| CVE-2026-126768 | CRITICAL | 9.8 | OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attacke… | 2026-11-11 |
| CVE-2026-126769 | HIGH | 7.5 | OpsTree REMS through 1.0.0 contains a missing authentication vulnerability that allows unauthenticated remote … | 2026-11-11 |
| CVE-2026-126770 | MEDIUM | 5.0 | OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated user… | 2026-11-11 |
| CVE-2026-126771 | MEDIUM | 5.4 | OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated atta… | 2026-11-11 |
| CVE-2026-126772 | MEDIUM | 4.3 | OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to p… | 2026-11-11 |
| CVE-2026-126774 | HIGH | 8.2 | @tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-tex… | 2026-11-11 |
| CVE-2026-126775 | MEDIUM | 4.2 | Social-auth-core 4.7.0 before 7.0.0 contains a login cross-site request forgery vulnerability in the SAML back… | 2026-11-11 |
| CVE-2026-126776 | MEDIUM | 5.3 | SiYuan 3.7.0 before 3.8.10 on Windows contains a path traversal vulnerability in kernel/util/webfetch.go that … | 2026-11-11 |
| CVE-2026-126777 | HIGH | 7.4 | Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login() that fails … | 2026-11-11 |
| CVE-2026-126778 | MEDIUM | 5.4 | Wallos 4.4.0 before 5.10.3 contains a stored cross-site scripting vulnerability in endpoints/cronjobs/sendnoti… | 2026-11-11 |
| CVE-2026-126779 | HIGH | 7.5 | Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read s… | 2026-11-11 |
| CVE-2026-126780 | HIGH | 7.2 | Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated… | 2026-11-11 |
| CVE-2026-126781 | HIGH | 7.5 | Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authentic… | 2026-11-11 |
| CVE-2026-57500 | MEDIUM | 6.3 | REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata fold… | 2026-11-11 |
| CVE-2026-58505 | HIGH | 7.5 | geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed t… | 2026-11-11 |
| CVE-2026-61637 | LOW | 3.5 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Prior to versio… | 2026-11-11 |
| CVE-2026-63505 | MEDIUM | 4.9 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te… | 2026-11-11 |
| CVE-2026-64861 | MEDIUM | 4.3 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te… | 2026-11-11 |
| CVE-2026-65833 | NA | N/A | iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chun… | 2026-11-11 |
| CVE-2026-65840 | CRITICAL | 9.6 | Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode… | 2026-11-11 |
| CVE-2026-65843 | NA | N/A | sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7… | 2026-11-11 |
| CVE-2026-65967 | HIGH | 7.1 | Fider is a feedback portal for feature requests and suggestions. Prior to version 0.34.0, a Server-Side Reques… | 2026-11-11 |
| CVE-2026-76078 | LOW | 3.1 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te… | 2026-11-11 |
| CVE-2026-76079 | HIGH | 7.2 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te… | 2026-11-11 |
| CVE-2026-76080 | LOW | 3.7 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security te… | 2026-11-11 |
| CVE-2026-91150 | HIGH | 7.5 | A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to sen… | 2026-11-11 |
| CVE-2026-91873 | HIGH | 8.7 | Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vu… | 2026-11-11 |
| CVE-2026-91874 | HIGH | 8.7 | Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vu… | 2026-11-11 |
| CVE-2026-91875 | HIGH | 8.7 | Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vu… | 2026-11-11 |
| CVE-2026-91876 | MEDIUM | 5.5 | Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML Extern… | 2026-11-11 |
| CVE-2026-91877 | HIGH | 7.6 | Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special… | 2026-11-11 |
| CVE-2026-91878 | HIGH | 7.6 | Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special… | 2026-11-11 |
| CVE-2026-91880 | HIGH | 8.9 | Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validati… | 2026-11-11 |
| CVE-2026-91891 | HIGH | 7.5 | Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sen… | 2026-11-11 |
| CVE-2026-91892 | LOW | 3.7 | Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the … | 2026-11-11 |
| CVE-2026-0323 | NA | N/A | A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local una… | 2026-11-11 |
| CVE-2026-0324 | NA | N/A | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the P… | 2026-11-11 |
| CVE-2026-0325 | NA | N/A | An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enab… | 2026-11-11 |
| CVE-2026-0326 | NA | N/A | A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to d… | 2026-11-11 |
| CVE-2026-0327 | NA | N/A | A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enabl… | 2026-11-11 |
| CVE-2026-0328 | NA | N/A | Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® s… | 2026-11-11 |
| CVE-2026-0329 | NA | N/A | A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker wit… | 2026-11-11 |
| CVE-2026-0330 | NA | N/A | A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an auth… | 2026-11-11 |
| CVE-2026-0331 | NA | N/A | An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remo… | 2026-11-11 |
| CVE-2026-122095 | HIGH | 7.6 | AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon… | 2026-11-11 |
| CVE-2026-126784 | MEDIUM | 4.3 | Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC functi… | 2026-11-11 |
| CVE-2026-126815 | HIGH | 8.1 | Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote una… | 2026-11-11 |
| CVE-2026-91151 | HIGH | 7.3 | A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory ca… | 2026-11-11 |
| CVE-2026-100307 | HIGH | 8.8 | Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might… | 2026-11-11 |
| CVE-2026-103980 | NA | N/A | ideon is a self-hosted visual workspace. Prior to version 0.9.6, the SSRF protection in safeFetch is bypassed … | 2026-11-11 |