Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. —
    CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics
    Linux kernel
  2. 7.8
    CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()
    Linux kernel
  3. —
    CVE-2026-100080 xen-netback: Fix UAF when reading statistics data
    Linux kernel
  4. 5.5
    CVE-2026-123976 EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals
  5. 6.3
    CVE-2026-75598 Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
    maven
  6. 7.5
    CVE-2026-89017 Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass
  7. 5.0
    CVE-2026-123973 SharePoint Products CopyMove before 2026-11-06 allows traversal.
  8. 6.5
    CVE-2026-119758 ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document
  9. 7.5
    CVE-2026-102650 Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API
    npm
  10. 4.4
    CVE-2026-123876 Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
  11. 8.8
    CVE-2026-118670 OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document
    npm
  12. 4.3
    CVE-2026-123748 chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption
  13. 8.4
    CVE-2026-123962 In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys…
  14. 9.9
    CVE-2026-122193 OS command injection in the example SSM documents in Trusted Remote Execution (REX)
    maintainer advisory
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  15. 4.1
    CVE-2026-106128 Prototype Pollution in Progress Software Kendo UI for Vue
  16. 4.1
    CVE-2026-106127 Prototype Pollution in Progress Software KendoReact
  17. 4.1
    CVE-2026-106144 Prototype Pollution in Progress Software Kendo UI for Angular
  18. 5.4
    CVE-2026-106143 Cross-Site Scripting in Progress Software Kendo UI for Vue
  19. 5.4
    CVE-2026-106142 Cross-Site Scripting in Progress Software KendoReact
  20. 5.4
    CVE-2026-106141 Cross-Site Scripting in Progress Software Kendo UI for Angular
  21. 5.4
    CVE-2026-106136 Cross-Site Scripting in Progress Software KendoReact
  22. 5.4
    CVE-2026-106134 Cross-Site Scripting in Progress Software KendoReact
  23. 5.4
    CVE-2026-106135 Cross-Site Scripting in Progress Software Kendo UI for Angular
  24. 5.9
    GHSA-77x5-2qjh-q7gp seroval-plugins: unbounded work from shared streams in the ReadableStream plugin
    npm unreviewed · maintainers only
  25. 5.9
    GHSA-g966-mc3v-w67r seroval-plugins: memory amplification from shared values in web plugins
    npm unreviewed · maintainers only
  26. 7.5
    GHSA-72px-vh6m-89wc seroval: CPU exhaustion when decoding regular expressions from untrusted input
    npm unreviewed · maintainers only
  27. 5.9
    GHSA-98xp-m6q3-9vhf seroval: process crash in stream serialization when onError is omitted
    npm unreviewed · maintainers only
  28. 4.7
    GHSA-w44x-96x5-xwh2 seroval: cross-site scripting through Error messages that are not strings
    npm unreviewed · maintainers only
  29. 7.3
    CVE-2026-104656 Cross-site Scripting in Progress Telerik Fiddler Everywhere
  30. 7.5
    CVE-2026-104657 Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill