By publication date

Exploited and new serious CVEs: November 2026

3,959 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 39 of 40

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-126276No exploit	NocoDB before 2026.08.1 Client Authentication Bypass via OAuth Token Exchangenocodb · nocodb · CWE-287 Auth bypass	High8.2	—	—	Today
34Monitor	CVE-2026-126277No exploit	NocoDB before 2026.08.1 Uncontrolled Resource Consumption via Shared View Bulk APInocodb · nocodb · CWE-770 Pre-auth Denial of service	High8.7	—	—	Today
34Monitor	CVE-2026-126278No exploit	NocoDB before 2026.08.1 Password Reset Token Race Conditionnocodb · nocodb · CWE-362 Pre-auth Race condition	High8.7	—	—	Today
28Monitor	CVE-2026-126279No exploit	NocoDB before 2026.06.2 Stored XSS via AI Field Prompt Tooltipnocodb · nocodb · CWE-79 XSS	High7.0	—	—	Today
36Monitor	CVE-2026-126280No exploit	NocoDB before 2026.08.0 Refresh Token Reuse via Non-Atomic Rotationnocodb · nocodb · CWE-362 Pre-auth Race condition	Critical9.1	—	—	Today
28Monitor	CVE-2026-126281No exploit	NocoDB before 2026.08.0 Private Integration Credential Exposure via Copynocodb · nocodb · CWE-862 Broken access control (IDOR)	High7.1	—	—	Today
34Monitor	CVE-2026-126282No exploit	NocoDB from 2026.04.0 before 2026.08.0 Improper Privilege Management via Organization Role Updatenocodb · nocodb · CWE-269	High8.6	—	—	Today
34Monitor	CVE-2026-126283No exploit	NocoDB before 2026.08.0 Incorrect Authorization via Base-Scoped API Tokensnocodb · nocodb · CWE-863 Broken access control (IDOR)	High8.7	—	—	Today
33Monitor	CVE-2026-126285No exploit	NocoDB before 2026.08.0 SQL Injection via Legacy where Query Filternocodb · nocodb · CWE-89 SQL injection	High8.3	—	—	Today
34Monitor	CVE-2026-126286No exploit	NocoDB before 2026.08.0 Reflected XSS via ncRedirectUrl in PageLeavingWarning.vuenocodb · nocodb · CWE-79 Pre-auth XSS	High8.6	—	—	Today
28Monitor	CVE-2026-126290No exploit	NocoDB before 2026.07.0 Private Integration Credential Exposure via Base Integration Readnocodb · nocodb · CWE-200 Info leak	High7.1	—	—	Today
34Monitor	CVE-2026-126291No exploit	NocoDB before 2026.06.2 SQL Injection via User Email in Base User Querynocodb · nocodb · CWE-89 RCE SQL injection	High8.7	—	—	Today
28Monitor	CVE-2026-126293No exploit	NocoDB before 2026.06.2 Attachment Size Limit Bypass via Upload by URLnocodb · nocodb · CWE-770 Denial of service	High7.1	—	—	Today
34Monitor	CVE-2026-126294No exploit	Grav Login Plugin before 3.11.0 Two-Factor Authentication Bypass via /logingetgrav · grav · CWE-287 Pre-auth Auth bypass	High8.7	—	—	Today
28Monitor	CVE-2026-126295No exploit	NLTK 3.10.0 before 3.10.4 Arbitrary File Read via BllipParser Model Pathsnltk · nltk · CWE-22 Path traversal	High7.0	—	—	Today
34Monitor	CVE-2026-126297No exploit	NLTK before 3.10.4 CPU Denial of Service via ConllCorpusReader srl_instancesnltk · nltk · CWE-400 Pre-auth Denial of service	High8.7	—	—	Today
34Monitor	CVE-2026-126298No exploit	NLTK before 3.10.4 Quadratic CPU Denial of Service via Tree.chomsky_normal_formnltk · nltk · CWE-400 Pre-auth Denial of service	High8.7	—	—	Today
34Monitor	CVE-2026-126299No exploit	NLTK before 3.10.4 Quadratic-Time Denial of Service via CCG Lexicon fromstringnltk · nltk · CWE-400 Pre-auth Denial of service	High8.7	—	—	Today
34Monitor	CVE-2026-126303No exploit	NLTK before 3.10.4 Denial of Service via SteppingRecursiveDescentParser.parse()nltk · nltk · CWE-400 Pre-auth Denial of service	High8.7	—	—	Today
34Monitor	CVE-2026-126304No exploit	NLTK 3.10.0 before 3.10.4 Symlink Escape in YCOECorpusReadernltk · nltk · CWE-59 Pre-auth	High8.7	—	—	Today
34Monitor	CVE-2026-126305No exploit	EspoCRM before 10.0.9 Stored XSS via Knowledge Base Article Attachmentsespocrm · espocrm · CWE-79 XSS	High8.5	—	—	Today
34Monitor	CVE-2026-126306No exploit	EspoCRM before 10.0.8 Stored XSS via Malicious SVG Attachmentespocrm · espocrm · CWE-79 XSS	High8.6	—	—	Today
34Monitor	CVE-2026-126307No exploit	Nezha Dashboard before 2.6.0 Multiple Authorization and Tenant Isolation Flawsnezhahq · nezha · CWE-863 Pre-auth Broken access control (IDOR)	High8.7	—	—	Today
34Monitor	CVE-2026-126308No exploit	Coder 2.38.0 before 2.38.2 Session Token Leak via Sub-Agent External Appscoder · coder · CWE-201	High8.7	—	—	Today
