CVEs published in November 2026
8,005 vulnerabilities, 689 critical, 12 exploited.
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key7.1 High
- aws firecrackerGuest access to Firecracker process memory after a failed memory discard7.1 High
- solidtime-io solidtimeSolidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle6.3 Medium
- moleculerjs moleculerMoleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser7.5 High
- linksys e5350Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication10.0 Critical
- zulipZulip: Saving a draft DM to a user bypasses can_access_all_users_group permission6.5 Medium
- zulipZulip: Custom profile fields can be read by logged-out visitors in organization with web-public channels5.3 Medium
- zulipZulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requests6.5 Medium
- omniauthOmniAuth: Host Header Injection Vulnerability6.9 Medium
- espressif esp-idfESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary9.3 Critical
- espressif esp-idfESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses7.4 High
- bitcoinjs bitcoinjs-libbitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list9.3 Critical
- linksys e5350Linksys E5350 apply.cgi system os command injection10.0 Critical
- zammadZammad: Stored XSS in ticket article rendering in the new Vue-based interface5.1 Medium
- espressif esp-idfESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing7.1 High
- linksys wrt54glLinksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection9.4 Critical
- deepseek-ai deepseek-harnessDeepSeek Harness Unauthenticated RPC Command Execution8.6 High
- linksys wrt54glLinksys WRT54GL Ping Diagnostic apply.cgi system os command injection9.4 Critical
- yealink meetingboard proIn Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end...8.2 High
- invoiceninjaInvoice Ninja < 5.13.28 Broken Access Control via Vendor Portal7.1 High
- empiresoft empirecmsEmpireSoft EmpireCMS index.php cross site scripting5.1 Medium
- yealink uvc40 e2On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can...6.1 Medium
- yealink plug-in softwaresIn Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability...9.0 Critical
- infiniflow ragflowInfiniFlow RAGFlow Images API file_utils.py cross site scripting5.1 Medium
- yealink avhub, meetingbar a10, meetingbar a40 +5 more +7 moreIn certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8...7.4 High
- datagerryDataGerry < 3.3.0 SSTI via DocAPI Template Rendering8.7 High
drupal/htmlawedPackagistThe htmLawed module enables use of the htmLawed PHP library as a filter in a Text Format for restriction/filtering of HTML in textual input. The htmLawed filter does not sufficiently filter attributes…No scoredrupal/htmlawedPackagistThe htmLawed module enables use of the htmLawed PHP library as a filter in a Text Format for restriction/filtering of HTML in textual input. The module's filtering of malicious HTML can be bypassed by…No scoredrupal/islandoraPackagistIslandora does not sufficiently check file update access when processing media source and derivative uploads. A user with permission to update media or create derivatives can submit a crafted request…No scoredrupal/mimemailPackagistThe Mime Mail module gives Drupal sites the ability to send HTML email messages. Under rare site configuration conditions, a user with the ability to send HTML emails could send non-public data that h…No scoredrupal/adobe_analyticsPackagistThis module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site. The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site…No scoredrupal/wordsonline_connectorPackagistThe WordsOnline Connector module integrates Drupal with the WordsOnline translation service through the TMGMT module. The module doesn't properly validate data, resulting in an SQL Injection vulnerabi…No scoredrupal/extended_html_filterPackagistThe Extended HTML Filter module allows using style attributes in CKEditor. The module XSS filter does not sufficiently sanitize certain HTMX attributes, which can lead to a cross-site scripting (XSS)…No scoredrupal/allowed_languagesPackagistThe Allowed Languages module makes it possible to set restrictions on which content a user can edit based on language. The module doesn't sufficiently protect against using a disallowed language durin…No score- yealink ax83h、ax86r, cp925, cp935w +10 more +12 moreCertain Yealink terminal devices before 2026-04-21 contain an improper access control...4.3 Medium
- infiniflow ragflowInfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgery5.3 Medium
drupal/change_pwd_pagePackagistThis module provides a separate page with a form for users to change their own password, which asks for the current password before accepting a new one. The module doesn't sufficiently verify the curr…No scoredrupal/schedulerPackagistThis module enables you to schedule content to be published or unpublished at a certain time in the future. The module doesn't sufficiently check if a user has permission to change publication or unpu…No scoredrupal/reset_password_email_otpPackagistThis module enables you to reset passwords via one time passcode to email or SMS rather than reset password links. The module doesn't sufficiently validate resetting passwords for blocked users. This…No scoredrupal/namePackagistThe Name Field module provides a field for storing a personal name as separate components. The module does not sufficiently sanitize values under some circumstances. A name stored on the field can be…No scoredrupal/forum_accessPackagistThis module allows forums to be set private and to be given moderators. The module doesn't sufficiently check access for creating forum topics in private forums. As a result, a user can post new topic…No scoredrupal/commerce_escrowPackagistThis module enables you to accept payments through Escrow.com with Drupal Commerce. The module doesn't sufficiently verify incoming Escrow.com webhook notifications. An attacker can forge payment and…No scoredrupal/commerce_product_alternativePackagistThis module lets customers replace an item in their cart with one of the alternative product variations listed for it. The module does not check that a cart belongs to the current visitor when the vis…No scoredrupal/basket_paypalPackagistThe AlternativeCommerce PayPal Checkout module provides an AlternativeCommerce method to embed payment services from PayPal. The module does not sufficiently validate incoming PayPal webhook requests.…No scoredrupal/highlight_jsPackagistThis module enables you to add syntax-highlighted code snippets to content using CKEditor 5. The module doesn't sufficiently validate input passed to its CKEditor 5 preview endpoint, leading to a refl…No scoredrupal/rest_api_authenticationPackagistThe REST & JSON API Authentication module provides API authentication for Drupal sites. The module does not properly reject requests when an API key is unconfigured, allowing unauthenticated attackers…No scoredrupal/workflow_notificationsPackagistThis module enables you to send messages ("Notifications") to users upon a certain Workflow state change. The module doesn't sufficiently protect the Notification settings page where an attacker can m…No scoredrupal/simple_oauthPackagistThis module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with access tokens, or allow clients to request new access tokens and refresh them. Th…No scoredrupal/s3fs_corsPackagistThis module enables you to upload files from the browser directly to Amazon S3 and register them as Drupal files, bypassing normal PHP file size and timeout limits. The module doesn't sufficiently che…No scoredrupal/content_synchronizerPackagistThe Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files. The module doesn't sufficiently sanitize input passed to its client-side cod…No score- Show moreLoading…