CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- linuxkeys: make keyring indexes independent of kernel addressesNo score
- linuxkeys: Protect the read method check against type removalNo score
- linuxkeys/trusted_keys: return immediately after TPM unseal failureNo score
- linuxasymmetric_keys: reject trust keys without IDsNo score
- linuxftrace: Initialize modname and offset in print_rec()No score
- linuxcoredump: hold RCU while releasing parked threads7.0 High
- suse rancherRancher meta proxy allowlist bypass leading to server-side request forgery7.6 High
- nlnet labs krillKrill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server8.4 High
- nlnet labs krillKrill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import8.4 High
- nlnet labs krillKrill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token8.4 High
- avaya system managerCVE-2026-163069.8 Critical
- redimp otterwikiAn Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src6.9 Medium
- redimp otterwikiAn Otter Wiki before 2.26.2 Stored XSS via Math Code Block5.3 Medium
- suse rancherPrivilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller9.1 Critical
- wren security wrensec-commonsXSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter6.1 Medium
- control web panel web panelControl Web Panel (CWP) < 1.29 OS Command Injection via valid_token8.5 High
- control web panel web panelControl Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter6.8 Medium
- control web panel web panelControl Web Panel (CWP) < 1.16 OS Command Injection via /newpass/8.5 High
- control web panel web panelControl Web Panel (CWP) < 1.16 SQL Injection via access_token() API8.4 High
- control web panel web panelControl Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API8.5 High
- control web panel web panelControl Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access8.5 High
- control web panel web panelControl Web Panel (CWP) < 1.16 OS Command Injection via protected_directory8.7 High
- eclipse foundation threadxUser-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own6.9 Medium
- eclipse foundation threadxCortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode7.0 High
- eclipse foundation threadx netx duoNULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full8.7 High
- eclipse foundation threadxModule Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation6.8 Medium
- control web panel web panelControl Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor8.7 High
- control web panel web panelControl Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex8.6 High
- control web panel web panelControl Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php8.7 High
- wing ftp server ftp serverWing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page5.1 Medium
- outlineOutline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft5.3 Medium
- laradashboardLaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content5.1 Medium
- laradashboardLaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades8.6 High
- dromara jpomJpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch8.7 High
- dromara jpomJpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers8.7 High
- mpdavis python-josepython-jose through 3.5.0 Authentication Bypass via Empty HMAC Key9.1 Critical
- ultra video group kvazaarKvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser6.8 Medium
- deutsches klimarechenzentrum libaeclibaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder5.8 Medium
- l-smashL-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes6.9 Medium
- biojppm rapidyamlrapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()6.9 Medium
- the sleuth kit sleuth kitThe Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression6.8 Medium
- the sleuth kit sleuth kitThe Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header4.8 Medium
- gphoto libgphoto2libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion5.2 Medium
- gphoto libgphoto2libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver7.0 High
- laradashboardLaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool5.3 Medium
- outlineOutline before 1.12.0 Improper Access Control via Public Document Shares6.9 Medium
- doramart doracmsDoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint8.6 High
- bufanyun hotgoHotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code9.2 Critical
- madong-code madong-admin-saasmadong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API8.8 High
- madong-code madong-admin-saasmadong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware8.7 High
- Show moreLoading…