30Monitor	CVE-2026-126309No exploit	OpenBao before 2.6.5 and 2.7.2 Path Traversal in Transit Key Importopenbao · openbao · CWE-73 Path traversal	High7.6	—	—	Today
28Monitor	CVE-2026-126310No exploit	OpenBao before 2.6.5 and 2.7.2 OIDC Provider Authentication Bypass via Client Credentialsopenbao · openbao · CWE-287 Pre-auth Auth bypass	High7.0	—	—	Today
30Monitor	CVE-2026-126312No exploit	OpenBao before 2.6.5 and 2.7.2 ACL Bypass via Non-Canonical Plugin Pathsopenbao · openbao · CWE-178	High7.6	—	—	Today
34Monitor	CVE-2026-126314No exploit	Frappe HRMS 15.0.0 before 15.64.6 Missing Authorization in Bulk Record Creationfrappe · hrms · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
37Monitor	CVE-2026-126315No exploit	Frappe HRMS 16.14.0 before 16.20.1 Telemetry Setting Bypass Information Exposurefrappe · hrms · CWE-359 Pre-auth Info leak	Critical9.3	—	—	Today
34Monitor	CVE-2026-126317No exploit	Frappe HRMS 16.0.0 before 16.20.1 Missing Authorization in Company Details Endpointfrappe · hrms · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
28Monitor	CVE-2026-126319No exploit	Dockhand before 1.0.55 Arbitrary File Read via Stack Adoption Compose Pathfinsys · dockhand · CWE-22 Path traversal	High7.1	—	—	Today
28Monitor	CVE-2026-126320No exploit	Dockhand before 1.0.55 Improper Authorization via Container File Download Endpointfinsys · dockhand · CWE-285 Broken access control (IDOR)	High7.1	—	—	Today
28Monitor	CVE-2026-126321No exploit	Dockhand before 1.0.55 Path Traversal via Symlink in File-Browser Endpointsfinsys · dockhand · CWE-22 Path traversal	High7.2	—	—	Today
34Monitor	CVE-2026-126322No exploit	OpenEMR before 8.3.0 Unsanitized Deserialization via patient_match_dialog.phpopenemr · openemr · CWE-502 Deserialization	High8.6	—	—	Today
34Monitor	CVE-2026-126370No exploit	Vvveb through 1.0.8.6 Authenticated RCE via .sql Code Injection in editor/code/savegivanz · vvveb · CWE-184 RCE	High8.7	—	—	Today
34Monitor	CVE-2026-126372No exploit	Vvveb through 1.0.8.6 Template Upload Bypass via MediaTrait editor/codegivanz · vvveb · CWE-434 File upload	High8.7	—	—	Today
28Monitor	CVE-2026-126375No exploit	Vvveb through 1.0.8.6 Cross-Tenant Digital Asset Tampering via Media Traitgivanz · vvveb · CWE-862 Broken access control (IDOR)	High7.2	—	—	Today
36Monitor	CVE-2026-126377No exploit	Vvveb before 1.0.9.0 Cookie Forgery via PHP Type Juggling in generateCookie()givanz · vvveb · CWE-287 Pre-auth Auth bypass	Critical9.2	—	—	Today
37Monitor	CVE-2026-126378No exploit	Vvveb through 1.0.8.6 Webshell Upload via Theme Installer validFile() Bypassgivanz · vvveb · CWE-434 RCE File upload	Critical9.4	—	—	Today
33Monitor	CVE-2026-126379No exploit	Vvveb 1.0.8.6 SSRF via oEmbed Proxy DNS Rebindinggivanz · vvveb · CWE-918 SSRF	High8.3	—	—	Today
37Monitor	CVE-2026-126380No exploit	Vvveb before 1.0.9.0 RCE via .phar Extension Denylist Bypass in Media Uploadgivanz · vvveb · CWE-434 RCE File upload	Critical9.4	—	—	Today
30Monitor	CVE-2026-126384No exploit	n8n before 1.123.89 RCE via Bundled GraphicsMagick in Edit Image Noden8n-io · n8n · CWE-1395 RCE	High7.7	—	—	Today
30Monitor	CVE-2026-126391No exploit	n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escapen8n-io · n8n · CWE-94 RCE	High7.7	—	—	Today
34Monitor	CVE-2026-126397No exploit	vLLM 0.10.1 before 0.31.0 Cohere2 Vision DoS via max_patchesvllm-project · vllm · CWE-400 Pre-auth Denial of service	High8.7	—	—	Today
32Monitor	CVE-2026-126398No exploit	vLLM 0.28.0 before 0.30.0 Denial of Service via Prompt Embeds on XD-RoPE Modelsvllm-project · vllm · CWE-617 Pre-auth	High8.2	—	—	Today
28Monitor	CVE-2026-126399No exploit	vLLM 0.19.0 before 0.31.0 Resource Exhaustion via Request-Level num_framesvllm-project · vllm · CWE-770 Denial of service	High7.1	—	—	Today
34Monitor	CVE-2026-126401No exploit	Fleet before 4.86.2 Unauthenticated DoS via SSO Callback XML Canonicalizationfleetdm · fleet · CWE-407 Pre-auth	High8.7	—	—	Today
34Monitor	CVE-2026-126402No exploit	Fleet before 4.89.0 Broken Access Control via User Administration APIfleetdm · fleet · CWE-863 Broken access control (IDOR)	High8.6	—	—	Today
