Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Check if you run itEPSS 0.22%Jun 17, 2026
- Medium4.8In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo-reply packet (reply), hands it to net_try_send_data(), and then, o…Check if you run itEPSS 0.23%Jun 16, 2026
- High7.5subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data().Check if you run itEPSS 0.35%Jun 16, 2026
- High8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.50%Jun 15, 2026
- UnknownJenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 2.16%Jun 15, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 28.17%Jun 15, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- UnknownCVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2Open the advisoryJun 10, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 76.11%Jun 9, 2026
- Medium6.3HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2Check if you run itEPSS 0.45%Jun 8, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 1.94%Jun 4, 2026
- Low1.1A vulnerability was determined in sgl-project SGLang up to 0.5.11.Check if you run itEPSS 0.12%Jun 3, 2026
- Medium5.5A vulnerability was found in crmeb crmeb_java 1.4.Check if you run itEPSS 0.29%Jun 3, 2026
- Low1.1A vulnerability has been found in mlrun up to 1.12.0-rc3.Check if you run itEPSS 0.07%Jun 3, 2026
- Medium5.5OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.17%Jun 3, 2026
- Medium6.5Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration.Check if you run itEPSS 0.37%Jun 3, 2026
- High8.4In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the variant for requestin…Check if you run itEPSS 0.19%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply…Check if you run itEPSS 0.09%Jun 3, 2026
- High7.3In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, __current_thread_in…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gfx3d: add parent to parent request map After commit d228ece36345 ("clk: divider: remove…Check if you run itEPSS 0.16%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the variant for reque…Check if you run itEPSS 0.17%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined pat…Check if you run itEPSS 0.23%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port…Check if you run itEPSS 0.32%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.Check if you run itEPSS 0.23%Jun 3, 2026