HackZoneLabs News
Newsletter

CVE records

39868 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-106472Server-side request forgery in the Prometheus data source resource API12 Nov 20266.3
CVE-2026-126199pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword12 Nov 20266.8
CVE-2026-126198pgEdge Postgres MCP Server custom tools performed writes without user confirmation12 Nov 20263.1
CVE-2026-126197pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters12 Nov 20268.8
CVE-2026-119275Akaunting 3.3.0 - Stored XSS through imported invoice numbers12 Nov 20267.0
CVE-2026-126196pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database12 Nov 20268.1
CVE-2026-126831Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames12 Nov 20265.5
CVE-2026-124702URL Redirection to Untrusted Site in Progress Telerik UI for WPF12 Nov 20267.8
CVE-2026-124700URL Redirection to Untrusted Site in Progress Telerik UI for WinForms12 Nov 20267.8
CVE-2026-71363Awx: unauthenticated debug endpoints trigger scheduler operations12 Nov 20265.3
CVE-2026-106146Uncaught Exceptions in Telerik UI for ASP.NET MVC Filter Processing12 Nov 20268.6
CVE-2026-106154Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParser12 Nov 20268.6
CVE-2026-126193Soup Sieve: Uncontrolled recursion in Soup Sieve CSS parser lets nested pseudo-class selectors exhaust the Python call stack12 Nov 20265.3
CVE-2026-124698Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip12 Nov 20267.1
CVE-2026-126192Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time12 Nov 20266.3
CVE-2026-124697Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip12 Nov 20267.1
CVE-2026-126835[Node.js Driver] OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokens12 Nov 20266.5
CVE-2026-124696Cross-Site Scripting in Kendo UI for jQuery Spreadsheet Sheet Names12 Nov 20267.1
CVE-2026-8297712 Nov 20268.4
CVE-2026-126837Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guard12 Nov 20269.1
CVE-2026-126191Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER12 Nov 20267.5
CVE-2026-121876Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)12 Nov 20267.9
CVE-2026-126190Soup Sieve: Polynomial-time denial of service in the descendant combinator12 Nov 20267.5
CVE-2026-126189Soup Sieve: Quadratic-time denial of service when matching `:has()`12 Nov 20265.3
CVE-2026-124695Cross-Site Scripting in Kendo UI for jQuery Form Item Hints12 Nov 20267.1
CVE-2026-127203AppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-Type12 Nov 20265.4
CVE-2026-124691Cross-Site Scripting in Kendo UI for jQuery Gantt Parent Dropdown12 Nov 20267.1
CVE-2026-127202MLflow < 3.18.0 Path Traversal via model_id in log_outputs API12 Nov 20266.3
CVE-2025-10698Improper File Permissions on Private Key Files in Docker Deployments12 Nov 20266.0
CVE-2026-16052Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel12 Nov 20262.3
CVE-2026-127030Freeradius: stack buffer overflow via unchecked eap-fast sessionticket length12 Nov 20267.5
CVE-2026-127029Freeradius: stack-based buffer overflow via unbounded eap-sim identity length12 Nov 20267.5
CVE-2026-127145SOGo before 5.12.13 SSRF via Web Calendar Subscriptions12 Nov 20265.3
CVE-2026-127141SOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting Wait12 Nov 20267.1
CVE-2026-127135SOGo before 5.12.13 Sieve Script Injection via Notification Address12 Nov 20265.3
CVE-2026-70642ToolJet < 3.21.94 Authorization Bypass via app-environments/init12 Nov 20265.3
CVE-2026-127131SOGo before 5.12.13 Missing Rate Limiting on TOTP Verification12 Nov 20269.1
CVE-2026-127121SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailView12 Nov 20267.1
CVE-2026-127111SOGo before 5.12.13 Unauthenticated Password Recovery Brute Force12 Nov 20269.1
CVE-2026-126329Docker Sandboxes privilege escalation through untrusted state directories12 Nov 20267.3
CVE-2026-126330Docker Sandboxes restores removed automatically assigned port publications12 Nov 20262.4
CVE-2026-19809Kernel stack information disclosure in the charger_get_prop() system call handler12 Nov 20263.3
CVE-2026-91007Arbitrary supervisor-mode function pointer injection via charger_set_prop() syscall in the charger driver API12 Nov 20267.8
CVE-2026-127109CVE-2026-12710912 Nov 2026
CVE-2026-123790Unauthenticated Path Traversal in ComfyUI-Easy-Use Allows Remote Code Execution12 Nov 2026
CVE-2026-126998JeecgBoot Authentication Filter call OpenApiController.call server-side request forgery12 Nov 20267.5
CVE-2026-126997JeecgBoot flow-run Endpoint a.class RestTemplate.exchange server-side request forgery12 Nov 20267.5
CVE-2026-6467PostgreSQL extension script schema mishandling executes arbitrary SQL12 Nov 20267.2
CVE-2026-6460PostgreSQL type confusion after ALTER ... SET DATA TYPE executes arbitrary code12 Nov 20268.8
CVE-2026-18447PostgreSQL output parameter type confusion executes arbitrary code12 Nov 20268.8