Powered by data from 22+ sources — NVD, cve.org, EPSS, CISA KEV, OSV, GHSA, MITRE ATT&CK, and more.

About & licensesSource status
cvekit
CockpitCVEsATT&CKActorsSources
----‑--‑-- · --:--:-- UTCLIVE
Clear35,486 matching
CVEs · 35,486page 1 / 710
CVE-2025-39964MEDIUM5.5EPSS 26%Analyzed

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

CVE-2025-39682HIGH7.1EPSS 42%Analyzing

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we break out of the main processing loop. If the record has already been decrypted (which may be the case for TLS 1.3 where we don't know type until decryption) we queue the pending record to the rx_list. Next recvmsg() will pick it up from there. Queuing the skb to rx_list after zero-copy decrypt is not possible, since in that case we decrypted directly to the user space buffer, and we don't have an skb to queue (darg.skb points to the ciphertext skb for access to metadata like length). Only data records are allowed zero-copy, and we break the processing loop after each non-data record. So we should never zero-copy and then find out that the record type has changed. The corner case we missed is when the initial record comes from rx_list, and it's zero length.

CVE-2026-87796CRITICAL9.8EPSS 48%Deferred

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVE-2026-92805CRITICAL9.8EPSS 28%Received

UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints, gaining full control of the instance.

CVE-2025-61686CRITICAL9.1EPSS 97%

React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage() is being used from @react-router/node (or @remix-run/node/@remix-run/deno in Remix v2) with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the attack would depend on the permissions of the web server process to access those files. Read files cannot be returned directly to the attacker. Session file reads would only succeed if the file matched the expected session file format. If the file matched the session file format, the data would be populated into the server side session but not directly returned to the attacker unless the application logic returned specific session information. This issue has been patched in @react-router/node version 7.9.4, @remix-run/deno version 2.17.2, and @remix-run/node version 2.17.2.

CVE-2024-21262MEDIUM6.5EPSS 46%Analyzed

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

CVE-2026-69328HIGH7.8EPSS 24%Awaiting

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-83991MEDIUM5.5EPSS 28%Analyzed

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.

CVE-2026-69451HIGH7.1EPSS 50%Awaiting

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.

CVE-2026-54644MEDIUM6.1EPSS 63%Received

CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in classes/gui.class.php uses strip_tags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. Attacker-controlled search or input data that reaches a GUI message can carry a javascript: URI or event handler through the filter, and viewing or interacting with the rendered anchor executes JavaScript in the victim's browser session, enabling session exposure or unauthorized application actions. This issue is fixed in version 6.7.5.

CVE-2026-71554MEDIUM5.3EPSS 38%Deferred

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request carries two Host header lines, providing a request smuggling primitive. This issue is fixed in version 4.4.1.

CVE-2026-40345NONEEPSS 40%Deferred

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively merging records. When two input values contain self-references at the same property path, the merge logic repeatedly revisits the same pair until Node.js raises RangeError: Maximum call stack size exceeded. Applications that merge attacker-controlled recursive object graphs can synchronously crash the affected process or cause repeated worker restarts. Plain JSON input alone cannot create the recursive graph required to trigger the issue. This issue is fixed in version 8.0.0.

CVE-2026-73296CRITICAL9.4EPSS 85%Awaiting

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.

CVE-2026-91843CRITICAL9.8EPSS 42%Awaiting

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

CVE-2026-81861NONEEPSS 32%Awaiting

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

CVE-2026-54646HIGH7.2EPSS 72%Received

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated administrator can terminate the quoted identifier with a closing backtick and introduce attacker-controlled structural SQL, potentially compromising database confidentiality, integrity, and availability within the application's database privileges. This issue is fixed in version 6.7.5.

CVE-2026-54520HIGH8.1EPSS 34%Received

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1.

CVE-2026-45140CRITICAL9.8EPSS 61%Received

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.

CVE-2026-93453HIGH8.3EPSS 28%Received

SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a malicious Origin header to have valid password-reset tokens mailed to victim recovery addresses within links pointing to attacker infrastructure, enabling account takeover.

