CVEs published in November 2026
7,962 vulnerabilities, 684 critical, 12 exploited.
- hisense vidaaHisense VIDAA Smart TV DIAL Service Unauthenticated Access5.3 Medium
- sonicwall sonicosA pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS...7.5 High
github.com/canonical/lxdGoLXD has arbitrary file read+write on host via templates/ symlink in malicious image9.9 Critical- hisense vidaaHisense VIDAA Smart TV Unauthenticated WebDriver Remote Access8.7 High
- sonicwall sonicosA session validation vulnerability has been identified in the SonicOS management interface, which...8.8 High
- sonicwall sonicosA permissive cross-domain policy vulnerability has been identified in the SonicOS management...8.8 High
github.com/canonical/lxdGoLXD has arbitrary file write on host via `exec-output` symlink in crafted image9.9 Critical- amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 moreOut-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser7.2 High
- grobidorg grobidGROBID is vulnerable to OS command injection through crafted PDF filenames0.0 None
- realtek rtusba64.sysCVE-2026-1221134.3 Medium
- realtek rtusba64.sysCVE-2026-909757.8 High
- amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 moreHeap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser9.3 Critical
- grobidorg grobidGROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)7.5 High
- ddevDDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-328856.5 Medium
- kiteworks owncloudCVE-2026-844739.8 Critical
- linuxxen-blkback: Avoid UAF when reading I/O statisticsNo score
- linuxxen-netback: defer xenvif_mcast_addr_list_free()7.8 High
- linuxxen-netback: Fix UAF when reading statistics dataNo score
- open-wanderer wandererWanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access10.0 Critical
- open-wanderer wandererWanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML7.6 High
- open-wanderer wandererStored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)7.6 High
- teunis van beelen edfbrowserEDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals6.8 Medium
- open-wanderer wandererWanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints7.5 High
- doomsider shadowGradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization6.3 Medium
- skyline communications dataminerSkyline DataMiner BrokerGateway Embedded API Key Authentication Bypass8.7 High
- sharepoint products copymove for sharepoint 2019, copymove for sharepoint v6 +1 moreSharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user...5.0 Medium
- monogramm erpnext ocrERPNext OCR 1.1.1 Path Traversal and SSRF via read_document7.1 High
- hapijs contentNuxt Content: Unauthenticated SQLite Function DoS via Content Query API7.5 High
- yuzutech krokiKroki Mermaid companion SSRF via flowchart image URLs5.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation4.4 Medium
- yuzutech krokiKroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives7.5 High
- ohif viewersOHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document8.8 High
- sensiolabs symfonySymfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true2.3 Low
- freescout-help-desk freescoutFreeScout: Conditional stored admin XSS via failed-job details7.5 High
- chenyme grok2apichenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption5.3 Medium
- freescout-help-desk freescoutFreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save7.1 High
- aws trusted-remote-executionOS command injection in the example SSM documents in Trusted Remote Execution (REX)9.3 Critical
- freescout-help-desk freescoutFreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII6.5 Medium
- freescout-help-desk freescoutFreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks8.2 High
- freescout-help-desk freescoutFreeScout: Conversation Merge Cross-Mailbox Authorization Bypass5.4 Medium
- freescout-help-desk freescoutFreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets5.3 Medium
- freescout-help-desk freescoutFreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key6.5 Medium
- freescout-help-desk freescoutFreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files4.4 Medium
- progress software kendo ui for vuePrototype Pollution in Progress Software Kendo UI for Vue4.1 Medium
- freescout-help-desk freescoutFreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)4.3 Medium
- progress software kendoreactPrototype Pollution in Progress Software KendoReact4.1 Medium
- freescout-help-desk freescoutFreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query7.7 High
- progress software kendo ui for angularPrototype Pollution in Progress Software Kendo UI for Angular4.1 Medium
- progress software kendo ui for vueCross-Site Scripting in Progress Software Kendo UI for Vue5.4 Medium
- progress software kendoreactCross-Site Scripting in Progress Software KendoReact5.4 Medium
- Show moreLoading…