemented by api::v2::mailnotificationscontroller12 Nov 20264.3
CVE-2026-86322Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller12 Nov 20268.8
CVE-2026-124015Dixell/Copeland XWEB EVO Authentication Bypass via users.lua12 Nov 20268.2
CVE-2026-124014Dixell/Copeland XWEB EVO Unauthenticated Configuration Write via config.lua12 Nov 20269.1
CVE-2026-47711BACnet Stack: Stack buffer overflow in Loop internal ReadProperty path via Life_Safety_Zone.accepted-modes on the default BACnet/IP server12 Nov 20268.6
CVE-2026-111456Candlepin: consumer certificate can register systems in another organization12 Nov 20267.1
CVE-2026-107443Foreman: foreman: api host template render discloses secrets to view_hosts users (incomplete cve-2026-96659 fix)12 Nov 20267.7
CVE-2026-107360Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions12 Nov 20269.6
CVE-2026-107152Rubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signed12 Nov 20267.1
CVE-2026-124013Dixell/Copeland XWEB EVO OS Command Injection via api.lua12 Nov 20268.8
CVE-2026-47710BACnet Stack: Loop reference to long Structured View description causes stack-buffer-overflow12 Nov 20268.2
CVE-2026-47259BACnet Stack: Stack-based buffer overflow in Notification Class RemoveListElement recipient-list decoding12 Nov 20268.2
CVE-2026-47258BACnet Stack: Stack-based buffer overflow in Notification Class AddListElement recipient-list decoding12 Nov 20268.2
CVE-2026-47257BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return success12 Nov 20268.1
CVE-2026-47217BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP server12 Nov 20267.5
CVE-2026-46677BACnet Stack: Client-Side Out-of-Bounds Read in AtomicReadFile-ACK Record-Access Handling via RecordCount / fileData[] Mismatch12 Nov 20266.5
CVE-2026-124012Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication Bypass12 Nov 20269.2
CVE-2026-46676BACnet Stack: Uninitialized Value Use in AtomicReadFile-ACK Record-Access Encoder Causes Response Corruption and Conditional Information Disclosure12 Nov 20265.3
CVE-2026-46674BACnet Stack: Out-of-Bounds Read in AtomicWriteFile Record Decoder via Unbounded returnedRecordCount12 Nov 20267.5
CVE-2026-127120Governikus AusweisApp Mobile StartPAOSResponse cross site scripting12 Nov 20265.3
CVE-2026-45341BACnet Stack: NULL pointer dereference in bacnet_device_object_reference_decode() when WriteProperty updates Structured View subordinate-list12 Nov 20267.5
CVE-2026-45265Atomic-Read-File RecordCount Stack-Based Out-of-Bounds Write in bacnet-stack12 Nov 20268.2
CVE-2026-52786BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()12 Nov 20267.1
CVE-2026-124011Dixell/Copeland XWEB EVO Information Disclosure via sysinfo.lua12 Nov 20266.9