| CVE-2026-109097 | HIGH | 8.2 | A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape t… | 2026-11-10 |
| CVE-2026-109830 | HIGH | 7.3 | A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts f… | 2026-11-10 |
| CVE-2026-112136 | HIGH | 8.8 | A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Stud… | 2026-11-10 |
| CVE-2026-112137 | MEDIUM | 5.4 | A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Stud… | 2026-11-10 |
| CVE-2026-120326 | NA | N/A | DownloadEvent.setFileName(String) in Vaadin Flow writes the download file name into the Content-Disposition he… | 2026-11-10 |
| CVE-2026-120350 | NA | N/A | The Vaadin Rich Text Editor exports a video embed without escaping its value, and then parses the resulting HT… | 2026-11-10 |
| CVE-2026-121191 | MEDIUM | 6.5 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allo… | 2026-11-10 |
| CVE-2026-123717 | NA | N/A | OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog thr… | 2026-11-10 |
| CVE-2026-125706 | MEDIUM | 5.5 | A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. … | 2026-11-10 |
| CVE-2026-125707 | MEDIUM | 6.1 | A flaw was found in GStreamer's MXF demuxer. When an application processes a crafted MXF file, an off-by-one b… | 2026-11-10 |
| CVE-2026-125709 | MEDIUM | 4.2 | A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the li… | 2026-11-10 |
| CVE-2026-125712 | HIGH | 7.5 | A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an act… | 2026-11-10 |
| CVE-2026-125715 | MEDIUM | 5.3 | Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions a… | 2026-11-10 |
| CVE-2026-125742 | HIGH | 7.8 | 7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers co… | 2026-11-10 |
| CVE-2026-12266 | HIGH | 7.6 | Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposur… | 2026-11-10 |
| CVE-2026-12572 | HIGH | 7.2 | Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication … | 2026-11-10 |
| CVE-2026-12573 | HIGH | 8.8 | Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injectio… | 2026-11-10 |
| CVE-2026-12574 | HIGH | 8.1 | Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScrip… | 2026-11-10 |
| CVE-2026-58114 | HIGH | 7.5 | A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All… | 2026-11-10 |
| CVE-2026-59082 | HIGH | 7.8 | A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), S… | 2026-11-10 |
| CVE-2026-100962 | MEDIUM | 5.3 | NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacke… | 2026-11-10 |
| CVE-2026-121267 | HIGH | 7.8 | Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-rem… | 2026-11-10 |
| CVE-2026-124747 | HIGH | 7.5 | A flaw was found in BusyBox. When resuming a download over File Transfer Protocol (FTP), the wget utility fail… | 2026-11-10 |
| CVE-2026-125744 | NA | N/A | Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API … | 2026-11-10 |
| CVE-2026-125745 | MEDIUM | 4.3 | Custom Post Types and Custom Fields creator (WCK) before 2.4.1 contains a missing authorization vulnerability … | 2026-11-10 |
| CVE-2026-125871 | NA | N/A | The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) … | 2026-11-10 |
| CVE-2026-16478 | HIGH | 7.0 | Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute par… | 2026-11-10 |
| CVE-2026-120399 | HIGH | 7.5 | A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-cont… | 2026-11-10 |
| CVE-2026-124852 | NA | N/A | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox … | 2026-11-10 |
| CVE-2026-124853 | NA | N/A | Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fi… | 2026-11-10 |
| CVE-2026-124854 | NA | N/A | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox… | 2026-11-10 |
| CVE-2026-124855 | NA | N/A | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 1… | 2026-11-10 |
| CVE-2026-124856 | NA | N/A | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 a… | 2026-11-10 |
| CVE-2026-124857 | NA | N/A | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 1… | 2026-11-10 |
| CVE-2026-124858 | NA | N/A | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115… | 2026-11-10 |
| CVE-2026-124859 | NA | N/A | Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability wa… | 2026-11-10 |
| CVE-2026-124860 | NA | N/A | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, … | 2026-11-10 |
| CVE-2026-124861 | NA | N/A | Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Fire… | 2026-11-10 |
| CVE-2026-124862 | NA | N/A | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR … | 2026-11-10 |
| CVE-2026-124863 | NA | N/A | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115… | 2026-11-10 |
| CVE-2026-124864 | NA | N/A | Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Fi… | 2026-11-10 |
| CVE-2026-124865 | NA | N/A | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, … | 2026-11-10 |
| CVE-2026-124866 | NA | N/A | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.… | 2026-11-10 |
| CVE-2026-124867 | NA | N/A | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124868 | NA | N/A | Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 a… | 2026-11-10 |
| CVE-2026-124869 | NA | N/A | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR … | 2026-11-10 |
| CVE-2026-124870 | NA | N/A | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and… | 2026-11-10 |
| CVE-2026-124871 | NA | N/A | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124872 | NA | N/A | Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.… | 2026-11-10 |
| CVE-2026-124873 | NA | N/A | Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.… | 2026-11-10 |