Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
47882
Total
3850
Critical
14243
High
13921
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-17272 | HIGH | 8.2 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. | Aug 13, 2026 |
| CVE-2026-17226 | MEDIUM | 5.4 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to … | Aug 13, 2026 |
| CVE-2026-17216 | MEDIUM | 5.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing … | Aug 13, 2026 |
| CVE-2026-17212 | MEDIUM | 5.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | Aug 13, 2026 |
| CVE-2026-17101 | HIGH | 8.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication. | Aug 13, 2026 |
| CVE-2026-17099 | HIGH | 7.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication. | Aug 13, 2026 |
| CVE-2026-17088 | MEDIUM | 4.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. | Aug 13, 2026 |
| CVE-2026-17078 | MEDIUM | 5.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion. | Aug 13, 2026 |
| CVE-2026-17077 | MEDIUM | 5.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized … | Aug 13, 2026 |
| CVE-2026-17076 | MEDIUM | 5.3 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and … | Aug 13, 2026 |
| CVE-2026-17075 | MEDIUM | 6.5 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of … | Aug 13, 2026 |
| CVE-2026-17074 | LOW | 3.1 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management. | Aug 13, 2026 |
| CVE-2026-17071 | LOW | 2.7 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal. | Aug 13, 2026 |
| CVE-2026-73669 | MEDIUM | 6.3 | The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no … | Aug 13, 2026 |
| CVE-2026-73656 | CRITICAL | 9.9 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst() … | Aug 13, 2026 |
| CVE-2026-73655 | HIGH | 7.4 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email … | Aug 13, 2026 |
| CVE-2026-73654 | HIGH | 8.5 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key … | Aug 13, 2026 |
| CVE-2026-73531 | MEDIUM | 6.1 | django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm … | Aug 13, 2026 |
| CVE-2026-73530 | HIGH | 7.7 | Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked … | Aug 13, 2026 |
| CVE-2026-72687 | MEDIUM | 6.5 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the … | Aug 13, 2026 |
| CVE-2026-72686 | MEDIUM | 6.5 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the … | Aug 13, 2026 |
| CVE-2026-72685 | MEDIUM | 4.3 | A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing … | Aug 13, 2026 |
| CVE-2026-72684 | MEDIUM | 6.5 | A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that … | Aug 13, 2026 |
| CVE-2026-72683 | MEDIUM | 6.5 | A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate) to submit a request that … | Aug 13, 2026 |
| CVE-2026-72681 | MEDIUM | 6.5 | Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs … | Aug 13, 2026 |