By publication date

Exploited and new serious CVEs: November 2026

3,489 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 31 of 35

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-121371No exploit	Security Advisory 0218arista networks · eos · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	1 day ago
38Monitor	CVE-2026-121529Proof of concept	A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWfortinet · forticlientmac · CWE-346 Pre-auth	Critical9.6	—	0.2%	1 day ago
33Monitor	CVE-2026-125337No exploit	Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gatewintercms · winter · CWE-862 Broken access control (IDOR)	High8.3	—	0.4%	1 day ago
35Monitor	CVE-2026-26248No exploit	A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through fortinet · fortisandbox · CWE-79 Pre-auth XSS	High8.8	—	0.5%	1 day ago
30Monitor	CVE-2026-50077No exploit	Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safetyblackberry ltd · qnx hypervisor · CWE-787 RCE Memory safety	High7.7	—	0.1%	1 day ago
30Monitor	CVE-2026-58789No exploit	In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrecgoogle · android · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-58807No exploit	In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects dugoogle · android · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59582No exploit	In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflgoogle · android · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59585No exploit	In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.google · android · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59595No exploit	In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resourgoogle · android · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59603No exploit	In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retgoogle · android · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59611No exploit	In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input vgoogle · android · CWE-20 Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59613No exploit	In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validagoogle · android · CWE-20 Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59623No exploit	In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incogoogle · android · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-59632No exploit	In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue dgoogle · android · CWE-843 Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
32Monitor	CVE-2026-95780No exploit	Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Accesshewlett packard enterprise (hpe) · private 5g core (p5g core)	High8.1	—	0.4%	1 day ago
30Monitor	CVE-2026-95781No exploit	AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrityhewlett packard enterprise (hpe) · private 5g core (p5g core) Pre-auth	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-95782No exploit	Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected Informationhewlett packard enterprise (hpe) · private 5g core (p5g core) Pre-auth	High7.5	—	0.4%	1 day ago
30Monitor	CVE-2026-95783No exploit	Network Processing Vulnerability Could Cause Service Disruptionhewlett packard enterprise (hpe) · private 5g core (p5g core) Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
30Monitor	CVE-2026-95784No exploit	System Component Vulnerability Could Cause Service Unavailabilityhewlett packard enterprise (hpe) · private 5g core (p5g core) Pre-auth Denial of service	High7.5	—	0.3%	1 day ago
28Monitor	CVE-2026-95785No exploit	Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operationshewlett packard enterprise (hpe) · private 5g core (p5g core)	High7.2	—	0.3%	1 day ago
31Monitor	CVE-2026-104352No exploit	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-105986No exploit	Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a percekong inc. · kong gateway enterprise · CWE-863 Broken access control (IDOR)	High8.7	—	0.3%	1 day ago
31Monitor	CVE-2026-110085No exploit	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-110086No exploit	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-110088No exploit	Premiere Pro \| Buffer Overflow (CWE-120)adobe · premiere · CWE-120 RCE Memory safety	High7.8	—	0.3%	1 day ago
31Monitor	CVE-2026-110089No exploit	Premiere Pro \| Buffer Underwrite ('Buffer Underflow') (CWE-124)adobe · premiere · CWE-124 RCE	High7.8	—	0.3%	1 day ago
28Monitor	CVE-2026-110090No exploit	Premiere Pro \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · premiere · CWE-22 Path traversal	High7.1	—	0.3%	1 day ago
28Monitor	CVE-2026-110091No exploit	Premiere Pro \| Missing Authentication for Critical Function (CWE-306)adobe · premiere · CWE-306 Auth bypass	High7.1	—	0.3%	1 day ago
31Monitor	CVE-2026-113512No exploit	After Effects \| Stack-based Buffer Overflow (CWE-121)adobe · after effects · CWE-121 RCE Memory safety	High7.8	—	0.3%	1 day ago
31Monitor	CVE-2026-113516No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113517No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113523No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113525No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-113526No exploit	After Effects \| Violation of Secure Design Principles (CWE-657)adobe · after effects · CWE-657 RCE	High8.6	—	0.3%	1 day ago
31Monitor	CVE-2026-113528No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113530No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-113532No exploit	After Effects \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · after effects · CWE-22 Path traversal	High8.6	—	0.3%	1 day ago
34Monitor	CVE-2026-113534No exploit	After Effects \| Improper Input Validation (CWE-20)adobe · after effects · CWE-20 RCE	High8.6	—	0.3%	1 day ago
31Monitor	CVE-2026-113536No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113538No exploit	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113541No exploit	Media Encoder \| Out-of-bounds Write (CWE-787)adobe · media encoder · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113543No exploit	Media Encoder \| Out-of-bounds Write (CWE-787)adobe · media encoder · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113545No exploit	Media Encoder \| Out-of-bounds Write (CWE-787)adobe · media encoder · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113547No exploit	Media Encoder \| Out-of-bounds Write (CWE-787)adobe · media encoder · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-113551No exploit	Audition \| Violation of Secure Design Principles (CWE-657)adobe · audition · CWE-657 Local privilege escalation	High8.7	—	0.2%	1 day ago
31Monitor	CVE-2026-113553No exploit	Audition \| Out-of-bounds Write (CWE-787)adobe · audition · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113555No exploit	Audition \| Out-of-bounds Write (CWE-787)adobe · audition · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-113557No exploit	Audition \| Improper Input Validation (CWE-20)adobe · audition · CWE-20 RCE	High8.6	—	0.3%	1 day ago
34Monitor	CVE-2026-113558No exploit	Audition \| Improper Input Validation (CWE-20)adobe · audition · CWE-20 RCE	High8.6	—	0.3%	1 day ago
30Monitor	CVE-2026-113560No exploit	Audition \| Incorrect Authorization (CWE-863)adobe · audition · CWE-863 RCE Broken access control (IDOR)	High7.7	—	0.2%	1 day ago
30Monitor	CVE-2026-113562No exploit	Audition \| Improper Input Validation (CWE-20)adobe · audition · CWE-20 RCE	High7.7	—	0.2%	1 day ago
34Monitor	CVE-2026-113563No exploit	Audition \| Violation of Secure Design Principles (CWE-657)adobe · audition · CWE-657 RCE	High8.6	—	0.3%	1 day ago
31Monitor	CVE-2026-113565No exploit	Audition \| Out-of-bounds Write (CWE-787)adobe · audition · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113567No exploit	Audition \| Out-of-bounds Write (CWE-787)adobe · audition · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-113575No exploit	Photoshop Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 RCE Memory safety	High7.8	—	0.3%	1 day ago
31Monitor	CVE-2026-116003No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
31Monitor	CVE-2026-116480No exploit	Photoshop Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 RCE Memory safety	High7.8	—	0.3%	1 day ago
31Monitor	CVE-2026-117546No exploit	Photoshop Desktop \| Use After Free (CWE-416)adobe · photoshop · CWE-416 RCE Memory safety	High7.8	—	0.4%	1 day ago
31Monitor	CVE-2026-117547No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
38Monitor	CVE-2026-118383Proof of concept	Pre-authentication use-after-free in MongoDB Server replica set primary catch-upmongodb · mongodb server · CWE-416 pre-auth RCE Memory safety	Critical9.5	—	0.7%	1 day ago
28Monitor	CVE-2026-120817No exploit	Post-authentication race condition in MongoDB Server geospatial schema validationmongodb · mongodb server · CWE-362 Race condition	High7.1	—	0.3%	1 day ago
28Monitor	CVE-2026-120818No exploit	Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information Disclosuremongodb · mongodb server · CWE-416 Memory safety	High7.1	—	0.3%	1 day ago
28Monitor	CVE-2026-120821No exploit	Post-authentication use-after-free in MongoDB Server aggregation sub-pipelinesmongodb · mongodb server · CWE-416 Memory safety	High7.1	—	0.4%	1 day ago
34Monitor	CVE-2026-120822No exploit	Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data Accessmongodb · mongodb server · CWE-863 Broken access control (IDOR)	High8.6	—	0.3%	1 day ago
34Monitor	CVE-2026-120824No exploit	Post-authentication use-after-free in MongoDB Server time-series bucket validationmongodb · mongodb server · CWE-416 RCE Memory safety	High8.7	—	0.6%	1 day ago
28Monitor	CVE-2026-120825No exploit	Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection Accessmongodb · mongodb server · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	1 day ago
