CVEs.

Matching CVEs

1. 9.8Crit

   CVE-2026-50522 ↗ (opens in a new tab)Known exploited

   Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

   M3Microsoft 365· Jul 14, 2026

2. 9.4Crit

   CVE-2026-15265 ↗ (opens in a new tab)

   A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

   TETenable· Jul 14, 2026

3. 9.1Crit

   CVE-2026-59826 ↗ (opens in a new tab)

   Metabase is an open-source business intelligence and embedded analytics tool. From 1.55.0 until 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2, Metabase did not validate unsafe H2 connection properties on one database-creation code path, allowing an authenticated administrator to register a crafted H2 database connection and execute arbitrary Java code on the Metabase server. This issue is fixed in versions 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2.

   MCMetabase Cloud· Jul 9, 2026

4. 9.2Crit

   CVE-2026-13368 ↗ (opens in a new tab)

   WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server.

   WAWatchGuard· Jul 3, 2026

5. 9.8Crit

   CVE-2026-26145 ↗ (opens in a new tab)

   Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

   MAMicrosoft Azure· Jul 2, 2026

6. 9.8Crit

   CVE-2026-24270 ↗ (opens in a new tab)

   NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

   NVNVIDIA· Jul 1, 2026

7. 9.0Crit

   CVE-2025-23351 ↗ (opens in a new tab)

   NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

   NVNVIDIA· Jul 1, 2026

8. 9.0Crit

   CVE-2025-23350 ↗ (opens in a new tab)

   NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

   NVNVIDIA· Jul 1, 2026

9. 9.3Crit

   CVE-2026-11720 ↗ (opens in a new tab)

   A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL resolution. Because dot segments (../) are normalized during this resolution step, an attacker can supply path parameters containing directory traversal sequences to escape the operator-configured path

   GCGoogle Cloud· Jun 29, 2026

10. 9.6Crit

    CVE-2026-13751 ↗ (opens in a new tab)

    Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. By supplying crafted SQL content processed through a vulnerable command path, an attacker could cause the victim's environment to issue unintended outbound requests to internal or otherwise non-public network locations, and could cause remote SQL content to be retrieved and executed in the context of th

    SNSnowflake· Jun 29, 2026

11. 9.3Crit

    CVE-2026-50549 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the agent canonicalizes the target path to confirm it stays inside the workspace, but when canonicalization fails it falls back to the original path and writes without approval. A malicious agent can create an in-workspace symlink that points outside the workspace and force canonicalization to fail — either because the target does not exist or because read permission is removed from the path — so the agent writes through the symlink to an arbitrary l

    CUCursor· Jun 25, 2026

12. 9.3Crit

    CVE-2026-50548 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox grants write access to the command's working directory. A flaw was identified in how the agent could modify the working_directory parameter, which could cause the sandbox to include writable paths outside the intended workspace. A malicious agent could set working_directory to a sensitive location and write arbitrary files outside the workspace under the user's privileges. This enables non-sandboxed Remote Code Execution — for example by overwriting

    CUCursor· Jun 25, 2026

13. 9.6Crit

    CVE-2026-10789 ↗ (opens in a new tab)

    A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.

    AUAutodesk· Jun 22, 2026

14. 9.9Crit

    CVE-2026-5366 ↗ (opens in a new tab)

    Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git commands, lacks validation and does not include a `--` separator to distinguish user input from git flags. This allows attackers to inject arbitrary git flags, such as `--upload-pack`, enabling execution of external programs. Additionally, the `directories` parameter can be exploited to inject git flags during sparse-checkout operations. These vulnerabilities allow any user with deployment creati

    PCPrefect Cloud· Jun 20, 2026

15. 10.0Crit

    CVE-2026-45480 ↗ (opens in a new tab)

    Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 19, 2026

16. 9.9Crit

    CVE-2026-47647 ↗ (opens in a new tab)

    Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

    M3Microsoft 365· Jun 18, 2026

17. 9.3Crit

    CVE-2026-11718 ↗ (opens in a new tab)

    An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), it decodes the response into an introspectResp struct. However, the subsequent claim-checking logic (validateClaims) evaluates the issuer condition as if a.issuer != "" && iss != "". If the external OAuth provider's introspection response omits the optional iss (issuer) field completely, the variable iss defaults to an empty string. This causes the conditional blo

    GCGoogle Cloud· Jun 18, 2026

18. 9.3Crit

    CVE-2026-11717 ↗ (opens in a new tab)

    An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the response into an introspectResp struct where the Active field is declared as a pointer to a boolean (*bool). The code only explicitly rejects a token if the response contains a populated active field set to false (if introspectResp.Active != nil && !*introspectResp.Active). If an introspection endpoint responds with a payload that completely o

    GCGoogle Cloud· Jun 18, 2026

19. 9.1Crit

    CVE-2026-48776 ↗ (opens in a new tab)

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource operations. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to address a different resource (and potentially a different resource type) than the SDK method's call site indicates. In deployments where the SDK r

    L/LangChain / LangSmith· Jun 17, 2026

20. 9.8Crit

    CVE-2026-53407 ↗ (opens in a new tab)

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

    ZOZoom· Jun 12, 2026

21. 9.1Crit

    CVE-2026-45177 ↗ (opens in a new tab)

    Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

    PAPalo Alto Networks· Jun 11, 2026

22. 9.8Crit

    CVE-2026-47643 ↗ (opens in a new tab)

    External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

    MAMicrosoft Azure· Jun 9, 2026

23. 9.8Crit

    CVE-2026-48567 ↗ (opens in a new tab)

    Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 4, 2026

24. 9.6Crit

    CVE-2026-5241 ↗ (opens in a new tab)

    A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_code=False`, the `LightGlueConfig` reads the `trust_remote_code` value from the untrusted `config.json` file and propagat

    HFHugging Face· Jun 3, 2026

25. 9.1Crit

    CVE-2026-48501 ↗ (opens in a new tab)

    GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The CLI uses a shared HTTP client with an authentication layer that automatically attaches tokens to outgoing requests. This layer lacks accurate host detection and can incorrectly attribute the target host, providing it with a token it should never receive. Specifically, the host normalization logic collapses any *.github.com subdomain to github.com, s

    GIGitHub· May 29, 2026

26. 9.2Crit

    CVE-2026-9312 ↗ (opens in a new tab)

    A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input validation in an upload endpoint. By injecting path traversal content into request parameters, an attacker could bypass the intended request flow and redirect internal API calls, potentially accessing internal services and exposing sensitive credentials. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.17, 3.18.11, 3.19

    GIGitHub· May 27, 2026

27. 9.8Crit

    CVE-2026-24212 ↗ (opens in a new tab)

    NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· May 26, 2026

28. 9.8Crit

    CVE-2026-47280 ↗ (opens in a new tab)

    Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 22, 2026

29. 9.8Crit

    CVE-2026-40412 ↗ (opens in a new tab)

    Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

    MAMicrosoft Azure· May 22, 2026

30. 9.8Crit

    CVE-2025-71211 ↗ (opens in a new tab)

    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required. For this particular vulnerability, an attacker must have access to th

    TMTrend Micro· May 21, 2026

31. 9.8Crit

    CVE-2025-71210 ↗ (opens in a new tab)

    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required. For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address

    TMTrend Micro· May 21, 2026

32. 9.9Crit

    CVE-2026-4858 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL.. Mattermost Advisory ID: MMSA-2026-00640

    MCMattermost Cloud· May 21, 2026

33. 9.8Crit

    CVE-2026-24214 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, or denial of service.

    NVNVIDIA· May 20, 2026

34. 9.8Crit

    CVE-2026-24213 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or information disclosure.

    NVNVIDIA· May 20, 2026

35. 9.8Crit

    CVE-2026-24207 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

    NVNVIDIA· May 20, 2026

36. 9.8Crit

    CVE-2026-24206 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.

    NVNVIDIA· May 20, 2026

37. 9.8Crit

    CVE-2026-24163 ↗ (opens in a new tab)

    NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

    NVNVIDIA· May 20, 2026

38. 9.8Crit

    CVE-2026-24142 ↗ (opens in a new tab)

    NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

    NVNVIDIA· May 20, 2026

39. 9.8Crit

    CVE-2025-33255 ↗ (opens in a new tab)

    NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

    NVNVIDIA· May 20, 2026

40. 9.2Crit

    CVE-2026-47358 ↗ (opens in a new tab)

    Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates via hashicorp/go-getter with all default detectors enabled, including FileDetector. An unauthenticated remote attacker can upload an ARM template containing a templateLink.uri or parametersLink.uri field, or a CloudFormation template containing an AWS::CloudFormation::Stack TemplateURL field, pointing

    TETenable· May 19, 2026

41. 9.2Crit

    CVE-2026-47357 ↗ (opens in a new tab)

    Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/remote/dir/scan) when running in server mode. An unauthenticated remote attacker can supply an attacker-controlled HTTP URL as remote_url with remote_type set to "http". The URL is passed directly to hashicorp/go-getter (v1.7.5) without validation. Go-getter's HttpGetter supports the X-Terraform-Get response header, allowing the attacker's server to redirect the download to a file:// URL, enabling local file rea

    TETenable· May 19, 2026

42. 10.0Crit

    CVE-2026-42822 ↗ (opens in a new tab)

    Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 18, 2026

43. 9.2Crit

    CVE-2026-27886 ↗ (opens in a new tab)

    Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the `where` query parameter on any publicly-accessible content-type with an `updatedBy` (or other admin-relation) field to perform a boolean-oracle attack against private fields on the joined `admin_users` table, including the `resetPasswordToken` field. Extracting an admin reset token via this oracle made full administrative account takeover possible

    SCStrapi Cloud· May 14, 2026

44. 9.3Crit

    CVE-2026-22599 ↗ (opens in a new tab)

    Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary database statements through the `column.defaultTo` attribute when creating or modifying a content type. Setting `defaultTo` as a tuple `[value, { isRaw: true }]` caused the value to be passed directly into Knex's `db.connection.raw()` during schema migration without sanitization, allowing arbitrary state

    SCStrapi Cloud· May 14, 2026

45. 9.4Crit

    CVE-2026-8431 ↗ (opens in a new tab)

    An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. This issue affects all MongoDB Ops Manager 7.0 versions and MongoDB Ops Manager versions 8.0.22 and prior.

    MAMongoDB Atlas· May 12, 2026

46. 9.9Crit

    CVE-2026-42898 ↗ (opens in a new tab)

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 12, 2026

47. 9.1Crit

    CVE-2026-42833 ↗ (opens in a new tab)

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 12, 2026

48. 9.9Crit

    CVE-2026-42823 ↗ (opens in a new tab)

    Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 12, 2026

49. 9.9Crit

    CVE-2026-33821 ↗ (opens in a new tab)

    Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.

    M3Microsoft 365· May 12, 2026

50. 9.1Crit

    CVE-2026-33117 ↗ (opens in a new tab)

    The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may bypass integrity verification checks. Operations delegated to the Key Vault service are not affected. The issue is addressed in version 4.10.6.

    MAMicrosoft Azure· May 12, 2026