CVEs published in November 2026
7,969 vulnerabilities, 686 critical, 12 exploited.
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write5.3 Medium
- surferSurfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure6.5 Medium
- everaccounting ever accountingEver Accounting < 2.3.3 - Accounting Manager+ Arbitrary File Deletion via CSV Import8.7 High
- unknown static snapshotStatic Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter9.8 Critical
- unknown whizzWHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password Reset9.8 Critical
- ataur r gutenkitGutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSS6.8 Medium
- unknown placesterReal Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Update9.8 Critical
- unknown wurdeyWurdey <= 1.0.0 - Unauthenticated Administrator Authentication Bypass9.8 Critical
- unknown mail mageMail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter8.6 High
- unknown mcbMCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent8.8 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint6.8 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover6.4 Medium
- red hat exploit intelligence, build of quarkus +1 moreQuarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort4.3 Medium
- foxit software inc. workspaceFoxit Workspace Stored XSS in shared artifacts8.7 High
- foxit software inc. workspaceServer-Side Request Forgery in Foxit Workspace File Upload7.7 High
- foxit software inc. workspaceServer-Side Request Forgery in Foxit Workspace PDF Export7.7 High
- airoha technology corp. en7529, an7552, an7581, an7583 (wi-fi npu firmware)Out-of-bounds Write in Wi-Fi NPU6.3 Medium
- cern-fts fts-monitoringFTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo8.7 High
- subnet solutions powersystem center 2024, powersystem center 2026 +1 moreSubnet Solutions PowerSYSTEM Center SQL Injection9.4 Critical
- subnet solutions powersystem center 2020, powersystem center 2024, powersystem center 2026 +2 moreSubnet Solutions PowerSYSTEM Center Incorrect Authorization9.4 Critical
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce6.7 Medium
- dlclark regexp2Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression7.5 High
- gstreamer gst-plugins-goodGstreamer1-plugins-good: gstreamer: missing subindex entry count validation in avidemux leading to denial of service5.5 Medium
- gstreamer gst-plugins-goodGstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read6.1 Medium
- gstreamer gst-plugins-goodGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing6.1 Medium
- grafana enterprise, oss +1 moreDashboard snapshot permission bypass8.5 High
- debian freedomboxIn FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack...8.4 High
- libyal libvmdklibyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds4.8 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)6.7 Medium
libsql-abstract-perlDebian,perl-sql-abstractAlpine +1 moreSQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update9.8 Criticallibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time7.5 High- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus6.2 Medium
- undiciundici vulnerable to cross-user cache disclosure via same-origin redirect6.5 Medium
- undiciundici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata5.9 Medium
- undiciundici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping5.9 Medium
- undiciundici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay5.9 Medium
guavaopenSUSEguava-33.8.0-1.1 on GA mediaNo score- undiciundici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops7.4 High
- qt frameworkInformation disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework2.3 Low
ansible-coreopenSUSE,ansible-core-2.21openSUSE,ansible-core-2.19openSUSE +1 more +3 moreansible-core-2.21.6-1.1 on GA mediaNo score- checkmk gmbh checkmkJolokia special agent exposes password in process list2.0 Low
- checkmk gmbh checkmkNetApp ONTAP special agent exposes password in process list2.0 Low
- libyal libvmdklibyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption5.1 Medium
- networkupstools nutNUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg2.4 Low
github.com/mark3labs/mcp-goGoSSRF and credential leak via unvalidated Location header in github.com/mark3labs/mcp-goNo scoregithub.com/crewjam/samlGoNil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/samlNo scoregithub.com/blakesmith/arGoPanic on negative member size in Reader.Read in github.com/blakesmith/arNo scoregithub.com/google/go-eventlogGoEvent type spoofing via UntrustedType in github.com/google/go-eventlogNo score- ag2ai ag2, autogen +1 moreAG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution8.8 High
- dagu-org daguDagu MCP DAG specification read bypasses path containment and workspace isolation6.5 Medium
- Show moreLoading…