HackZoneLabs News
Newsletter

CVE records

39770 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-63150Omnispace Agora Project 26.10.0 CSRF via Administrator Account Creation13 Nov 20268.6
CVE-2026-12898613 Nov 20266.0
CVE-2026-129116C-Kermit 7.0.197 before 11.1.515 IKSD Authentication Bypass via Refused Certificate Login13 Nov 20267.7
CVE-2026-129117C-Kermit 8.0.200 before 11.1.515 Missing Hostname Verification in AUTHENTICATION SSL13 Nov 20267.6
CVE-2026-129118C-Kermit 8.0.200 before 11.1.515 Improper Certificate Hostname Matching via dNSName_cmp13 Nov 20267.6
CVE-2026-129119C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND13 Nov 20267.1
CVE-2026-129120C-Kermit 11.0.506 before 11.1.515 RECEIVE CONFIRM Bypass via Recursive GET13 Nov 20265.9
CVE-2026-129121C-Kermit 8.0.200 before 11.1.515 Path Traversal via FTP MGET /RECURSIVE13 Nov 20266.9
CVE-2026-129122C-Kermit 6.0.192 before 11.1.515 Buffer Overflow via Telnet NEW-ENVIRON Negotiation13 Nov 20267.7
CVE-2026-129123C-Kermit 8.0.200 before 11.1.515 FTP Client Buffer Overflow via PBSZ and ADAT Replies13 Nov 20268.8
CVE-2026-129124C-Kermit before 11.1.515 OS Command Injection via REMOTE WHO and REMOTE SPACE13 Nov 20269.2
CVE-2026-129125C-Kermit 6.0.192 before 11.1.515 Command Execution via REMOTE QUERY13 Nov 20269.2
CVE-2026-129126C-Kermit before 11.1.515 Heap Buffer Overflow via putsrv() Packet Decoding13 Nov 20269.2
CVE-2026-129127SQLBot through 1.10.3 Weak Password Hashing via Unsalted MD513 Nov 20265.9
CVE-2026-129128goose CLI 1.35.0 before 1.53.0 Command Execution via goose review diff.external13 Nov 20268.4
CVE-2026-129129AiSOC 12.1.0 before 23.3.0 Missing Authentication via Enrichment Console Proxy Routes13 Nov 20266.9
CVE-2026-129130agent-device 0.21.36 Local File Disclosure via file:// Navigation in Open Command13 Nov 20267.1
CVE-2026-129131Gameyfin before 2.6.2 Missing Authorization in Hilla Endpoints13 Nov 20266.9
CVE-2026-129132MRBS before 1.13.0 LDAP Injection via AuthLdap.php Authentication Filter13 Nov 20264.2
CVE-2026-129133MRBS before 1.13.0 CSV Formula Injection via Report Export13 Nov 20265.4
CVE-2026-129134MRBS before 1.13.0 Password Reset Poisoning via Host Header Injection13 Nov 20268.6
CVE-2026-129135picoquic before 2026.11.05.3e2e3d3 Integer Overflow via TIME_STAMP Frame Decoder13 Nov 20266.3
CVE-2026-124279Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server13 Nov 20268.2
CVE-2026-121809CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server13 Nov 20268.2
CVE-2026-62974BACnet Stack: Remote unauthenticated DoS in `Life_Safety_Zone` `PROP_ZONE_MEMBERS` WriteProperty parsing13 Nov 20268.7
CVE-2026-62973BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK13 Nov 20267.5
CVE-2026-62972BACnet Stack: Out-of-bounds read in lighting_command_decode (full APDU size passed to nested tag decoders)13 Nov 20266.9
CVE-2026-58265BACnet Stack: Out-of-bounds read in BACnet/SC proprietary header-option decode (bvlc_sc_decode_proprietary_option)13 Nov 20266.5
CVE-2026-124278Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server13 Nov 20267.6
CVE-2026-58498BACnet Stack: Remote global-buffer-overflow in apps/router-ipv6/main.c routed APDU forwarding path13 Nov 20268.6
CVE-2024-58406Huatian OA8000 Path Traversal via ntkodownload.jsp13 Nov 20268.7
CVE-2026-52790BACnet Stack: bacnet_device.c stack-use-after-return in writable Device string properties13 Nov 20267.5
CVE-2026-52789BACnet Stack: Denial of Service (Infinite Loop) in handler_read_property_multiple via malformed RPM requests13 Nov 20267.5
CVE-2026-52788BACnet Stack: Buffer overflows in bsc_node_parse_urls() (BACnet/SC Address Resolution ACK URL parser)13 Nov 20268.8
CVE-2026-52787BACnet Stack: Global APDU transmit buffer out-of-bounds write in device.address-binding response encoding via address_list_encode()13 Nov 20267.5
CVE-2026-49990BACnet Stack: AtomicReadFile/AtomicWriteFile stream fileStartPosition validation flaw causes out-of-bounds read/write in RAM file backends13 Nov 20268.6
CVE-2026-49341BACnet Stack: Uncontrolled recursion in Timer object writeback path leads to remote server stack overflow13 Nov 20267.5
CVE-2026-121808Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec13 Nov 20268.2
CVE-2026-95377OS command injection via DHCP option 66 in Zenitel EdgeAudioClient TFTP provisioning13 Nov 20269.4
CVE-2026-95614Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container13 Nov 20269.3
CVE-2026-129110sysPass 3.0.1 through 3.2.11 Unauthenticated Reinstallation RCE via install/install13 Nov 20269.8
CVE-2026-95615Zenitel Connect OS command injection in hiatus container via unsanitized filename in audio messages API13 Nov 20268.7
CVE-2026-95378Path traversal in Zenitel turbineweb certificate upload allows arbitrary file write as root13 Nov 20268.6
CVE-2026-95613Zenitel Connect pREST API adopts arbitrary PostgreSQL role from unvalidated JWT sub claim13 Nov 20268.6
CVE-2026-95379Path traversal in Zenitel turbineweb certificate delete RPC allows arbitrary file deletion as root13 Nov 20267.0
CVE-2026-105623Zenitel Connect web interface serves production JavaScript source maps without authentication13 Nov 20266.9
CVE-2026-126818Mongoid 9.1.1 incomplete CVE-2026-93764 fix stores descendant-only encrypted fields in plaintext13 Nov 20267.1
CVE-2026-105624Zenitel Connect login allows account-lockout denial of service13 Nov 20266.9
CVE-2026-105622Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel13 Nov 20266.3
CVE-2026-123635Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server13 Nov 20266.3