Search vulnerabilities

Expected end of text, found ',' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,500

CVE-2026-111582

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Remote Management - Monitoring
CVE-2026-111548

Stack Buffer Overflow in Moxa Wireless Device Server Web Interface

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Nport W2150a-w4 W2250a-w4 Series
CVE-2026-111107

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Fireware Os
CVE-2026-109823

Host filesystem path disclosure via DNS rebinding

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout. This issue affects tidewave: from 0.8.0 before 0.9.2.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Tidewave-ai
Products
Tidewave
CVE-2026-109090

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-109089

libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-108329

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Threat Response
CVE-2026-108328

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Threat Response
CVE-2026-108325

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Reputation
CVE-2026-108316

Tanium addressed an information disclosure vulnerability in Tanium Server.

Tanium addressed an information disclosure vulnerability in Tanium Server.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Tanium Server
CVE-2026-108310

Tanium addressed a denial of service vulnerability in Tanium Server.

Tanium addressed a denial of service vulnerability in Tanium Server.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Tanium Server
CVE-2026-108303

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Certificate Manager