34Monitor	CVE-2026-126403No exploit	Coder 2.38.0 before 2.38.4 Authorization Bypass via External Agent Credentials Endpointcoder · coder · CWE-863 Broken access control (IDOR)	High8.5	—	—	Today
30Monitor	CVE-2026-126404No exploit	Coder from 2.38.0 before 2.38.4 Privilege Escalation via API Key Creationcoder · coder · CWE-266	High7.6	—	—	Today
28Monitor	CVE-2026-126405No exploit	Coder from 2.38.0 before 2.38.4 Memory Exhaustion DoS via Web Pushcoder · coder · CWE-400 Denial of service	High7.1	—	—	Today
34Monitor	CVE-2026-126412No exploit	Frappe HRMS 15.0.0 before 15.64.1 Missing Authorization in Bulk Record Actionfrappe · hrms · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
34Monitor	CVE-2026-126414No exploit	Frappe HRMS 15.0.0 before 15.64.2 Missing Authorization in Record Update Endpointsfrappe · hrms · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
28Monitor	CVE-2026-126415No exploit	OpenEMR before 8.5.0 Missing Authorization via Patientvalidation Moduleopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	—	Today
28Monitor	CVE-2026-126416No exploit	OpenEMR before 8.5.0 Improper Authorization via patient_tracker_status.phpopenemr · openemr · CWE-285 Broken access control (IDOR) CSRF	High7.1	—	—	Today
30Monitor	CVE-2026-126428No exploit	OpenEMR before 8.5.0 RCE via Stored ERA Upload and Background Servicesopenemr · openemr · CWE-434 RCE SQL injection File upload	High7.7	—	—	Today
28Monitor	CVE-2026-126429No exploit	OpenEMR before 8.5.0 Local File Disclosure via doc_lib.php PDF Rendereropenemr · openemr · CWE-73 Path traversal	High7.1	—	—	Today
34Monitor	CVE-2026-126430No exploit	OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Field Namesopenemr · openemr · CWE-89 SQL injection	High8.6	—	—	Today
30Monitor	CVE-2026-126431No exploit	OpenEMR before 8.5.0 Second-Order SQL Injection via Carecoordination CCDA Mapperopenemr · openemr · CWE-89 SQL injection	High7.6	—	—	Today
34Monitor	CVE-2026-126434No exploit	OpenEMR before 8.5.0 Missing Authorization in Procedure Order Formopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.6	—	—	Today
34Monitor	CVE-2026-126436No exploit	OpenEMR before 8.5.0 OAuth2 Grant Type Enforcement Bypass via Token Endpointopenemr · openemr · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	—	Today
28Monitor	CVE-2026-126437No exploit	OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.phpopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	—	Today
34Monitor	CVE-2026-126442No exploit	OpenEMR before 8.5.0 Missing Authorization via create_portallogin.php Portal Takeoveropenemr · openemr · CWE-862 Broken access control (IDOR)	High8.6	—	—	Today
28Monitor	CVE-2026-126443No exploit	OpenEMR before 8.5.0 Missing Authorization via dynamic_finder_ajax.php Patient Finderopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	—	Today
28Monitor	CVE-2026-126449No exploit	OpenEMR before 8.5.0 Missing Authorization in immunizations.php, diagnosis_full.php, billing_process.phpopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High7.1	—	—	Today
34Monitor	CVE-2026-126451No exploit	OpenEMR before 8.5.0 Stored XSS via Document Template Renderingopenemr · openemr · CWE-79 XSS CSRF	High8.5	—	—	Today
28Monitor	CVE-2026-126452No exploit	OpenEMR before 8.5.0 Missing Authorization via diagnosis_full.php Billing Operationsopenemr · openemr · CWE-639 Broken access control (IDOR)	High7.1	—	—	Today
28Monitor	CVE-2026-126453No exploit	OpenEMR before 8.5.0 Inverted Document Expiration Check Exposes PHI via FHIR Binaryopenemr · openemr · CWE-613	High7.1	—	—	Today
34Monitor	CVE-2026-126454No exploit	OpenEMR before 8.5.0 TOTP Brute Force via main_screen.php and OAuth2openemr · openemr · CWE-307	High8.6	—	—	Today
34Monitor	CVE-2026-126455No exploit	OpenEMR before 8.5.0 Privilege Escalation via Missing Authorization and SQL Injectionopenemr · openemr · CWE-862 SQL injection Broken access control (IDOR)	High8.6	—	—	Today
28Monitor	CVE-2026-126457No exploit	OpenEMR before 8.5.0 Missing Authorization in InstallerController Module Actionsopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	—	Today
34Monitor	CVE-2026-126458No exploit	OpenEMR before 8.5.0 Missing Authorization via authorizations_full.phpopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High8.7	—	—	Today
