CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 31, 12:38 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88164 | SH SharePoint Microsoft | 8.8 | Oct 14 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-86567 | FD Fast Datapath for RHEL 10 Red Hat | 8.8 | Oct 14 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap |
| CVE-2026-106465 | ND NetX Duo Eclipse Foundation | 8.7 | Oct 14 | The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns |
| CVE-2026-108395 | IO io.modelcontextprotocol.sdk:mcp modelcontextprotocol | 7.5 | Oct 14 | Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies |
| CVE-2026-106464 | ND NetX Duo Eclipse Foundation | 8.7 | Oct 14 | `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero |
| CVE-2026-103415 | ND NetX Duo Eclipse Foundation | 9.3 | Oct 14 | When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet |
| CVE-2026-107350 | PG PgBouncer | 8.8 | Oct 14 | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer |
| CVE-2026-107349 | PG PgBouncer | 7.5 | Oct 14 | Infinite loop on empty option name in startup options parameter in PgBouncer |
| CVE-2026-107348 | PG PgBouncer | 5.9 | Oct 14 | Integer overflow causes an infinite loop in message buffer growth in PgBouncer |
| CVE-2026-103414 | GU GUIX Eclipse Foundation | 8.4 | Oct 14 | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic |
| CVE-2026-86461 | FF FV Flowplayer Video Player foliovision | 8.8 | Oct 14 | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter |
| CVE-2026-0322 In wildKEV | PA PAN-OS Palo Alto Networks | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface |
| CVE-2026-101954 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled |
| CVE-2026-101952 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled |
| CVE-2026-101949 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash |
| CVE-2026-92160 | FP fprime nasa | 6.5 | Oct 14 | F´: SendPartial Integer Overflow Leading to Assertion DoS |
| CVE-2026-101964 | JO Junos OS Juniper | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message |
| CVE-2026-101963 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used |
| CVE-2026-101962 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used |
| CVE-2026-92155 | FP fprime nasa | 7.5 | Oct 14 | F´: FileUplink Unknown Packet Type Assertion DoS |
| CVE-2026-101961 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy |
| CVE-2026-101959 | JO Junos OS Juniper | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash |
| CVE-2026-92150 | FP fprime nasa | 7.5 | Oct 14 | F´: GenericHub Malformed Buffer Assertion DoS |
| CVE-2026-101983 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured |
| CVE-2026-108390 | HE hestiacp hestiacp | 9.9 | Oct 14 | HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking |
| CVE-2026-92154 | FP fprime nasa | 8.1 | Oct 14 | F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation |
| CVE-2026-101982 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used |
| CVE-2026-101981 | JO Junos OS Juniper | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled |
| CVE-2026-101979 | JO Junos OS Juniper | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled |
| CVE-2026-101976 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash |
| CVE-2026-101975 | JO Junos OS Juniper | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used |
| CVE-2026-101972 | JO Junos OS Juniper | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled |
| CVE-2026-92158 | FP fprime nasa | 7.2 | Oct 14 | F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write |
| CVE-2026-102077 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops |
| CVE-2026-92159 | FP fprime nasa | 6.5 | Oct 14 | F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry |
| CVE-2026-92156 | FP fprime nasa | 6.5 | Oct 14 | F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge |
| CVE-2026-92157 | FP fprime nasa | 6.5 | Oct 14 | F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion |
| CVE-2026-92152 | FP fprime nasa | 9.3 | Oct 14 | F´: Unvalidated Port Index in GenericHub |
| CVE-2026-33798 | JO Junos OS Juniper | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled |
| CVE-2026-33796 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled |
| CVE-2026-33795 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised |
| CVE-2026-33792 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured |
| CVE-2026-33789 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service |
| CVE-2026-102185 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used |
| CVE-2026-102184 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash |
| CVE-2026-102183 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes |
| CVE-2026-102182 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution |
| CVE-2026-102180 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use |
| CVE-2026-102179 | JO Junos OS Juniper | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used |
| CVE-2026-102178 | JO Junos OS Juniper | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise |