By publication date

Exploited and new serious CVEs: November 2026

3,961 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 11 of 40

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-102739No exploit	ESPectre: Unsafe Deserialization on .npz dataset leads to Code Executionfrancescopace · espectre · CWE-502 Deserialization	High7.8	—	0.1%	Nov 5, 2026
30Monitor	CVE-2026-103112No exploit	Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials pathred hat · red hat build of keycloak · CWE-362 Race condition	High7.5	—	0.3%	Nov 5, 2026
30Monitor	CVE-2026-107123No exploit	Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsingred hat · red hat build of keycloak · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Nov 5, 2026
30Monitor	CVE-2026-107602No exploit	Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loopred hat · red hat build of keycloak · CWE-835 Pre-auth Denial of service	High7.5	—	0.7%	Nov 5, 2026
30Monitor	CVE-2026-110931No exploit	Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loopred hat · red hat build of keycloak · CWE-835 Pre-auth Denial of service	High7.5	—	0.6%	Nov 5, 2026
30Monitor	CVE-2026-110932No exploit	Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cachered hat · red hat build of keycloak · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Nov 5, 2026
32Monitor	CVE-2026-112208No exploit	Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first loginred hat · red hat build of keycloak · CWE-305 Auth bypass	High8.1	—	0.4%	Nov 5, 2026
32Monitor	CVE-2026-114232No exploit	Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource accessred hat · red hat build of keycloak · CWE-862 Broken access control (IDOR)	High8.1	—	0.4%	Nov 5, 2026
33Monitor	CVE-2026-119083No exploit	GluonTS arbitrary file write during archive extractionaws · gluonts · CWE-22 Path traversal Local privilege escalation	High8.4	—	0.1%	Nov 5, 2026
34Monitor	CVE-2026-120499No exploit	h5io before 0.2.6 Arbitrary Code Execution via read_hdf5h5io · h5io · CWE-95 RCE Deserialization	High8.5	—	0.4%	Nov 5, 2026
35Monitor	CVE-2026-121994No exploit	Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthred hat · red hat enterprise linux 10 · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.4%	Nov 5, 2026
30Monitor	CVE-2026-121995No exploit	Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailred hat · red hat enterprise linux 10 · CWE-121 Pre-auth Memory safety	High7.5	—	0.2%	Nov 5, 2026
32Monitor	CVE-2026-121996No exploit	Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthred hat · red hat enterprise linux 10 · CWE-822 Pre-auth	High8.2	—	0.4%	Nov 5, 2026
32Monitor	CVE-2026-121997No exploit	Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchred hat · red hat enterprise linux 10 · CWE-122 Pre-auth Memory safety	High8.1	—	0.7%	Nov 5, 2026
30Monitor	CVE-2026-123151No exploit	Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailred hat · red hat enterprise linux 10 · CWE-121 pre-auth RCE Memory safety Denial of service	High7.5	—	0.5%	Nov 5, 2026
33Monitor	CVE-2026-49393No exploit	OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer tokentinyhumansai · openhuman · CWE-288 Auth bypass	High8.4	—	0.2%	Nov 5, 2026
30Monitor	CVE-2026-49407No exploit	OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growthtinyhumansai · openhuman · CWE-306 Auth bypass	High7.7	—	0.2%	Nov 5, 2026
33Monitor	CVE-2026-54140No exploit	OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationtinyhumansai · openhuman · CWE-1427 Pre-auth	High8.3	—	0.5%	Nov 5, 2026
36Monitor	CVE-2026-54141No exploit	OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`tinyhumansai · openhuman · CWE-94 pre-auth RCE	Critical9.0	—	0.7%	Nov 5, 2026
34Monitor	CVE-2026-54142No exploit	OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvaltinyhumansai · openhuman · CWE-1427 Pre-auth	High8.7	—	0.5%	Nov 5, 2026
39Monitor	CVE-2026-54143No exploit	OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executiontinyhumansai · openhuman · CWE-78 pre-auth RCE Command injection	Critical9.8	—	1.1%	Nov 5, 2026
35Monitor	CVE-2026-54145No exploit	OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)tinyhumansai · openhuman · CWE-200 Local privilege escalation Info leak	High8.8	—	0.0%	Nov 5, 2026
35Monitor	CVE-2026-54146No exploit	OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)tinyhumansai · openhuman · CWE-526 RCE Local privilege escalation	High8.8	—	0.2%	Nov 5, 2026
