| CVE-2026-129101 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a mass assignment vulnerability in the vpn.set_conf App RPC method that all… | 2026-11-13 |
| CVE-2026-129102 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators … | 2026-11-13 |
| CVE-2026-129103 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators … | 2026-11-13 |
| CVE-2026-129104 | MEDIUM | 6.5 | Cudy TR3000 before 2.5.42 contains a dnsmasq configuration injection vulnerability that allows authenticated a… | 2026-11-13 |
| CVE-2026-129105 | MEDIUM | 6.5 | Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators … | 2026-11-13 |
| CVE-2026-129110 | CRITICAL | 9.8 | sysPass 3.0.1 through 3.2.11 contains an authentication bypass vulnerability that allows unauthenticated attac… | 2026-11-13 |
| CVE-2026-49341 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, th… | 2026-11-13 |
| CVE-2026-49990 | HIGH | 8.6 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.2 to bef… | 2026-11-13 |
| CVE-2026-52787 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-52788 | NA | N/A | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-52789 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-52790 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-58265 | MEDIUM | 6.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-58498 | HIGH | 8.6 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-62972 | NA | N/A | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-62973 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-62974 | NA | N/A | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-13 |
| CVE-2026-63079 | CRITICAL | 9.8 | RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deseriali… | 2026-11-13 |
| CVE-2026-82174 | MEDIUM | 4.3 | Dell PowerStore contains a content-injection vulnerability. An unauthenticated attacker could exploit this vul… | 2026-11-13 |
| CVE-2026-95377 | NA | N/A | OS command injection in the TFTP provisioning module of Zenitel EdgeAudioClient before 9.6.3.0, and 10.x befor… | 2026-11-13 |
| CVE-2026-95378 | NA | N/A | Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in… | 2026-11-13 |
| CVE-2026-95379 | NA | N/A | Path traversal in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc) of the turbineweb web inte… | 2026-11-13 |
| CVE-2026-95613 | NA | N/A | The pREST database REST API in Zenitel Connect firmware before 1.11.0 signs and verifies JWTs with the platfor… | 2026-11-13 |
| CVE-2026-95614 | NA | N/A | The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written t… | 2026-11-13 |
| CVE-2026-95615 | NA | N/A | OS command injection vulnerability in audio messages API in Zenitel Connect before 1.11.0 allows remote authen… | 2026-11-13 |
| CVE-2026-121809 | NA | N/A | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allow… | 2026-11-13 |
| CVE-2026-124279 | NA | N/A | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthent… | 2026-11-13 |
| CVE-2026-128986 | NA | N/A | In Eclipse BaSyx Go Components versions up to and including 1.1.3, ABAC-enabled deployments match `ROUTE` acce… | 2026-11-13 |
| CVE-2026-129116 | HIGH | 7.5 | C-Kermit from 7.0.197 before 11.1.515 contains an authentication bypass vulnerability in the IKSD SSL build th… | 2026-11-13 |
| CVE-2026-129117 | MEDIUM | 6.8 | C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows machine… | 2026-11-13 |
| CVE-2026-129118 | MEDIUM | 6.8 | C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allow… | 2026-11-13 |
| CVE-2026-129119 | MEDIUM | 6.5 | C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious sender… | 2026-11-13 |
| CVE-2026-129120 | MEDIUM | 5.3 | C-Kermit 11.0.506 before 11.1.515 contains a RECEIVE CONFIRM bypass vulnerability that allows malicious Kermit… | 2026-11-13 |
| CVE-2026-129121 | MEDIUM | 6.5 | C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows… | 2026-11-13 |
| CVE-2026-129122 | HIGH | 7.5 | C-Kermit 6.0.192 before 11.1.515 contains a buffer overflow vulnerability in tn_snenv() in ckctel.c that allow… | 2026-11-13 |
| CVE-2026-129123 | HIGH | 8.8 | C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply() in ckcftp.c that allow… | 2026-11-13 |
| CVE-2026-129124 | HIGH | 8.1 | C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute … | 2026-11-13 |
| CVE-2026-129125 | HIGH | 8.1 | C-Kermit 6.0.192 before 11.1.515 contains a remote code execution vulnerability that allows Kermit clients to … | 2026-11-13 |
| CVE-2026-129126 | HIGH | 8.1 | C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv() in ckcfns.c that allows mal… | 2026-11-13 |
| CVE-2026-129127 | MEDIUM | 4.4 | SQLBot through 1.10.3 contains a weak password hashing vulnerability that stores local account passwords in sy… | 2026-11-13 |
| CVE-2026-129128 | HIGH | 7.8 | Goose CLI 1.35.0 before 1.53.0 contains a local code execution vulnerability that allows attackers to run comm… | 2026-11-13 |
| CVE-2026-129129 | MEDIUM | 6.5 | AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attacke… | 2026-11-13 |
| CVE-2026-129130 | MEDIUM | 6.5 | agent-device from 0.21.36 before 0.21.37 contains a local file disclosure vulnerability that allows authentica… | 2026-11-13 |
| CVE-2026-129131 | MEDIUM | 5.3 | Gameyfin before 2.6.2 contains a missing authorization vulnerability that allows unauthenticated attackers to … | 2026-11-13 |
| CVE-2026-129132 | MEDIUM | 4.2 | MRBS before 1.13.0 contains an LDAP injection vulnerability in web/lib/MRBS/Auth/AuthLdap.php that interpolate… | 2026-11-13 |
| CVE-2026-129133 | MEDIUM | 5.4 | MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject sp… | 2026-11-13 |
| CVE-2026-129134 | HIGH | 8.1 | MRBS before 1.13.0 contains a password reset poisoning vulnerability that allows unauthenticated attackers to … | 2026-11-13 |
| CVE-2026-129135 | LOW | 3.7 | picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_fr… | 2026-11-13 |
| CVE-2026-63150 | HIGH | 8.1 | Omnispace Agora Project through 26.10.0 contains a cross-site request forgery vulnerability that allows remote… | 2026-11-13 |
| CVE-2026-63151 | HIGH | 7.5 | Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unau… | 2026-11-13 |