Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 7.3
    CVE-2026-124501 Tidelift moto AWS Batch Emulation models.py privileges management
  2. 6.3
    CVE-2026-124500 Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgery
  3. 4.6
    CVE-2026-90587 NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurations
    maintainer advisory
  4. 4.7
    CVE-2026-124499 Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injection
  5. 3.5
    CVE-2026-124498 Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scripting
  6. 7.8
    CVE-2026-90586 Xtensa MMU userspace: uninitialized thread page-table pointer leads to out-of-bounds supervisor-mode writes
    maintainer advisory
  7. 6.2
    GHSA-x77q-8rq8-rq6v Incomplete fix for CVE-2026-71430: amplifying `replace` templates still abort the process
    npm unreviewed · maintainers only
  8. 6.2
    GHSA-7gf8-v4c4-pph7 `split` with a zero-width pattern (`\b`, `\B`, `^`/`$` with `m`) is quadratic lead to event-loop DoS
    npm unreviewed · maintainers only
  9. 4.6
    CVE-2026-90585 Renesas RA SCI UART driver: unacknowledged receive-error interrupt causes a permanent interrupt storm and CPU lockup
    maintainer advisory
  10. 8.1
    CVE-2026-118904 IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.
  11. 7.5
    CVE-2026-96146 Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management
  12. 6.7
    CVE-2026-95867 Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management
  13. 6.5
    CVE-2026-17427 This Power System update is being released to address
  14. 6.5
    CVE-2026-17426 This Power System update is being released to address
  15. 6.5
    CVE-2026-16697 This Power System update is being released to address
  16. 6.5
    CVE-2026-16682 This Power System update is being released to address
  17. 8.2
    CVE-2026-128124 AIOHTTP: Event loop stall in add_domain() wildcard matching
    pypi maintainer advisory
  18. 8.1
    CVE-2026-97677 Langflow OSS is affected by multiple vulnerabilities
  19. 8.8
    CVE-2026-9764 IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution
  20. 7.5
    CVE-2026-93879 Hibernate Validator is affected by an expression language injection vulnerability
  21. 6.5
    CVE-2026-93005 Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
  22. 6.5
    CVE-2026-8860 IBM Verify Directory is affected by multiple vulnerabilities
  23. 4.3
    CVE-2026-8642 IBM Verify Directory is affected by multiple vulnerabilities
  24. 3.5
    CVE-2026-8640 IBM Verify Directory is affected by multiple vulnerabilities
  25. 8.8
    CVE-2026-8639 IBM Verify Directory is affected by multiple vulnerabilities
  26. 6.3
    CVE-2026-128125 AIOHTTP: Unbounded cookie storage in client CookieJar
    pypi maintainer advisory
  27. 3.1
    CVE-2026-84237 IBM Guardium Data Protection is affected by multiple vulnerabilities
  28. 6.5
    CVE-2026-84229 IBM Guardium Data Protection is affected by multiple vulnerabilities
  29. 3.1
    CVE-2026-84228 IBM Guardium Data Protection is affected by multiple vulnerabilities
  30. 5.6
    CVE-2026-84030 IBM Guardium Data Protection is affected by multiple vulnerabilities