28Monitor	CVE-2026-126460No exploit	OpenEMR before 8.5.0 Persistent SQL Injection via ERA File Reprocessingopenemr · openemr · CWE-89 SQL injection	High7.1	—	—	Today
28Monitor	CVE-2026-126461No exploit	OpenEMR before 8.5.0 Missing Authorization via user_settings.php Global Overrideopenemr · openemr · CWE-918 SSRF	High7.1	—	—	Today
28Monitor	CVE-2026-126463No exploit	OpenEMR before 8.5.0 SQL Injection via billing parser, reports, Zend modulesopenemr · openemr · CWE-89 SQL injection	High7.1	—	—	Today
28Monitor	CVE-2026-126465No exploit	OpenEMR before 8.5.0 SQL Injection via OnsiteActivityView _BitwiseAnd Criteriaopenemr · openemr · CWE-89 SQL injection	High7.1	—	—	Today
34Monitor	CVE-2026-126466No exploit	OpenEMR before 8.5.0 Missing Authorization in Patient Create and Search Endpointsopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
28Monitor	CVE-2026-126467No exploit	OpenEMR before 8.5.0 Mass Assignment via Observation Form save.phpopenemr · openemr · CWE-915	High7.1	—	—	Today
34Monitor	CVE-2026-126468No exploit	OpenEMR before 8.5.0 Missing Authorization on Reports and Reminder Endpointsopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
34Monitor	CVE-2026-126469No exploit	OpenEMR before 8.5.0 Missing Authorization in custom/ Export and Chart-Tracker Scriptsopenemr · openemr · CWE-862 Broken access control (IDOR)	High8.7	—	—	Today
34Monitor	CVE-2026-126470No exploit	OpenEMR before 8.5.0 IDOR in Carecoordination CCDA/CCR/QRDA Document Actionsopenemr · openemr · CWE-639 Broken access control (IDOR)	High8.7	—	—	Today
28Monitor	CVE-2026-126471No exploit	OpenEMR before 8.5.0 Missing Authorization via print_referral.php and trend_form.phpopenemr · openemr · CWE-862 Broken access control (IDOR)	High7.1	—	—	Today
34Monitor	CVE-2026-126472No exploit	OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosureopenemr · openemr · CWE-639 Broken access control (IDOR) CSRF	High8.7	—	—	Today
37Monitor	CVE-2026-126473No exploit	OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalizationopenemr · openemr · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.3	—	—	Today
28Monitor	CVE-2026-126478No exploit	OpenEMR before 8.5.0 SQL Injection via form_icd_codes in Syndromic Surveillanceopenemr · openemr · CWE-89 SQL injection	High7.2	—	—	Today
28Monitor	CVE-2026-126479No exploit	OpenEMR before 8.5.0 Missing Authorization in Module Manager Installer Actionsopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High7.2	—	—	Today
34Monitor	CVE-2026-126480No exploit	OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Parameter Namesopenemr · openemr · CWE-89 SQL injection CSRF	High8.6	—	—	Today
28Monitor	CVE-2026-126481No exploit	OpenEMR before 8.5.0 Path Traversal via ERA 835 File Uploadopenemr · openemr · CWE-22 Path traversal	High7.2	—	—	Today
34Monitor	CVE-2026-126482No exploit	OpenEMR before 8.5.0 SQL Injection via CLP01 element of X12 835 ERA uploadopenemr · openemr · CWE-89 RCE SQL injection	High8.7	—	—	Today
28Monitor	CVE-2026-126483No exploit	OpenEMR before 8.5.0 SQL Injection via form_facility in ippf_statistics.phpopenemr · openemr · CWE-89 SQL injection	High7.1	—	—	Today
28Monitor	CVE-2026-126486No exploit	OpenEMR before 8.5.0 Missing Authorization via portal/import_template.phpopenemr · openemr · CWE-862 Broken access control (IDOR) CSRF	High7.2	—	—	Today
34Monitor	CVE-2026-126487No exploit	OpenEMR before 8.5.0 Global Configuration Override via user_settings.phpopenemr · openemr · CWE-269	High8.7	—	—	Today
33Monitor	CVE-2026-126488No exploit	OpenEMR before 8.5.0 SQL Injection via OnsiteDocument.Query _BitwiseAndopenemr · openemr · CWE-89 SQL injection	High8.3	—	—	Today
34Monitor	CVE-2026-126489No exploit	OpenEMR before 8.5.0 SQL Injection via IPPF Contraceptive Issue Featureopenemr · openemr · CWE-89 RCE SQL injection	High8.6	—	—	Today
33Monitor	CVE-2026-126491No exploit	OpenEMR before 8.5.0 SQL Injection via getByPatientDemographics in patient.inc.phpopenemr · openemr · CWE-89 SQL injection	High8.3	—	—	Today
28Monitor	CVE-2026-126492No exploit	OpenEMR before 8.5.0 Second-Order SQL Injection via dynamic_finder.phpopenemr · openemr · CWE-89 SQL injection	High7.1	—	—	Today
28Monitor	CVE-2026-126494No exploit	OpenEMR before 8.4.0 Privilege Escalation via SMART/OAuth Scope Finalizationopenemr · openemr · CWE-863 Broken access control (IDOR)	High7.1	—	—	Today
36Monitor	CVE-2026-126937No exploit	Zipline before 4.6.5 TOCTOU Race Condition via /api/setupdiced · zipline · CWE-367 Pre-auth Race condition	Critical9.2	—	—	Today
28Monitor	CVE-2026-126938No exploit	Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headersdiced · zipline · CWE-770 Denial of service	High7.1	—	—	Today
32Monitor	CVE-2026-126941No exploit	Zipline through 4.6.2 Privilege Escalation via Missing Role Checks on User Endpointsdiced · zipline · CWE-200 Info leak	High8.2	—	—	Today

CVE-2026-126276
32Monitor
NocoDB before 2026.08.1 Client Authentication Bypass via OAuth Token Exchange
HighCVSS 8.2No exploit
- Auth bypass
nocodb · nocodbToday
CVE-2026-126277
34Monitor
NocoDB before 2026.08.1 Uncontrolled Resource Consumption via Shared View Bulk API
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
nocodb · nocodbToday
CVE-2026-126278
34Monitor
NocoDB before 2026.08.1 Password Reset Token Race Condition
HighCVSS 8.7No exploit
- Pre-auth
- Race condition
nocodb · nocodbToday
CVE-2026-126279
28Monitor
NocoDB before 2026.06.2 Stored XSS via AI Field Prompt Tooltip
HighCVSS 7.0No exploit
- XSS
nocodb · nocodbToday
CVE-2026-126280
36Monitor
NocoDB before 2026.08.0 Refresh Token Reuse via Non-Atomic Rotation
CriticalCVSS 9.1No exploit
- Pre-auth
- Race condition
nocodb · nocodbToday
CVE-2026-126281
28Monitor
NocoDB before 2026.08.0 Private Integration Credential Exposure via Copy
HighCVSS 7.1No exploit
- Broken access control (IDOR)
nocodb · nocodbToday
CVE-2026-126282
34Monitor
NocoDB from 2026.04.0 before 2026.08.0 Improper Privilege Management via Organization Role Update
HighCVSS 8.6No exploit
nocodb · nocodbToday
CVE-2026-126283
34Monitor
NocoDB before 2026.08.0 Incorrect Authorization via Base-Scoped API Tokens
HighCVSS 8.7No exploit
- Broken access control (IDOR)
nocodb · nocodbToday
CVE-2026-126285
33Monitor
NocoDB before 2026.08.0 SQL Injection via Legacy where Query Filter
HighCVSS 8.3No exploit
- SQL injection
nocodb · nocodbToday
CVE-2026-126286
34Monitor
NocoDB before 2026.08.0 Reflected XSS via ncRedirectUrl in PageLeavingWarning.vue
HighCVSS 8.6No exploit
- Pre-auth
- XSS
nocodb · nocodbToday
CVE-2026-126290
28Monitor
NocoDB before 2026.07.0 Private Integration Credential Exposure via Base Integration Read
HighCVSS 7.1No exploit
- Info leak
nocodb · nocodbToday
CVE-2026-126291
34Monitor
NocoDB before 2026.06.2 SQL Injection via User Email in Base User Query
HighCVSS 8.7No exploit
- RCE
- SQL injection
nocodb · nocodbToday
CVE-2026-126293
28Monitor
NocoDB before 2026.06.2 Attachment Size Limit Bypass via Upload by URL
HighCVSS 7.1No exploit
- Denial of service
nocodb · nocodbToday
CVE-2026-126294
34Monitor
Grav Login Plugin before 3.11.0 Two-Factor Authentication Bypass via /login
HighCVSS 8.7No exploit
- Pre-auth
- Auth bypass
getgrav · gravToday
CVE-2026-126295
28Monitor
NLTK 3.10.0 before 3.10.4 Arbitrary File Read via BllipParser Model Paths
HighCVSS 7.0No exploit
- Path traversal
nltk · nltkToday
CVE-2026-126297
34Monitor
NLTK before 3.10.4 CPU Denial of Service via ConllCorpusReader srl_instances
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
nltk · nltkToday
CVE-2026-126298
34Monitor
NLTK before 3.10.4 Quadratic CPU Denial of Service via Tree.chomsky_normal_form
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
nltk · nltkToday
CVE-2026-126299
34Monitor
NLTK before 3.10.4 Quadratic-Time Denial of Service via CCG Lexicon fromstring
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
nltk · nltkToday
CVE-2026-126303
34Monitor
NLTK before 3.10.4 Denial of Service via SteppingRecursiveDescentParser.parse()
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
nltk · nltkToday
CVE-2026-126304
34Monitor
NLTK 3.10.0 before 3.10.4 Symlink Escape in YCOECorpusReader
HighCVSS 8.7No exploit
- Pre-auth
nltk · nltkToday
CVE-2026-126305
34Monitor
EspoCRM before 10.0.9 Stored XSS via Knowledge Base Article Attachments
HighCVSS 8.5No exploit
- XSS
espocrm · espocrmToday
CVE-2026-126306
34Monitor
EspoCRM before 10.0.8 Stored XSS via Malicious SVG Attachment
HighCVSS 8.6No exploit
- XSS
espocrm · espocrmToday
CVE-2026-126307
