By publication date

Exploited and new serious CVEs: November 2026

3,656 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 17 of 37

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-123606No exploit	Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplificationhickory-dns · hickory-dns · CWE-400 Pre-auth Denial of service	High8.7	—	0.4%	4 days ago
34Monitor	CVE-2026-123607No exploit	Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Servicehickory-dns · hickory-dns · CWE-835 Pre-auth Denial of service	High8.7	—	0.3%	4 days ago
34Monitor	CVE-2026-123608No exploit	Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compressionhickory-dns · hickory-dns · CWE-407 Pre-auth	High8.7	—	0.4%	4 days ago
37Monitor	CVE-2026-123614No exploit	imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflowimgproxy · imgproxy · CWE-122 Pre-auth Memory safety	Critical9.3	—	0.6%	4 days ago
34Monitor	CVE-2026-123615No exploit	imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loaderimgproxy · imgproxy · CWE-787 Pre-auth Memory safety	High8.7	—	0.5%	4 days ago
34Monitor	CVE-2026-123616No exploit	imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loaderimgproxy · imgproxy · CWE-789 Pre-auth Auth bypass	High8.7	—	0.4%	4 days ago
34Monitor	CVE-2026-114713No exploit	The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, wunrealircd · unrealircd · CWE-140 Pre-auth	High8.6	—	0.3%	4 days ago
35Monitor	CVE-2026-103303No exploit	Turisbook Booking System <= 1.3.8 - Unauthenticated Stored XSS via Cart Background Settingunknown · turisbook booking system · CWE-79 Pre-auth XSS CSRF	High8.8	—	0.1%	4 days ago
32Monitor	CVE-2026-106015No exploit	Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Forceunknown · ecommerce affiliate · CWE-287 Pre-auth Auth bypass	High8.1	—	0.2%	4 days ago
34Monitor	CVE-2026-109925No exploit	Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlersunknown · productive commerce · CWE-89 Pre-auth SQL injection	High8.6	—	0.2%	4 days ago
39Monitor	CVE-2026-110963No exploit	Userplace <= 1.2.0 - Unauthenticated Privilege Escalationunknown · userplace · CWE-269 Pre-auth	Critical9.8	—	0.2%	4 days ago
39Monitor	CVE-2026-114432No exploit	Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filenameunknown · contact form 7 · CWE-434 pre-auth RCE File upload	Critical9.8	—	0.4%	4 days ago
28Monitor	CVE-2026-124424No exploit	WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.phpwwbn · avideo · CWE-22 Path traversal	High7.1	—	0.3%	4 days ago
37Monitor	CVE-2026-124427No exploit	Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/nextcraftcms · cms · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	4 days ago
28Monitor	CVE-2026-124428No exploit	Craft CMS 5.7.0 before 5.11.2 Arbitrary SVG File Read via app/icon-svgcraftcms · cms · CWE-22 Path traversal	High7.1	—	0.3%	4 days ago
34Monitor	CVE-2026-124429No exploit	Craft CMS 5.0.0 before 5.11.2 Privilege Escalation via Public Registrationcraftcms · cms · CWE-266 Pre-auth	High8.7	—	0.2%	4 days ago
34Monitor	CVE-2026-124430No exploit	Craft CMS 5.10.0 before 5.11.2 RCE via app/render-elements Signing Oraclecraftcms · cms · CWE-1336 RCE SSTI	High8.7	—	0.5%	4 days ago
28Monitor	CVE-2026-124433No exploit	phpMyFAQ before 4.1.11 Insufficient Authorization in Group Deletion via GroupControllerthorsten · phpmyfaq · CWE-863 Broken access control (IDOR)	High7.0	—	0.3%	4 days ago
28Monitor	CVE-2026-124434No exploit	Grav Lightbox Gallery 1.1.0 before 1.3.2 File Read via Shortcode Media Actionsgetgrav · grav · CWE-200 Info leak	High7.1	—	0.3%	4 days ago
34Monitor	CVE-2026-124436No exploit	OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resourcesopenremote · core · CWE-863 Broken access control (IDOR)	High8.6	—	0.3%	4 days ago
34Monitor	CVE-2026-124437No exploit	Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursionscriban · scriban · CWE-400 Pre-auth Denial of service	High8.7	—	0.4%	4 days ago
36Monitor	CVE-2026-124438No exploit	Scriban before 7.5.2 Delegate Target Exposure via array.map Member Accessscriban · scriban · CWE-200 Pre-auth Info leak	Critical9.1	—	0.3%	4 days ago
34Monitor	CVE-2026-124439No exploit	Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowExceptionscriban · scriban · CWE-674 Pre-auth Denial of service	High8.7	—	0.4%	4 days ago
37Monitor	CVE-2026-124440No exploit	Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypasskyverno · kyverno · CWE-441	Critical9.4	—	0.5%	4 days ago
34Monitor	CVE-2026-124441No exploit	Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kindkyverno · kyverno · CWE-863 Broken access control (IDOR)	High8.7	—	0.4%	4 days ago
28Monitor	CVE-2026-124442No exploit	AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connector Redirectsazuracast · azuracast · CWE-918 SSRF	High7.1	—	0.3%	4 days ago
28Monitor	CVE-2026-124444No exploit	OpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query APIopenemr · openemr · CWE-89 SQL injection	High7.1	—	0.2%	4 days ago
