CVEs.

Latest CVEs

1. 8.4High

   CVE-2026-40358 ↗ (opens in a new tab)

   Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· May 12, 2026

2. 8.8High

   CVE-2026-40357 ↗ (opens in a new tab)

   Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

   M3Microsoft 365· May 12, 2026

3. 5.5Med

   CVE-2026-35440 ↗ (opens in a new tab)

   Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

   M3Microsoft 365· May 12, 2026

4. 8.8High

   CVE-2026-35439 ↗ (opens in a new tab)

   Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

   M3Microsoft 365· May 12, 2026

5. 8.8High

   CVE-2026-35436 ↗ (opens in a new tab)

   Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

   M3Microsoft 365· May 12, 2026

6. 8.2High

   CVE-2026-33833 ↗ (opens in a new tab)

   Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

   MAMicrosoft Azure· May 12, 2026

7. 9.9Crit

   CVE-2026-33821 ↗ (opens in a new tab)

   Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.

   M3Microsoft 365· May 12, 2026

8. 9.1Crit

   CVE-2026-33117 ↗ (opens in a new tab)

   The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may bypass integrity verification checks. Operations delegated to the Key Vault service are not affected. The issue is addressed in version 4.10.6.

   MAMicrosoft Azure· May 12, 2026

9. 8.8High

   CVE-2026-33112 ↗ (opens in a new tab)

   Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

   M3Microsoft 365· May 12, 2026

10. 8.8High

    CVE-2026-33110 ↗ (opens in a new tab)

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· May 12, 2026

11. 7.8High

    CVE-2026-32204 ↗ (opens in a new tab)

    External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· May 12, 2026

12. 5.5Med

    CVE-2026-32185 ↗ (opens in a new tab)

    Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.

    M3Microsoft 365· May 12, 2026

13. 4.7Med

    CVE-2026-5061 ↗ (opens in a new tab)

    The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

    HAHashiCorp (HCP / Terraform Cloud)· May 12, 2026

14. 9.6Crit

    CVE-2026-45321 ↗ (opens in a new tab)Known exploited

    On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-s

    MAMistral AI· May 12, 2026

15. 5.4Med

    CVE-2026-28819 ↗ (opens in a new tab)

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges.

    APApple (iCloud, App Store and services)· May 11, 2026

16. 7.6High

    CVE-2026-42349 ↗ (opens in a new tab)

    Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other framework SDKs can return true for certain combined authorization checks when the result should be false, allowing a gated action to proceed for a user who does not satisfy the full set of requested conditions. This call shape can be bypassed if certain conditions are met: a has() or auth.protect() call that combines a reverification check with any of role, permission, feature, or plan, or that co

    CLClerk· May 11, 2026

17. 9.8Crit

    CVE-2026-42354 ↗ (opens in a new tab)

    Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim email address must be known in order to exploit this vulnerability. This issue has been patched in version 26.4.1.

    SESentry· May 8, 2026

18. 8.9High

    CVE-2026-41486 ↗ (opens in a new tab)

    Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.data.arrow_variable_shaped_tensor) globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension types, it calls __arrow_ext_deserialize__ on the field's metadata bytes. Ray's implementation passes these bytes directly to cloudpickle.loads(), achieving arbitrary code execution during schema parsing, before any row data is read. This issue has been patched in version 2.55.0.

    ANAnyscale· May 8, 2026

19. 5.3Med

    CVE-2026-41487 ↗ (opens in a new tab)

    Langfuse is an open source large language model engineering platform. From version 3.68.0 to before version 3.167.0, there is a role-based-access control flaw in the LLM connection update flow. An authenticated, low-privileged user of role “member” in a project could request the update of an existing LLM connection to an attacker-controlled baseUrl, causing Langfuse to reuse the stored provider secret and redirect the test request to an attacker-controlled endpoint. This could expose the plaintext provider LLM API key for that connection. The attack is only possible if a user is already part o

    LALangfuse· May 8, 2026

20. 5.9Med

    CVE-2026-8106 ↗ (opens in a new tab)

    A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirect_to query parameter on the /setup/unlock endpoint was reflected into an HTML attribute without proper sanitization, enabling an attacker to inject a form element that could capture administrator credentials. Exploitation required an administrator to click a crafted link and enter their credentials. This vulnerability affected GitHub Enterprise Server versions 3.19.1 through 3.19.5 and 3.20.0 through 3.20.1, and was fixed in version

    GIGitHub· May 7, 2026

21. 7.9High

    CVE-2026-8034 ↗ (opens in a new tab)

    A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusion between the validation layer and the HTTP request library. The hostname validation used a different URL parser than the request library, enabling a crafted URL to pass validation while directing the request to an unintended host. Exploitation required network access to the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and wa

    GIGitHub· May 7, 2026

22. 6.3Med

    CVE-2026-7541 ↗ (opens in a new tab)

    A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits, causing excessive CPU and memory consumption. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.2, 3.19.6, 3.18.9, 3.17.15, and 3.16.18. This vulnerability was reported via the GitHub Bug Bounty program.

    GIGitHub· May 7, 2026

23. 6.3Med

    CVE-2026-6736 ↗ (opens in a new tab)

    An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce the authentication restriction, allowing account creation and session establishment without identity provider validation. The created account was limited to the default base permissions configured on the instance. Exploitation required network access to a GHES instance configured with an external authent

    GIGitHub· May 7, 2026

24. 7.5High

    CVE-2026-42826 ↗ (opens in a new tab)

    Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.

    ADAzure DevOps· May 7, 2026

25. 8.1High

    CVE-2026-41105 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 7, 2026

26. 10.0Crit

    CVE-2026-35435 ↗ (opens in a new tab)

    Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· May 7, 2026

27. 9.6Crit

    CVE-2026-35428 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.

    MAMicrosoft Azure· May 7, 2026

28. 9.0Crit

    CVE-2026-33844 ↗ (opens in a new tab)

    Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

    MAMicrosoft Azure· May 7, 2026

29. 6.5Med

    CVE-2026-33823 ↗ (opens in a new tab)

    Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

    M3Microsoft 365· May 7, 2026

30. 7.5High

    CVE-2026-33111 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

    M3Microsoft 365· May 7, 2026

31. 9.9Crit

    CVE-2026-33109 ↗ (opens in a new tab)

    Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

    MAMicrosoft Azure· May 7, 2026

32. 6.1Med

    CVE-2026-32207 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

    MAMicrosoft Azure· May 7, 2026

33. 8.6High

    CVE-2026-42047 ↗ (opens in a new tab)

    Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment variables from the host process via the serve() HTTP handler. The serve() handler implements GET, POST, and PUT methods. Requests using PATCH, OPTIONS, or DELETE fall through to a generic handler that returns diagnostic information. A change introduced in v3.22.0 caused this diagnostic response to include the contents of process.env, exposing

    INInngest· May 7, 2026

34. 7.1High

    CVE-2026-8063 ↗ (opens in a new tab)

    An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads the first element on each stage’s input pipeline array without first verifying that the array is non-empty. Supplying an empty pipeline causes a null pointer dereference and crashes the server. This issue affects MongoDB Server 8.2 versions prior to 8.2.7.

    MAMongoDB Atlas· May 7, 2026

35. 9.3Crit

    CVE-2026-0300 ↗ (opens in a new tab)Known exploited

    A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama applianc

    PAPalo Alto Networks· May 6, 2026

36. 8.5High

    CVE-2026-6788 ↗ (opens in a new tab)

    Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.

    WAWatchGuard· May 6, 2026

37. 8.5High

    CVE-2026-6787 ↗ (opens in a new tab)

    Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.

    WAWatchGuard· May 6, 2026

38. 8.6High

    CVE-2026-6691 ↗ (opens in a new tab)

    The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI.

    MAMongoDB Atlas· May 6, 2026

39. 7.3High

    CVE-2026-41288 ↗ (opens in a new tab)

    Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.

    WAWatchGuard· May 6, 2026

40. 7.1High

    CVE-2026-41286 ↗ (opens in a new tab)

    Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.

    WAWatchGuard· May 6, 2026

41. 7.1High

    CVE-2026-41287 ↗ (opens in a new tab)

    Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.

    WAWatchGuard· May 6, 2026

42. 7.7High

    CVE-2026-40068 ↗ (opens in a new tab)

    In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious repository with a commondir file pointing to a path the victim had previously trusted, causing Claude Code to bypass its trust confirmation dialog and immediately execute hooks defined in `.claude/settings.json`. Exploitation requires the victim to clone the malicious repository and run Claude Code within it, and the attacker must know or guess a path the victim had already trusted. This issue has been f

    ANAnthropic (Claude)· May 5, 2026

43. 7.5High

    CVE-2026-7776 ↗ (opens in a new tab)

    Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection and delay or withhold the client certificate during the TLS handshake, causing worker connection handling to block. This may prevent legitimate worker connections from being accepted or routed. This vulnerability, CVE-2026-7776, is fixed in Boundary 0.21.3, 0.20.3, 0.19.5.

    HAHashiCorp (HCP / Terraform Cloud)· May 4, 2026

44. 4.8Med

    CVE-2026-41686 ↗ (opens in a new tab)

    Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and directories using the Node.js default modes (0o666 for files, 0o777 for directories), leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could m

    ANAnthropic (Claude)· May 4, 2026

45. 8.8High

    CVE-2026-5712 ↗ (opens in a new tab)

    This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

    SASailPoint· Apr 29, 2026

46. 5.3Med

    CVE-2026-6915 ↗ (opens in a new tab)

    An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

    MAMongoDB Atlas· Apr 29, 2026

47. 7.1High

    CVE-2026-6914 ↗ (opens in a new tab)

    Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32

    MAMongoDB Atlas· Apr 29, 2026

48. 5.9Med

    CVE-2026-33467 ↗ (opens in a new tab)

    Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.

    ECElastic Cloud· Apr 28, 2026

49. 6.3Med

    CVE-2026-24231 ↗ (opens in a new tab)

    NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

    NVNVIDIA· Apr 28, 2026

50. 8.6High

    CVE-2026-24222 ↗ (opens in a new tab)

    NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

    NVNVIDIA· Apr 28, 2026