HackZoneLabs News
Newsletter

CVE records

39770 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-124723Apache APISIX: unauthorized access to mTLS protected resources13 Nov 20266.3
CVE-2026-124726Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare13 Nov 20266.9
CVE-2026-128078GLPI: Unexpected access to followups/tasks/solutions generated from templates13 Nov 20265.3
CVE-2026-128077Nuxt: Incomplete fix for CVE-2026-119200: a leading `//` in the request path bypasses `server/middleware` path checks and server route rules on page routes13 Nov 20266.5
CVE-2026-128076Nuxt: Colliding island props can share one `/__nuxt_island` path (incomplete fix for CVE-2026-46342)13 Nov 20263.1
CVE-2026-128075Nuxt exposes the message and data of unhandled errors thrown during server rendering13 Nov 20265.3
CVE-2026-128074Nuxt payload URL generation has quadratic cost for repeated slashes in the request path13 Nov 20266.9
CVE-2026-128072@nuxt/webpack-builder and @nuxt/rspack-builder dev server serves built source to DNS rebinding pages13 Nov 20263.1
CVE-2026-123177Dnf5: dnf5daemon-server: dnf5daemon-server: unauthenticated privileged cmdline package fetch/open via add_cmdline_packages13 Nov 20268.4
CVE-2026-128071Nuxt: Incomplete fix for GHSA-6gq8-jgmh-3ffp: an encoded slash (`%2F`) in the request path bypasses route rules on catch-all page routes13 Nov 20266.5
CVE-2026-129139paicoding commit b8206b9 through 903adce Predictable ZSXQ Account Credentials13 Nov 20268.8
CVE-2026-129140paicoding 1.0.0 through 1.0.3 Stored XSS via SVG Image Upload13 Nov 20265.4
CVE-2026-129141paicoding 1.0.0 through 1.0.3 Stored XSS via JSON-LD Profile Description13 Nov 20265.4
CVE-2026-129142paicoding commit 766c48b through 903adce Stored XSS via Payment Notifications13 Nov 20265.4
CVE-2026-129143paicoding 1.0.3 Missing Authorization via Article Detail API Endpoint13 Nov 20268.7
CVE-2026-129144paicoding 1.0.3 Payment Bypass via Guessable Codes in /article/api/pay/callback13 Nov 20265.4
CVE-2026-129151SurveyKing 1.13.2 Unauthenticated Survey Response Disclosure via Result Lookup13 Nov 20268.7
CVE-2026-129152SurveyKing 1.12.0 through 1.13.2 Authentication Bypass via saveAnswer Response Submission13 Nov 20266.9
CVE-2026-129153SurveyKing 1.12.0 through 1.13.2 Authorization Bypass via Linked Survey linkSurveyId13 Nov 20267.1
CVE-2026-129154SurveyKing 1.13.0 through 1.13.2 Stored XSS via Response Survey Snapshot13 Nov 20266.1
CVE-2026-129155DjangoBlog 2.0.0.0 through 2.1.0.0 Stored XSS via Comment Sanitizer class_filter13 Nov 20265.4
CVE-2026-129156DjangoBlog commit d186b1c through 6134ed6 Stored XSS via Comment Reactions13 Nov 20265.4
CVE-2026-129157ragent 1.0.0 through 1.1.0 Missing Authorization via /rag/traces/runs13 Nov 20265.3
CVE-2026-129158ragent 1.1.0 Stored XSS via SVG Knowledge-Base Document Upload13 Nov 20265.4
CVE-2026-129160Dromara free-fs 2.0.1 through 2.3.1 SQL Injection via orderBy Parameter13 Nov 20267.1
CVE-2026-129161Dromara free-fs 2.0.1 through 2.3.1 Password Reset Code Brute-Force Account Takeover13 Nov 20269.1
CVE-2026-129162Dromara free-fs 2.0.1 through 2.3.1 Missing Authentication via File Stream Preview13 Nov 20268.2
CVE-2026-129163Dromara free-fs 2.0.1 through 2.3.1 Stored XSS via File Preview Endpoint13 Nov 20265.4
CVE-2026-129164Dromara free-fs 2.0.1 through 2.3.1 Share Code and Permission Scope Bypass13 Nov 20268.2
CVE-2026-129165Tactical RMM 0.17.0 through 1.6.1 Arbitrary File Read via Report Preview13 Nov 20269.4
CVE-2026-129166Keep 0.34.10 through 0.55.0 Blind SQL Injection via CEL Bracket-Indexed JSON Keys13 Nov 20267.1
CVE-2026-129167SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 Path Traversal RCE via confluence-to-wiki13 Nov 20269.2
CVE-2026-129168PMail 2.9.1 through 2.9.8 Stored XSS via Inline HTML Attachments13 Nov 20266.1
CVE-2026-129169PMail 2.5.0 through 2.9.8 Stored XSS via /api/email/send HTML Body13 Nov 20265.4
CVE-2026-129170FileCodeBox 2.2.1 through 2.8.4 Stored XSS via Markdown Preview Parser Error13 Nov 20266.1
CVE-2026-129171NginxPulse 1.5.0 before 1.6.26 SQL Injection via /api/stats/:type13 Nov 20269.8
CVE-2026-129172EdgeEver 1.9.0 before 2.13.0 Stored XSS via Backup Restore and Public Shares13 Nov 20265.4
CVE-2026-128070Nuxt dev server serves files from a parent directory that contains a lockfile13 Nov 20265.9
CVE-2026-128069rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent calls13 Nov 20264.7
CVE-2026-128068rails-html-sanitizer: Possible regular expression denial of service with certain configurations13 Nov 20265.3
CVE-2026-123965Jet Admin cloud platform prompt injection13 Nov 20269.9
CVE-2026-124041Catalis WebPro SQL Injection13 Nov 20266.9
CVE-2026-126091iDentalSoft website information exposure13 Nov 20268.7
CVE-2026-63173Omnispace Agora Project 26.10.0 Broken Access Control via isAutor()13 Nov 20265.4
CVE-2026-63170Omnispace Agora Project 26.10.0 Predictable Share Token via md5Id13 Nov 20266.3
CVE-2026-63167Omnispace Agora Project 26.10.0 SQL Injection via personsSort Session Value13 Nov 20268.5
CVE-2026-63166Omnispace Agora Project 26.10.0 Stored XSS via CSV Import Preview13 Nov 20266.1
CVE-2026-63164Omnispace Agora Project 26.10.0 IDOR via reloadMailTypeId Parameter13 Nov 20267.1
CVE-2026-63155Omnispace Agora Project 26.10.0 Open Redirect via objUrl Parameter13 Nov 20266.1
CVE-2026-63151Omnispace Agora Project 26.10.0 Predictable Token Information Disclosure via DisplayIcal13 Nov 20268.7