37Monitor	CVE-2026-124445No exploit	OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Forceopenemr · openemr · CWE-307 Pre-auth	Critical9.3	—	0.3%	4 days ago
34Monitor	CVE-2026-124446No exploit	OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocumentopenemr · openemr · CWE-73 Path traversal	High8.7	—	0.3%	4 days ago
34Monitor	CVE-2026-124447No exploit	OpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update Endpointopenemr · openemr · CWE-639 Broken access control (IDOR)	High8.6	—	0.2%	4 days ago
34Monitor	CVE-2026-124448No exploit	OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributesopenemr · openemr · CWE-79 XSS	High8.6	—	0.2%	4 days ago
28Monitor	CVE-2026-124449No exploit	OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routesopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
37Monitor	CVE-2026-124450Proof of concept	OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocumentopenemr · openemr · CWE-73 RCE Path traversal Broken access control (IDOR)	Critical9.3	—	0.4%	4 days ago
28Monitor	CVE-2026-124453No exploit	OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.phpopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124455No exploit	OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignmentopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124456No exploit	OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Moduleopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124457No exploit	OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eranameopenemr · openemr · CWE-22 Path traversal	High7.2	—	0.2%	4 days ago
28Monitor	CVE-2026-124458No exploit	OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpointopenemr · openemr · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124459No exploit	OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlersopenemr · openemr · CWE-639 Broken access control (IDOR)	High8.6	—	0.2%	4 days ago
28Monitor	CVE-2026-124460No exploit	OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientControlleropenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124461No exploit	OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpointopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.6	—	0.2%	4 days ago
28Monitor	CVE-2026-124462No exploit	OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameteropenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
37Monitor	CVE-2026-124463No exploit	OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print Viewopenemr · openemr · CWE-79 XSS	Critical9.3	—	0.2%	4 days ago
28Monitor	CVE-2026-124464No exploit	OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponseopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124465No exploit	Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panictrendyol · kafka-konsumer · CWE-617	High7.1	—	0.3%	4 days ago
34Monitor	CVE-2026-124467No exploit	OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax uploadopenemr · openemr · CWE-22 RCE Path traversal	High8.7	—	0.4%	4 days ago
28Monitor	CVE-2026-124468No exploit	OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST APIopenemr · openemr · CWE-89 SQL injection	High7.1	—	0.2%	4 days ago
37Monitor	CVE-2026-124469No exploit	OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameteropenemr · openemr · CWE-89 SQL injection	Critical9.4	—	0.3%	4 days ago
28Monitor	CVE-2026-124470No exploit	OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Listsopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124471No exploit	OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.phpopenemr · openemr · CWE-639 Broken access control (IDOR)	High8.6	—	0.2%	4 days ago
34Monitor	CVE-2026-124472No exploit	OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.phpopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High8.6	—	0.2%	4 days ago
28Monitor	CVE-2026-124473No exploit	OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update APIopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124475No exploit	OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patientopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.1%	4 days ago
28Monitor	CVE-2026-124476No exploit	OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.phpopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.1%	4 days ago
34Monitor	CVE-2026-124477No exploit	OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.phpopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	0.2%	4 days ago
28Monitor	CVE-2026-124478No exploit	OpenEMR before 8.3.0 Missing Authorization via addRecall in save.phpopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	0.1%	4 days ago
28Monitor	CVE-2026-124479No exploit	OpenEMR before 8.4.0 Arbitrary File Read via REST Document Downloadopenemr · openemr · CWE-73 Path traversal	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124480No exploit	OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKENopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	0.2%	4 days ago
28Monitor	CVE-2026-124481No exploit	OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Paymentsopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
