Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 7.2
    CVE-2026-84729 Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or po…
  2. 8.7
    CVE-2026-84730 Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with ro…
  3. 8.5
    CVE-2026-112116 An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write ar…
  4. 6.9
    CVE-2026-110464 Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local S…
  5. 7.3
    CVE-2026-121610 funadmin Frontend List Endpoint index selectList sql injection
  6. 10.0
    CVE-2026-121609 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials
  7. 7.3
    CVE-2026-121608 Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  8. 10.0
    CVE-2026-121607 Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection
    EPSS 2.0% chance of exploitation in 30 days, percentile 80%
  9. 3.7
    CVE-2026-125335 Forge: Ed25519 signature verification accepts small-order public keys
    npm
  10. 5.9
    CVE-2026-125332 Forge: TLS client crash on an unsupported ServerHello compression method
    npm
  11. 5.9
    CVE-2026-125333 Forge: ReDoS in forge.http response header and cookie trimming
    npm
  12. 5.9
    CVE-2026-125334 Forge: TLS client crash on a handshake record received without a session
    npm
  13. 7.4
    CVE-2026-125336 Forge: X.509 nameConstraints not enforced by verifyCertificateChain()
    npm maintainer advisory
  14. 10.0
    CVE-2026-121606 Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification
  15. 9.9
    CVE-2026-121600 TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow
  16. 9.9
    CVE-2026-121599 TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow
  17. 9.9
    CVE-2026-121598 TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
  18. 7.5
    CVE-2026-128089 dnspython excessive memory and CPU use
    pypi
  19. 9.9
    CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow
  20. 7.2
    CVE-2026-39431 On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows com…
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  21. 9.8
    CVE-2026-39430 On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls…
  22. 7.2
    CVE-2026-92196 Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability
  23. 7.8
    CVE-2026-92200 Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
  24. 8.2
    CVE-2026-92198 Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  25. 7.8
    CVE-2026-92199 Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
  26. 7.2
    CVE-2026-92185 Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  27. 9.8
    CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
  28. 8.8
    CVE-2026-92197 Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  29. 8.8
    CVE-2026-92191 Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability
  30. 8.8
    CVE-2026-92186 Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%