CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- node-opcuanode-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions9.1 Critical
- anthropics claude-codeClaude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace7.7 High
- anthropics claude-codeClaude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable7.5 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA6.5 Medium
- hewlett packard enterprise (hpe) virtual intranet access (via)Authenticated Sensitive Information Disclosure in VIA6.5 Medium
- hewlett packard enterprise (hpe) virtual intranet access (via)Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux7.1 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Authenticated Command Injection Vulnerability in HPE Networking VIA7.2 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA7.5 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Authenticated Local Command Injection Vulnerability in the VIA Client for Linux7.8 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)8.1 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client8.4 High
- hewlett packard enterprise (hpe) virtual intranet access (via)Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client8.8 High
- chamilo chamilo-lmsChamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated7.2 High
- lucasrodes whatstkUnescaped header separators in whatstk build a regular expression that backtracks exponentially6.7 Medium
- franklioxygen mytubeMyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value6.8 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface3.1 Low
- hewlett packard enterprise (hpe) fabric composerAuthenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read3.1 Low
- hewlett packard enterprise (hpe) fabric composerAuthenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer3.3 Low
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer3.7 Low
- hewlett packard enterprise (hpe) fabric composerAuthenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer3.8 Low
- hewlett packard enterprise (hpe) fabric composerAuthenticated Race Condition in API of HPE Networking Fabric Composer4.2 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint4.3 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer4.7 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer5.3 Medium
- hewlett packard enterprise (hpe) fabric composerPrivilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API5.3 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Information Disclosure in HPE Networking Fabric Composer5.3 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer5.3 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer5.4 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer5.7 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer5.9 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer5.9 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer5.9 Medium
- hewlett packard enterprise (hpe) fabric composerPrivilege Escalation Vulnerability in HPE Networking Fabric Composer API6.4 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Audit Log Bypass in the API of HPE Networking Fabric Composer6.5 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Authorization Bypass in the API of HPE Networking Fabric Composer6.5 Medium
- hewlett packard enterprise (hpe) fabric composerAuthentication Bypass Vulnerability in HPE Networking Fabric Composer API6.5 Medium
- hewlett packard enterprise (hpe) fabric composerAuthenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer6.6 Medium
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer6.8 Medium
- hewlett packard enterprise (hpe) fabric composerPrivilege Escalation in HPE Networking Fabric Composer API7.1 High
- hewlett packard enterprise (hpe) fabric composerLocal Privilege Escalation in HPE Networking Fabric Composer7.1 High
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer7.4 High
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Improper Certificate Validation in HPE Networking Fabric Composer7.5 High
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Missing Integrity Verification in HPE Networking Fabric Composer7.5 High
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer7.5 High
- hewlett packard enterprise (hpe) fabric composerPrivilege Escalation in the SSH Interface of HPE Networking Fabric Composer7.5 High
- franklioxygen mytubeMyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning4.3 Medium
- hewlett packard enterprise (hpe) fabric composerAuthentication Bypass in the API Endpoint of HPE Networking Fabric Composer7.5 High
- hewlett packard enterprise (hpe) fabric composerUnauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer7.5 High
- hewlett packard enterprise (hpe) fabric composerAuthenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer7.7 High
- hewlett packard enterprise (hpe) fabric composerLocal Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer7.8 High
- Show moreLoading…