28Monitor	CVE-2026-124482No exploit	OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launchopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124483No exploit	OpenEMR before 8.4.0 Improper Authorization via Prescription REST APIopenemr · openemr · CWE-863 Broken access control (IDOR)	High8.7	—	0.2%	4 days ago
34Monitor	CVE-2026-124484No exploit	OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIsopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	0.2%	4 days ago
28Monitor	CVE-2026-124485No exploit	OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents APIopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124486No exploit	OpenEMR before 8.3.0 Missing Authorization in Classic Document Controlleropenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	0.2%	4 days ago
28Monitor	CVE-2026-124487No exploit	OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docrefopenemr · openemr · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
34Monitor	CVE-2026-124488No exploit	OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encountersopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High8.6	—	0.2%	4 days ago
28Monitor	CVE-2026-124489No exploit	OpenEMR before 8.3.0 Broken Access Control via portal_payment.phpopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	0.1%	4 days ago
37Monitor	CVE-2026-124490No exploit	OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocumentopenemr · openemr · CWE-73 Path traversal	Critical9.4	—	0.3%	4 days ago
33Monitor	CVE-2026-124492No exploit	SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark Listjihong88 · suneditor · CWE-79 XSS	High8.3	—	0.2%	4 days ago
37Monitor	CVE-2026-124493No exploit	SunEditor before 3.4.0 Stored XSS via DocumentType Header textContentjihong88 · suneditor · CWE-79 Pre-auth XSS	Critical9.3	—	0.3%	4 days ago
37Monitor	CVE-2026-124494No exploit	SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypassjihong88 · suneditor · CWE-79 Pre-auth XSS	Critical9.3	—	0.3%	4 days ago
19Monitor	CVE-2026-124552Proof of concept	Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgiwebmin · webmin · CWE-79 XSS	Medium4.8	—	0.1%	4 days ago
34Monitor	CVE-2026-124553No exploit	BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsingfunstory-ai · babeldoc · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	4 days ago
36Monitor	CVE-2026-101117No exploit	IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.ibm · websphere extreme scale · CWE-16 Pre-auth XSS	Critical9.1	—	0.3%	4 days ago
28Monitor	CVE-2026-109899No exploit	WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerabilitymelapress · melapress role editor · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	4 days ago
38Monitor	CVE-2026-109900No exploit	WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerabilitymelapress · melapress role editor · CWE-266 Pre-auth	Critical9.6	—	0.3%	4 days ago
34Monitor	CVE-2026-114189No exploit	WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilitywpvibes · anywhere elementor · CWE-89 SQL injection	High8.5	—	0.3%	4 days ago
32Monitor	CVE-2026-105467No exploit	IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSSibm · qradar · CWE-79 Pre-auth XSS Open redirect	High8.1	—	0.2%	4 days ago
30Monitor	CVE-2026-107330No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-918 SSRF	High7.7	—	0.2%	4 days ago
39Monitor	CVE-2026-107331No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-36 Path traversal	Critical9.9	—	0.4%	4 days ago
35Monitor	CVE-2026-110273No exploit	Security Vulnerability identified in IBM TRIRIGA - Command Executionibm · tririga application platform · CWE-94 RCE	High8.8	—	0.5%	4 days ago
37Monitor	CVE-2026-114464No exploit	Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026ibm · process mining · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.2%	4 days ago
33Monitor	CVE-2026-116499No exploit	Arbitrary Code Execution in Qiskit SDK QPY Deserializationibm · qiskit sdk · CWE-502 RCE Deserialization	High8.4	—	0.2%	4 days ago
33Monitor	CVE-2026-116501No exploit	Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary().ibm · qiskit sdk · CWE-787 RCE Memory safety	High8.4	—	0.1%	4 days ago
35Monitor	CVE-2026-117545No exploit	IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism.ibm · webmethods integration server · CWE-287 Auth bypass	High8.8	—	0.3%	4 days ago
39Monitor	CVE-2026-15266No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	4 days ago
36Monitor	CVE-2026-17466No exploit	IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilitiesibm · optim · CWE-22 Path traversal	Critical9.1	—	0.3%	4 days ago
30Monitor	CVE-2026-18093No exploit	IBM App Connect Enterprise is vulnerable to a credential exposureibm · app connect enterprise · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	4 days ago
28Monitor	CVE-2026-18893No exploit	CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilitiesibm · cockroachdb postgresql for ibm vpc · CWE-269 Local privilege escalation	High7.1	—	0.1%	4 days ago
