| CVE-2026-126243 | HIGH | 7.2 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… | 2026-11-11 |
| CVE-2026-126244 | HIGH | 7.5 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 thro… | 2026-11-11 |
| CVE-2026-126245 | HIGH | 8.1 | A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6… | 2026-11-11 |
| CVE-2026-126246 | HIGH | 7.5 | A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticato… | 2026-11-11 |
| CVE-2026-126247 | HIGH | 7.2 | A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,… | 2026-11-11 |
| CVE-2026-126248 | HIGH | 7.5 | A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, Forti… | 2026-11-11 |
| CVE-2026-126249 | HIGH | 7.2 | A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthent… | 2026-11-11 |
| CVE-2026-126250 | HIGH | 8.2 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… | 2026-11-11 |
| CVE-2026-126251 | CRITICAL | 9.1 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… | 2026-11-11 |
| CVE-2026-126252 | HIGH | 8.3 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126253 | CRITICAL | 9.3 | A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6… | 2026-11-11 |
| CVE-2026-126254 | CRITICAL | 9.6 | A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7,… | 2026-11-11 |
| CVE-2026-126255 | HIGH | 7.4 | A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.… | 2026-11-11 |
| CVE-2026-126256 | HIGH | 7.4 | A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, Forti… | 2026-11-11 |
| CVE-2026-126257 | CRITICAL | 9.0 | A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthentica… | 2026-11-11 |
| CVE-2026-126258 | HIGH | 7.5 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthentica… | 2026-11-11 |
| CVE-2026-126259 | CRITICAL | 9.8 | A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through … | 2026-11-11 |
| CVE-2026-126262 | CRITICAL | 9.8 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126263 | CRITICAL | 9.8 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126326 | NA | N/A | Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and e… | 2026-11-11 |
| CVE-2026-126327 | NA | N/A | Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated us… | 2026-11-11 |
| CVE-2026-126328 | NA | N/A | Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and … | 2026-11-11 |
| CVE-2026-126331 | NA | N/A | Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 … | 2026-11-11 |
| CVE-2026-126332 | NA | N/A | Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an a… | 2026-11-11 |
| CVE-2026-65949 | HIGH | 7.2 | Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft … | 2026-11-11 |
| CVE-2026-65950 | MEDIUM | 5.8 | A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linu… | 2026-11-11 |
| CVE-2026-65951 | MEDIUM | 5.8 | A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for L… | 2026-11-11 |
| CVE-2026-65952 | HIGH | 8.5 | Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of… | 2026-11-11 |
| CVE-2026-65971 | HIGH | 7.6 | Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version… | 2026-11-11 |
| CVE-2026-67449 | CRITICAL | 9.8 | Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, M… | 2026-11-11 |
| CVE-2026-67540 | MEDIUM | 6.5 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67541 | HIGH | 8.1 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67542 | HIGH | 7.1 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67543 | HIGH | 8.8 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67544 | HIGH | 8.8 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67545 | HIGH | 7.4 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67546 | HIGH | 8.8 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to … | 2026-11-11 |
| CVE-2026-67547 | HIGH | 8.8 | taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call en… | 2026-11-11 |
| CVE-2026-67548 | HIGH | 8.3 | taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.25, tinyagentos (taOS) registers all system set… | 2026-11-11 |
| CVE-2026-68511 | NA | N/A | Paaster is a pastebin application. Prior to version 3.3.0, Paaster's "view once" (burn-after-reading) paste mo… | 2026-11-11 |
| CVE-2026-68512 | NA | N/A | Paaster is a pastebin application. Prior to version 3.3.0, Paaster's account login has no rate limiting, locko… | 2026-11-11 |
| CVE-2026-68538 | HIGH | 7.5 | fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenant… | 2026-11-11 |
| CVE-2026-68539 | HIGH | 7.5 | fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenant… | 2026-11-11 |
| CVE-2026-68540 | HIGH | 7.5 | fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenant… | 2026-11-11 |
| CVE-2026-81936 | MEDIUM | 6.8 | An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC… | 2026-11-11 |
| CVE-2026-107922 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-11 |
| CVE-2026-125637 | HIGH | 7.2 | A flaw was found in the Konflux UI proxy. Hostname values defined in the KonfluxUI custom resource are inserte… | 2026-11-11 |
| CVE-2026-126757 | MEDIUM | 4.3 | A security vulnerability has been detected in Moonshot AI Kimi Code up to 2.5.2. This affects the function isO… | 2026-11-11 |
| CVE-2026-126758 | MEDIUM | 4.4 | A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of … | 2026-11-11 |
| CVE-2026-126840 | NA | N/A | Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute ar… | 2026-11-11 |