CVEs published in November 2026
7,997 vulnerabilities, 689 critical, 12 exploited.
- m66b fairemailFairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory6.3 Medium
- pavel-odintsov fastnetmonFastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read8.2 High
- pavel-odintsov fastnetmonFastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read7.5 High
- flexera flexnet beacon, flexnet manager suite +1 moreFlexNet Beacon Missing Authentication Vulnerability6.9 Medium
- pavel-odintsov fastnetmonFastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser8.2 High
- pavel-odintsov fastnetmonFastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments7.5 High
- pavel-odintsov fastnetmonFastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames8.2 High
- pavel-odintsov fastnetmonFastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts5.9 Medium
- kubeflow pipelinesKubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)5.4 Medium
- kubeflow pipelinesKubeflow Pipelines API server lacks authorization for shared pipeline uploads9.6 Critical
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints8.6 High
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator8.6 High
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy5.8 Medium
- kubeflow pipelinesKubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines7.2 High
- kubeflow pipelinesKubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses6.1 Medium
- kubeflow pipelinesKubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server6.5 Medium
- chainguard minioMinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.8.8 High
- tpc software matchpointAPI keys, credentials, and configuration parameters embedded in the MatchPoint APK5.1 Medium
- kubeflow pipelinesKubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation5.0 Medium
- tpc software matchpointIncorrect validation of TLS certificates in the MatchPoint Android app9.1 Critical
- tpc software matchpointLack of authentication and authorization in the Images.ashx endpoint in MatchPoint8.7 High
- tpc software matchpointSQL injection in the push notification handler of the MatchPoint Android app8.6 High
- tpc software matchpointCredentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences6.9 Medium
- tpc software matchpointInsecure direct object reference (IDOR) vulnerability in the MatchPoint API9.9 Critical
- tpc software matchpointA static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform9.9 Critical
- btcpay server serverBTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure9.3 Critical
- umputun remark42Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment6.5 Medium
- kurrent-io kurrentdbKurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF6.9 Medium
- altair-graphql altair, altair-express-middleware, altair-fastify-plugin +2 more +4 moreAltair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox6.1 Medium
- jhuckaby cronicleCronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)9.0 Critical
- silviucpp ezstdDecompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer6.9 Medium
- vitali87 code-graph-ragCode Graph RAG structural tools follow out-of-root symlinks7.1 High
- vitali87 code-graph-ragCode Graph RAG: MCP paginated read_file path traversal / arbitrary file read7.5 High
- open-emr openemrOpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment9.6 Critical
- open-emr openemrOpenEMR: Username Enumeration via Pre-Authentication User Settings Loading5.3 Medium
- open-emr openemrOpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions5.3 Medium
- open-emr openemrOpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint4.3 Medium
- open-emr openemrOpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)6.5 Medium
- open-emr openemrOpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory5.4 Medium
- open-emr openemrOpenEMR: Missing authorization on QRDA Category I/III download endpoints6.5 Medium
- open-emr openemrOpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration8.1 High
- open-emr openemrOpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall7.1 High
- open-emr openemrOpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute8.1 High
- open-emr openemrOpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth6.5 Medium
- open-emr openemrOpenEMR: Arbitrary Patient Recall and Contact Detail Read7.1 High
- the document foundation libreofficeHeap buffer overflow in dBASE index import5.4 Medium
- open-emr openemrOpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations7.1 High
- open-emr openemrOpenEMR: Patient Data Search Without Sufficient ACL7.1 High
- openai codex desktop for windows, codex desktop for windows (microsoft store/msix package) +1 moreCodex Desktop for Windows does not correctly check quotation marks in project paths from Windows...8.0 High
- open-emr openemrOpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI6.5 Medium
- Show moreLoading…