32Monitor	CVE-2026-19133No exploit	TS4500 Tape Library addresses security vulnerabilityibm · storage ts4500 library · CWE-285 Broken access control (IDOR)	High8.1	—	0.3%	4 days ago
39Monitor	CVE-2026-6715No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	4 days ago
35Monitor	CVE-2026-8639No exploit	IBM Verify Directory is affected by multiple vulnerabilitiesibm · security verify directory · CWE-384	High8.8	—	0.3%	4 days ago
30Monitor	CVE-2026-93879No exploit	Hibernate Validator is affected by an expression language injection vulnerabilityibm · hibernate validator · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	4 days ago
32Monitor	CVE-2026-97677No exploit	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-22 Path traversal	High8.1	—	0.3%	4 days ago
35Monitor	CVE-2026-9764No exploit	IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server executionibm · bob shell · CWE-94 pre-auth RCE	High8.8	—	0.2%	4 days ago
32Monitor	CVE-2026-118904No exploit	IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.ibm · webmethods integration server · CWE-287 Auth bypass	High8.1	—	0.3%	3 days ago
30Monitor	CVE-2026-96146No exploit	Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Managementibm · sevone network performance management · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
36Monitor	CVE-2026-119506No exploit	WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabilitydynamiapps · frontend admin by dynamiapps · CWE-266 Pre-auth	Critical9.1	—	0.3%	3 days ago
35Monitor	CVE-2026-124560No exploit	D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflowd-link · dir-878 · CWE-119 Pre-auth Memory safety	High8.9	—	0.7%	3 days ago
34Monitor	CVE-2026-113362No exploit	Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Vnec corporation · websam winshare · CWE-276 RCE Local privilege escalation	High8.5	—	0.1%	3 days ago

CVE-2026-123606
34Monitor
Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
hickory-dns · hickory-dns4 days ago
CVE-2026-123607
34Monitor
Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
hickory-dns · hickory-dns4 days ago
CVE-2026-123608
34Monitor
Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
hickory-dns · hickory-dns4 days ago
CVE-2026-123614
37Monitor
imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
imgproxy · imgproxy4 days ago
CVE-2026-123615
34Monitor
imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
imgproxy · imgproxy4 days ago
CVE-2026-123616
34Monitor
imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
imgproxy · imgproxy4 days ago
CVE-2026-114713
34Monitor
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, w
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
unrealircd · unrealircd4 days ago
CVE-2026-103303
35Monitor
Turisbook Booking System <= 1.3.8 - Unauthenticated Stored XSS via Cart Background Setting
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
unknown · turisbook booking system4 days ago
CVE-2026-106015
32Monitor
Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · ecommerce affiliate4 days ago
CVE-2026-109925
34Monitor
Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · productive commerce4 days ago
CVE-2026-110963
39Monitor
Userplace <= 1.2.0 - Unauthenticated Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
unknown · userplace4 days ago
CVE-2026-114432
39Monitor
Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- File upload
unknown · contact form 74 days ago
CVE-2026-124424
28Monitor
WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
wwbn · avideo4 days ago
CVE-2026-124427
37Monitor
Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
craftcms · cms4 days ago
CVE-2026-124428
28Monitor
Craft CMS 5.7.0 before 5.11.2 Arbitrary SVG File Read via app/icon-svg
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
craftcms · cms4 days ago
CVE-2026-124429
34Monitor
Craft CMS 5.0.0 before 5.11.2 Privilege Escalation via Public Registration
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
craftcms · cms4 days ago
CVE-2026-124430
34Monitor
Craft CMS 5.10.0 before 5.11.2 RCE via app/render-elements Signing Oracle
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SSTI
craftcms · cms4 days ago
CVE-2026-124433
28Monitor
phpMyFAQ before 4.1.11 Insufficient Authorization in Group Deletion via GroupController
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
thorsten · phpmyfaq4 days ago
CVE-2026-124434
28Monitor
Grav Lightbox Gallery 1.1.0 before 1.3.2 File Read via Shortcode Media Actions
HighCVSS 7.1No exploitEPSS 0%
- Info leak
getgrav · grav4 days ago
CVE-2026-124436
34Monitor
OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
openremote · core4 days ago
CVE-2026-124437
34Monitor
Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
scriban · scriban4 days ago
CVE-2026-124438
36Monitor
Scriban before 7.5.2 Delegate Target Exposure via array.map Member Access
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Info leak