34Monitor
Nezha Dashboard before 2.6.0 Multiple Authorization and Tenant Isolation Flaws
HighCVSS 8.7No exploit
- Pre-auth
- Broken access control (IDOR)
nezhahq · nezhaToday
CVE-2026-126308
34Monitor
Coder 2.38.0 before 2.38.2 Session Token Leak via Sub-Agent External Apps
HighCVSS 8.7No exploit
coder · coderToday
CVE-2026-126309
30Monitor
OpenBao before 2.6.5 and 2.7.2 Path Traversal in Transit Key Import
HighCVSS 7.6No exploit
- Path traversal
openbao · openbaoToday
CVE-2026-126310
28Monitor
OpenBao before 2.6.5 and 2.7.2 OIDC Provider Authentication Bypass via Client Credentials
HighCVSS 7.0No exploit
- Pre-auth
- Auth bypass
openbao · openbaoToday
CVE-2026-126312
30Monitor
OpenBao before 2.6.5 and 2.7.2 ACL Bypass via Non-Canonical Plugin Paths
HighCVSS 7.6No exploit
openbao · openbaoToday
CVE-2026-126314
34Monitor
Frappe HRMS 15.0.0 before 15.64.6 Missing Authorization in Bulk Record Creation
HighCVSS 8.7No exploit
- Broken access control (IDOR)
frappe · hrmsToday
CVE-2026-126315
37Monitor
Frappe HRMS 16.14.0 before 16.20.1 Telemetry Setting Bypass Information Exposure
CriticalCVSS 9.3No exploit
- Pre-auth
- Info leak
frappe · hrmsToday
CVE-2026-126317
34Monitor
Frappe HRMS 16.0.0 before 16.20.1 Missing Authorization in Company Details Endpoint
HighCVSS 8.7No exploit
- Broken access control (IDOR)
frappe · hrmsToday
CVE-2026-126319
28Monitor
Dockhand before 1.0.55 Arbitrary File Read via Stack Adoption Compose Path
HighCVSS 7.1No exploit
- Path traversal
finsys · dockhandToday
CVE-2026-126320
28Monitor
Dockhand before 1.0.55 Improper Authorization via Container File Download Endpoint
HighCVSS 7.1No exploit
- Broken access control (IDOR)
finsys · dockhandToday
CVE-2026-126321
28Monitor
Dockhand before 1.0.55 Path Traversal via Symlink in File-Browser Endpoints
HighCVSS 7.2No exploit
- Path traversal
finsys · dockhandToday
CVE-2026-126322
34Monitor
OpenEMR before 8.3.0 Unsanitized Deserialization via patient_match_dialog.php
HighCVSS 8.6No exploit
- Deserialization
openemr · openemrToday
CVE-2026-126370
34Monitor
Vvveb through 1.0.8.6 Authenticated RCE via .sql Code Injection in editor/code/save
HighCVSS 8.7No exploit
- RCE
givanz · vvvebToday
CVE-2026-126372
34Monitor
Vvveb through 1.0.8.6 Template Upload Bypass via MediaTrait editor/code
HighCVSS 8.7No exploit
- File upload
givanz · vvvebToday
CVE-2026-126375
28Monitor
Vvveb through 1.0.8.6 Cross-Tenant Digital Asset Tampering via Media Trait
HighCVSS 7.2No exploit
- Broken access control (IDOR)
givanz · vvvebToday
CVE-2026-126377
36Monitor
Vvveb before 1.0.9.0 Cookie Forgery via PHP Type Juggling in generateCookie()
CriticalCVSS 9.2No exploit
- Pre-auth
- Auth bypass
givanz · vvvebToday
CVE-2026-126378
37Monitor
Vvveb through 1.0.8.6 Webshell Upload via Theme Installer validFile() Bypass
CriticalCVSS 9.4No exploit
- RCE
- File upload
givanz · vvvebToday
CVE-2026-126379
33Monitor
Vvveb 1.0.8.6 SSRF via oEmbed Proxy DNS Rebinding
HighCVSS 8.3No exploit
- SSRF
givanz · vvvebToday
CVE-2026-126380
37Monitor
Vvveb before 1.0.9.0 RCE via .phar Extension Denylist Bypass in Media Upload
CriticalCVSS 9.4No exploit
- RCE
- File upload
givanz · vvvebToday
CVE-2026-126384
30Monitor
n8n before 1.123.89 RCE via Bundled GraphicsMagick in Edit Image Node
HighCVSS 7.7No exploit
- RCE
n8n-io · n8nToday
CVE-2026-126391
30Monitor
n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape
HighCVSS 7.7No exploit
- RCE
n8n-io · n8nToday
CVE-2026-126397
34Monitor
vLLM 0.10.1 before 0.31.0 Cohere2 Vision DoS via max_patches
HighCVSS 8.7No exploit
- Pre-auth
- Denial of service
vllm-project · vllmToday
CVE-2026-126398
32Monitor
vLLM 0.28.0 before 0.30.0 Denial of Service via Prompt Embeds on XD-RoPE Models
HighCVSS 8.2No exploit
- Pre-auth
vllm-project · vllmToday
CVE-2026-126399
28Monitor
vLLM 0.19.0 before 0.31.0 Resource Exhaustion via Request-Level num_frames
HighCVSS 7.1No exploit
- Denial of service
vllm-project · vllmToday
CVE-2026-126401
34Monitor
Fleet before 4.86.2 Unauthenticated DoS via SSO Callback XML Canonicalization
HighCVSS 8.7No exploit
- Pre-auth
fleetdm · fleetToday
CVE-2026-126402
34Monitor
Fleet before 4.89.0 Broken Access Control via User Administration API
HighCVSS 8.6No exploit