32Monitor	CVE-2026-75614No exploit	ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)esa · asn1scc · CWE-129 Pre-auth	High8.1	—	0.5%	Nov 5, 2026
32Monitor	CVE-2026-76077No exploit	ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()esa · asn1scc · CWE-120 Pre-auth Memory safety	High8.1	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-82413No exploit	ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)ntop · ntopng · CWE-77 RCE Auth bypass Command injection	High8.8	—	1.0%	Nov 5, 2026
30Monitor	CVE-2026-82965No exploit	Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsingred hat · red hat build of keycloak · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Nov 5, 2026
34Monitor	CVE-2026-105607No exploit	Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0balbooa.com · gridbox extension for joomla · CWE-79 Pre-auth XSS	High8.6	—	0.3%	Nov 5, 2026
33Monitor	CVE-2026-107129No exploit	Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0balbooa.com · gridbox extension for joomla · CWE-22 Path traversal	High8.3	—	0.4%	Nov 5, 2026
28Monitor	CVE-2026-107359No exploit	Malformed Wi-Fi Beacon Causes Crash on WF200silicon labs · wf200 fw · CWE-369 Pre-auth	High7.1	—	0.2%	Nov 5, 2026
34Monitor	CVE-2026-107903No exploit	Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0balbooa.com · gridbox extension for joomla · CWE-79 Pre-auth XSS	High8.6	—	0.3%	Nov 5, 2026
29Monitor	CVE-2026-112109No exploit	Local privilege escalation in SafeNet Authentication Client SACSrvthalesgroup · safenet authentication client service · CWE-122 RCE Local privilege escalation Memory safety	High7.3	—	0.1%	Nov 5, 2026
30Monitor	CVE-2026-115452No exploit	Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6tassos.gr · advanced custom fields extension for joomla · CWE-79 XSS	High7.5	—	0.3%	Nov 5, 2026
34Monitor	CVE-2026-120859No exploit	PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings Filespymodaq · pymodaq · CWE-95 RCE Deserialization	High8.5	—	0.1%	Nov 5, 2026
28Monitor	CVE-2026-123184No exploit	Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writesaltium · altium 365 · CWE-20	High7.2	—	0.2%	Nov 5, 2026
35Monitor	CVE-2026-54912No exploit	WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatchbytecodealliance · wasm-micro-runtime · CWE-787 Pre-auth Memory safety	High8.8	—	0.4%	Nov 5, 2026
33Monitor	CVE-2026-54914No exploit	WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Bufferbytecodealliance · wasm-micro-runtime · CWE-122 Pre-auth Memory safety	High8.3	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-77439No exploit	Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpointsimmich-app · immich · CWE-269	High8.8	—	0.6%	Nov 5, 2026
29Monitor	CVE-2026-92855No exploit	Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possessionred hat · red hat build of keycloak · CWE-287 Pre-auth Auth bypass	High7.4	—	0.4%	Nov 5, 2026
32Monitor	CVE-2026-92857No exploit	Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokensred hat · red hat build of keycloak · CWE-20	High8.1	—	0.3%	Nov 5, 2026
29Monitor	CVE-2026-93998No exploit	Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuerred hat · red hat amq broker 7 · CWE-347 Pre-auth Weak crypto	High7.4	—	0.2%	Nov 5, 2026
32Monitor	CVE-2026-96453No exploit	Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificatesred hat · red hat amq broker 7 · CWE-295 Pre-auth Weak crypto	High8.0	—	0.2%	Nov 5, 2026
35Monitor	CVE-2026-97175No exploit	Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeoverred hat · red hat build of keycloak · CWE-287 Auth bypass	High8.8	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-97847No exploit	Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authorred hat · red hat build of keycloak · CWE-287 Auth bypass	High7.1	—	0.3%	Nov 5, 2026
37Monitor	CVE-2026-100358No exploit	SuiteCRM: Admin OS RCE via Dropdown Editor PHP Injectionsuitecrm · suitecrm · CWE-94 RCE	Critical9.4	—	0.4%	Nov 5, 2026
28Monitor	CVE-2026-100360No exploit	SuiteCRM: V8 API Relationship Delete Bypasses Object-Level Authorization on the Related Recordsuitecrm · suitecrm · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Nov 5, 2026
28Monitor	CVE-2026-100361No exploit	SuiteCRM: Mass Assignment in V8 API Allows Modification of Sensitive User Fields (user_hash, external_auth_only)suitecrm · suitecrm · CWE-915	High7.1	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-100363No exploit	SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration)suitecrm · suitecrm · CWE-269	High8.8	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-100364No exploit	SuiteCRM V8 JSON:API processAttributes() Missing ID Filter Allows ACL Bypass and Record Ownership Hijacksuitecrm · suitecrm · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Nov 5, 2026
35Monitor	CVE-2026-100365No exploit	SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated Usersuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.4%	Nov 5, 2026
32Monitor	CVE-2026-118494No exploit	Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9jreviews.com · jreviews component for joomla · CWE-538 Pre-auth Auth bypass Info leak	High8.2	—	0.4%	Nov 5, 2026
34Monitor	CVE-2026-123196No exploit	Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadataauthorizerdev · authorizer · CWE-640 Pre-auth	High8.6	—	0.3%	Nov 5, 2026
37Monitor	CVE-2026-123198No exploit	LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>lmfdb · lmfdb · CWE-1336 pre-auth RCE SSTI	Critical9.3	—	0.8%	Nov 5, 2026
34Monitor	CVE-2026-123200No exploit	VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length indexvrpn · vrpn · CWE-129 Pre-auth	High8.7	—	0.4%	Nov 5, 2026
34Monitor	CVE-2026-123202No exploit	libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML namebakulf · libnxml · CWE-121 Pre-auth Memory safety	High8.7	—	0.7%	Nov 5, 2026
33Monitor	CVE-2026-123205No exploit	accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsqlaccel-ppp · accel-ppp · CWE-122 Pre-auth Memory safety	High8.3	—	0.4%	Nov 5, 2026
30Monitor	CVE-2026-123208No exploit	noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Serverlibnoname · noname · CWE-306 Pre-auth Auth bypass	High7.7	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-123273No exploit	ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoderimagemagick · imagemagick · CWE-835 Denial of service	High7.1	—	0.3%	Nov 5, 2026
33Monitor	CVE-2026-61648No exploit	SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.phpsuitecrm · suitecrm · CWE-89 SQL injection XSS	High8.3	—	0.2%	Nov 5, 2026
30Monitor	CVE-2026-61649No exploit	SuiteCRM: isSelfRequest() bypass via substring match allows SSRF to internal servicessuitecrm · suitecrm · CWE-918 SSRF	High7.7	—	0.3%	Nov 5, 2026
32Monitor	CVE-2026-61650No exploit	SuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorizationsuitecrm · suitecrm · CWE-862 Broken access control (IDOR)	High8.1	—	0.2%	Nov 5, 2026
33Monitor	CVE-2026-61651No exploit	SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controllersuitecrm · suitecrm · CWE-89 SQL injection	High8.3	—	0.3%	Nov 5, 2026
33Monitor	CVE-2026-61653No exploit	SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.phpsuitecrm · suitecrm · CWE-89 SQL injection XSS	High8.3	—	0.2%	Nov 5, 2026
28Monitor	CVE-2026-63111No exploit	SuiteCRM: Non-admin user creates SchedulersJob: SSRF via cronsuitecrm · suitecrm · CWE-862 SSRF Broken access control (IDOR)	High7.1	—	0.2%	Nov 5, 2026
28Monitor	CVE-2026-63213No exploit	SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRMsuitecrm · suitecrm · CWE-22 Path traversal	High7.2	—	0.5%	Nov 5, 2026
35Monitor	CVE-2026-63214No exploit	SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest apisuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.4%	Nov 5, 2026
33Monitor	CVE-2026-63215No exploit	SuiteCRM: Time-Based Blind SQL Injection via REST APIsuitecrm · suitecrm · CWE-89 SQL injection	High8.3	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-69134No exploit	SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Managementsuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-69135No exploit	SuiteCRM: Authenticated SQL Injection In Project Modulesuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-69136No exploit	SuiteCRM: Authenticated SQL Injection In handleAttachments functionsuitecrm · suitecrm · CWE-89 SQL injection	High7.1	—	0.2%	Nov 5, 2026
31Monitor	CVE-2026-69137Proof of concept	SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosuresuitecrm · suitecrm · CWE-918 SSRF	High7.7	—	3.7%	Nov 5, 2026
33Monitor	CVE-2026-69140No exploit	SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.phpsuitecrm · suitecrm · CWE-89 SQL injection XSS	High8.3	—	0.2%	Nov 5, 2026
