CVEs published in November 2026
8,005 vulnerabilities, 689 critical, 12 exploited.
- ibm db2 genius hub, agentics +1 moreMultiple vulnerabilities that affects IBM Db2 Genius Hub4.3 Medium
- ibm db2 genius hub, agentics +1 moreMultiple vulnerabilities that affects IBM Db2 Genius Hub3.4 Low
- jgraph drawiodraw.io: Prototype pollution in GraphML (mxGraphMlCodec)6.1 Medium
- jgraph drawiodraw.io: Incomplete SSRF blocklist in `ProxyServlet` / `Utils.sanitizeUrl`: RFC 6598 CGNAT range `100.64.0.0/10` is not blocked -> server-side request to internal CGNAT hosts5.8 Medium
- traccarTraccar: Authentication bypass via path parameters exposes protected device media7.5 High
- comfast cf-wr632axComfast CF-WR632AX Multipart webmgnt path traversal10.0 Critical
- sumatrapdfreader sumatrapdfSumatraPDF: TLS hostname validation disabled in `HttpGet()`8.2 High
- sysown proxysqlProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path7.1 High
- cisco telepresenceTelepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets8.5 High
- retspen webvirtcloudWebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints7.2 High
- germondai trawlTrawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass6.3 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset6.9 Medium
- blueprintue blueprintue-self-hosted-editionBlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass6.3 Medium
- romkatv gitstatus, powerlevel10k +1 morePowerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer5.4 Medium
- romkatv powerlevel10kPowerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File4.1 Medium
- mistralai mistral-vibeMistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program8.6 High
- mistralai mistral-vibeMistral Vibe before 2.25.7 Code Execution via Git Filter Drivers8.6 High
- mistralai mistral-vibeMistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe8.6 High
- cesnet ipfixcol2CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin8.3 High
- cesnet ipfixcol2CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder6.9 Medium
- cesnet ipfixcol2CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder8.7 High
- resiprocatereSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket8.2 High
- quozl netrek-client-cownetrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessage7.1 High
- quozl netrek-client-cowNetrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets7.1 High
- vtenextvtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php9.3 Critical
- vtenextvtenext before 25.02.2 SQL Injection via fieldname in Fax EditView8.6 High
- vtenextvtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service5.9 Medium
- vtenextvtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering6.9 Medium
- vtenextvtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList5.1 Medium
- cisco telepresenceTelepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable8.2 High
- datalinkdc dinkyDataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery6.9 Medium
- ibm mqIBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability7.5 High
- ibm mqIBM MQ is affected by a denial of service vulnerability8.8 High
- ibm mqIBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability8.5 High
- ibm mqIBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability7.5 High
- ibm mq applianceIBM MQ Appliance is affected by an improper validation vulnerability5.4 Medium
- ibm mqIBM MQ is affected by a denial of service vulnerability5.4 Medium
- ibm mqIBM MQ Managed File Transfer is affected by a denial of service vulnerability8.1 High
- ibm mqIBM MQ Managed File Transfer is vulnerable to XML external entity injection7.1 High
- ibm mqIBM MQ Managed File Transfer is vulnerable to XML external entity injection7.1 High
- ibm mqIBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability8.8 High
- ibm mqIBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility6.2 Medium
- ibm mqIBM MQ is affected by a denial of service vulnerability7.1 High
- wpo365 | seamless wordpress + microsoft integration (wpo365 | login)WPO365 LOGIN before 45.2 SAML Replay Protection Bypass9.1 Critical
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase7.1 High
- sonatype nexus repository 3Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task7.7 High
- sonatype nexus repository 3Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab6.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Group Repository Member Authorization Bypass5.3 Medium
- sonatype nexus repository 3Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation8.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again9.1 Critical
- Show moreLoading…