Skip to content
Noroxi
By publication date

Exploited and new serious CVEs: November 2026

3,959 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 40 of 40

  • CVE-2026-126945
    37Monitor

    Zipline before 4.5.1 Stored XSS via HighlightCode Component

    CriticalCVSS 9.3No exploit

    diced · ziplineToday

  • CVE-2026-126948
    34Monitor

    Zipline before 4.5.0 IDOR via Folder PATCH and DELETE Endpoints

    HighCVSS 8.7No exploit

    diced · ziplineToday

  • CVE-2026-126949
    28Monitor

    Zipline through 4.4.0 Path Traversal File Overwrite via PATCH /api/user/files/:id

    HighCVSS 7.0No exploit

    diced · ziplineToday

  • CVE-2026-126950
    28Monitor

    Zipline through 4.4.0 Path Traversal Arbitrary File Delete via x-zipline-file-extension

    HighCVSS 7.0No exploit

    diced · ziplineToday

  • CVE-2026-126952
    36Monitor

    Zipline through 4.4.0 WebAuthn Authentication Bypass via Passkey Login

    CriticalCVSS 9.2No exploit

    diced · ziplineToday

  • CVE-2026-126953
    36Monitor

    Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Username

    CriticalCVSS 9.2No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-127073
    37Monitor

    OpsTree BuildPiper before 2.7.0 Privilege Escalation via Additional Manifest

    CriticalCVSS 9.4No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127075
    28Monitor

    OpsTree BuildPiper before 2.7.0 Path Traversal via Additional Manifest Rendering

    HighCVSS 7.1No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127076
    28Monitor

    OpsTree BuildPiper before 2.7.0 Broken Access Control via git_repo API

    HighCVSS 7.1No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127077
    28Monitor

    OpsTree BuildPiper before 2.7.0 Authorization Bypass via Environment Creation API

    HighCVSS 7.1No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127078
    28Monitor

    OpsTree BuildPiper before 2.7.0 Authorization Bypass via project_env_id Parameter

    HighCVSS 7.1No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127079
    36Monitor

    OpsTree BuildPiper before 2.7.0 OTP Brute Force via password_reset/check_otp

    CriticalCVSS 9.1No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127080
    37Monitor

    OpsTree BuildPiper before 2.7.0 Container Escape via Unrestricted HostPath Volumes

    CriticalCVSS 9.4No exploit

    opstree solutions · buildpiperToday

  • CVE-2026-127082
    33Monitor

    Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin

    HighCVSS 8.3No exploit

    huginn · huginnToday

  • CVE-2026-127084
    34Monitor

    Teable before 2026-10-12T12-45-53Z.3331 Stored XSS via Attachment Uploads

    HighCVSS 8.5No exploit

    teableio · teableToday

  • CVE-2026-127088
    34Monitor

    2FAuth before 9.0.1 Password Reset Poisoning via Host Header

    HighCVSS 8.6No exploit

    bubka · 2fauthToday

  • CVE-2026-127090
    34Monitor

    Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, SSH Public Key Cross-User Authentication Bypass

    HighCVSS 8.7No exploit

    jadaptive · maverick synergy serverToday

  • CVE-2026-127091
    30Monitor

    Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, VFS Mount Policy Bypass via Non-Canonical Paths

    HighCVSS 7.6No exploit

    jadaptive · maverick synergy serverToday

  • CVE-2026-127094
    28Monitor

    Pagelayer 2.1.7 before 2.2.1 Missing Authorization via Abilities API

    HighCVSS 7.2No exploit

    pagelayer team · pagelayerToday

  • CVE-2026-128014
    36Monitor

    FrankenPHP 1.8.0 before 1.13.2 Out-of-Bounds Write via Bundled Brotli Decoder

    CriticalCVSS 9.2No exploit

    php · frankenphpToday

  • CVE-2026-128015
    33Monitor

    FrankenPHP before 1.13.4 Use-After-Free via putenv() During Request Shutdown

    HighCVSS 8.3No exploit

    php · frankenphpToday

  • CVE-2026-128016
    33Monitor

    FrankenPHP before 1.13.4 Use-After-Free of SplTempFileObject Streams in Worker Mode

    HighCVSS 8.3No exploit

    php · frankenphpToday

  • CVE-2026-128020
    32Monitor

    FrankenPHP before 1.13.2 Denial of Service via Cyclic Array Conversion

    HighCVSS 8.2No exploit

    php · frankenphpToday

  • CVE-2026-128023
    36Monitor

    FrankenPHP before 1.13.0 Authentication Bypass via Dot-Form Header Name Aliasing

    CriticalCVSS 9.1No exploit

    php · frankenphpToday

  • CVE-2026-128024
    32Monitor

    FrankenPHP before 1.13.0 Denial of Service via goArray Nil Type Assertion

    HighCVSS 8.2No exploit

    php · frankenphpToday

  • CVE-2026-128027
    37Monitor

    FrankenPHP before 1.1.11 Delayed Propagation of Base Image Security Fixes

    CriticalCVSS 9.3No exploit

    php · frankenphpToday

  • CVE-2026-128030
    29Monitor

    OpenMage magento-lts before 20.18.2 Insufficient Session Expiration After API User Deactivation

    HighCVSS 7.4No exploit

    openmage · magento-ltsToday

  • CVE-2026-128040
    33Monitor

    OpenMage magento-lts before 20.18.2 Stored XSS via Admin Dataflow, Tax, OAuth, PayPal Fields

