Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.CVE-2026-26342 · tattile · smart+ firmware · CVE.org · NIST NVDFeb 24, 2026
Medium6.2HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tok…CVE-2026-1842 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Feb 20, 2026
High7.1Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: th…CVE-2025-4677 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Jan 7, 2026
Medium5.4An issue was discovered in allauth-django before 65.13.0.CVE-2025-65430 · allauth · allauth · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Dec 15, 2025
Medium5.6An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…CVE-2025-62631 · fortinet · fortios · CVE.org · FIRST EPSS · NIST NVD · FortinetEPSS 0.3%Dec 9, 2025