33Monitor	CVE-2026-69141No exploit	SuiteCRM: SQL injection via search param in modules/Cases/controller.phpsuitecrm · suitecrm · CWE-89 SQL injection XSS	High8.3	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-69142No exploit	SuiteCRM: Authenticated SQL Injection in map_markers distance Parametersuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.3%	Nov 5, 2026
35Monitor	CVE-2026-71548No exploit	SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full databasesuitecrm · suitecrm · CWE-20 SQL injection	High8.8	—	0.2%	Nov 5, 2026
39Monitor	CVE-2026-71550No exploit	SuiteCRM: LFI to RCE via AOW_WorkFlowsuitecrm · suitecrm · CWE-98 RCE	Critical9.9	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-94395No exploit	Stack-based buffer overflow in SafeNet Authentication Client SIS token enginethalesgroup · safenet authentication client sis token engine · CWE-121 RCE Memory safety	High7.0	—	0.2%	Nov 5, 2026
35Monitor	CVE-2026-97377No exploit	SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_listsuitecrm · suitecrm · CWE-89 SQL injection	High8.8	—	0.4%	Nov 5, 2026
38Monitor	CVE-2026-102940No exploit	OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignmentopen-emr · openemr · CWE-639 Broken access control (IDOR)	Critical9.6	—	0.3%	Nov 5, 2026
32Monitor	CVE-2026-103935No exploit	OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attributeopen-emr · openemr · CWE-79 XSS	High8.1	—	0.4%	Nov 5, 2026
28Monitor	CVE-2026-103938No exploit	OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operationsopen-emr · openemr · CWE-352 Pre-auth CSRF	High7.1	—	0.4%	Nov 5, 2026
28Monitor	CVE-2026-104133No exploit	OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstallopen-emr · openemr · CWE-862 Broken access control (IDOR) CSRF	High7.1	—	0.4%	Nov 5, 2026
28Monitor	CVE-2026-104136No exploit	OpenEMR: Arbitrary Patient Recall and Contact Detail Readopen-emr · openemr · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Nov 5, 2026
28Monitor	CVE-2026-104137No exploit	OpenEMR: Patient Data Search Without Sufficient ACLopen-emr · openemr · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Nov 5, 2026
32Monitor	CVE-2026-110930No exploit	Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.openai · codex desktop for windows · CWE-88	High8.0	—	0.3%	Nov 5, 2026
32Monitor	CVE-2026-115573No exploit	OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumerationopen-emr · openemr · CWE-862 Broken access control (IDOR)	High8.1	—	0.3%	Nov 5, 2026
30Monitor	CVE-2026-115928No exploit	FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound callsfreeswitch · freeswitch · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.7%	Nov 5, 2026
30Monitor	CVE-2026-116567Proof of concept	FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handlingfreeswitch · freeswitch · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Nov 5, 2026
30Monitor	CVE-2026-116568No exploit	FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsingfreeswitch · freeswitch · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Nov 5, 2026
30Monitor	CVE-2026-116569No exploit	FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsingfreeswitch · freeswitch · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Nov 5, 2026
30Monitor	CVE-2026-116570No exploit	FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationfreeswitch · freeswitch · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Nov 5, 2026
70This week	CVE-2026-116779Weaponized	FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandsfreeswitch · freeswitch · CWE-77 pre-auth RCE Command injection	Critical9.8	KEV	2.4%	Nov 5, 2026
30Monitor	CVE-2026-116782No exploit	FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handlingfreeswitch · freeswitch · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Nov 5, 2026
32Monitor	CVE-2026-116783No exploit	FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery datafreeswitch · freeswitch · CWE-129 pre-auth RCE	High8.2	—	0.6%	Nov 5, 2026
30Monitor	CVE-2026-116784No exploit	FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsingfreeswitch · freeswitch · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Nov 5, 2026
36Monitor	CVE-2026-116785No exploit	FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handlingfreeswitch · freeswitch · CWE-122 Pre-auth Memory safety	Critical9.1	—	1.0%	Nov 5, 2026
35Monitor	CVE-2026-116786No exploit	FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiafreeswitch · freeswitch · CWE-77 RCE Command injection	High8.8	—	0.4%	Nov 5, 2026
30Monitor	CVE-2026-116787No exploit	FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Lengthfreeswitch · freeswitch · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Nov 5, 2026
32Monitor	CVE-2026-116788No exploit	FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decodingfreeswitch · freeswitch · CWE-122 Pre-auth Memory safety	High8.2	—	0.4%	Nov 5, 2026
29Monitor	CVE-2026-116789No exploit	FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverfreeswitch · freeswitch · CWE-295 Pre-auth Weak crypto	High7.4	—	0.1%	Nov 5, 2026

CVE-2026-102739
31Monitor
ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
francescopace · espectreNov 5, 2026
CVE-2026-103112
30Monitor
Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path
HighCVSS 7.5No exploitEPSS 0%
- Race condition
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-107123
30Monitor
Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-107602
30Monitor
Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-110931
30Monitor
Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-110932
30Monitor
Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-112208
32Monitor
Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-114232
32Monitor
Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-119083
33Monitor
GluonTS arbitrary file write during archive extraction
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
- Local privilege escalation
aws · gluontsNov 5, 2026
CVE-2026-120499
34Monitor
h5io before 0.2.6 Arbitrary Code Execution via read_hdf5
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Deserialization
h5io · h5ioNov 5, 2026
CVE-2026-121994
35Monitor
Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
red hat · red hat enterprise linux 10Nov 5, 2026
CVE-2026-121995
30Monitor
Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 10Nov 5, 2026
CVE-2026-121996
32Monitor
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 10Nov 5, 2026
CVE-2026-121997
32Monitor
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 10Nov 5, 2026
CVE-2026-123151
30Monitor
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
red hat · red hat enterprise linux 10Nov 5, 2026
CVE-2026-49393
33Monitor
OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token
HighCVSS 8.4No exploitEPSS 0%
- Auth bypass
tinyhumansai · openhumanNov 5, 2026
CVE-2026-49407
30Monitor
OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth
HighCVSS 7.7No exploitEPSS 0%
- Auth bypass
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54140
33Monitor
OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54141
36Monitor
OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`
CriticalCVSS 9.0No exploitEPSS 0%
- pre-auth RCE
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54142
34Monitor
OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54143
39Monitor
OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54145
35Monitor
OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Info leak
tinyhumansai · openhumanNov 5, 2026
CVE-2026-54146
35Monitor
OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
tinyhumansai · openhumanNov 5, 2026
CVE-2026-75614
32Monitor
ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
esa · asn1sccNov 5, 2026
CVE-2026-76077
32Monitor
ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
esa · asn1sccNov 5, 2026
CVE-2026-82413
35Monitor
ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Auth bypass
- Command injection
ntop · ntopngNov 5, 2026
CVE-2026-82965
30Monitor
Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-105607
34Monitor
Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- XSS
balbooa.com · gridbox extension for joomlaNov 5, 2026
CVE-2026-107129
33Monitor
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
balbooa.com · gridbox extension for joomlaNov 5, 2026
CVE-2026-107359
28Monitor
Malformed Wi-Fi Beacon Causes Crash on WF200
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
silicon labs · wf200 fwNov 5, 2026
CVE-2026-107903
34Monitor
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- XSS
balbooa.com · gridbox extension for joomlaNov 5, 2026
CVE-2026-112109
29Monitor
Local privilege escalation in SafeNet Authentication Client SACSrv
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
thalesgroup · safenet authentication client serviceNov 5, 2026
CVE-2026-115452
30Monitor
Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6
HighCVSS 7.5No exploitEPSS 0%
- XSS
tassos.gr · advanced custom fields extension for joomlaNov 5, 2026
CVE-2026-120859
34Monitor
PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings Files
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Deserialization
pymodaq · pymodaqNov 5, 2026
CVE-2026-123184
28Monitor
Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes
HighCVSS 7.2No exploitEPSS 0%
altium · altium 365Nov 5, 2026
CVE-2026-54912
35Monitor
WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
bytecodealliance · wasm-micro-runtimeNov 5, 2026
CVE-2026-54914
33Monitor
WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
bytecodealliance · wasm-micro-runtimeNov 5, 2026
CVE-2026-77439
35Monitor
Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints
HighCVSS 8.8No exploitEPSS 0%
immich-app · immichNov 5, 2026
CVE-2026-92855
29Monitor
Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-92857
32Monitor
Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens
HighCVSS 8.1No exploitEPSS 0%
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-93998
29Monitor
Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
red hat · red hat amq broker 7Nov 5, 2026
CVE-2026-96453
32Monitor
Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
HighCVSS 8.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
red hat · red hat amq broker 7Nov 5, 2026
CVE-2026-97175
35Monitor
Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-97847
28Monitor
Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator author
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
red hat · red hat build of keycloakNov 5, 2026
CVE-2026-100358
37Monitor
SuiteCRM: Admin OS RCE via Dropdown Editor PHP Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
suitecrm · suitecrmNov 5, 2026
CVE-2026-100360
28Monitor
SuiteCRM: V8 API Relationship Delete Bypasses Object-Level Authorization on the Related Record
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
suitecrm · suitecrmNov 5, 2026
CVE-2026-100361
28Monitor
SuiteCRM: Mass Assignment in V8 API Allows Modification of Sensitive User Fields (user_hash, external_auth_only)
HighCVSS 7.1No exploitEPSS 0%
suitecrm · suitecrmNov 5, 2026
CVE-2026-100363
35Monitor
SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration)
HighCVSS 8.8No exploitEPSS 0%
suitecrm · suitecrmNov 5, 2026
CVE-2026-100364
28Monitor
SuiteCRM V8 JSON:API processAttributes() Missing ID Filter Allows ACL Bypass and Record Ownership Hijack
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
suitecrm · suitecrmNov 5, 2026
CVE-2026-100365
35Monitor
SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-118494
32Monitor
Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
jreviews.com · jreviews component for joomlaNov 5, 2026
CVE-2026-123196
34Monitor
Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
authorizerdev · authorizerNov 5, 2026
CVE-2026-123198
37Monitor
LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- SSTI
lmfdb · lmfdbNov 5, 2026
CVE-2026-123200
34Monitor
VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
vrpn · vrpnNov 5, 2026
CVE-2026-123202
34Monitor
libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
bakulf · libnxmlNov 5, 2026
CVE-2026-123205
33Monitor
accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
accel-ppp · accel-pppNov 5, 2026
CVE-2026-123208
30Monitor
noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
libnoname · nonameNov 5, 2026
CVE-2026-123273
28Monitor
ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
imagemagick · imagemagickNov 5, 2026
CVE-2026-61648
33Monitor
SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
- XSS
suitecrm · suitecrmNov 5, 2026
CVE-2026-61649
30Monitor
SuiteCRM: isSelfRequest() bypass via substring match allows SSRF to internal services
HighCVSS 7.7No exploitEPSS 0%
- SSRF
suitecrm · suitecrmNov 5, 2026
CVE-2026-61650
32Monitor
SuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorization
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
suitecrm · suitecrmNov 5, 2026
CVE-2026-61651
33Monitor
SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-61653
33Monitor
SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
- XSS
suitecrm · suitecrmNov 5, 2026
CVE-2026-63111
28Monitor
SuiteCRM: Non-admin user creates SchedulersJob: SSRF via cron
HighCVSS 7.1No exploitEPSS 0%
- SSRF
- Broken access control (IDOR)
suitecrm · suitecrmNov 5, 2026
CVE-2026-63213
28Monitor
SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRM
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
suitecrm · suitecrmNov 5, 2026
CVE-2026-63214
35Monitor
SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-63215
33Monitor
SuiteCRM: Time-Based Blind SQL Injection via REST API
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-69134
35Monitor
SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-69135
35Monitor
SuiteCRM: Authenticated SQL Injection In Project Module
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-69136
28Monitor
SuiteCRM: Authenticated SQL Injection In handleAttachments function
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-69137
31Monitor
SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosure
HighCVSS 7.7Proof of conceptEPSS 3%
- SSRF
suitecrm · suitecrmNov 5, 2026
CVE-2026-69140
33Monitor
SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.php
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
- XSS
suitecrm · suitecrmNov 5, 2026
CVE-2026-69141
33Monitor
SuiteCRM: SQL injection via search param in modules/Cases/controller.php
HighCVSS 8.3No exploitEPSS 0%
- SQL injection
- XSS
suitecrm · suitecrmNov 5, 2026
CVE-2026-69142
35Monitor
SuiteCRM: Authenticated SQL Injection in map_markers distance Parameter
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-71548
35Monitor
SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-71550
39Monitor
SuiteCRM: LFI to RCE via AOW_WorkFlow
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
suitecrm · suitecrmNov 5, 2026
CVE-2026-94395
28Monitor
Stack-based buffer overflow in SafeNet Authentication Client SIS token engine
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Memory safety
thalesgroup · safenet authentication client sis token engineNov 5, 2026
CVE-2026-97377
35Monitor
SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_list
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
suitecrm · suitecrmNov 5, 2026
CVE-2026-102940
38Monitor
OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
open-emr · openemrNov 5, 2026
CVE-2026-103935
32Monitor
OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute
HighCVSS 8.1No exploitEPSS 0%
- XSS
open-emr · openemrNov 5, 2026
CVE-2026-103938
28Monitor
OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
open-emr · openemrNov 5, 2026
CVE-2026-104133
28Monitor
OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
- CSRF
open-emr · openemrNov 5, 2026
CVE-2026-104136
28Monitor
OpenEMR: Arbitrary Patient Recall and Contact Detail Read
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
open-emr · openemrNov 5, 2026
CVE-2026-104137
28Monitor
OpenEMR: Patient Data Search Without Sufficient ACL
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
open-emr · openemrNov 5, 2026
CVE-2026-110930
32Monitor
Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.
HighCVSS 8.0No exploitEPSS 0%
openai · codex desktop for windowsNov 5, 2026
CVE-2026-115573
32Monitor
OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
open-emr · openemrNov 5, 2026
CVE-2026-115928
30Monitor
FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116567
30Monitor
FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116568
30Monitor
FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116569
30Monitor
FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116570
30Monitor
FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116779
70This week
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
CriticalCVSS 9.8KEVWeaponizedEPSS 2%
- pre-auth RCE
- Command injection
freeswitch · freeswitchNov 5, 2026
CVE-2026-116782
30Monitor
FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116783
32Monitor
FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
HighCVSS 8.2No exploitEPSS 0%
- pre-auth RCE
freeswitch · freeswitchNov 5, 2026
CVE-2026-116784
30Monitor
FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116785
36Monitor
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Memory safety
freeswitch · freeswitchNov 5, 2026
CVE-2026-116786
35Monitor
FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
freeswitch · freeswitchNov 5, 2026
CVE-2026-116787
30Monitor
FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeswitch · freeswitchNov 5, 2026
CVE-2026-116788
32Monitor
FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
freeswitch · freeswitchNov 5, 2026
CVE-2026-116789
29Monitor
FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
freeswitch · freeswitchNov 5, 2026