Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2026

3,408 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 34 of 35

  • CVE-2026-65982
    34Monitor

    NULL-pointer dereference (DoS) in nginx-http-flv-module

    HighCVSS 8.7No exploit

    winshining · nginx-http-flv-moduleToday

  • CVE-2026-111521
    28Monitor

    Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulne

    HighCVSS 7.0No exploit

    dell · display and peripheral manager (ddpm windows)Today

  • CVE-2026-121528
    32Monitor

    A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through

    HighCVSS 8.1No exploit

    fortinet · fortiosToday

  • CVE-2026-126144
    35Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    HighCVSS 8.8No exploit

    fortinet · fortimailToday

  • CVE-2026-126145
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126146
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126147
    39Monitor

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo

    CriticalCVSS 9.8No exploit

    fortinet · fortimailToday

  • CVE-2026-126148
    39Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    CriticalCVSS 9.8No exploit

    fortinet · fortimailToday

  • CVE-2026-126149
    30Monitor

    A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 thr

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126150
    36Monitor

    A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMai

    CriticalCVSS 9.1No exploit

    fortinet · fortimailToday

  • CVE-2026-126151
    30Monitor

    A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126152
    30Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    HighCVSS 7.6No exploit

    fortinet · fortimailToday

  • CVE-2026-126153
    30Monitor

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126154
    30Monitor

    A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126155
    36Monitor

    A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    CriticalCVSS 9.1No exploit

    fortinet · fortimailToday

  • CVE-2026-126156
    36Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    CriticalCVSS 9.1No exploit

    fortinet · fortimailToday

  • CVE-2026-126157
    36Monitor

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    CriticalCVSS 9.1No exploit

    fortinet · fortimailToday

  • CVE-2026-126158
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126159
    30Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126160
    32Monitor

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    HighCVSS 8.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126161
    30Monitor

    A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126162
    34Monitor

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow

    HighCVSS 8.7No exploit

    fortinet · fortimailToday

  • CVE-2026-126163
    32Monitor

    A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated atta

    HighCVSS 8.1No exploit

    fortinet · fortimailToday

  • CVE-2026-126164
    37Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0

    CriticalCVSS 9.4No exploit

    fortinet · fortimailToday

  • CVE-2026-126165
    30Monitor

    A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiM

    HighCVSS 7.5No exploit

    fortinet · fortimailToday

  • CVE-2026-126166
    28Monitor

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126167
    28Monitor

    A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126168
    28Monitor

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126169
    28Monitor

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    HighCVSS 7.2No exploit

    fortinet · fortimailToday

  • CVE-2026-126170
    39Monitor

    A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, Fo

    CriticalCVSS 9.8No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126171
    28Monitor

    A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126175
    35Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through

    HighCVSS 8.8No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126176
    32Monitor

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    HighCVSS 8.1No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126177
    32Monitor

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    HighCVSS 8.1No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126178
    28Monitor

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126179
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126180
    33Monitor

    A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan

    HighCVSS 8.4No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126181
    32Monitor

    A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7

    HighCVSS 8.0No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126182
    28Monitor

    A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 t

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126183
    34Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.

    HighCVSS 8.7No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126184
    32Monitor

    A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAna

    HighCVSS 8.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126185
    28Monitor

    A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126211
    28Monitor

    A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyze

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126212
    28Monitor

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126213
    28Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through

    HighCVSS 7.1No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126214
    28Monitor

    A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAna

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126215
    32Monitor

    A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.

    HighCVSS 8.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126217
    34Monitor

    A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.

    HighCVSS 8.7No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126218
    32Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.

