CVEs.

Matching CVEs

1. 7.7High

   CVE-2026-42398 ↗ (opens in a new tab)

   Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.

   ECElastic Cloud· May 28, 2026

2. 7.3High

   CVE-2026-33462 ↗ (opens in a new tab)

   A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.

   ECElastic Cloud· May 28, 2026

3. 8.2High

   CVE-2026-4868 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.

   GIGitLab· May 27, 2026

4. 7.1High

   CVE-2026-42280 ↗ (opens in a new tab)

   Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0.

   AUAuth0· May 27, 2026

5. 7.0High

   CVE-2026-8606 ↗ (opens in a new tab)

   A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to an internal management service and measuring response timing, an attacker could infer the values of sensitive environment variables, including signing secrets and private keys. Exploitation required GitHub Packages to be enabled; on instances not running in private mode the vulnerability was exploitable without authentication, otherwise a

   GIGitHub· May 27, 2026

6. 8.2High

   CVE-2026-44843 ↗ (opens in a new tab)

   LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load() with allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause tr

   L/LangChain / LangSmith· May 26, 2026

7. 7.8High

   CVE-2026-7454 ↗ (opens in a new tab)

   A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

   AUAutodesk· May 26, 2026

8. 7.8High

   CVE-2026-7452 ↗ (opens in a new tab)

   A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

   AUAutodesk· May 26, 2026

9. 7.8High

   CVE-2026-7451 ↗ (opens in a new tab)

   A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

   AUAutodesk· May 26, 2026

10. 7.0High

    CVE-2026-24200 ↗ (opens in a new tab)

    NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

11. 7.1High

    CVE-2026-24196 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

    NVNVIDIA· May 26, 2026

12. 7.8High

    CVE-2026-24194 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

13. 7.8High

    CVE-2026-24193 ↗ (opens in a new tab)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

14. 7.8High

    CVE-2026-24192 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

15. 7.8High

    CVE-2026-24191 ↗ (opens in a new tab)

    NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

16. 7.8High

    CVE-2026-24190 ↗ (opens in a new tab)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

17. 8.8High

    CVE-2026-24187 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

    NVNVIDIA· May 26, 2026

18. 7.8High

    CVE-2026-24162 ↗ (opens in a new tab)

    NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

    NVNVIDIA· May 26, 2026

19. 7.8High

    CVE-2026-4372 ↗ (opens in a new tab)

    A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_implementation_internal` field set to an attacker-controlled HuggingFace Hub repository ID. When a victim loads this model using the standard `AutoModelForCausalLM.from_pretrained()` API, the library downloads and executes arbitrary Python code from the attacker's repository with the victim's full OS privileges. This issue arises due to unfiltered deserialization o

    HFHugging Face· May 24, 2026

20. 8.8High

    CVE-2026-45659 ↗ (opens in a new tab)Known exploited

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 22, 2026

21. 8.8High

    CVE-2026-40411 ↗ (opens in a new tab)

    Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

    MAMicrosoft Azure· May 22, 2026

22. 8.8High

    CVE-2026-35430 ↗ (opens in a new tab)

    Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 22, 2026

23. 7.7High

    CVE-2026-26147 ↗ (opens in a new tab)

    Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

    MAMicrosoft Azure· May 22, 2026

24. 8.8High

    CVE-2026-5843 ↗ (opens in a new tab)

    The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json specifies a model_file pointing to a Python file, MLX-LM uses importlib to load and execute it with no trust_remote_code gate or equivalent safety check. The MLX backend runs without sandboxing, resulting in arbitrary code execution on the Docker host as the Docker Desktop user. Any container on the Docker network can trigger this by calling th

    DODocker· May 22, 2026

25. 8.8High

    CVE-2026-5817 ↗ (opens in a new tab)

    The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included in any model pulled from an OCI registry, resulting in arbitrary code execution on the Docker host as the Docker Desktop user when inference is triggered. Any container on the Docker network can trigger this by calling the model-runner.docker.internal API to pull a malicious model and request inference.

    DODocker· May 22, 2026

26. 8.8High

    CVE-2026-6406 ↗ (opens in a new tab)

    The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker socket mount via the HostConfig.Mounts field rather than the HostConfig.Binds field. The ECI enforcement in the Docker Desktop API proxy only inspected Binds, allowing the mount to pass unchecked. This grants a container full access to the Docker Engine socket and, if the host user has logged in to con

    DODocker· May 22, 2026

27. 8.4High

    CVE-2026-9255 ↗ (opens in a new tab)

    Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to kiro-cli version 1.28.0 or later.

    AWAmazon Web Services· May 22, 2026

28. 7.5High

    CVE-2026-5740 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory allocation which allows an unauthenticated remote attacker to crash the server process and cause a full service outage for all users via a crafted binary WebSocket message sent to the public WebSocket endpoint.. Mattermost Advisory ID: MMSA-2026-00647

    MCMattermost Cloud· May 22, 2026

29. 7.5High

    CVE-2026-5308 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints which allows an attacker to cause a denial of service via crafted oversized HTTP requests.. Mattermost Advisory ID: MMSA-2026-00646

    MCMattermost Cloud· May 22, 2026

30. 7.1High

    CVE-2026-3473 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620

    MCMattermost Cloud· May 22, 2026

31. 7.8High

    CVE-2026-45208 ↗ (opens in a new tab)

    A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

32. 7.8High

    CVE-2026-45207 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

33. 7.8High

    CVE-2026-45206 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

34. 7.8High

    CVE-2026-34930 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

35. 7.8High

    CVE-2026-34929 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

36. 7.8High

    CVE-2026-34928 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

37. 7.8High

    CVE-2026-34927 ↗ (opens in a new tab)

    An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

38. 7.8High

    CVE-2025-71217 ↗ (opens in a new tab)

    An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

    TMTrend Micro· May 21, 2026

39. 7.8High

    CVE-2025-71216 ↗ (opens in a new tab)

    A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

    TMTrend Micro· May 21, 2026

40. 7.0High

    CVE-2025-71215 ↗ (opens in a new tab)

    A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

    TMTrend Micro· May 21, 2026

41. 7.8High

    CVE-2025-71214 ↗ (opens in a new tab)

    An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).

    TMTrend Micro· May 21, 2026

42. 7.8High

    CVE-2025-71213 ↗ (opens in a new tab)

    An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

43. 7.8High

    CVE-2025-71212 ↗ (opens in a new tab)

    A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

    TMTrend Micro· May 21, 2026

44. 8.1High

    CVE-2026-24218 ↗ (opens in a new tab)

    NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service.

    NVNVIDIA· May 20, 2026

45. 8.8High

    CVE-2026-24217 ↗ (opens in a new tab)

    NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· May 20, 2026

46. 7.8High

    CVE-2026-24216 ↗ (opens in a new tab)

    NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· May 20, 2026

47. 7.5High

    CVE-2026-24188 ↗ (opens in a new tab)

    NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.

    NVNVIDIA· May 20, 2026

48. 7.5High

    CVE-2026-24215 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· May 20, 2026

49. 7.5High

    CVE-2026-24210 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· May 20, 2026

50. 7.5High

    CVE-2026-24209 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· May 20, 2026