CVE-2026-79294MEDIUM6.1Received

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component

CVE-2026-45674CRITICAL10.0EPSS 16%

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

CVE-2023-35788HIGH7.8EPSS 44%

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

CVE-2026-84616MEDIUM5.5EPSS 1%Analyzed

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

CVE-2026-70481MEDIUM5.4EPSS 23%Analyzed

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.

CVE-2026-54597HIGH8.3EPSS 24%Received

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential record can perform time-based blind SQL injection through the expires parameter of the share_generate_link handler in agent/ajax.php. sanitizeInput applies string-context escaping, but expires is inserted unquoted into the item_expire_at MySQL INTERVAL expression, allowing a crafted expression and interval unit to execute conditional database queries whose results are inferred from response delays. This can expose password hashes, SMTP credentials, API keys, encrypted vault data, and database metadata and support administrative takeover after credential cracking. This issue is fixed in version 26.07.

CVE-2021-3030MEDIUM6.1EPSS 29%Received

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the vulnerable component, executes arbitrary JavaScript in the security context of that site.

CVE-2026-84600MEDIUM5.4EPSS 12%Analyzed

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.

CVE-2026-50011HIGH7.5EPSS 39%

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count declared in an array header. That count is taken from the wire before the corresponding child messages exist. A small malicious header can claim a huge initial capacity. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

CVE-2026-4408CRITICAL9.8EPSS 84%

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

CVE-2026-45447HIGH8.8EPSS 89%

Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

CVE-2026-33186CRITICAL9.1EPSS 74%

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

CVE-2026-27145HIGH7.5EPSS 47%Analyzing

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

CVE-2026-22016HIGH7.5EPSS 52%

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

CVE-2026-76461CRITICAL9.8EPSS 80%Analyzed

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.

CVE-2018-13410NONEEPSS 90%

Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands

CVE-2026-58289CRITICAL9.0EPSS 80%Analyzed

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57973MEDIUM6.3EPSS 12%Analyzed

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.

CVE-2026-55040CRITICAL9.1EPSS 99%Analyzed

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-54121HIGH8.8EPSS 77%Analyzed

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-50657MEDIUM5.5EPSS 34%Analyzed

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

CVE-2026-50402HIGH7.8EPSS 27%Analyzed

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-50369HIGH8.8EPSS 52%Analyzed

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-50416LOW3.3EPSS 39%Analyzed

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-50343HIGH7.8EPSS 23%Analyzed

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-34348MEDIUM6.5EPSS 58%Analyzed

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

CVE-2026-58635HIGH7.8EPSS 26%Analyzed

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

CVE-2026-47301HIGH8.8EPSS 60%Analyzed

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVE-2026-50522CRITICAL9.8EPSS 100%Analyzed

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-56164CRITICAL9.8EPSS 98%Analyzed

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-50338HIGH8.2EPSS 43%Analyzed

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.

35,486 CVEs
1 / 710

CVE-2026-33186

CRITICAL9.1PoC
CNA: GitHub_MPublished: 2026-03-18Modified: 2 days ago
Open full
Description

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

via cve_org

CVSS v3.1
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AVNACLPRNUINSUCHIHAN
CVSS across sources128
VersionTypeSourceBaseExpImp
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1PrimaryRed Hat9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1Primarycve.org9.1——
3.1SecondaryGHSA9.1——
3.1SecondaryNVD9.13.95.2
3.1SecondaryNVD9.13.95.2
3.1SecondaryENISA EUVD9.1——
Modification timeline
  • GitHub PoC1 day ago3786 obs
  • ENISA EUVD1 day ago1599 obs
  • cve.org2 days ago63 obs
  • OSV.dev2 days ago186 obs
  • EPSS2 days ago98 obs
  • NVD3 days ago53 obs
Vendor statements229
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • access.redhat.com
  • +221 more
Timeline
  1. 2026-03-18
    CVE published
  2. 2026-04-06
    Public exploit published on github_poc
  3. 2026-06-15
    First observed by epss
  4. 2026-06-15
    First observed by osv
  5. 2026-06-15
    First observed by csaf_redhat
  6. 2026-06-15
    First observed by cve_org
  7. 2026-06-15
    First observed by nvd
  8. 2026-06-17
    First observed by ghsa
  9. 2026-06-30
    First observed by github_poc
  10. 2026-07-05
    First observed by euvd
  11. 2026-09-17
    Last metadata update