    HighCVSS 8.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126219
    28Monitor

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyze

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126220
    28Monitor

    A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126221
    28Monitor

    A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiAnalyzer

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126222
    28Monitor

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126223
    28Monitor

    A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126224
    28Monitor

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAna

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126225
    28Monitor

    A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0 through

    HighCVSS 7.1No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126226
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126227
    28Monitor

    A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thro

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126228
    28Monitor

    A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 th

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126229
    36Monitor

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through

    CriticalCVSS 9.1No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126230
    28Monitor

    A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126231
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126232
    30Monitor

    A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnaly

    HighCVSS 7.5No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126233
    28Monitor

    A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126234
    28Monitor

    A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126235
    28Monitor

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126236
    28Monitor

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 t

    HighCVSS 7.2No exploit

    fortinet · fortimanagerToday

  • CVE-2026-126237
    30Monitor

    A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticato

    HighCVSS 7.5No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126238
    34Monitor

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    HighCVSS 8.6No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126239
    30Monitor

    A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may

    HighCVSS 7.5No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126240
    32Monitor

    A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    HighCVSS 8.2No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126241
    35Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    HighCVSS 8.8No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126242
    29Monitor

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    HighCVSS 7.4No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126243
    28Monitor

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    HighCVSS 7.2No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126244
    30Monitor

    A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator

    HighCVSS 7.5No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126245
    32Monitor

    A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an

    HighCVSS 8.1No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126246
    30Monitor

    A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may all

    HighCVSS 7.5No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126247
    28Monitor

    A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 thro

    HighCVSS 7.2No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126248
    30Monitor

    A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.

    HighCVSS 7.5No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126249
    28Monitor

    A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 ma

    HighCVSS 7.2No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126250
    32Monitor

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    HighCVSS 8.2No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126251
    36Monitor

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    CriticalCVSS 9.1No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126252
    33Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    HighCVSS 8.3No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126253
    37Monitor

    A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.

    CriticalCVSS 9.3No exploit

    fortinet · fortiosToday

  • CVE-2026-126254
    38Monitor

    A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12,

    CriticalCVSS 9.6No exploit

    fortinet · fortiosToday

  • CVE-2026-126255
    29Monitor

    A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4

    HighCVSS 7.4No exploit

    fortinet · fortiosToday

  • CVE-2026-126256
    29Monitor

    A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7

    HighCVSS 7.4No exploit

    fortinet · fortiosToday

  • CVE-2026-126257
    36Monitor

    A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may a

    CriticalCVSS 9.0No exploit

    fortinet · fortiauthenticatorToday

  • CVE-2026-126258
    30Monitor

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port acc

    HighCVSS 7.5No exploit

    fortinet · fortiosToday

  • CVE-2026-126259
    39Monitor

    A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7

    CriticalCVSS 9.8No exploit

    fortinet · fortiosToday

  • CVE-2026-126262
    39Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through

    CriticalCVSS 9.8No exploit

    fortinet · fortianalyzerToday

  • CVE-2026-126263
    39Monitor

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0

    CriticalCVSS 9.8No exploit

    fortinet · fortimailToday

  • CVE-2026-65949
    34Monitor

    Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command Execution

    HighCVSS 8.6No exploit

    lenovo · xclarity integrator for wacToday

  • CVE-2026-65971
    30Monitor

    Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by path

    HighCVSS 7.6Proof of concept

    power-components · livewire-powergridToday

  • CVE-2026-67449
    39Monitor

    Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key

    CriticalCVSS 9.8No exploit

    portabase · portabaseToday

  • CVE-2026-67541
    32Monitor

    Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentials

    HighCVSS 8.1No exploit

    heymrun · heymToday

  • CVE-2026-67542
    28Monitor

    Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports

    HighCVSS 7.1No exploit

    heymrun · heymToday

  • CVE-2026-67543
    35Monitor

    Heym Unsandboxed skill code execution: skills run via a local backend subprocess without the Docker isolation that Python tools mandate

    HighCVSS 8.8No exploit

    heymrun · heymToday

  • CVE-2026-67544
    35Monitor

    Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field

    HighCVSS 8.8No exploit

    heymrun · heymToday

  • CVE-2026-67545
    29Monitor

    Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node

    HighCVSS 7.4No exploit

    heymrun · heymToday