CVEs.

Matching CVEs

1. 9.6Crit

   CVE-2026-45321 ↗ (opens in a new tab)Known exploited

   On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-s

   MAMistral AI· May 12, 2026

2. 9.8Crit

   CVE-2026-42354 ↗ (opens in a new tab)

   Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim email address must be known in order to exploit this vulnerability. This issue has been patched in version 26.4.1.

   SESentry· May 8, 2026

3. 10.0Crit

   CVE-2026-35435 ↗ (opens in a new tab)

   Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.

   MAMicrosoft Azure· May 7, 2026

4. 9.6Crit

   CVE-2026-35428 ↗ (opens in a new tab)

   Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.

   MAMicrosoft Azure· May 7, 2026

5. 9.0Crit

   CVE-2026-33844 ↗ (opens in a new tab)

   Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

   MAMicrosoft Azure· May 7, 2026

6. 9.9Crit

   CVE-2026-33109 ↗ (opens in a new tab)

   Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

   MAMicrosoft Azure· May 7, 2026

7. 9.3Crit

   CVE-2026-0300 ↗ (opens in a new tab)Known exploited

   A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama applianc

   PAPalo Alto Networks· May 6, 2026

8. 9.8Crit

   CVE-2026-24178 ↗ (opens in a new tab)

   NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

   NVNVIDIA· Apr 28, 2026

9. 9.9Crit

   CVE-2026-21515 ↗ (opens in a new tab)

   Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.

   MAMicrosoft Azure· Apr 24, 2026

10. 9.3Crit

    CVE-2026-25874 ↗ (opens in a new tab)

    LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

    HFHugging Face· Apr 23, 2026

11. 9.1Crit

    CVE-2025-41118 ↗ (opens in a new tab)

    Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API. To exploit this vulnerability, an attacker needs direct access to the Pyroscope API. We highly recommend limiting the public internet exposure of all our databases, such that they are only accessible by trusted users or internal systems. This vulnerability is fixed in versions: 1.15.x: 1.

    GCGrafana Cloud· Apr 15, 2026

12. 9.8Crit

    CVE-2026-40190 ↗ (opens in a new tab)

    LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (langsmith) contains an incomplete prototype pollution fix in its internally vendored lodash set() utility. The baseAssignValue() function only guards against the __proto__ key, but fails to prevent traversal via constructor.prototype. This allows an attacker who controls keys in data processed by the createAnonymizer() API to pollute Object.prototype, affecting all objects in the Node.js process. This vulnerability is fixed in 0.5.18.

    L/LangChain / LangSmith· Apr 10, 2026

13. 9.3Crit

    CVE-2026-39987 ↗ (opens in a new tab)Known exploited

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.

    COCoreWeave· Apr 9, 2026

14. 9.8Crit

    CVE-2026-33466 ↗ (opens in a new tab)

    Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The archive extraction utilities used by Logstash do not properly validate file paths within compressed archives. An attacker who can serve a specially crafted archive to Logstash through a compromised or attacker-controlled update endpoint can write arbitrary files to the host filesystem with the privileges of the Logstash process. In certain configurations where automatic pipeline reloading is enabled,

    ECElastic Cloud· Apr 8, 2026

15. 9.1Crit

    CVE-2026-35561 ↗ (opens in a new tab)

    Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

16. 9.1Crit

    CVE-2026-35560 ↗ (opens in a new tab)

    Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This only applies to connections with external identity providers and does not apply to connections with Athena. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

17. 9.8Crit

    CVE-2026-33107 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

18. 9.8Crit

    CVE-2026-33105 ↗ (opens in a new tab)

    Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

19. 9.8Crit

    CVE-2026-32213 ↗ (opens in a new tab)

    Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

20. 9.8Crit

    CVE-2026-2699 ↗ (opens in a new tab)

    Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

    SHShareFile· Apr 2, 2026

21. 9.8Crit

    CVE-2026-34236 ↗ (opens in a new tab)

    Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before version 8.19.0, in applications built with the Auth0 PHP SDK, cookies are encrypted with insufficient entropy, which may result in threat actors brute-forcing the encryption key and forging session cookies. This issue has been patched in version 8.19.0.

