Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 8.8
    CVE-2026-92194 Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  2. 8.8
    CVE-2026-92195 Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  3. 8.8
    CVE-2026-92192 Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  4. 9.8
    CVE-2026-92188 Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability
  5. 6.5
    CVE-2026-92193 Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  6. 8.8
    CVE-2026-92187 Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  7. 9.8
    CVE-2026-92190 Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability
  8. 7.8
    CVE-2026-92211 Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
  9. 5.8
    CVE-2026-122140 Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass
    maintainer advisory
  10. 6.5
    CVE-2026-114552 MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
  11. 5.9
    CVE-2026-114551 MailEnable Auth Cleartext Storage Information Disclosure Vulnerability
  12. 8.1
    CVE-2026-114550 libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
  13. 9.8
    CVE-2026-114549 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
  14. 8.2
    CVE-2026-118628 MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
  15. 7.8
    CVE-2026-118627 MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
  16. 5.4
    CVE-2026-118626 MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
  17. 6.3
    CVE-2026-118625 MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
  18. 5.4
    CVE-2026-118624 MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability
  19. 7.8
    CVE-2026-118623 MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability
  20. 5.3
    CVE-2026-121589 spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion
  21. 7.5
    CVE-2026-120651 CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set
  22. 6.5
    CVE-2026-120650 CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits
  23. 6.1
    CVE-2026-120648 CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment
  24. 9.8
    CVE-2026-120647 CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename
  25. 7.5
    CVE-2026-120646 CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo
  26. 7.5
    CVE-2026-120645 CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list
  27. 9.1
    CVE-2026-120644 CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values
  28. 6.1
    CVE-2026-120643 CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and self_url
  29. 9.1
    CVE-2026-120642 CGI versions before 5.00 for Perl return request-derived values untainted under taint mode
  30. 8.8
    CVE-2026-120641 CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths