CVEs published in November 2026
7,962 vulnerabilities, 684 critical, 12 exploited.
- nexmoe vidbeenexmoe VidBee Local HTTP Service local-api.ts information disclosure5.3 Medium
- freedom of the press securedropSecureDrop: Onion Service client auth credentials copied to Monitor Server2.6 Low
- evalstate fast-agentfast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution6.4 Medium
- tootallnate plist.jsplist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser8.7 High
- esm-dev esm.shesm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal7.5 High
- kunchenguid lavish-axiLavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server8.1 High
- jupyterlab jupyterlab-desktopJupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL9.4 Critical
- jupyterlab jupyterlab-desktopJupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses5.5 Medium
- jupyterlab jupyterlab-desktopJupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution9.6 Critical
- jupyterlab jupyterlab-desktopJupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)5.5 Medium
- rapid7 velociraptorVelociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin6.5 Medium
- bubka 2fauth2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification9.8 Critical
- bubka 2fauth2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value9.8 Critical
- bubka 2fauth2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)5.9 Medium
- bubka 2fauth2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets4.9 Medium
- bubka 2fauth2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration6.5 Medium
- stleary json-javaJSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoS5.9 Medium
- cilium tetragonTetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods8.8 High
- tracecathq tracecatTracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults9.8 Critical
- dbeaver cloudbeaverCloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access6.5 Medium
- dbeaver cloudbeaverCloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass6.5 Medium
- dbeaver cloudbeaverCloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox5.3 Medium
- pytorch torchservepytorch/serve: Local privilege escalation through insecure temporary path7.8 High
github.com/canonical/lxdGoLXD has restricted project bypass leading to arbitrary command execution9.9 Criticalgithub.com/canonical/lxdGoLXD has project restriction bypass for custom volume copy across projects7.7 Highgithub.com/canonical/lxdGoLXD has project restriction bypass in instance copy across projects7.7 High- geonodeGeoNode has Stored XSS in Documents metadata abstract field6.3 Medium
- geonodeGeoNode: Unrestricted File Upload5.5 Medium
- geonodeGeoNode: OS command injection via uploaded file layer name8.8 High
github.com/canonical/lxdGoLXD has arbitrary file write on client due to trusted image hash9.9 Criticalgithub.com/canonical/lxdGoLXD has argument injection in backup compression algorithm leading to AFW and ACE9.9 Criticalgithub.com/canonical/lxdGoLXD has arbitrary file read+write on host via rootfs/ symlink in malicious image9.9 Critical- tp-link systems inc. archer be805 v1UPnP Newline Injection Vulnerability in TP-Link Archer BE8055.3 Medium
- civetwebCivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State9.2 Critical
- gitleaksGitleaks through 8.30.1 World-Readable Report Files via --report-path4.8 Medium
- gpacGPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg46.8 Medium
- gpacGPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace6.8 Medium
- kopiaKopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names6.9 Medium
- ericlbuehler mistral.rsmistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers2.3 Low
- zhimaai chatwikiChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage8.7 High
- karlomikus bar-assistantBar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copy5.3 Medium
- faveosuite faveo-helpdeskFaveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print5.3 Medium
- sonicwall sonicosA weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in...5.1 Medium
- sonicwall sonicosA pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS...5.9 Medium
- sonicwall sonicosA pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS...5.9 Medium
- sonicwall sonicos, sonicos sslvpn +1 moreAn authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid...7.5 High
- hisense vidaaHisense VIDAA Smart TV MQTT Broker Authentication Bypass7.2 High
- hisense vidaaHisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI7.1 High
- hisense vidaaHisense VIDAA Smart TV UPnP/DLNA Missing Authentication4.8 Medium
- hisense vidaaHisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI4.8 Medium
- Show moreLoading…