- Broken access control (IDOR)
fleetdm · fleetToday
CVE-2026-126403
34Monitor
Coder 2.38.0 before 2.38.4 Authorization Bypass via External Agent Credentials Endpoint
HighCVSS 8.5No exploit
- Broken access control (IDOR)
coder · coderToday
CVE-2026-126404
30Monitor
Coder from 2.38.0 before 2.38.4 Privilege Escalation via API Key Creation
HighCVSS 7.6No exploit
coder · coderToday
CVE-2026-126405
28Monitor
Coder from 2.38.0 before 2.38.4 Memory Exhaustion DoS via Web Push
HighCVSS 7.1No exploit
- Denial of service
coder · coderToday
CVE-2026-126412
34Monitor
Frappe HRMS 15.0.0 before 15.64.1 Missing Authorization in Bulk Record Action
HighCVSS 8.7No exploit
- Broken access control (IDOR)
frappe · hrmsToday
CVE-2026-126414
34Monitor
Frappe HRMS 15.0.0 before 15.64.2 Missing Authorization in Record Update Endpoints
HighCVSS 8.7No exploit
- Broken access control (IDOR)
frappe · hrmsToday
CVE-2026-126415
28Monitor
OpenEMR before 8.5.0 Missing Authorization via Patientvalidation Module
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126416
28Monitor
OpenEMR before 8.5.0 Improper Authorization via patient_tracker_status.php
HighCVSS 7.1No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126428
30Monitor
OpenEMR before 8.5.0 RCE via Stored ERA Upload and Background Services
HighCVSS 7.7No exploit
- RCE
- SQL injection
- File upload
openemr · openemrToday
CVE-2026-126429
28Monitor
OpenEMR before 8.5.0 Local File Disclosure via doc_lib.php PDF Renderer
HighCVSS 7.1No exploit
- Path traversal
openemr · openemrToday
CVE-2026-126430
34Monitor
OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Field Names
HighCVSS 8.6No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126431
30Monitor
OpenEMR before 8.5.0 Second-Order SQL Injection via Carecoordination CCDA Mapper
HighCVSS 7.6No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126434
34Monitor
OpenEMR before 8.5.0 Missing Authorization in Procedure Order Form
HighCVSS 8.6No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126436
34Monitor
OpenEMR before 8.5.0 OAuth2 Grant Type Enforcement Bypass via Token Endpoint
HighCVSS 8.7No exploit
- Pre-auth
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126437
28Monitor
OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.php
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126442
34Monitor
OpenEMR before 8.5.0 Missing Authorization via create_portallogin.php Portal Takeover
HighCVSS 8.6No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126443
28Monitor
OpenEMR before 8.5.0 Missing Authorization via dynamic_finder_ajax.php Patient Finder
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126449
28Monitor
OpenEMR before 8.5.0 Missing Authorization in immunizations.php, diagnosis_full.php, billing_process.php
HighCVSS 7.1No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126451
34Monitor
OpenEMR before 8.5.0 Stored XSS via Document Template Rendering
HighCVSS 8.5No exploit
- XSS
- CSRF
openemr · openemrToday
CVE-2026-126452
28Monitor
OpenEMR before 8.5.0 Missing Authorization via diagnosis_full.php Billing Operations
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126453
28Monitor
OpenEMR before 8.5.0 Inverted Document Expiration Check Exposes PHI via FHIR Binary
HighCVSS 7.1No exploit
openemr · openemrToday
CVE-2026-126454
34Monitor
OpenEMR before 8.5.0 TOTP Brute Force via main_screen.php and OAuth2
HighCVSS 8.6No exploit
openemr · openemrToday
CVE-2026-126455
34Monitor
OpenEMR before 8.5.0 Privilege Escalation via Missing Authorization and SQL Injection
HighCVSS 8.6No exploit
- SQL injection
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126457
28Monitor
OpenEMR before 8.5.0 Missing Authorization in InstallerController Module Actions
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126458
34Monitor
OpenEMR before 8.5.0 Missing Authorization via authorizations_full.php
HighCVSS 8.7No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126460
28Monitor
OpenEMR before 8.5.0 Persistent SQL Injection via ERA File Reprocessing
HighCVSS 7.1No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126461
28Monitor
OpenEMR before 8.5.0 Missing Authorization via user_settings.php Global Override
HighCVSS 7.1No exploit
- SSRF
