CVEs.

Matching CVEs

1. 8.2High

   CVE-2026-47623 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.

   NVNVIDIA· Aug 4, 2026

2. 8.1High

   CVE-2026-47619 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

   NVNVIDIA· Aug 4, 2026

3. 7.5High

   CVE-2026-47618 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

4. 7.5High

   CVE-2026-47617 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

5. 7.5High

   CVE-2026-47616 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

6. 7.5High

   CVE-2026-47615 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

7. 7.5High

   CVE-2026-47614 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

8. 7.5High

   CVE-2026-47613 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

9. 7.5High

   CVE-2026-47612 ↗ (opens in a new tab)

   NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 4, 2026

10. 7.1High

    CVE-2026-47487 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

    NVNVIDIA· Aug 4, 2026

11. 7.5High

    CVE-2026-24255 ↗ (opens in a new tab)

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.

    NVNVIDIA· Aug 4, 2026

12. 8.2High

    CVE-2026-24253 ↗ (opens in a new tab)

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.

    NVNVIDIA· Aug 4, 2026

13. 7.8High

    CVE-2026-10710 ↗ (opens in a new tab)

    A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Aug 4, 2026

14. 7.8High

    CVE-2026-10709 ↗ (opens in a new tab)

    A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Aug 4, 2026

15. 8.8High

    CVE-2026-62870 ↗ (opens in a new tab)

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    M3Microsoft 365· Aug 4, 2026

16. 8.0High

    CVE-2026-14541 ↗ (opens in a new tab)

    An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for opaque tokens skips audience validation entirely. As a result, the toolbox will accept any valid Google OAuth access token—even those minted for unrelated ecosystem applications—granting unauthorized clients access to protected tools and data backends.

    GCGoogle Cloud· Jul 31, 2026

17. 8.0High

    CVE-2026-14540 ↗ (opens in a new tab)

    A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook and lacks target IP validation. An attacker or a malicious data-driven prompt can supply a crafted path parameter that triggers an open redirect or a

    GCGoogle Cloud· Jul 31, 2026

18. 8.1High

    CVE-2026-14537 ↗ (opens in a new tab)

    Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-api flag is active.

    GCGoogle Cloud· Jul 31, 2026

19. 8.7High

    CVE-2026-18140 ↗ (opens in a new tab)

    Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via stack exhaustion) via a single small HTTP request containing deeply nested JSON to a smithy-rs generated server. To remediate this issue, users should upgrade to aws-smithy-json 0.62.7 or later and rebuild.

    AWAmazon Web Services· Jul 30, 2026

20. 7.5High

    CVE-2026-15975 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to insufficient resource throttling when processing merge request discussions.

    GIGitLab· Jul 29, 2026

21. 8.4High

    CVE-2026-12436 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of user-supplied attributes when processing pipeline schedule inputs.

    GIGitLab· Jul 29, 2026

22. 8.6High

    CVE-2026-16328 ↗ (opens in a new tab)

    In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to redirect the server's Consul API traffic to an attacker-controlled endpoint, potentially exfiltrating the Consul token configured on the server. This vulnerability, CVE-2026-16328, is fixed in consul-mcp-server 0.1.4.

    HAHashiCorp (HCP / Terraform Cloud)· Jul 29, 2026

23. 7.1High

    CVE-2026-16465 ↗ (opens in a new tab)

    A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.

    AUAutodesk· Jul 29, 2026

24. 7.8High

    CVE-2026-16463 ↗ (opens in a new tab)

    A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2026

25. 8.0High

    CVE-2026-12703 ↗ (opens in a new tab)

    TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

    TETeamViewer· Jul 29, 2026

26. 8.9High

    CVE-2026-16496 ↗ (opens in a new tab)

    The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability, CVE-2026-16496, is fixed in terraform-mcp-server 1.1.0.

    HAHashiCorp (HCP / Terraform Cloud)· Jul 28, 2026

27. 8.6High

    CVE-2026-14869 ↗ (opens in a new tab)

    The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled endpoint. This vulnerability, CVE-2026-14869, is fixed in terraform-mcp-server 1.1.0.