    AUAuth0· Apr 1, 2026

22. 9.8Crit

    CVE-2026-24164 ↗ (opens in a new tab)

    NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· Mar 31, 2026

23. 9.4Crit

    CVE-2026-24148 ↗ (opens in a new tab)

    NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

    NVNVIDIA· Mar 31, 2026

24. 9.1Crit

    CVE-2026-27876 ↗ (opens in a new tab)

    A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always recommended to update to avoid future attack vectors going this path. Only instances with the sqlExpressions feature toggle enabled are vulnerable. Only instances in the following version ranges are affected: - 11.6.0 (inclusive) to 11.6.14 (exclusive): 11.6.14 has the fix. 11.5 and below are not affected. - 12.0.0 (inclusive) to 12.1.10 (exclusive): 12.1.10 has the fix. 12.0 did not receive an up

    GCGrafana Cloud· Mar 27, 2026

25. 9.3Crit

    CVE-2026-33728 ↗ (opens in a new tab)

    dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. All three of the following conditions must be true to exploit this vulnerability: First, dd-trace-java is attached as a Java agent (`-javaagent`) on Java 16 or earlier. Second, a JMX/RMI port ha

    DADatadog· Mar 27, 2026

26. 9.8Crit

    CVE-2026-24159 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

    NVNVIDIA· Mar 24, 2026

27. 9.8Crit

    CVE-2026-24157 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

    NVNVIDIA· Mar 24, 2026

28. 9.0Crit

    CVE-2025-33244 ↗ (opens in a new tab)

    NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.

    NVNVIDIA· Mar 24, 2026

29. 9.4Crit

    CVE-2026-33634 ↗ (opens in a new tab)Known exploited

    Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to ex

    TETelnyx· Mar 23, 2026

30. 9.4Crit

    CVE-2026-2298 ↗ (opens in a new tab)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.

    SASalesforce· Mar 23, 2026

31. 9.8Crit

    CVE-2026-32169 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Mar 19, 2026

32. 9.8Crit

    CVE-2026-23658 ↗ (opens in a new tab)

    Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    ADAzure DevOps· Mar 19, 2026

33. 9.8Crit

    CVE-2026-30903 ↗ (opens in a new tab)

    External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

    ZOZoom· Mar 11, 2026

34. 9.3Crit

    CVE-2026-26105 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Mar 10, 2026

35. 9.8Crit

    CVE-2026-29053 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.

    GHGhost(Pro)· Mar 5, 2026

36. 9.3Crit

    CVE-2026-2835 ↗ (opens in a new tab)

    An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Transfer-Encoding values, allowing attackers to send HTTP/1.0 requests in a way that would desync Pingora’s request framing from backend servers’. Impact This vulnerability primarily affects standalone Pingora deployments in front of certain backends that accept HTTP/1.0 requests. An attacker could craft a malicious payload following this requ

    CLCloudflare· Mar 5, 2026

37. 9.3Crit

    CVE-2026-2833 ↗ (opens in a new tab)

    An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing an Upgrade header, causing the proxy to pass through the rest of the bytes on the connection to a backend before the backend has accepted the upgrade. An attacker can thus directly forward a malicious payload after a request with an Upgrade header to that backend in a way that may be interpreted as a subsequent request header, bypassing proxy-level security controls and enabling cross-user session hijacking. Impact T

    CLCloudflare· Mar 5, 2026

38. 9.1Crit

    CVE-2026-27197 ↗ (opens in a new tab)

    Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation which allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. Self-hosted users are only at risk if the following criteria is met: ore than one organizations are configured (SENTRY_SINGLE_ORGANIZATION = True), or malicious user has existing access and permissions to modify SSO settings for another organization in a multo-organization inst

    SESentry· Feb 21, 2026

39. 9.9Crit

    CVE-2026-26268 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5.

    CUCursor· Feb 13, 2026

40. 9.1Crit

    CVE-2025-7659 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.

    GIGitLab· Feb 11, 2026

41. 9.8Crit

    CVE-2026-21531 ↗ (opens in a new tab)

    Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

    MAMicrosoft Azure· Feb 10, 2026

42. 9.8Crit

    CVE-2026-24302 ↗ (opens in a new tab)

    Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Feb 5, 2026

43. 9.8Crit

    CVE-2026-24300 ↗ (opens in a new tab)

    Azure Front Door Elevation of Privilege Vulnerability

    MAMicrosoft Azure· Feb 5, 2026

44. 9.8Crit

    CVE-2026-25526 ↗ (opens in a new tab)

    JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instantiation and file access bypassing built-in sandbox restrictions. This issue has been patched in versions 2.7.6 and 2.8.3.

    HUHubSpot· Feb 4, 2026

45. 9.2Crit

    CVE-2026-1723 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

    PAPalo Alto Networks· Jan 30, 2026

46. 9.9Crit

    CVE-2026-1470 ↗ (opens in a new tab)

    n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operatio

    JFJFrog· Jan 27, 2026

47. 9.8Crit

    CVE-2026-22586 ↗ (opens in a new tab)

    Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

48. 9.8Crit

    CVE-2026-22585 ↗ (opens in a new tab)

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

49. 9.8Crit

    CVE-2026-22583 ↗ (opens in a new tab)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

50. 9.8Crit

    CVE-2026-22582 ↗ (opens in a new tab)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026