Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51856
Total
4111
Critical
15381
High
15070
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-16095 | HIGH | 8.8 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. … | Jul 18, 2026 |
| CVE-2026-16088 | MEDIUM | 4.7 | A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component … | Jul 18, 2026 |
| CVE-2026-16085 | MEDIUM | 5.3 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to … | Jul 18, 2026 |
| CVE-2026-47871 | HIGH | 8.8 | VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected … | Jul 18, 2026 |
| CVE-2026-47870 | HIGH | 7.1 | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: … | Jul 18, 2026 |
| CVE-2026-47869 | HIGH | 8.7 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code. … | Jul 18, 2026 |
| CVE-2026-47868 | HIGH | 7.8 | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run … | Jul 18, 2026 |
| CVE-2026-47867 | HIGH | 8.7 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane … | Jul 18, 2026 |
| CVE-2026-47866 | HIGH | 8.3 | VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane … | Jul 18, 2026 |
| CVE-2026-47865 | CRITICAL | 9.8 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by … | Jul 18, 2026 |
| CVE-2026-16084 | HIGH | 7.3 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request … | Jul 18, 2026 |
| CVE-2026-16083 | MEDIUM | 5.3 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of the file pkg/channels/line/line.go of the component LINE … | Jul 18, 2026 |
| CVE-2026-16082 | MEDIUM | 5.3 | A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the … | Jul 18, 2026 |
| CVE-2026-16081 | MEDIUM | 4.3 | A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown function of the file web/backend/api/auth.go. Executing a manipulation can … | Jul 18, 2026 |
| CVE-2026-16077 | MEDIUM | 5.3 | A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py of the component Filesystem Computer-Use Tool. … | Jul 18, 2026 |
| CVE-2026-16076 | MEDIUM | 6.3 | A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the component API. … | Jul 18, 2026 |
| CVE-2026-9734 | MEDIUM | 4.3 | The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is … | Jul 18, 2026 |
| CVE-2026-16075 | MEDIUM | 4.3 | A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.get_chat_sessions of the file astrbot/dashboard/routes/open_api.py of the component session-listing … | Jul 18, 2026 |
| CVE-2026-57980 | MEDIUM | 5.4 | Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. | Jul 17, 2026 |
| CVE-2026-56741 | HIGH | 7.5 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an … | Jul 17, 2026 |
| CVE-2026-56740 | HIGH | 7.5 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the … | Jul 17, 2026 |
| CVE-2026-56171 | HIGH | 7.1 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network. | Jul 17, 2026 |
| CVE-2026-54335 | LOW | 3.7 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) utility exported by … | Jul 17, 2026 |
| CVE-2026-49485 | HIGH | 7.5 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.9 and 6.9.4.2, all implementations of FHIRPathEngine … | Jul 17, 2026 |
| CVE-2026-48049 | MEDIUM | 5.3 | @hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7.1.0, @hapi/inert serves static files from a directory configured with path in the … | Jul 17, 2026 |