Skip to content
Noroxi

VulnCheck

371 credited records · 371 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for VulnCheck

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-116544
    25Monitor

    Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output

    MediumCVSS 6.3No exploitEPSS 0%

    open5gs · open5gsOct 26, 2026

  • CVE-2026-116543
    34Monitor

    Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser

    HighCVSS 8.7No exploitEPSS 0%

    open5gs · open5gsOct 26, 2026

  • CVE-2026-111805
    30Monitor

    Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion

    HighCVSS 7.7No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-101886
    20Monitor

    Cisco Jabber for Android Path Traversal via Shared Content URI

    MediumCVSS 5.1No exploitEPSS 0%

    cisco · jabber for androidOct 7, 2026

  • CVE-2026-77214
    33Monitor

    libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

    HighCVSS 8.3No exploitEPSS 0%

    libexpat · libexpatOct 7, 2026

  • CVE-2026-104073
    27Monitor

    NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

    MediumCVSS 6.9No exploitEPSS 0%

    netbox-community · netboxOct 6, 2026

  • CVE-2026-104070
    37Monitor

    SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE

    CriticalCVSS 9.3No exploitEPSS 0%

    spip · spip crayons pluginOct 6, 2026

  • CVE-2026-104069
    34Monitor

    HortusFox < 6.2 Remote Code Execution via Theme Import

    HighCVSS 8.6No exploitEPSS 0%

    danielbrendel · hortusfox-webOct 6, 2026

  • CVE-2026-77226
    36Monitor

    Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

    CriticalCVSS 9.2No exploitEPSS 0%

    camunda · camunda 7Oct 5, 2026

  • CVE-2026-104905
    24Monitor

    FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect

    MediumCVSS 6.1Proof of conceptEPSS 0%

    neorazorx · facturascriptsOct 5, 2026

  • CVE-2026-82045
    28Monitor

    UTMStack < 11.2.16 JPQL Injection via searchPropertyValues

    HighCVSS 7.1No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82044
    25Monitor

    UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdf

    MediumCVSS 6.3No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82043
    27Monitor

    UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

    MediumCVSS 6.9No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82042
    37Monitor

    UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter

    CriticalCVSS 9.3No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82041
    26Monitor

    UTMStack < 11.2.16 Missing Authorization via Command WebSocket

    MediumCVSS 6.5No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82040
    21Monitor

    UTMStack < 11.2.16 SSRF via IdentityProviderService

    MediumCVSS 5.3No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-82039
    34Monitor

    UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter

    HighCVSS 8.7No exploitEPSS 0%

    utmstack · utmstackOct 2, 2026

  • CVE-2026-104991
    28Monitor

    Phproject < 1.8.7 Missing Authorization via Issues REST API

    HighCVSS 7.1Proof of conceptEPSS 0%

    alanaktion · phprojectOct 2, 2026

  • CVE-2026-104356
    32Monitor

    PictShare < 3.7.1 Predictable Delete Code via rand()

    HighCVSS 8.2Proof of conceptEPSS 0%

    hascheksolutions · pictshareOct 1, 2026

  • CVE-2026-104051
    35Monitor

    PictShare < 3.7.1 Sensitive Information Disclosure via info API

    HighCVSS 8.8Proof of conceptEPSS 0%

    hascheksolutions · pictshareOct 1, 2026

  • CVE-2026-101887
    8Monitor

    BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS

    LowCVSS 2.1No exploitEPSS 0%

    arkq · bluez-alsaOct 1, 2026

  • CVE-2026-102253
    34Monitor

    iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

    HighCVSS 8.7Proof of conceptEPSS 0%

    esnet · iperf3Sep 29, 2026

  • CVE-2026-53989
    21Monitor

    Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    finsys · dockhandSep 29, 2026

  • CVE-2026-53988
    36Monitor

    Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

    CriticalCVSS 9.2No exploitEPSS 0%

    finsys · dockhandSep 29, 2026

  • CVE-2026-102727
    24Monitor

    FTP Passive Data Connection Not Bound to the Authenticated Control Peer

    MediumCVSS 6.0No exploitEPSS 0%

    eclipse foundation · netx duoSep 29, 2026