28Monitor	CVE-2026-120826No exploit	Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized Accessmongodb · mongodb server · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	1 day ago
34Monitor	CVE-2026-120828No exploit	Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storagemongodb · mongodb server · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	1 day ago
31Monitor	CVE-2026-123263No exploit	After Effects \| Heap-based Buffer Overflow (CWE-122)adobe · after effects · CWE-122 RCE Memory safety	High7.8	—	0.3%	1 day ago
39Monitor	CVE-2026-126065No exploit	OpenObserve: Empty external password allows authentication bypassopenobserve · openobserve · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.2%	1 day ago
30Monitor	CVE-2026-126080No exploit	Active Support: Possible DoS vulnerability in Active Support safe_constantizerails · rails · CWE-74 Pre-auth Denial of service	High7.5	—	0.8%	1 day ago
30Monitor	CVE-2026-126081No exploit	Action Pack: Possible Strong Parameters bypass in Parameters#each_keyrails · rails · CWE-915 Pre-auth	High7.5	—	0.6%	1 day ago
39Monitor	CVE-2026-126082No exploit	Active Storage: Possible arbitrary file write and read in Active Storage image analysisrails · rails · CWE-1188 pre-auth RCE	Critical9.8	—	0.8%	1 day ago
29Monitor	CVE-2026-126083No exploit	Action Pack: Possible IP spoofing in Action Dispatch RemoteIprails · rails · CWE-348 Pre-auth	High7.4	—	0.3%	1 day ago
31Monitor	CVE-2026-48402No exploit	Premiere Pro \| Untrusted Search Path (CWE-426)adobe · premiere · CWE-426 RCE	High7.8	—	0.3%	1 day ago
30Monitor	CVE-2026-82002No exploit	Media Encoder \| Incorrect Authorization (CWE-863)adobe · media encoder · CWE-863 RCE Broken access control (IDOR)	High7.7	—	0.2%	1 day ago
31Monitor	CVE-2026-82012No exploit	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere · CWE-787 RCE Memory safety	High7.8	—	0.2%	1 day ago
34Monitor	CVE-2026-92544No exploit	SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against tkong inc. · kong gateway enterprise · CWE-89 RCE SQL injection	High8.7	—	0.3%	1 day ago
34Monitor	CVE-2026-107356No exploit	U.S. Geological Survey Area Species Management Research Program unrestricted file uploadu.s. geological survey · area species management research program · CWE-434 File upload	High8.7	—	0.7%	1 day ago
39Monitor	CVE-2026-113579No exploit	Adobe Experience Manager \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · adobe experience manager as a cloud service · CWE-94 RCE	Critical9.9	—	1.2%	1 day ago
39Monitor	CVE-2026-113580No exploit	Adobe Experience Manager \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · adobe experience manager as a cloud service · CWE-94 RCE	Critical9.9	—	1.2%	1 day ago
39Monitor	CVE-2026-114371No exploit	Adobe Experience Manager \| Incorrect Authorization (CWE-863)adobe · adobe experience manager as a cloud service · CWE-863 RCE Broken access control (IDOR)	Critical9.9	—	1.0%	1 day ago
32Monitor	CVE-2026-118483No exploit	Dimension \| Improper Input Validation (CWE-20)adobe · adobe dimension · CWE-20 RCE Local privilege escalation	High8.2	—	0.3%	1 day ago
39Monitor	CVE-2026-119017No exploit	Adobe Experience Manager \| Incorrect Authorization (CWE-863)adobe · adobe experience manager 6.5 · CWE-863 RCE Broken access control (IDOR)	Critical9.9	—	1.0%	1 day ago
38Monitor	CVE-2026-121349No exploit	Adobe Connect \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · adobe connect · CWE-22 RCE Path traversal	Critical9.6	—	1.2%	1 day ago
30Monitor	CVE-2026-121350No exploit	Adobe Connect \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe connect · CWE-89 SQL injection	High7.7	—	0.7%	1 day ago
40Plan	CVE-2026-121351No exploit	Adobe Connect \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · adobe connect · CWE-22 Pre-auth Path traversal	Critical10.0	—	1.1%	1 day ago
40Plan	CVE-2026-121352No exploit	Adobe Connect \| Incorrect Authorization (CWE-863)adobe · adobe connect · CWE-863 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.8%	1 day ago
40Plan	CVE-2026-121353No exploit	Adobe Connect \| Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)adobe · adobe connect · CWE-93 pre-auth RCE	Critical10.0	—	1.0%	1 day ago
39Monitor	CVE-2026-121354No exploit	Adobe Connect \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · adobe connect · CWE-22 Path traversal	Critical9.9	—	1.1%	1 day ago
36Monitor	CVE-2026-121355No exploit	Adobe Connect \| Incorrect Authorization (CWE-863)adobe · adobe connect · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.8%	1 day ago
40Plan	CVE-2026-121356No exploit	Adobe Connect \| Server-Side Request Forgery (SSRF) (CWE-918)adobe · adobe connect · CWE-918 Pre-auth SSRF	Critical10.0	—	0.8%	1 day ago
39Monitor	CVE-2026-121887No exploit	Adobe Connect \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)adobe · adobe connect · CWE-611 RCE XXE	Critical9.9	—	1.2%	1 day ago
40Plan	CVE-2026-121889No exploit	Adobe Connect \| Server-Side Request Forgery (SSRF) (CWE-918)adobe · adobe connect · CWE-918 Pre-auth SSRF	Critical10.0	—	0.8%	1 day ago
