CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- eclipse foundation threadxNetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool8.7 High
- eclipse foundation threadxNULL pointer dereference in the BSD raw IPv6 send path when the destination table is full8.2 High
- aws aws-serverless-mcp-serverImproper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server6.9 Medium
- clavaque s2member – excellent for all kinds of memberships, content restriction paywalls & member access subscriptionss2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter9.8 Critical
- temporal technologies, inc. serverTemporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host8.7 High
- webpros cpanelImproper link resolution before file access in cPanel allows remote authenticated users to write...8.8 High
- webpros cpanelImproper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account...8.7 High
- No product listedKonflux-ci: unquoted variable expansion in shell command execution6.7 Medium
- google android xrIn addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to...8.4 High
- echohs geekezbrowserEchoHS GeekezBrowser Public API status information disclosure4.8 Medium
- absolute software secure accessMissing length validation in Absolute Secure Access7.1 High
- google androidIn is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a...6.7 Medium
- readymedia (minidlna)ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser8.7 High
- absolute software secure accessImproper input handling in Secure Access servers7.1 High
- google androidAn unprivileged application can exploit a lack of package/signature validation in SystemUI's ...7.8 High
- google androidThe vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an...6.7 Medium
- google androidA Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free...2.5 Low
- google androidThe report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware...7.8 High
- google androidThe vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An...7.5 High
- google androidA physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger...6.1 Medium
- google androidAn unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER`...7.8 High
- google androidThe `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission...5.5 Medium
- absolute software secure accessImproper input handling in Secure Access server8.3 High
- avaya system managerCVE-2026-163057.8 High
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper...3.5 Low
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication...3.9 Low
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input...4.2 Medium
- absolute security secure accessAuthentication bypass in Secure Access Servers9.3 Critical
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain...5.8 Medium
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper...6.4 Medium
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper...6.4 Medium
- absolute security secure accessCSRF in Secure Access Server v14.609.4 Critical
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege...6.7 Medium
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default...7.1 High
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper...8.1 High
- google androidIn checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a...4.0 Medium
- nexbox a95xNexbox A95X Amlogic S905X UART Unauthenticated Console Access7.0 High
- dell alienware command center (awcc)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege...7.8 High
- nexbox a95x, amlogic android sdk +1 moreAmlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR6.9 Medium
- nexbox a95x, amlogic android sdk +1 moreAmlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()6.9 Medium
- amlogic android sdk, nexbox a95x +1 moreAmlogic pppoe_wrapper Command Injection via AF_UNIX Socket8.5 High
- hdfgroup hdf5Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File4.3 Medium
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field9.8 Critical
- postgresql psqlodbcpsqlODBC stack buffer overflow copying ctid and oid values for updatable cursors5.9 Medium
- postgresql psqlodbcpsqlODBC log files are created with default permissions at a predictable path and follow symbolic links5.3 Medium
- postgresql psqlodbcpsqlODBC does not escape a server-supplied column name in its updatable-cursor queries7.1 High
- postgresql psqlodbcpsqlODBC does not validate column numbers and row indexes in binding and descriptor functions7.5 High
- postgresql psqlodbcpsqlODBC stack buffer overflow when quoting long schema and table names5.9 Medium
- postgresql psqlodbcpsqlODBC SQL injection through SQLSpecialColumns table and schema names7.5 High
- postgresql psqlodbcpsqlODBC ODBC escape parser stack buffer overflow7.5 High
- Show moreLoading…