Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,932

CVE-2026-11617

Tanium addressed a compression bomb vulnerability in Findings.

Tanium addressed a compression bomb vulnerability in Findings.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Findings
CVE-2026-71401

wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Wicked
CVE-2026-13348

Unlimited Authentication Attempts Enable Unauthorized Access in PowerChute Serial Shutdown

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Schneider-electric
Products
Powerchute Serial Shutdown
CVE-2026-76203

CSS sanitizer bypass in Pentestify report themes allows forced outbound requests

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Maalfer
Products
Pentestify
CVE-2026-78363

MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags

The MW WP Form WordPress plugin before 5.1.5 does not prevent shortcodes in user-submitted values from being executed when it merges those values into a message that it later processes for shortcodes, allowing unauthenticated users to run any shortcode registered on the site. Exploitation requires the site to have been configured to echo a submitted value back to the visitor after submission.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mw Wp Form Project Wordpress
Products
Mw Wp Form Wordpress
CVE-2026-74916

WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wordpress Wpfastestcache
Products
Wordpress Wp Fastest Cache
CVE-2026-13611

KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Kivicare Wordpress
Products
Kivicare Wordpress
CVE-2026-19472

Rockwell Automation ArmorStart® LT Denial Of Service

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Armorstart Lt Armorstart Lt
CVE-2026-9634

Redundancy Module Configuration Tool - Multiple Vulnerabilities

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation
Products
Redundancy Module Configuration Tool
CVE-2026-9637

CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation
Products
Compactlogix 5380 Controllogix 5580
CVE-2026-9633

Redundancy Module Configuration Tool - Multiple Vulnerabilities

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation
Products
Redundancy Module Configuration Tool
CVE-2026-9625

RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Rslinx Classic Rslinx Classic
CVE-2026-9624

RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a  restart of the service to recover.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Rslinx Classic Rslinx Classic
CVE-2026-9621

RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Rslinx Classic Rslinx Classic
CVE-2026-16675

Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Factorytalk Activation Manager Factorytalk Activation Manager
CVE-2026-82551

Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Foundation
Products
Magma
CVE-2026-82802

NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to server-side request forgery. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nasa
Products
Earthdata-search