Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 2.2
    CVE-2026-121547 dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata
  2. 5.9
    CVE-2026-121546 ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following
  3. 6.5
    CVE-2026-121545 Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler
  4. 4.9
    CVE-2026-121544 Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers
  5. 8.8
    CVE-2026-121543 smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
  6. 5.4
    CVE-2026-121455 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save
  7. 3.7
    CVE-2026-121454 Padloc before 4.3.1 Missing SCIM Token Validation via SCIM GET Requests
  8. 2.7
    CVE-2026-121453 SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint
  9. 6.5
    CVE-2026-121452 bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service
  10. 8.8
    CVE-2026-121451 AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF
  11. 7.5
    CVE-2026-121450 CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID
  12. 6.9
    CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an…
  13. 5.2
    CVE-2026-40652 An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truev…
  14. 5.2
    CVE-2026-40661 An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafte…
  15. 5.2
    CVE-2026-40660 A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-…
  16. 5.1
    CVE-2026-40659 An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectD…
  17. 6.9
    CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.
  18. 6.5
    CVE-2026-110265 runZero search SQL injection
  19. 4.3
    CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to uploa…
    Ivanti
    kev
  20. 6.5
    CVE-2026-87044 Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service
    maintainer advisory
  21. 7.5
    CVE-2026-121513 Out-of-bounds Write in µD3TN
  22. 7.5
    CVE-2026-121512 Missing Release of Memory after Effective Lifetime in µD3TN
  23. 7.1
    CVE-2026-121511 Out-of-bounds Read in µD3TN
  24. 7.5
    CVE-2026-121510 Out-of-bounds Write in µD3TN
  25. 5.9
    CVE-2026-121508 Use After Free in µD3TN
  26. 5.9
    CVE-2026-121507 Double Free in µD3TN
  27. 7.4
    CVE-2026-121506 Out-of-bounds Write in NTPsec
  28. 3.7
    CVE-2026-121505 Out-of-bounds Read in NTPsec
  29. 8.8
    CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component
  30. 3.7
    GHSA-qh2f-jh77-hfwf Namespace value with `@` or `/` redirects the request when loadPath/addPath puts {{ns}} in the host
    npm unreviewed · maintainers only