CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...4.6 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a...5.7 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a...6.1 Medium
- apache software foundation arrow rustApache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads9.1 Critical
- qtInteger overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt1.9 Low
- wso2 api control plane, api manager, carbon oauth +6 more +8 moreImproper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts4.9 Medium
nextRoot,@rootio/nextRoot +1 moreAIKIDO-2026-104277 in next - Patched by RootNo score- @clerk fastifyfastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses5.9 Medium
- wso2 api manager, carbon registry kernel, enterprise integrator +4 more +6 moreOpen Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks5.4 Medium
httpclientRootAIKIDO-2026-932465 in httpclient - Patched by RootNo scorenextRoot,@rootio/nextRoot +1 moreAIKIDO-2026-553733 in next - Patched by RootNo score- @fastify/reply-from@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape8.2 High
- zohocorp manageengine eventlog analyzer, manageengine log360 +1 moreRemote Code Execution8.7 High
- @fastify/multipart@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers5.9 Medium
- @fastify/secure-session@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal4.2 Medium
- wso2 api manager, carbon api manager publisher rest api +1 moreStored Cross-Site Scripting in Multiple WSO2 Products4.8 Medium
- @fastify/cors@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook3.7 Low
- @fastify/http-proxy@fastify/http-proxy vulnerable to prefix escape via decoded route parameters9.1 Critical
- wso2 api control plane, api manager, carbon api management implementation +2 more +4 moreSQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption8.7 High
- @fastify/http-proxy@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments5.9 Medium
- wso2 api control plane, api manager, carbon event publisher core +6 more +8 moreInformation Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data4.4 Medium
- zte elasticnet rnia r18 ngiSQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product6.5 Medium
- wso2 identity server, identity server as key manager, identity server keystore rest api commons +2 more +4 moreInformation Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths5.8 Medium
- wso2 api manager, carbon user management ui, enterprise integrator +1 more +3 moreReflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products4.6 Medium
- qtMemory corruption vulnerability in QMqttClient impacts Qt MQTT2.3 Low
- zohocorp manageengine password manager pro, manageengine pam360 +1 moreRemote Code Execution Vulnerability8.8 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the autofill service module. Impact: Successful exploitation...6.6 Medium
- unknown payhere payment gatewayPayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification5.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the Optimizer module. Impact: Successful exploitation of this...3.7 Low
- huawei harmonyosDoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability...5.7 Medium
- huawei harmonyosDoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability...6.5 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the event notification management module. Impact: Successful...7.1 High
- huawei harmonyosDoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may...7.5 High
- huawei harmonyosOOB read vulnerability in the peripheral module. Impact: Successful exploitation of this...5.9 Medium
- huawei harmonyosUAF vulnerability in the location service module. Impact: Successful exploitation of this...5.9 Medium
- huawei harmonyosRace condition vulnerability in the location service module. Impact: Successful exploitation of...5.9 Medium
- huawei harmonyosPermission control vulnerability in the WLAN module. Impact: Successful exploitation of this...5.5 Medium
- huawei harmonyosDoS vulnerability in the file parsing module. Impact: Successful exploitation of this...4.3 Medium
- huawei harmonyosBuffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this...4.7 Medium
- huawei harmonyosNull pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of...4.3 Medium
- huawei harmonyosPermission control vulnerability in the background task management module. Impact: Successful...3.6 Low
- huawei harmonyosDoS vulnerability in the file parsing module. Impact: Successful exploitation of this...4.0 Medium
- huawei harmonyosPermission control vulnerability in the graphics module. Impact: Successful exploitation of this...6.2 Medium
- dayrui xunruicmsdayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection6.9 Medium
- wso2 api manager, carbon identity management, carbon user manager kernel +1 more +3 moreAccount Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks4.8 Medium
- wso2 api manager, api control plane, carbon api manager rest api common functions +6 more +8 moreBroken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions9.4 Critical
- dayrui xunruicmsdayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection6.9 Medium
- dayrui xunruicmsdayrui XunRuiCMS Member View.php View sql injection6.9 Medium
- wavlink wn551x3-aWAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection10.0 Critical
- Show moreLoading…