Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited onlyCheckedFix range storedEPSS

Reset

Critical9.8Out-of-Bounds Write in Google Brotli DecoderVuln · CVE-2026-111497 · Palo Alto Networks · Windows · BSI CERT-Bund · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · Alpine, Alpine 3.21Patch nowKEVEPSS 82.64%Oct 22, 2026
Critical9.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2026-114625 · Arista · VeloCloud Orchestrator · BSI CERT-Bund · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · AristaPatch nowKEVEPSS 1.03%Oct 22, 2026
Critical9.2Laravel is a web application framework.Fix · CVE-2026-114509 · Laravel · Laravel Framework · CVE.org · FIRST EPSS · EUVD · Laravel, PackagistPatch nowKEVEPSS 0.78%Oct 21, 2026
Critical9.2PHP PHP Use After FreeVuln · CVE-2026-109619 · Cloudflare · PHP · AWS Security Bulletins · BSI CERT-Bund · Canadian Centre for Cyber Security · AWS, CiscoPatch nowKEVEPSS 100.00%Oct 21, 2026
Critical9.2PHP PHP Use After FreeVuln · CVE-2026-109618 · Cloudflare · PHP · AWS Security Bulletins · BSI CERT-Bund · Canadian Centre for Cyber Security · AWS, CiscoPatch nowKEVEPSS 100.00%Oct 21, 2026
Critical9.8Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Vuln · CVE-2026-101767 · Oracle · application_object_library · Canadian Centre for Cyber Security · CVE.org · FIRST EPSS · OraclePatch nowKEVEPSS 0.61%Oct 20, 2026
Critical9.3ipv4: validate checksum_start before completing checksumVuln · CVE-2026-99999 · Amazon Web Services · Kernel · AWS Security Bulletins · BSI CERT-Bund · CVE.org · AWS, DebianPatch nowKEVEPSS 0.79%Oct 15, 2026
High8.6Palo Alto Networks PAN-OS Code Injection VulnerabilityVuln · CVE-2026-0322 · Palo Alto Networks · PAN-OS · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · CISA KEV · Palo AltoPatch nowKEVEPSS 1.74%Oct 14, 2026
Critical9.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2026-110447 · Collabora · Collabora Online – Built-in CODE Server · CISA Cybersecurity Advisories · CISA KEV · CVE.org · NextcloudPatch nowKEVEPSS 73.31%Oct 13, 2026
High8.8Microsoft Windows Command Injection VulnerabilityVuln · CVE-2026-96951 · Microsoft · Windows · Canadian Centre for Cyber Security · CERT-FR · CISA Cybersecurity Advisories · Cisco, IvantiPatch nowKEVEPSS 9.81%Oct 13, 2026
High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityVuln · CVE-2026-104935 · Ivanti · Connect Secure · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · CISA KEV · Cisco, IvantiPatch nowKEVEPSS 86.77%Oct 13, 2026
UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2026-105740 · Langflow · Langflow · CVE.org · FIRST EPSS · urlscan.io · LangflowPatch nowKEVEPSS 1.05%Oct 12, 2026
Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsVuln · CVE-2026-21589 · Cloudflare · Multiple Products · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · CISA KEV · Atlassian, ConfluencePatch nowKEVEPSS 99.48%Oct 5, 2026
High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityVuln · CVE-2026-88779 · Cisco · Talos · CISA Cybersecurity Advisories · CISA KEV · CVE.org · Cisco, CitrixPatch nowKEVEPSS 11.39%Oct 3, 2026
Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityVuln · CVE-2026-88772 · Citrix · NetScaler · Canadian Centre for Cyber Security · CISA KEV · Cloudflare Security · CitrixPatch nowKEVEPSS 78.16%Sep 27, 2026
Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityVuln · CVE-2026-88771 · Cloudflare · NetScaler · Canadian Centre for Cyber Security · CISA KEV · Cloudflare Security · CitrixPatch nowKEVEPSS 82.16%Sep 27, 2026
High8.6plex media_server External Control of File Name or PathVuln · CVE-2026-96656 · Plex · Media Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 1.79%Sep 23, 2026
Medium5.3plex media_server Server-Side Request Forgery (SSRF)Vuln · CVE-2026-96655 · Plex · Media Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 1.64%Sep 23, 2026
Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PageVuln · CVE-2026-96654 · Plex · Media Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 1.95%Sep 23, 2026
Medium5.3plex media_server Server-Side Request Forgery (SSRF)Vuln · CVE-2026-96652 · Plex · Media Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 1.82%Sep 23, 2026
Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityVuln · CVE-2026-94127 · Cloudflare · BIG-IP APM · CISA KEV · Cloudflare WAF rules · CVE.org · F5Patch nowKEVEPSS 26.55%Sep 22, 2026
Critical9.8Check Point Multiple Products Path Traversal VulnerabilityVuln · CVE-2026-93616 · Check Point · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Check PointPatch nowKEVEPSS 91.61%Sep 22, 2026
High8.1WordPress Core Remote File Inclusion VulnerabilityVuln · CVE-2026-87902 · WordPress · WordPress · CISA KEV · Cloudflare WAF rules · CVE.org · WordPressPatch nowKEVEPSS 95.77%Sep 22, 2026
Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityVuln · CVE-2026-76460 · Cisco · Identity Services Engine · CISA KEV · Cisco Security Advisories · CVE.org · CiscoPatch nowKEVEPSS 75.60%Sep 16, 2026
Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityVuln · CVE-2026-85706 · Cloudflare · gitlab · CISA KEV · Cloudflare WAF rules · CVE.org · GitLabPatch nowKEVEPSS 97.36%Sep 11, 2026

Sort