CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- http4khttp4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity8.2 High
- http4khttp4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution8.2 High
- destiny.gg chatLobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile8.7 High
- jovancoding network-aiNetwork-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations6.9 Medium
- jovancoding network-aiNetwork-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath8.7 High
- jovancoding network-aiNetwork-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name8.7 High
- jovancoding network-aiNetwork-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID8.7 High
- parse-community parse-serverParse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response2.3 Low
- @clerk nuxtNuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam6.3 Medium
- mcphubsamanhappy MCPHub passthroughHeaders.ts information disclosure5.3 Medium
- termix-ssh termixTermix-SSH Termix transferToHost path traversal9.4 Critical
- jxxghp moviepilotjxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization5.1 Medium
- sanluan publiccmsSanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization5.3 Medium
- linksys e8450Linksys E8450 portal.cgi strcpy stack-based overflow10.0 Critical
- wavlink wn536ax6-aWAVLINK WN536AX6-A protocol.csp host_black os command injection9.4 Critical
- wavlink wn536ax6-aWAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow10.0 Critical
- wavlink wn536ax6-aWAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection10.0 Critical
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_l2tpNo score- wavlink wn536ax6-aWAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection10.0 Critical
- No product listedDirectory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain...7.5 High
- No product listedAn authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the...No score
- No product listedAn integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1...7.5 High
- No product listedAn integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1...7.5 High
- No product listedAn out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI)...No score
- No product listedOpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI...7.5 High
- No product listedA denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path....No score
- No product listedA memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header...7.5 High
- No product listedA resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure...7.5 High
kamailioUbuntuA stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The...7.5 HighkamailioUbuntuA stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf...9.8 Critical- No product listedKeyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a...6.5 Medium
kernel-rtAlmaLinux,kernel-rt-coreAlmaLinux,kernel-rt-debugAlmaLinux +7 more +9 moreImportant: kernel-rt bug fix and enhancement updateNo score- wavlink wn536ax6-aWAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication6.9 Medium
- wavlink wn536ax6-aWAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection10.0 Critical
- wavlink wn536ax6-aWAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection10.0 Critical
- shanghai xi yu ji zhi technology minimax codeShanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection5.1 Medium
- apache software foundation wicketApache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markup7.6 High
- apache software foundation wicketApache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markup7.6 High
- apache software foundation wicketApache Wicket: CSP headers silently omitted for pages served through nested request handler delegates2.3 Low
- apache software foundation wicketApache Wicket: XSS in ExternalLink via the model URL when the component is bound to a non-anchor tag7.4 High
- apache software foundation wicketApache Wicket: A component's markup is served as a package resource when its class name contains an underscore6.3 Medium
- apache software foundation wicketApache Wicket: Component markup is served as a package resource when wicket-core has its own class loader6.3 Medium
- apache software foundation wicketApache Wicket: Configured upload limits are not enforced by the standalone file upload resource8.3 High
- apache software foundation wicketApache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names8.3 High
- apache software foundation wicketApache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literal7.4 High
- apache software foundation wicketApache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model data7.4 High
- apache software foundation wicketApache Wicket: XSS in AjaxNewWindowNotifyingBehavior via the client-supplied window name7.6 High
- apache software foundation wicketApache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in2.1 Low
- apache software foundation wicketApache Wicket: The session id is renewed only on the first sign in, not on re-authentication7.2 High
- apache software foundation wicketApache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component6.3 Medium
- Show moreLoading…