30Monitor	CVE-2026-121890No exploit	Adobe Connect \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)adobe · adobe connect · CWE-611 XXE	High7.7	—	0.8%	1 day ago
39Monitor	CVE-2026-121892No exploit	Adobe Connect \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · adobe connect · CWE-94 RCE	Critical9.9	—	1.2%	1 day ago
39Monitor	CVE-2026-121894No exploit	Adobe Connect \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe connect · CWE-89 RCE SQL injection	Critical9.9	—	1.0%	1 day ago
39Monitor	CVE-2026-121896No exploit	Adobe Connect \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe connect · CWE-89 RCE SQL injection	Critical9.9	—	1.0%	1 day ago
39Monitor	CVE-2026-121898No exploit	Adobe Connect \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe connect · CWE-89 RCE SQL injection	Critical9.9	—	1.0%	1 day ago

CVE-2026-121371
34Monitor
Security Advisory 0218
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
arista networks · eos1 day ago
CVE-2026-121529
38Monitor
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientW
CriticalCVSS 9.6Proof of conceptEPSS 0%
- Pre-auth
fortinet · forticlientmac1 day ago
CVE-2026-125337
33Monitor
Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
wintercms · winter1 day ago
CVE-2026-26248
35Monitor
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
fortinet · fortisandbox1 day ago
CVE-2026-50077
30Monitor
Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Memory safety
blackberry ltd · qnx hypervisor1 day ago
CVE-2026-58789
30Monitor
In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrec
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · android1 day ago
CVE-2026-58807
30Monitor
In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects du
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · android1 day ago
CVE-2026-59582
30Monitor
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overfl
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · android1 day ago
CVE-2026-59585
30Monitor
In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · android1 day ago
CVE-2026-59595
30Monitor
In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resour
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · android1 day ago
CVE-2026-59603
30Monitor
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message ret
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · android1 day ago
CVE-2026-59611
30Monitor
In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input v
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · android1 day ago
CVE-2026-59613
30Monitor
In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input valida
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · android1 day ago
CVE-2026-59623
30Monitor
In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an inco
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · android1 day ago
CVE-2026-59632
30Monitor
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue d
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · android1 day ago
CVE-2026-95780
32Monitor
Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Access
HighCVSS 8.1No exploitEPSS 0%
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-95781
30Monitor
AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrity
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-95782
30Monitor
Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected Information
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-95783
30Monitor
Network Processing Vulnerability Could Cause Service Disruption
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-95784
30Monitor
System Component Vulnerability Could Cause Service Unavailability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-95785
28Monitor
Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations
HighCVSS 7.2No exploitEPSS 0%
hewlett packard enterprise (hpe) · private 5g core (p5g core)1 day ago
CVE-2026-104352
31Monitor
Premiere Pro | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · premiere1 day ago
CVE-2026-105986
34Monitor
Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a perce
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
kong inc. · kong gateway enterprise1 day ago
CVE-2026-110085
31Monitor
Premiere Pro | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · premiere1 day ago
CVE-2026-110086
31Monitor
Premiere Pro | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · premiere1 day ago
CVE-2026-110088
31Monitor
Premiere Pro | Buffer Overflow (CWE-120)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · premiere1 day ago
CVE-2026-110089
31Monitor
Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)
HighCVSS 7.8No exploitEPSS 0%
- RCE
adobe · premiere1 day ago
CVE-2026-110090
28Monitor
Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
adobe · premiere1 day ago
CVE-2026-110091
28Monitor
