| CVE-2026-97006 | MEDIUM | 4.9 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-97013 | HIGH | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker t… | 2026-11-10 |
| CVE-2026-97015 | MEDIUM | 6.8 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature w… | 2026-11-10 |
| CVE-2026-99286 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Fix XenBus connection failur… | 2026-11-10 |
| CVE-2026-99287 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Zero out sring pointers on u… | 2026-11-10 |
| CVE-2026-99288 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
inet: reject unhashed sockets during esta… | 2026-11-10 |
| CVE-2025-61625 | HIGH | 8.1 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet Fo… | 2026-11-10 |
| CVE-2026-0169 | NA | N/A | In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due… | 2026-11-10 |
| CVE-2026-0175 | NA | N/A | In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import … | 2026-11-10 |
| CVE-2026-0178 | NA | N/A | In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via s… | 2026-11-10 |
| CVE-2026-0191 | NA | N/A | In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This c… | 2026-11-10 |
| CVE-2026-0193 | NA | N/A | In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could l… | 2026-11-10 |
| CVE-2026-0195 | NA | N/A | In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access … | 2026-11-10 |
| CVE-2026-102166 | HIGH | 8.8 | Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image ve… | 2026-11-10 |
| CVE-2026-104060 | MEDIUM | 6.5 | Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows a… | 2026-11-10 |
| CVE-2026-115483 | HIGH | 7.5 | The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and includi… | 2026-11-10 |
| CVE-2026-115538 | NA | N/A | Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewal… | 2026-11-10 |
| CVE-2026-115539 | NA | N/A | SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's id… | 2026-11-10 |
| CVE-2026-120803 | HIGH | 7.1 | A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accu… | 2026-11-10 |
| CVE-2026-120804 | HIGH | 7.5 | A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB.… | 2026-11-10 |
| CVE-2026-120805 | MEDIUM | 4.3 | In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with spe… | 2026-11-10 |
| CVE-2026-120806 | MEDIUM | 5.5 | A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data … | 2026-11-10 |
| CVE-2026-120807 | MEDIUM | 6.6 | A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member cer… | 2026-11-10 |
| CVE-2026-120808 | HIGH | 7.4 | An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is by… | 2026-11-10 |
| CVE-2026-120809 | MEDIUM | 6.8 | A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation … | 2026-11-10 |
| CVE-2026-120810 | MEDIUM | 6.5 | An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause … | 2026-11-10 |
| CVE-2026-120811 | MEDIUM | 5.9 | A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query con… | 2026-11-10 |
| CVE-2026-120812 | MEDIUM | 6.5 | An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to c… | 2026-11-10 |
| CVE-2026-120813 | MEDIUM | 5.9 | An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows enc… | 2026-11-10 |
| CVE-2026-120814 | HIGH | 7.2 | An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding ce… | 2026-11-10 |
| CVE-2026-120815 | HIGH | 8.4 | An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated pa… | 2026-11-10 |
| CVE-2026-120974 | MEDIUM | 5.3 | On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configu… | 2026-11-10 |
| CVE-2026-120975 | LOW | 3.1 | On affected platforms running Arista EOS with automatic certificate management configured and automatic Certif… | 2026-11-10 |
| CVE-2026-120976 | MEDIUM | 6.0 | On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived … | 2026-11-10 |
| CVE-2026-120977 | HIGH | 8.2 | On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device pr… | 2026-11-10 |
| CVE-2026-120978 | MEDIUM | 6.5 | On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with… | 2026-11-10 |
| CVE-2026-120979 | HIGH | 8.1 | This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protoc… | 2026-11-10 |
| CVE-2026-120980 | MEDIUM | 5.3 | On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session … | 2026-11-10 |
| CVE-2026-120981 | MEDIUM | 5.3 | On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session … | 2026-11-10 |
| CVE-2026-120982 | HIGH | 7.5 | On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated att… | 2026-11-10 |
| CVE-2026-120983 | HIGH | 7.6 | On affected EOS platforms where 802.1x is configured in multi-host authenticated mode and the device is config… | 2026-11-10 |
| CVE-2026-121286 | MEDIUM | 6.5 | On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Enginee… | 2026-11-10 |
| CVE-2026-121287 | HIGH | 8.8 | An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled int… | 2026-11-10 |
| CVE-2026-121288 | HIGH | 8.1 | An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized… | 2026-11-10 |
| CVE-2026-121289 | CRITICAL | 9.8 | On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP age… | 2026-11-10 |
| CVE-2026-121290 | HIGH | 8.2 | On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from … | 2026-11-10 |
| CVE-2026-121291 | HIGH | 8.2 | A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publica… | 2026-11-10 |
| CVE-2026-121292 | HIGH | 8.2 | A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agen… | 2026-11-10 |
| CVE-2026-121293 | MEDIUM | 4.4 | On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a craf… | 2026-11-10 |
| CVE-2026-121294 | MEDIUM | 5.3 | On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker … | 2026-11-10 |