Browse CVEs

CRITICAL 9.8 CVE-2026-14537 Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated at… Mcp Toolbox For Databases Patch available Fix from $2,3002026-07-31 MEDIUM 6.5 CVE-2026-66720 The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast… No fix yet Fix from $1,6002026-07-30 CRITICAL 9.3 CVE-2026-66421 OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript … No fix yet Fix from $2,3002026-07-30 HIGH 8.8 CVE-2026-66420 MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack a… Patch available Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-66369 The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the pro… No fix yet Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-66364 The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process… No fix yet Fix from $1,6002026-07-30 HIGH 7.5 CVE-2026-66360 The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the pro… No fix yet Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-66349 The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an ex… No fix yet Fix from $1,6002026-07-30 HIGH 8.8 CVE-2026-65423 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds writ… Patch available Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-65421 The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causi… No fix yet Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-63550 The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-enc… No fix yet Fix from $1,6002026-07-30 MEDIUM 5.9 CVE-2026-63362 An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a… Patch available Fix from $1,6002026-07-30 HIGH 8.1 CVE-2026-63035 A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of serv… Patch available Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-63033 A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to … No fix yet Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-61893 A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past t… No fix yet Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-56758 The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling A… No fix yet Fix from $1,6002026-07-30 MEDIUM 5.5 CVE-2026-68563 A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data`… No fix yet Fix from $1,6002026-07-30 MEDIUM 6.2 CVE-2026-68562 A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate… No fix yet Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-64816 RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in lut_processing.rs. On Windows, a UNC p… Patch available Fix from $1,6002026-07-30 HIGH 7.5 CVE-2026-63559 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memor… Patch available Fix from $1,9502026-07-30 HIGH 8.5 CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user,… Patch available Fix from $1,9502026-07-30 MEDIUM 5.7 CVE-2026-5846 The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticat… No fix yet Fix from $1,6002026-07-30 CRITICAL 9.8 CVE-2026-38709 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 wer… No fix yet Fix from $2,3002026-07-30 HIGH 7.5 CVE-2026-18064 An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer derefer… No fix yet Fix from $1,9502026-07-30 HIGH 8.8 CVE-2026-12562 The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the em… No fix yet Fix from $1,9502026-07-30 CRITICAL 9.8 CVE-2026-68503 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn a… Patch available Fix from $2,3002026-07-30 CRITICAL 9.8 CVE-2026-68502 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticat… Patch available Fix from $2,3002026-07-30 MEDIUM 6.5 CVE-2026-68501 Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's GET /{_loc… Patch available Fix from $1,6002026-07-30 HIGH 7.5 CVE-2026-68500 Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /{_lo… Patch available Fix from $1,9502026-07-30 MEDIUM 6.2 CVE-2026-68499 re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global … Patch available Fix from $1,6002026-07-30