Loading market data...

CVE Feed

Latest vulnerabilities from the National Vulnerability Database.

56672
Total
4490
Critical
16802
High
16633
Medium
CVE ID Severity Score Description Published
CVE-2026-81866 UNKNOWN — Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced … Sep 16, 2026
CVE-2026-76646 UNKNOWN — A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions … Sep 16, 2026
CVE-2026-76423 CRITICAL 10.0 A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected … Sep 16, 2026
CVE-2026-70469 UNKNOWN — Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip … Sep 16, 2026
CVE-2026-62949 MEDIUM 6.5 AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior … Sep 16, 2026
CVE-2026-20361 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. … Sep 16, 2026
CVE-2026-20341 CRITICAL 9.1 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is … Sep 16, 2026
CVE-2026-20330 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software … Sep 16, 2026
CVE-2026-20329 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software … Sep 16, 2026
CVE-2026-20326 CRITICAL 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. … Sep 16, 2026
CVE-2026-20325 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This … Sep 16, 2026
CVE-2026-20324 CRITICAL 9.9 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary … Sep 16, 2026
CVE-2026-20322 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This … Sep 16, 2026
CVE-2026-20242 CRITICAL 9.8 A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary … Sep 16, 2026
CVE-2026-20237 CRITICAL 9.1 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), … Sep 16, 2026
CVE-2026-20211 CRITICAL 9.1 A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To … Sep 16, 2026
CVE-2026-20194 CRITICAL 9.1 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), … Sep 16, 2026
CVE-2026-20192 CRITICAL 10.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) … Sep 16, 2026
CVE-2026-20176 CRITICAL 9.1 A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To … Sep 16, 2026
CVE-2026-20130 CRITICAL 10.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), … Sep 16, 2026
CVE-2026-92729 HIGH 8.2 SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions … Sep 16, 2026
CVE-2026-92473 LOW 3.3 A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation … Sep 16, 2026
CVE-2026-92472 LOW 3.3 A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file src/scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation … Sep 16, 2026
CVE-2026-92418 LOW 3.5 A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the component Save Endpoint. This … Sep 16, 2026
CVE-2026-92417 MEDIUM 6.5 A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation … Sep 16, 2026