Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium6.0FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers.CVE-2026-107675 · ffmpeg · ffmpeg · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 8, 2026
High7.0A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate…CVE-2025-13914 · juniper · apstra · CVE.org · NIST NVD · JuniperApr 9, 2026
Medium6.3Cocos AI is a confidential computing system for AI.CVE-2026-33697 · ultraviolet · cocos ai · CVE.org · NIST NVDMar 27, 2026