scriban · scriban4 days ago
CVE-2026-124439
34Monitor
Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowException
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
scriban · scriban4 days ago
CVE-2026-124440
37Monitor
Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass
CriticalCVSS 9.4No exploitEPSS 0%
kyverno · kyverno4 days ago
CVE-2026-124441
34Monitor
Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno4 days ago
CVE-2026-124442
28Monitor
AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connector Redirects
HighCVSS 7.1No exploitEPSS 0%
- SSRF
azuracast · azuracast4 days ago
CVE-2026-124444
28Monitor
OpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query API
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
openemr · openemr4 days ago
CVE-2026-124445
37Monitor
OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
openemr · openemr4 days ago
CVE-2026-124446
34Monitor
OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocument
HighCVSS 8.7No exploitEPSS 0%
- Path traversal
openemr · openemr4 days ago
CVE-2026-124447
34Monitor
OpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update Endpoint
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124448
34Monitor
OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributes
HighCVSS 8.6No exploitEPSS 0%
- XSS
openemr · openemr4 days ago
CVE-2026-124449
28Monitor
OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routes
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124450
37Monitor
OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument
CriticalCVSS 9.3Proof of conceptEPSS 0%
- RCE
- Path traversal
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124453
28Monitor
OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.php
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124455
28Monitor
OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignment
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124456
28Monitor
OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Module
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124457
28Monitor
OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eraname
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
openemr · openemr4 days ago
CVE-2026-124458
28Monitor
OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124459
34Monitor
OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124460
28Monitor
OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124461
34Monitor
OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124462
28Monitor
OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124463
37Monitor
OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
openemr · openemr4 days ago
CVE-2026-124464
28Monitor
OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124465
28Monitor
Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic
HighCVSS 7.1No exploitEPSS 0%
trendyol · kafka-konsumer4 days ago
CVE-2026-124467
34Monitor
OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Path traversal
openemr · openemr4 days ago
CVE-2026-124468
28Monitor
OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
openemr · openemr4 days ago
CVE-2026-124469
37Monitor
OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter
CriticalCVSS 9.4No exploitEPSS 0%
- SQL injection
openemr · openemr4 days ago
CVE-2026-124470
28Monitor
OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124471
34Monitor
OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.php
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124472
34Monitor
OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
- CSRF
openemr · openemr4 days ago
CVE-2026-124473
28Monitor
OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124475
28Monitor
OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patient
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124476
28Monitor
OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.php
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124477
34Monitor
OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124478
28Monitor
OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124479
28Monitor
OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
openemr · openemr4 days ago
CVE-2026-124480
34Monitor
OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124481
28Monitor
OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124482
28Monitor
OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124483
34Monitor
OpenEMR before 8.4.0 Improper Authorization via Prescription REST API
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124484
34Monitor
OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124485
28Monitor
OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124486
34Monitor
OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124487
28Monitor
OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124488
34Monitor
OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encounters
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
- CSRF
