| CVE-2026-125926 | HIGH | 8.5 | Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry be… | 2026-11-11 |
| CVE-2026-126797 | CRITICAL | 9.8 | NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthent… | 2026-11-11 |
| CVE-2026-126798 | MEDIUM | 4.7 | NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset de… | 2026-11-11 |
| CVE-2026-126799 | HIGH | 7.5 | Gotenberg 8.31.0 before 8.38.0 contains a server-side request forgery vulnerability in IsPublicIP() that allow… | 2026-11-11 |
| CVE-2026-126800 | HIGH | 8.7 | Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows regis… | 2026-11-11 |
| CVE-2026-126801 | HIGH | 8.8 | Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authent… | 2026-11-11 |
| CVE-2026-126802 | HIGH | 8.2 | NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthEx… | 2026-11-11 |
| CVE-2026-126803 | HIGH | 7.2 | Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain su… | 2026-11-11 |
| CVE-2026-126804 | HIGH | 8.1 | WWBN AVideo 12.4 through 29.7.1 contains a path traversal vulnerability in the ADs plugin deleteImage.json.php… | 2026-11-11 |
| CVE-2026-126805 | HIGH | 7.2 | WWBN AVideo through 29.7.1 contains an incorrect authorization vulnerability that allows delegated Videos Admi… | 2026-11-11 |
| CVE-2026-126806 | HIGH | 8.7 | WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to … | 2026-11-11 |
| CVE-2026-126807 | MEDIUM | 4.3 | WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler th… | 2026-11-11 |
| CVE-2026-126808 | MEDIUM | 4.3 | weDevs ERP (WP ERP) through 1.17.11 contains an incorrect authorization vulnerability that allows authenticate… | 2026-11-11 |
| CVE-2026-126809 | HIGH | 7.1 | WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in objects/import.json.php that allo… | 2026-11-11 |
| CVE-2026-126810 | MEDIUM | 5.4 | WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered … | 2026-11-11 |
| CVE-2026-126811 | MEDIUM | 5.4 | BookStack before 26.09.3 contains an incorrect authorization vulnerability that allows authenticated users to … | 2026-11-11 |
| CVE-2026-126812 | CRITICAL | 9.8 | blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose … | 2026-11-11 |
| CVE-2026-126813 | MEDIUM | 6.8 | Roundcube Webmail before 1.6.21 and 1.7.x before 1.7.6 contains an IMAP command injection vulnerability that a… | 2026-11-11 |
| CVE-2026-126814 | LOW | 3.5 | blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authentica… | 2026-11-11 |
| CVE-2026-65957 | NA | N/A | Helio is an MCP proxy that sits between AI agents and the tools they use. Prior to version 0.8.0, the dashboar… | 2026-11-11 |
| CVE-2026-65965 | NA | N/A | ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api… | 2026-11-11 |
| CVE-2026-65968 | NA | N/A | ideon is a self-hosted visual workspace. Prior to version 0.9.4, validateUrlForSSRF() / safeFetch() in lib/oau… | 2026-11-11 |
| CVE-2026-65973 | MEDIUM | 6.4 | Laradocs maintains version-controlled documentation inside a Laravel codebase. From version 0.4.0 to before ve… | 2026-11-11 |
| CVE-2026-65982 | NA | N/A | nginx-http-flv-module is a media streaming server based on nginx-rtmp-module. Prior to version 1.2.14, if a se… | 2026-11-11 |
| CVE-2026-68507 | NA | N/A | ideon is a self-hosted visual workspace. Prior to version 0.9.5, ideon's link-preview endpoint requires no aut… | 2026-11-11 |
| CVE-2026-111521 | HIGH | 7.0 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-o… | 2026-11-11 |
| CVE-2026-121526 | MEDIUM | 6.1 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 throu… | 2026-11-11 |
| CVE-2026-121527 | MEDIUM | 6.7 | A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiCli… | 2026-11-11 |
| CVE-2026-121528 | HIGH | 8.1 | A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through… | 2026-11-11 |
| CVE-2026-126144 | HIGH | 8.8 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126145 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126146 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126147 | CRITICAL | 9.8 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For… | 2026-11-11 |
| CVE-2026-126148 | CRITICAL | 9.8 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126149 | HIGH | 7.5 | A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 thro… | 2026-11-11 |
| CVE-2026-126150 | CRITICAL | 9.1 | A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail… | 2026-11-11 |
| CVE-2026-126151 | HIGH | 7.5 | A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1… | 2026-11-11 |
| CVE-2026-126152 | HIGH | 7.6 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo… | 2026-11-11 |
| CVE-2026-126153 | HIGH | 7.5 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For… | 2026-11-11 |
| CVE-2026-126154 | HIGH | 7.5 | A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, … | 2026-11-11 |
| CVE-2026-126155 | CRITICAL | 9.1 | A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6… | 2026-11-11 |
| CVE-2026-126156 | CRITICAL | 9.1 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo… | 2026-11-11 |
| CVE-2026-126157 | CRITICAL | 9.1 | A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6… | 2026-11-11 |
| CVE-2026-126158 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126159 | HIGH | 7.5 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo… | 2026-11-11 |
| CVE-2026-126160 | HIGH | 8.2 | A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6… | 2026-11-11 |
| CVE-2026-126161 | HIGH | 7.5 | A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 t… | 2026-11-11 |
| CVE-2026-126162 | HIGH | 8.7 | A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail… | 2026-11-11 |
| CVE-2026-126163 | HIGH | 8.1 | A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow… | 2026-11-11 |
| CVE-2026-126164 | CRITICAL | 9.4 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |