CVEs.

Matching CVEs

1. 7.5High

   CVE-2026-24208 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· May 20, 2026

2. 7.5High

   CVE-2026-24160 ↗ (opens in a new tab)

   NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· May 20, 2026

3. 8.7High

   CVE-2026-47356 ↗ (opens in a new tab)

   Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan) when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhook_url multipart form parameter. After scanning the uploaded file, Terrascan sends an HTTP POST request to the attacker-controlled URL containing the full scan results as a JSON body, with the attacker-supplied webhook_token forwarded as a Bearer token in the Authorization header. The retryable HTTP clie

   TETenable· May 19, 2026

4. 7.1High

   CVE-2026-8843 ↗ (opens in a new tab)

   Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6

   MAMongoDB Atlas· May 18, 2026

5. 7.6High

   CVE-2026-6347 ↗ (opens in a new tab)

   Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugin configuration.. Mattermost Advisory ID: MMSA-2026-00605

   MCMattermost Cloud· May 18, 2026

6. 8.7High

   CVE-2026-6346 ↗ (opens in a new tab)

   Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, which allows a Mattermost System Admin or any party with access to a support packet to obtain sensitive credentials in plaintext via downloading a support packet from the System Console.. Mattermost Advisory ID: MMSA-2026-00607

   MCMattermost Cloud· May 18, 2026

7. 8.4High

   CVE-2026-46508 ↗ (opens in a new tab)

   Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execution for Turborepo daemon commands and task runs. A malicious workspace could provide crafted values through workspace settings or task names in the repository's source code that were interpolated into shell commands. When the extension activated or when a user ran a task through the extension, those values could be interpreted by the user'

   VEVercel· May 15, 2026

8. 8.8High

   CVE-2026-44827 ↗ (opens in a new tab)

   Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines from Hugging Face Hub repositories. The _resolve_custom_pipeline_and_cls function in pipeline_loading_utils.py performs string interpolation on the custom_pipeline parameter using f"{custom_pipeline}.py". When custom_pipeline is not supplied by the user, it defaults to None, which Python interpolates as the literal string "None.py". If an attacker publishes a Hub repository containing a file named None.py

   HFHugging Face· May 14, 2026

9. 8.8High

   CVE-2026-44513 ↗ (opens in a new tab)

   Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code bypass in DiffusionPipeline.from_pretrained allows arbitrary remote code execution despite the user passing trust_remote_code=False (or omitting it, which is the default). The vulnerability has three variants, all sharing the same root cause — the trust_remote_code gate was implemented inside DiffusionPipeline.download() rather than at the actual dynamic-module load site, so any code path that bypassed or short-circuited download() also bypassed the security check. DiffusionPipeline.from_pretrained

   HFHugging Face· May 14, 2026

10. 7.5High

    CVE-2026-1659 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted requests due to insufficient input validation.

    GIGitLab· May 14, 2026

11. 8.1High

    CVE-2026-1322 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a read_api scoped OAuth application to create issues and add comments to issues in private projects due to improper authorization.

    GIGitLab· May 14, 2026

12. 7.5High

    CVE-2026-1184 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation.

    GIGitLab· May 14, 2026

13. 7.5High

    CVE-2025-14870 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted JSON payloads due to insufficient input validation.

    GIGitLab· May 14, 2026

14. 7.5High

    CVE-2025-14869 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted payloads on certain API endpoints.

    GIGitLab· May 14, 2026

15. 8.1High

    CVE-2026-33381 ↗ (opens in a new tab)

    When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.

    GCGrafana Cloud· May 13, 2026

16. 7.1High

    CVE-2026-33377 ↗ (opens in a new tab)

    An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

    GCGrafana Cloud· May 13, 2026

17. 7.4High

    CVE-2026-33376 ↗ (opens in a new tab)

    When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

    GCGrafana Cloud· May 13, 2026

18. 7.8High

    CVE-2026-30906 ↗ (opens in a new tab)

    Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

    ZOZoom· May 13, 2026

19. 7.8High

    CVE-2026-30905 ↗ (opens in a new tab)

    External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.

    ZOZoom· May 13, 2026

20. 7.8High

    CVE-2026-0257 ↗ (opens in a new tab)Known exploited

    Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

    PAPalo Alto Networks· May 13, 2026

21. 7.3High

    CVE-2026-0236 ↗ (opens in a new tab)

    A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

    PAPalo Alto Networks· May 13, 2026

22. 7.5High

    CVE-2026-45109 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.

    VEVercel· May 13, 2026

23. 7.5High

    CVE-2026-44579 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to a server action. In affected configurations, a malicious request can trigger a request-body handling deadlock that leaves connections open for an extended period, consuming file descriptors and server capacity until legitimate users are denied service. This vulnerability is fixed in 15.5.16 and 16.2.5.

    VEVercel· May 13, 2026

24. 8.6High

    CVE-2026-44578 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.

    VEVercel· May 13, 2026

25. 7.2High

    CVE-2026-0265 ↗ (opens in a new tab)

    An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/commun

    PAPalo Alto Networks· May 13, 2026

26. 7.2High

    CVE-2026-0264 ↗ (opens in a new tab)

    A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only). Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

    PAPalo Alto Networks· May 13, 2026

27. 7.2High

    CVE-2026-0263 ↗ (opens in a new tab)

    A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

    PAPalo Alto Networks· May 13, 2026

28. 7.3High

    CVE-2026-0237 ↗ (opens in a new tab)

    An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

    PAPalo Alto Networks· May 13, 2026

29. 7.5High

    CVE-2026-44575 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific route variants used for segment prefetching. In affected configurations, specially crafted .rsc and segment-prefetch URLs can resolve to the same page without being matched by the intended middleware rule, which can allow protected content to be reached without the expected authorization check. This vulnerability is fixed in 15.5.16 and 16.

    VEVercel· May 13, 2026

30. 8.1High

    CVE-2026-44574 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deployments, specially crafted query parameters can alter the dynamic route value seen by the page while leaving the visible path unchanged, which can allow protected content to be rendered without passing the expected middleware check. This vulnerability is fixed in 15.5.16 and 16.2.5.

    VEVercel· May 13, 2026

31. 7.5High

    CVE-2026-44573 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/<buildId>/<page>.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.

    VEVercel· May 13, 2026

32. 8.5High

    CVE-2026-45033 ↗ (opens in a new tab)

    GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent performs git operations. By exploiting git's automatic bare repository discovery during directory traversal, an attacker can set core.fsmonitor or other executable config keys to run arbitrary commands without user awareness or approval. The vulnerability arises because git's core.fsmonitor config key (an

    GIGitHub· May 13, 2026

33. 8.5High

    CVE-2026-44470 ↗ (opens in a new tab)

    The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Prior to 1.3834.0, the CoworkVMService component in Claude Desktop for Windows ran as SYSTEM and did not validate whether the VM bundle directory was a real directory or an NTFS directory junction before creating files within it. A local non-elevated user could replace the user-writable VM bundle directory with a directory junction pointing to an attacker-chosen location, causing the service to create a SYSTEM-owned file in an arbitrary directory. This could be leveraged fo

    ANAnthropic (Claude)· May 13, 2026

34. 7.4High

    CVE-2026-44467 ↗ (opens in a new tab)

    The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network pos

    ANAnthropic (Claude)· May 13, 2026

35. 7.7High

    CVE-2026-8336 ↗ (opens in a new tab)

    After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine (through $where, $function, mapreduce reduce stage, etc.) is used also in a specific way, resulting in a post-authentication denial-of-service. This issue impacts MongoDB Server v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.

    MAMongoDB Atlas· May 13, 2026

36. 7.1High

    CVE-2026-8199 ↗ (opens in a new tab)

    An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.

    MAMongoDB Atlas· May 13, 2026

37. 8.7High

    CVE-2026-8053 ↗ (opens in a new tab)

    An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.

    MAMongoDB Atlas· May 13, 2026

38. 8.8High

    CVE-2026-7474 ↗ (opens in a new tab)

    HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.

    HAHashiCorp (HCP / Terraform Cloud)· May 12, 2026

39. 7.5High

    CVE-2026-42893 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

    M3Microsoft 365· May 12, 2026

40. 7.8High

    CVE-2026-42831 ↗ (opens in a new tab)

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· May 12, 2026

41. 8.8High

    CVE-2026-40420 ↗ (opens in a new tab)

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

    M3Microsoft 365· May 12, 2026

42. 7.8High

    CVE-2026-40419 ↗ (opens in a new tab)

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

    M3Microsoft 365· May 12, 2026

43. 7.8High

    CVE-2026-40418 ↗ (opens in a new tab)

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

    M3Microsoft 365· May 12, 2026

44. 7.8High

    CVE-2026-40417 ↗ (opens in a new tab)

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

    M3Microsoft 365· May 12, 2026

45. 7.8High

    CVE-2026-40381 ↗ (opens in a new tab)

    Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· May 12, 2026

46. 8.0High

    CVE-2026-40368 ↗ (opens in a new tab)

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 12, 2026

47. 8.4High

    CVE-2026-40367 ↗ (opens in a new tab)

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· May 12, 2026

48. 8.4High

    CVE-2026-40366 ↗ (opens in a new tab)

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· May 12, 2026

49. 8.8High

    CVE-2026-40365 ↗ (opens in a new tab)

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 12, 2026

50. 8.4High

    CVE-2026-40364 ↗ (opens in a new tab)

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· May 12, 2026