Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 8.2
    CVE-2026-102339 Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable
    go
  2. 7.3
    CVE-2026-122009 DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery
  3. 7.5
    CVE-2026-10859 IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
  4. 8.8
    CVE-2026-11376 IBM MQ is affected by a denial of service vulnerability
  5. 8.5
    CVE-2026-11724 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
  6. 7.5
    CVE-2026-12356 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
  7. 5.4
    CVE-2026-12538 IBM MQ Appliance is affected by an improper validation vulnerability
  8. 5.4
    CVE-2026-12550 IBM MQ is affected by a denial of service vulnerability
  9. 8.1
    CVE-2026-13271 IBM MQ Managed File Transfer is affected by a denial of service vulnerability
  10. 7.1
    CVE-2026-13284 IBM MQ Managed File Transfer is vulnerable to XML external entity injection
  11. 7.1
    CVE-2026-13289 IBM MQ Managed File Transfer is vulnerable to XML external entity injection
  12. 8.8
    CVE-2026-13292 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
  13. 6.2
    CVE-2026-14252 IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility
  14. 7.1
    CVE-2026-18142 IBM MQ is affected by a denial of service vulnerability
  15. 7.4
    CVE-2026-122220 WPO365 LOGIN before 45.2 SAML Replay Protection Bypass
    WordPress
  16. 5.4
    CVE-2026-113368 Nexus Repository 3 - Group Repository Member Authorization Bypass
  17. 6.3
    CVE-2026-113369 Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab
  18. 7.7
    CVE-2026-113370 Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task
  19. 7.1
    CVE-2026-113371 Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase
  20. 7.1
    CVE-2026-113372 Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key
  21. 8.1
    CVE-2026-113373 Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again
  22. 8.6
    CVE-2026-113374 Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation
  23. 7.5
    CVE-2026-122192 Guest access to Firecracker process memory after a failed memory discard
    maintainer advisory
  24. 7.5
    CVE-2026-97705 Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
    npm
  25. 10.0
    CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication
  26. 6.9
    CVE-2026-63183 OmniAuth: Host Header Injection Vulnerability
    rubygems
  27. 9.3
    CVE-2026-107846 bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list
    npm
  28. 10.0
    CVE-2026-121932 Linksys E5350 apply.cgi system os command injection
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  29. 9.1
    CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  30. 8.4
    CVE-2026-82033 DeepSeek Harness Unauthenticated RPC Command Execution