    HighCVSS 8.4No exploit

    openmage · magento-ltsToday

  • CVE-2026-128041
    35Monitor

    OpenMage magento-lts before 20.18.2 Stored XSS via RSS Review Feed

    HighCVSS 8.8No exploit

    openmage · magento-ltsToday

  • CVE-2026-128044
    34Monitor

    OpenMage magento-lts before 20.18.2 OAuth Callback URL Allowlist Bypass

    HighCVSS 8.7No exploit

    openmage · magento-ltsToday

  • CVE-2026-128046
    36Monitor

    OpenMage magento-lts 20.17.0 before 20.18.2 Unrestricted File Upload RCE via Custom Options

    CriticalCVSS 9.2No exploit

    openmage · magento-ltsToday

  • CVE-2026-128047
    36Monitor

    OpenMage magento-lts before 20.18.2 Account Takeover via Predictable Confirmation Key

    CriticalCVSS 9.2No exploit

    openmage · magento-ltsToday

  • CVE-2026-128049
    37Monitor

    OpenMage Magento LTS before 20.18.2 CSRF via OAuth Authorization Confirm

    CriticalCVSS 9.4No exploit

    openmage · magento-ltsToday

  • CVE-2026-128242
    34Monitor

    actix-http before 3.20.1 and actix-web before 4.18.2 Decompression Bomb DoS via encoding::Decoder

    HighCVSS 8.7No exploit

    actix · actix-httpToday

  • CVE-2026-128329
    33Monitor

    Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoFile

    HighCVSS 8.3No exploit

    dokploy · dokployToday

  • CVE-2026-128332
    36Monitor

    listmonk 6.0.0 before 7.0.0-beta.2 TOTP Brute-Force via /admin/login/twofa

    CriticalCVSS 9.1No exploit

    knadh · listmonkToday

  • CVE-2026-128333
    36Monitor

    listmonk 6.0.0 before 7.0.0-beta.2 2FA Bypass via Password Reset Flow

    CriticalCVSS 9.1No exploit

    knadh · listmonkToday

  • CVE-2026-128337
    33Monitor

    ExcelJS through 4.4.0 Prototype Pollution via x14 Conditional Formatting Rule ID

    HighCVSS 8.3No exploit

    exceljs · exceljsToday

  • CVE-2026-128338
    34Monitor

    ExcelJS through 4.4.0 Memory Exhaustion via Unbounded Worksheet Column Range

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128339
    34Monitor

    ExcelJS through 4.4.0 Memory Exhaustion via Oversized Merged Cell Range

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128340
    34Monitor

    ExcelJS through 4.4.0 Memory Exhaustion via Oversized Defined Name Range

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128341
    34Monitor

    ExcelJS through 4.4.0 Denial of Service via Oversized Data Validation sqref

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128342
    34Monitor

    ExcelJS through 4.4.0 Denial of Service via Oversized Worksheet sheetId

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128343
    34Monitor

    ExcelJS through 4.4.0 Denial of Service via Oversized Row Number

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128344
    34Monitor

    ExcelJS through 4.4.0 Memory Exhaustion via Oversized Image Anchor Column

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128346
    34Monitor

    ExcelJS through 4.4.0 Resource Exhaustion via Streaming WorkbookReader Temporary Files

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-128347
    34Monitor

    ExcelJS through 4.4.0 Arbitrary File Read via WorkbookWriter addImage Filename

    HighCVSS 8.7No exploit

    exceljs · exceljsToday

  • CVE-2026-61418
    30Monitor

    Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Incorrect Authorization vulnerability.

    HighCVSS 7.5No exploit

    dell · smartfabric os10 softwareToday

  • CVE-2026-75487
    34Monitor

    Cudy TR3000 before 2.5.42 Command Injection via WireGuard private_key Export

    HighCVSS 8.6No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75488
    32Monitor

    Cudy TR3000 before 2.5.42 Stack Buffer Overflow via CWMP Basic Authorization Builder

    HighCVSS 8.2No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75490
    30Monitor

    Cudy TR3000 before 2.5.42 Unauthenticated RCE via mDNS Automesh Broker Adoption

    HighCVSS 7.7No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75491
    36Monitor

    Cudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none Tokens

    CriticalCVSS 9.2No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75492
    34Monitor

    Cudy TR3000 before 2.5.42 Stack Buffer Overflow via stun_client UDP Parser

    HighCVSS 8.7No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75493
    32Monitor

    Cudy TR3000 before 2.5.42 Stack Buffer Overflow via obuspa KeyPassphrase Getter

    HighCVSS 8.2No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75494
    33Monitor

    Cudy TR3000 before 2.5.42 Curl Argument Injection via TR-069 Upload

    HighCVSS 8.3No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75495
    36Monitor

    Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Password Parameter

    CriticalCVSS 9.2No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75576
    34Monitor

    Cudy TR3000 before 2.5.42 Command Injection via VPN Configuration Upload Filename

    HighCVSS 8.6No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75577
    34Monitor

    Cudy TR3000 before 2.5.42 Command Injection via vpn.export_conf WireGuard Private Key

    HighCVSS 8.6No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today

  • CVE-2026-75578
    34Monitor

    Cudy TR3000 before 2.5.42 Command Injection via OpenVPN Client Configuration Upload

    HighCVSS 8.6No exploit

    shenzhen cudy technology co., ltd. · tr3000 1.0Today