openemr · openemrToday
CVE-2026-126463
28Monitor
OpenEMR before 8.5.0 SQL Injection via billing parser, reports, Zend modules
HighCVSS 7.1No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126465
28Monitor
OpenEMR before 8.5.0 SQL Injection via OnsiteActivityView _BitwiseAnd Criteria
HighCVSS 7.1No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126466
34Monitor
OpenEMR before 8.5.0 Missing Authorization in Patient Create and Search Endpoints
HighCVSS 8.7No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126467
28Monitor
OpenEMR before 8.5.0 Mass Assignment via Observation Form save.php
HighCVSS 7.1No exploit
openemr · openemrToday
CVE-2026-126468
34Monitor
OpenEMR before 8.5.0 Missing Authorization on Reports and Reminder Endpoints
HighCVSS 8.7No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126469
34Monitor
OpenEMR before 8.5.0 Missing Authorization in custom/ Export and Chart-Tracker Scripts
HighCVSS 8.7No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126470
34Monitor
OpenEMR before 8.5.0 IDOR in Carecoordination CCDA/CCR/QRDA Document Actions
HighCVSS 8.7No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126471
28Monitor
OpenEMR before 8.5.0 Missing Authorization via print_referral.php and trend_form.php
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126472
34Monitor
OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosure
HighCVSS 8.7No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126473
37Monitor
OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalization
CriticalCVSS 9.3No exploit
- Pre-auth
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126478
28Monitor
OpenEMR before 8.5.0 SQL Injection via form_icd_codes in Syndromic Surveillance
HighCVSS 7.2No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126479
28Monitor
OpenEMR before 8.5.0 Missing Authorization in Module Manager Installer Actions
HighCVSS 7.2No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126480
34Monitor
OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Parameter Names
HighCVSS 8.6No exploit
- SQL injection
- CSRF
openemr · openemrToday
CVE-2026-126481
28Monitor
OpenEMR before 8.5.0 Path Traversal via ERA 835 File Upload
HighCVSS 7.2No exploit
- Path traversal
openemr · openemrToday
CVE-2026-126482
34Monitor
OpenEMR before 8.5.0 SQL Injection via CLP01 element of X12 835 ERA upload
HighCVSS 8.7No exploit
- RCE
- SQL injection
openemr · openemrToday
CVE-2026-126483
28Monitor
OpenEMR before 8.5.0 SQL Injection via form_facility in ippf_statistics.php
HighCVSS 7.1No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126486
28Monitor
OpenEMR before 8.5.0 Missing Authorization via portal/import_template.php
HighCVSS 7.2No exploit
- Broken access control (IDOR)
- CSRF
openemr · openemrToday
CVE-2026-126487
34Monitor
OpenEMR before 8.5.0 Global Configuration Override via user_settings.php
HighCVSS 8.7No exploit
openemr · openemrToday
CVE-2026-126488
33Monitor
OpenEMR before 8.5.0 SQL Injection via OnsiteDocument.Query _BitwiseAnd
HighCVSS 8.3No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126489
34Monitor
OpenEMR before 8.5.0 SQL Injection via IPPF Contraceptive Issue Feature
HighCVSS 8.6No exploit
- RCE
- SQL injection
openemr · openemrToday
CVE-2026-126491
33Monitor
OpenEMR before 8.5.0 SQL Injection via getByPatientDemographics in patient.inc.php
HighCVSS 8.3No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126492
28Monitor
OpenEMR before 8.5.0 Second-Order SQL Injection via dynamic_finder.php
HighCVSS 7.1No exploit
- SQL injection
openemr · openemrToday
CVE-2026-126494
28Monitor
OpenEMR before 8.4.0 Privilege Escalation via SMART/OAuth Scope Finalization
HighCVSS 7.1No exploit
- Broken access control (IDOR)
openemr · openemrToday
CVE-2026-126937
36Monitor
Zipline before 4.6.5 TOCTOU Race Condition via /api/setup
CriticalCVSS 9.2No exploit
- Pre-auth
- Race condition
diced · ziplineToday
CVE-2026-126938
28Monitor
Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headers
HighCVSS 7.1No exploit
- Denial of service
diced · ziplineToday
CVE-2026-126941
32Monitor
Zipline through 4.6.2 Privilege Escalation via Missing Role Checks on User Endpoints
HighCVSS 8.2No exploit
- Info leak
diced · ziplineToday