Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 8.8
    CVE-2026-120333 Broken Access Control in extension "Frontend User Registration" (sf_register)
  2. 8.1
    CVE-2026-77691 Command injection vulnerability
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  3. 7.1
    CVE-2026-125398 Instatic before 0.0.21 Authorization Bypass via Row Author Reassignment Endpoint
    maintainer advisory
  4. 5.1
    CVE-2026-89229 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.a…
  5. 6.5
    CVE-2026-119843 Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags
  6. 7.1
    CVE-2026-77778 Improper access control vulnerability
  7. 6.5
    CVE-2026-119641 Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership
    maven
  8. 7.5
    CVE-2026-119724 Apache JClouds: XML External Entity (XXE) in provider-response parsing
    maven
  9. 8.8
    CVE-2026-89293 Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering
  10. 7.1
    CVE-2026-77777 Improper access control vulnerability
  11. 9.2
    CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures
  12. 7.7
    GHSA-gp2m-377p-m4j3 OIDC Web clients can register `javascript:` redirect URIs, causing same-origin XSS through `response_mode=form_post`
    pypi unreviewed · maintainers only
  13. 6.9
    CVE-2026-118448 Uninitialized output buffer returned after nd_to_text failure in pybddisasm
  14. 4.8
    CVE-2026-118447 Uninitialized INSTRUX contents returned after decoding failure in pybddisasm
  15. 6.9
    CVE-2026-118446 Use-after-free in INSTRUX array members in pybddisasm
  16. 6.9
    CVE-2026-118445 Use-after-free in INSTRUX structure members in pybddisasm
  17. 4.8
    CVE-2026-118444 Out-of-bounds reads during instruction decoding in pybddisasm
  18. 4.9
    CVE-2026-109161 Buffer Overflow in Digital I/O
  19. 7.2
    CVE-2026-105982 Command Injection in IPsec VPN
  20. 7.2
    CVE-2026-105981 Command Injection in Digital I/O
  21. 7.2
    CVE-2026-105980 Command Injection in WireGuard VPN
  22. 7.2
    CVE-2026-105979 Command Injection in ZeroTier VPN
  23. 7.2
    CVE-2026-105978 Command Injection in Management Control Functions
  24. 5.4
    CVE-2026-121024 Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet
  25. 5.5
    CVE-2026-121023 LDAP Bind Password Exposure in AxxonNet ARP Agent Logs
  26. 8.1
    CVE-2026-121022 Default Administrator Password Change Not Enforced in Axxon One Web Client
  27. 5.5
    CVE-2026-121021 Plaintext Storage of LDAP Password in Axxon One Shared Configuration
  28. 9.8
    CVE-2026-92610 Improper limitation of paths in py-aspect-model-loader
  29. 4.3
    CVE-2026-121020 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API
  30. 5.3
    CVE-2026-91075 Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass
    WordPress