    HAHashiCorp (HCP / Terraform Cloud)· Jul 28, 2026

28. 8.2High

    CVE-2026-47483 ↗ (opens in a new tab)

    NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

    NVNVIDIA· Jul 28, 2026

29. 7.5High

    CVE-2026-47427 ↗ (opens in a new tab)

    GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go runtime panic; because the crash occurs before any authentication or token validation, any unauthenticated client able to send JSON-RPC messages can crash the server, resulting in a complete denial of service. This issue is fixed in version 1.1.0.

    GIGitHub· Jul 28, 2026

30. 8.7High

    CVE-2026-55685 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React Router applications using Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been fixed in version 7.18.0.

    SHShopify· Jul 27, 2026

31. 7.2High

    CVE-2026-66015 ↗ (opens in a new tab)

    An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.

    JFJFrog· Jul 27, 2026

32. 8.8High

    CVE-2026-66014 ↗ (opens in a new tab)

    JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

    JFJFrog· Jul 27, 2026

33. 8.8High

    CVE-2026-65921 ↗ (opens in a new tab)

    A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

    JFJFrog· Jul 27, 2026

34. 8.8High

    CVE-2026-65617 ↗ (opens in a new tab)

    A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

    JFJFrog· Jul 27, 2026

35. 8.8High

    CVE-2026-65616 ↗ (opens in a new tab)

    Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

    JFJFrog· Jul 27, 2026

36. 8.3High

    CVE-2026-64649 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker's request to control Host-associated headers. In some configurations, it's also possible to obtain internal values that weaken middleware/proxy authorization. Applications that use Server Actions are affected when the incoming host header is not fixed to a trusted value.

    VEVercel· Jul 27, 2026

37. 8.8High

    CVE-2026-42017 ↗ (opens in a new tab)

    An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

    JFJFrog· Jul 27, 2026

38. 8.8High

    CVE-2026-42016 ↗ (opens in a new tab)Known exploited

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    JFJFrog· Jul 27, 2026

39. 8.3High

    CVE-2026-64645 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffix. For a rewrite, Next.js proxies the request to that arbitrary host and serves the response from the application's origin, leading to Server-Side Request forgery. A redirects() rule configured this way is vulnerable to an Open Redirect. This issue has been fixed in versions 1

    VEVercel· Jul 27, 2026

40. 8.3High

    CVE-2026-64642 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11.

    VEVercel· Jul 27, 2026

41. 8.2High

    CVE-2026-64641 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. This issue has been fixed in versions 15.5.21 and 16.2.11.

    VEVercel· Jul 27, 2026

42. 7.8High

    CVE-2026-24252 ↗ (opens in a new tab)

    NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.

    NVNVIDIA· Jul 27, 2026

43. 8.3High

    CVE-2026-17497 ↗ (opens in a new tab)

    NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

    JFJFrog· Jul 26, 2026

44. 8.1High

    CVE-2026-17496 ↗ (opens in a new tab)

    NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the

    JFJFrog· Jul 26, 2026

45. 7.5High

    CVE-2026-62835 ↗ (opens in a new tab)

    Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Jul 24, 2026

46. 7.1High

    CVE-2026-9765 ↗ (opens in a new tab)

    Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken” when a user can access resources they are not authorized to access. An attacker can bypass any access control mechanisms in a web application, and gain unauthorized access to resources that are not available with their permissions. Broken access control can allow attackers to: Access resources only accessible to certain users, thus allowing unauthorized access to data Perform operations on behalf of other users, leading to account takeovers in the worst cases Attempt

    GCGrafana Cloud· Jul 24, 2026

47. 8.8High

    CVE-2026-56167 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jul 24, 2026

48. 7.2High

    CVE-2026-35425 ↗ (opens in a new tab)

    Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

    MAMicrosoft Azure· Jul 24, 2026

49. 7.1High

    CVE-2026-9737 ↗ (opens in a new tab)

    During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

    MAMongoDB Atlas· Jul 22, 2026

50. 8.4High

    CVE-2026-14881 ↗ (opens in a new tab)

    When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

    MAMongoDB Atlas· Jul 22, 2026