openemr · openemr4 days ago
CVE-2026-124489
28Monitor
OpenEMR before 8.3.0 Broken Access Control via portal_payment.php
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openemr · openemr4 days ago
CVE-2026-124490
37Monitor
OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument
CriticalCVSS 9.4No exploitEPSS 0%
- Path traversal
openemr · openemr4 days ago
CVE-2026-124492
33Monitor
SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List
HighCVSS 8.3No exploitEPSS 0%
- XSS
jihong88 · suneditor4 days ago
CVE-2026-124493
37Monitor
SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
jihong88 · suneditor4 days ago
CVE-2026-124494
37Monitor
SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
jihong88 · suneditor4 days ago
CVE-2026-124552
19Monitor
Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi
MediumCVSS 4.8Proof of conceptEPSS 0%
- XSS
webmin · webmin4 days ago
CVE-2026-124553
34Monitor
BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
funstory-ai · babeldoc4 days ago
CVE-2026-101117
36Monitor
IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- XSS
ibm · websphere extreme scale4 days ago
CVE-2026-109899
28Monitor
WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
melapress · melapress role editor4 days ago
CVE-2026-109900
38Monitor
WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
melapress · melapress role editor4 days ago
CVE-2026-114189
34Monitor
WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
wpvibes · anywhere elementor4 days ago
CVE-2026-105467
32Monitor
IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
- Open redirect
ibm · qradar4 days ago
CVE-2026-107330
30Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 7.7No exploitEPSS 0%
- SSRF
ibm · datastage on cloud pak for data4 days ago
CVE-2026-107331
39Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
CriticalCVSS 9.9No exploitEPSS 0%
- Path traversal
ibm · datastage on cloud pak for data4 days ago
CVE-2026-110273
35Monitor
Security Vulnerability identified in IBM TRIRIGA - Command Execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · tririga application platform4 days ago
CVE-2026-114464
37Monitor
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · process mining4 days ago
CVE-2026-116499
33Monitor
Arbitrary Code Execution in Qiskit SDK QPY Deserialization
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Deserialization
ibm · qiskit sdk4 days ago
CVE-2026-116501
33Monitor
Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary().
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Memory safety
ibm · qiskit sdk4 days ago
CVE-2026-117545
35Monitor
IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism.
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
ibm · webmethods integration server4 days ago
CVE-2026-15266
39Monitor
Multiple Vulnerabilities in IBM Concert Software
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
ibm · concert4 days ago
CVE-2026-17466
36Monitor
IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities
CriticalCVSS 9.1No exploitEPSS 0%
- Path traversal
ibm · optim4 days ago
CVE-2026-18093
30Monitor
IBM App Connect Enterprise is vulnerable to a credential exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · app connect enterprise4 days ago
CVE-2026-18893
28Monitor
CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
ibm · cockroachdb postgresql for ibm vpc4 days ago
CVE-2026-19133
32Monitor
TS4500 Tape Library addresses security vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
ibm · storage ts4500 library4 days ago
CVE-2026-6715
39Monitor
Multiple Vulnerabilities in IBM Concert Software
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
ibm · concert4 days ago
CVE-2026-8639
35Monitor
IBM Verify Directory is affected by multiple vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
ibm · security verify directory4 days ago
CVE-2026-93879
30Monitor
Hibernate Validator is affected by an expression language injection vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · hibernate validator4 days ago
CVE-2026-97677
32Monitor
Langflow OSS is affected by multiple vulnerabilities
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
langflow · langflow4 days ago
CVE-2026-9764
35Monitor
IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
ibm · bob shell4 days ago
CVE-2026-118904
32Monitor
IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
ibm · webmethods integration server3 days ago
CVE-2026-96146
30Monitor
Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · sevone network performance management3 days ago
CVE-2026-119506
36Monitor
WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
dynamiapps · frontend admin by dynamiapps3 days ago
CVE-2026-124560
35Monitor
D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- Memory safety
d-link · dir-8783 days ago
CVE-2026-113362
34Monitor
Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), V
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
nec corporation · websam winshare3 days ago