Premiere Pro | Missing Authentication for Critical Function (CWE-306)
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
adobe · premiere1 day ago
CVE-2026-113512
31Monitor
After Effects | Stack-based Buffer Overflow (CWE-121)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113516
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113517
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113523
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113525
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113526
34Monitor
After Effects | Violation of Secure Design Principles (CWE-657)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · after effects1 day ago
CVE-2026-113528
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113530
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113532
34Monitor
After Effects | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
adobe · after effects1 day ago
CVE-2026-113534
34Monitor
After Effects | Improper Input Validation (CWE-20)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · after effects1 day ago
CVE-2026-113536
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113538
31Monitor
After Effects | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-113541
31Monitor
Media Encoder | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · media encoder1 day ago
CVE-2026-113543
31Monitor
Media Encoder | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · media encoder1 day ago
CVE-2026-113545
31Monitor
Media Encoder | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · media encoder1 day ago
CVE-2026-113547
31Monitor
Media Encoder | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · media encoder1 day ago
CVE-2026-113551
34Monitor
Audition | Violation of Secure Design Principles (CWE-657)
HighCVSS 8.7No exploitEPSS 0%
- Local privilege escalation
adobe · audition1 day ago
CVE-2026-113553
31Monitor
Audition | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · audition1 day ago
CVE-2026-113555
31Monitor
Audition | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · audition1 day ago
CVE-2026-113557
34Monitor
Audition | Improper Input Validation (CWE-20)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · audition1 day ago
CVE-2026-113558
34Monitor
Audition | Improper Input Validation (CWE-20)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · audition1 day ago
CVE-2026-113560
30Monitor
Audition | Incorrect Authorization (CWE-863)
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
adobe · audition1 day ago
CVE-2026-113562
30Monitor
Audition | Improper Input Validation (CWE-20)
HighCVSS 7.7No exploitEPSS 0%
- RCE
adobe · audition1 day ago
CVE-2026-113563
34Monitor
Audition | Violation of Secure Design Principles (CWE-657)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · audition1 day ago
CVE-2026-113565
31Monitor
Audition | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · audition1 day ago
CVE-2026-113567
31Monitor
Audition | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · audition1 day ago
CVE-2026-113575
31Monitor
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshop1 day ago
CVE-2026-116003
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshop1 day ago
CVE-2026-116480
31Monitor
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshop1 day ago
CVE-2026-117546
31Monitor
Photoshop Desktop | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshop1 day ago
CVE-2026-117547
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshop1 day ago
CVE-2026-118383
38Monitor
Pre-authentication use-after-free in MongoDB Server replica set primary catch-up
CriticalCVSS 9.5Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
mongodb · mongodb server1 day ago
CVE-2026-120817
28Monitor
Post-authentication race condition in MongoDB Server geospatial schema validation
HighCVSS 7.1No exploitEPSS 0%
- Race condition
mongodb · mongodb server1 day ago
CVE-2026-120818
28Monitor
Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information Disclosure
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
mongodb · mongodb server1 day ago
CVE-2026-120821
28Monitor
Post-authentication use-after-free in MongoDB Server aggregation sub-pipelines
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
mongodb · mongodb server1 day ago
CVE-2026-120822
34Monitor
Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data Access
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodb server1 day ago
CVE-2026-120824
34Monitor
Post-authentication use-after-free in MongoDB Server time-series bucket validation
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Memory safety
mongodb · mongodb server1 day ago
CVE-2026-120825
28Monitor
Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection Access
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodb server1 day ago
CVE-2026-120826
28Monitor
Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized Access
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodb server1 day ago
CVE-2026-120828
34Monitor
Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storage
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mongodb · mongodb server1 day ago
CVE-2026-123263
31Monitor
After Effects | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · after effects1 day ago
CVE-2026-126065
39Monitor
OpenObserve: Empty external password allows authentication bypass
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
openobserve · openobserve1 day ago
CVE-2026-126080
30Monitor
Active Support: Possible DoS vulnerability in Active Support safe_constantize
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
rails · rails1 day ago
CVE-2026-126081
30Monitor
Action Pack: Possible Strong Parameters bypass in Parameters#each_key
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
rails · rails1 day ago
CVE-2026-126082
39Monitor
Active Storage: Possible arbitrary file write and read in Active Storage image analysis
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
rails · rails1 day ago
CVE-2026-126083
29Monitor
Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
rails · rails1 day ago
CVE-2026-48402
31Monitor
Premiere Pro | Untrusted Search Path (CWE-426)
HighCVSS 7.8No exploitEPSS 0%
- RCE
adobe · premiere1 day ago
CVE-2026-82002
30Monitor
Media Encoder | Incorrect Authorization (CWE-863)
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
adobe · media encoder1 day ago
CVE-2026-82012
31Monitor
Premiere Pro | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · premiere1 day ago
CVE-2026-92544
34Monitor
SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against t
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
kong inc. · kong gateway enterprise1 day ago
CVE-2026-107356
34Monitor
U.S. Geological Survey Area Species Management Research Program unrestricted file upload
HighCVSS 8.7No exploitEPSS 0%
- File upload
u.s. geological survey · area species management research program1 day ago
CVE-2026-113579
39Monitor
Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
adobe · adobe experience manager as a cloud service1 day ago
CVE-2026-113580
39Monitor
Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
adobe · adobe experience manager as a cloud service1 day ago
CVE-2026-114371
39Monitor
Adobe Experience Manager | Incorrect Authorization (CWE-863)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Broken access control (IDOR)
adobe · adobe experience manager as a cloud service1 day ago
CVE-2026-118483
32Monitor
Dimension | Improper Input Validation (CWE-20)
HighCVSS 8.2No exploitEPSS 0%
- RCE
- Local privilege escalation
adobe · adobe dimension1 day ago
CVE-2026-119017
39Monitor
Adobe Experience Manager | Incorrect Authorization (CWE-863)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Broken access control (IDOR)
adobe · adobe experience manager 6.51 day ago
CVE-2026-121349
38Monitor
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CriticalCVSS 9.6No exploitEPSS 1%
- RCE
- Path traversal
adobe · adobe connect1 day ago
CVE-2026-121350
30Monitor
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
HighCVSS 7.7No exploitEPSS 0%
- SQL injection
adobe · adobe connect1 day ago
CVE-2026-121351
40Plan
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CriticalCVSS 10.0No exploitEPSS 1%
- Pre-auth
- Path traversal
adobe · adobe connect1 day ago
CVE-2026-121352
40Plan
Adobe Connect | Incorrect Authorization (CWE-863)
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · adobe connect1 day ago
CVE-2026-121353
40Plan
Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
adobe · adobe connect1 day ago
CVE-2026-121354
39Monitor
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CriticalCVSS 9.9No exploitEPSS 1%
- Path traversal
adobe · adobe connect1 day ago
CVE-2026-121355
36Monitor
Adobe Connect | Incorrect Authorization (CWE-863)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · adobe connect1 day ago
CVE-2026-121356
40Plan
Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SSRF
adobe · adobe connect1 day ago
CVE-2026-121887
39Monitor
Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- XXE
adobe · adobe connect1 day ago
CVE-2026-121889
40Plan
Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SSRF
adobe · adobe connect1 day ago
CVE-2026-121890
30Monitor
Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
HighCVSS 7.7No exploitEPSS 0%
- XXE
adobe · adobe connect1 day ago
CVE-2026-121892
39Monitor
Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
adobe · adobe connect1 day ago
CVE-2026-121894
39Monitor
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- SQL injection
adobe · adobe connect1 day ago
CVE-2026-121896
39Monitor
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- SQL injection
adobe · adobe connect1 day ago
CVE-2026-121898
39Monitor
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- SQL injection
adobe · adobe connect1 day ago