CVEs published in November 2026
7,997 vulnerabilities, 689 critical, 12 exploited.
- suitecrmSuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosure7.7 High
- suitecrmSuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php8.3 High
- suitecrmSuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorization8.1 High
- suitecrmSuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php8.3 High
- suitecrmSuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRM7.2 High
- libnoname nonamenoname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server7.7 High
- librespark libretvLibreTV before v2.21.2 SSRF Protection Bypass via DNS Rebinding2.3 Low
- aozorae edgechatEdgeChat before 2.20.3 Missing Authentication for Attachment Download via GET /files/:key6.3 Medium
- accel-pppaccel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql8.3 High
- goposta postaPosta before v0.18.0 SSRF via Webhook URL5.3 Medium
- emqx neuronNEURON through 9.0.2 Stack-based Buffer Overflow via CoreNEURON dataset tokens6.9 Medium
- bakulf libnxmllibnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name8.7 High
- jarun bukubuku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API6.3 Medium
- vrpnVRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index8.7 High
- book-readers ebook-speakereBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute6.8 Medium
- lmfdbLMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>9.3 Critical
- wppconnect wppconnect-serverWPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files6.9 Medium
- authorizerdev authorizerAuthorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata8.6 High
- suitecrmSuiteCRM: isSelfRequest() bypass via substring match allows SSRF to internal services7.7 High
- suitecrmSuiteCRM: Time-Based Blind SQL Injection via REST API8.3 High
- kubernetes ingress-nginx, suse rancher prime rke2 ingress-nginx +1 moreingress-nginx mirror-target self-DOS2.7 Low
- suitecrmSuiteCRM: IDOR in generatePdf Entry Point Allows Record Data Exfiltration6.5 Medium
- thalesgroup safenet authentication client sis token engineStack-based buffer overflow in SafeNet Authentication Client SIS token engine7.0 High
- suitecrmSuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api8.8 High
- suitecrmSuiteCRM: Record-level Authorization Bypass via AOR_Reports changeReportPage6.5 Medium
- suitecrmSuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller8.3 High
- suitecrmSuiteCRM: Non-admin user creates SchedulersJob: SSRF via cron7.1 High
- tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 moreJoomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.66.9 Medium
- jreviews.com jreviews component for joomlaJoomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.98.2 High
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.08.3 High
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.06.9 Medium
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.08.6 High
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.08.6 High
- tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 moreJoomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.67.5 High
- sensiolabs symfonySymfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass2.3 Low
- altium 365Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes7.2 High
- silicon labs wf200 fwMalformed Wi-Fi Beacon Causes Crash on WF2007.1 High
- thalesgroup safenet authentication client servicePrivileged file deletion in SafeNet Authentication Client SACSrv5.8 Medium
- hedgedocHedgeDoc: Missing validation of incoming permission values on change5.9 Medium
- bytecodealliance wasm-micro-runtimeWAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch8.8 High
- bytecodealliance wasm-micro-runtimeWebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest6.9 Medium
- bytecodealliance wasm-micro-runtimeWebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer8.3 High
- immich-app immichImmich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints8.8 High
- thalesgroup safenet authentication client serviceLocal privilege escalation in SafeNet Authentication Client SACSrv7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority7.1 High
- red hat build of keycloak 26.4.17, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover8.8 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens6.8 Medium
- red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 moreOrg.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates8.0 High
- red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 moreKeycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer7.4 High
- red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens8.1 High
- Show moreLoading…