| CVE-2026-121295 | HIGH | 8.6 | On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a c… | 2026-11-10 |
| CVE-2026-121367 | CRITICAL | 9.6 | On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain… | 2026-11-10 |
| CVE-2026-121368 | HIGH | 8.6 | On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed… | 2026-11-10 |
| CVE-2026-121369 | MEDIUM | 5.3 | On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivi… | 2026-11-10 |
| CVE-2026-121370 | HIGH | 8.6 | On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated att… | 2026-11-10 |
| CVE-2026-121371 | HIGH | 7.5 | On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthen… | 2026-11-10 |
| CVE-2026-121529 | CRITICAL | 9.6 | A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4… | 2026-11-10 |
| CVE-2026-121530 | MEDIUM | 6.6 | A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticat… | 2026-11-10 |
| CVE-2026-124016 | MEDIUM | 5.3 | postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauth… | 2026-11-10 |
| CVE-2026-124848 | MEDIUM | 5.5 | Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macO… | 2026-11-10 |
| CVE-2026-125337 | HIGH | 8.3 | Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExpor… | 2026-11-10 |
| CVE-2026-125338 | MEDIUM | 4.5 | Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, BrandSetting::r… | 2026-11-10 |
| CVE-2026-125339 | MEDIUM | 6.1 | Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.319 until 1.2.14, Backe… | 2026-11-10 |
| CVE-2026-125340 | MEDIUM | 4.5 | Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the b… | 2026-11-10 |
| CVE-2026-125341 | LOW | 2.0 | Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend… | 2026-11-10 |
| CVE-2026-126061 | MEDIUM | 4.3 | Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Ba… | 2026-11-10 |
| CVE-2026-126062 | LOW | 3.7 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, on JRuby, … | 2026-11-10 |
| CVE-2026-14447 | NA | N/A | In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address vi… | 2026-11-10 |
| CVE-2026-26248 | HIGH | 8.8 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortin… | 2026-11-10 |
| CVE-2026-50077 | HIGH | 7.7 | Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary cod… | 2026-11-10 |
| CVE-2026-50078 | MEDIUM | 4.4 | Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information … | 2026-11-10 |
| CVE-2026-50079 | LOW | 3.3 | Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker… | 2026-11-10 |
| CVE-2026-50080 | LOW | 3.3 | Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash t… | 2026-11-10 |
| CVE-2026-55297 | NA | N/A | In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via conc… | 2026-11-10 |
| CVE-2026-55309 | NA | N/A | In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via… | 2026-11-10 |
| CVE-2026-55311 | NA | N/A | In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code. This cou… | 2026-11-10 |
| CVE-2026-55312 | NA | N/A | In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping … | 2026-11-10 |
| CVE-2026-55316 | NA | N/A | In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the code. This could… | 2026-11-10 |
| CVE-2026-55319 | NA | N/A | In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure… | 2026-11-10 |
| CVE-2026-55321 | NA | N/A | In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the co… | 2026-11-10 |
| CVE-2026-55335 | NA | N/A | In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to… | 2026-11-10 |
| CVE-2026-55344 | NA | N/A | In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the co… | 2026-11-10 |
| CVE-2026-55346 | NA | N/A | In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap… | 2026-11-10 |
| CVE-2026-55348 | NA | N/A | In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds rea… | 2026-11-10 |
| CVE-2026-55360 | NA | N/A | In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transpor… | 2026-11-10 |
| CVE-2026-55362 | NA | N/A | In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to r… | 2026-11-10 |
| CVE-2026-56884 | NA | N/A | In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations vi… | 2026-11-10 |
| CVE-2026-56897 | NA | N/A | In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure elemen… | 2026-11-10 |
| CVE-2026-56898 | NA | N/A | In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block me… | 2026-11-10 |
| CVE-2026-56902 | NA | N/A | In multiple locations, there is a possible information disclosure due to a logic error in the code. This could… | 2026-11-10 |
| CVE-2026-56909 | NA | N/A | In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-… | 2026-11-10 |
| CVE-2026-56910 | NA | N/A | In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due… | 2026-11-10 |
| CVE-2026-56911 | NA | N/A | In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds ch… | 2026-11-10 |
| CVE-2026-56912 | NA | N/A | In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the co… | 2026-11-10 |
| CVE-2026-56916 | NA | N/A | In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU… | 2026-11-10 |
| CVE-2026-56919 | NA | N/A | In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to… | 2026-11-10 |
| CVE-2026-56926 | NA | N/A | In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch res… | 2026-11-10 |
| CVE-2026-56929 | NA | N/A | In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due… | 2026-11-10 |
| CVE-2026-56930 | NA | N/A | In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries acros… | 2026-11-10 |
| CVE-2026-56933 | NA | N/A | In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. Th… | 2026-11-10 |