Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2026-123488 Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  2. 8.1
    CVE-2026-53980 Charmbracelet Wish 2.0.5 Path Traversal via git Middleware
  3. 8.2
    CVE-2026-119170 Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
  4. 2.8
    CVE-2026-123665 kubescape Output printresults.go GetWriter permission
  5. 7.5
    CVE-2026-87045 NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame
    maintainer advisory
  6. 5.4
    CVE-2026-123664 nasa-gcn gcn.nasa.gov Email Notification email improper authorization
  7. 8.8
    CVE-2026-106019 Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System…
  8. 5.3
    CVE-2026-113618 Improper Server Certificate Validation in ZSIRep Client Library
  9. 7.3
    CVE-2026-64894 Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows…
  10. 9.8
    CVE-2026-59105 Universal sysadmin credential vulnerability in Jumis
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  11. 8.6
    CVE-2026-106022 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retr…
  12. 8.6
    CVE-2026-106020 Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows…
  13. 7.5
    GHSA-qh2w-r6wq-x6hw Denial of service in Tornado instrumentation through unbounded metric cardinality
    unreviewed · maintainers only
  14. 6.5
    CVE-2026-21850 HCL AION is affected by multiple security vulnerabilities.
  15. 3.7
    CVE-2026-5345 HCL AION is affected by multiple security vulnerabilities.
  16. 3.7
    CVE-2026-21849 HCL AION is affected by multiple security vulnerabilities.
  17. 4.7
    CVE-2026-35107 HCL AION is affected by multiple security vulnerabilities.
  18. 4.7
    CVE-2026-35106 HCL AION is affected by multiple security vulnerabilities.
  19. 4.7
    CVE-2026-35105 HCL AION is affected by multiple security vulnerabilities.
  20. 4.7
    CVE-2026-35104 HCL AION is affected by multiple security vulnerabilities.
  21. 4.7
    CVE-2026-35103 HCL AION is affected by multiple security vulnerabilities.
  22. 4.7
    CVE-2026-35102 HCL AION is affected by multiple security vulnerabilities.
  23. 3.7
    CVE-2026-35109 HCL AION is affected by multiple security vulnerabilities.
  24. 5.4
    CVE-2026-35110 HCL AION is affected by multiple security vulnerabilities.
  25. 4.2
    CVE-2026-35112 HCL AION is affected by multiple security vulnerabilities.
  26. 6.3
    GHSA-xm5p-pwm6-5w65 urwid web display exposes session ids to local users through the FIFO file names in the shared pipe_dir
    pypi unreviewed · maintainers only
  27. 4.8
    CVE-2026-35113 HCL AION is affected by multiple security vulnerabilities.
  28. 4.8
    CVE-2026-35111 HCL AION is affected by multiple security vulnerabilities.
  29. 3.7
    CVE-2026-35114 HCL AION is affected by multiple security vulnerabilities.
  30. 3.7
    CVE-2026-35115 HCL AION is affected by multiple security vulnerabilities.