CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- postgresql psqlodbcpsqlODBC does not validate server-supplied counts and lengths5.9 Medium
- postgresql psqlodbcpsqlODBC uses a server-supplied column name as a format string6.8 Medium
- postgresql psqlodbcpsqlODBC row cache overflow when a later FETCH changes the column count7.5 High
- postgresql psqlodbcpsqlODBC large-object read overflows the application buffer7.5 High
- aws aidlc-traceabilityStored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows4.6 Medium
- petpooja attendo (formerly petpooja payroll)Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials8.8 High
- joomlaboat.com custom tables extension for joomlaJoomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.89.5 Critical
- petpooja munshiMunshi XSS via Purchase Inquiry Thread Rendering5.1 Medium
- petpooja munshiMunshi IDOR via Purchase Inquiry Thread Endpoint7.1 High
- petpooja munshiMunshi Missing Authorization in Company Deletion API7.2 High
- petpooja munshiMunshi Broken Object Level Authorization via Invoice Deletion API7.1 High
- petpooja munshiMunshi Payment Bypass via Unauthenticated Webhook Endpoint8.7 High
- openkruise kruise-managerCVE-2026-1206567.5 High
- dj-extensions.com dj-classifieds extension for joomlaJoomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.35.3 Medium
- dj-extensions.com dj-classifieds extension for joomlaJoomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.39.3 Critical
- dj-extensions.com dj-classifieds extension for joomlaJoomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.39.4 Critical
- grafana enterprise metrics (gem), mimir +1 moreArbitrary file read via Alertmanager receiver configuration in Grafana Mimir7.7 High
- andyfactory newspaper4kAndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery6.9 Medium
- fossbillingFOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes8.4 High
- aws virtual-engineering-workbenchTemplate injection in the publishing component of awslabs Virtual Engineering Workbench9.4 Critical
- crewaiCVE-2026-1206309.1 Critical
- wso2 api manager, identity server, identity server as key manager +2 moreContent Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks4.3 Medium
- private internet access firefox extensionCVE-2026-1206277.5 High
- ethernut / egnite gmbh nut/net tcp/ip stackCVE-2026-1205967.5 High
libfurl-perlDebian,perl-FurlopenSUSE +1 moreFurl versions before 3.16 for Perl allow memory exhaustion via unbounded decompression of HTTP responses7.5 High- chainguard kanikokaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts9.3 Critical
- suse rancherRancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy9.1 Critical
iwdDebian[Unknown description]No score- aws aws-sdk-pandasImproper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas5.0 Medium
- suse rancherPrivilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules7.2 High
rootlesskitSUSESecurity update for rootlesskitNo score- linuxntfs: fix race between fallocate and mmap readsNo score
- linuxntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()No score
- linuxmm/damon/core: error damos_commit_quota_goal() for zero target_valueNo score
- linuxBluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn7.8 High
- linuxtracing: Hold trace_types_lock when updating modules in persistent instances7.8 High
- linuxtracing: Hold trace_types_lock when resetting last boot data from readers7.8 High
- linuxtracing: Reject incomplete event filter expressions7.8 High
- linuxtracing: Save the event file instead of the compatible histogram7.8 High
- linuxtracing: Unregister field variable histograms when the command failsNo score
- linuxtracing/histograms: Verify event_call identity when updating synth_event refcount7.8 High
- linuxtracing/syscalls: Use copy_from_user for the faultable syscall bufferNo score
- linuxio_uring/waitid: own the request before clearing ->head7.8 High
- linuxio_uring/cmd: don't leave list poison in ->hash_nodeNo score
- linuxio_uring/wait: don't spin on a stuck overflow listNo score
- linuxio_uring/io-wq: don't lose the signal that ends workNo score
- linuxio_uring/waitid: prevent cancel reference wrap7.8 High
- linuxkeys: Avoid the owner account dereference in named keyring lookupNo score
- linuxkeys: Check the authorization payload in process keyring searchesNo score
- linuxkeys: Protect the type name while describing a key7.0 High
- Show moreLoading…