CVEs.

Latest CVEs

1. 8.7High

   CVE-2026-5747 ↗ (opens in a new tab)

   An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue configuration registers after device activation. Achieving code execution on the host requires additional preconditions, such as the use of a custom guest kernel or specific snapshot configurations. To remediate this, users should upgrade to Firecracker 1.14.4 or 1.15.1 and later.

   AWAmazon Web Services· Apr 8, 2026

2. 6.9Med

   CVE-2025-20628 ↗ (opens in a new tab)

   An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. This means attackers can spoof a client-mode RCS (if one exists) to intercept and/or modify an identity’s security-relevant properties, such as passwords and account recovery information. This issue is exploitable only when an RCS is configured to run in client mode.

   PIPing Identity· Apr 7, 2026

3. 7.5High

   CVE-2026-24175 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· Apr 7, 2026

4. 7.5High

   CVE-2026-24174 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· Apr 7, 2026

5. 7.5High

   CVE-2026-24173 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· Apr 7, 2026

6. 7.3High

   CVE-2026-24156 ↗ (opens in a new tab)

   NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to arbitrary code execution.

   NVNVIDIA· Apr 7, 2026

7. 4.8Med

   CVE-2026-24147 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service.

   NVNVIDIA· Apr 7, 2026

8. 7.5High

   CVE-2026-24146 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· Apr 7, 2026

9. 7.8High

   CVE-2026-1839 ↗ (opens in a new tab)

   A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line 3059 calls `torch.load()` without the `weights_only=True` parameter. This issue affects all versions of the library supporting `torch>=2.2` when used with PyTorch versions below 2.6, as the `safe_globals()` context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as `rng_state.pth`, which can execute arbi

   HFHugging Face· Apr 7, 2026

10. 7.7High

    CVE-2026-5709 ↗ (opens in a new tab)

    Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.

    AWAmazon Web Services· Apr 6, 2026

11. 8.7High

    CVE-2026-5708 ↗ (opens in a new tab)

    Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with AWS resources and services via a crafted API request. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.

    AWAmazon Web Services· Apr 6, 2026

12. 8.7High

    CVE-2026-5707 ↗ (opens in a new tab)

    Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.

    AWAmazon Web Services· Apr 6, 2026

13. 5.1Med

    CVE-2026-34951 ↗ (opens in a new tab)

    Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input before rendering it in the page response. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Workbench allows XSS Targeting Error Pages. This vulnerability is fixed in 65.0.0.

    SASalesforce· Apr 6, 2026

14. 8.8High

    CVE-2026-3524 ↗ (opens in a new tab)

    Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin's endpoints. Mattermost Advisory ID: MMSA-2026-00621

    MCMattermost Cloud· Apr 6, 2026

15. 7.3High

    CVE-2026-5485 ↗ (opens in a new tab)

    OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To remediate this issue, users should upgrade to version 2.0.5.1 or later.

    AWAmazon Web Services· Apr 3, 2026

16. 8.7High

    CVE-2026-35562 ↗ (opens in a new tab)

    Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

17. 9.1Crit

    CVE-2026-35561 ↗ (opens in a new tab)

    Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

18. 9.1Crit

    CVE-2026-35560 ↗ (opens in a new tab)

    Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This only applies to connections with external identity providers and does not apply to connections with Athena. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

19. 7.1High

    CVE-2026-35559 ↗ (opens in a new tab)

    Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

20. 7.3High

    CVE-2026-35558 ↗ (opens in a new tab)

    Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during user-initiated authentication. To remediate this issue, users should upgrade to version 2.1.0.0.

    AWAmazon Web Services· Apr 3, 2026

21. 4.3Med

    CVE-2026-28736 ↗ (opens in a new tab)

    ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's fileID to read the content of the file. NOTE: Focalboard as a standalone product is not maintained and no fix will be issued.

    MCMattermost Cloud· Apr 3, 2026

22. 6.5Med

    CVE-2026-25773 ↗ (opens in a new tab)

    ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering categories. An attacker can inject a malicious SQL payload into the category id field, which is stored in the database and later executed unsanitized when the category reorder API processes the stored value. This Second-Order SQL Injection (Time-Based Blind) allows an authenticated attacker to exfiltrate sensitive data including password hashes of other users. NOTE: Focalboard as a standalone product is not maintained and no fix will be iss

    MCMattermost Cloud· Apr 3, 2026

23. 9.8Crit

    CVE-2026-33107 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

24. 9.8Crit

    CVE-2026-33105 ↗ (opens in a new tab)

    Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

25. 9.8Crit

    CVE-2026-32213 ↗ (opens in a new tab)

    Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

26. 7.5High

    CVE-2026-32211 ↗ (opens in a new tab)

    Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Apr 3, 2026

27. 7.5High

    CVE-2026-32173 ↗ (opens in a new tab)

    Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Apr 3, 2026

28. 8.8High

    CVE-2026-26135 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 3, 2026

29. 8.8High

    CVE-2026-2701 ↗ (opens in a new tab)

    Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.

    SHShareFile· Apr 2, 2026

30. 9.8Crit

    CVE-2026-2699 ↗ (opens in a new tab)

    Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

    SHShareFile· Apr 2, 2026

31. 8.6High

    CVE-2026-3987 ↗ (opens in a new tab)

    A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

    WAWatchGuard· Apr 1, 2026

32. 2.3Low

    CVE-2026-5199 ↗ (opens in a new tab)

    A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow ID(s) and, for signal operations, signal names. This was due to a bug introduced in Temporal Server v1.29.0 which inadvertently allowed an attacker to control the namespace name value instead of using the server's own trusted name value within the batch activity code. The batch activity validated the namespace ID but did not cross-check the namespace name against the

    TCTemporal Cloud· Apr 1, 2026

33. 9.8Crit

    CVE-2026-34236 ↗ (opens in a new tab)

    Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before version 8.19.0, in applications built with the Auth0 PHP SDK, cookies are encrypted with insufficient entropy, which may result in threat actors brute-forcing the encryption key and forging session cookies. This issue has been patched in version 8.19.0.

    AUAuth0· Apr 1, 2026

34. 6.8Med

    CVE-2026-33990 ↗ (opens in a new tab)

    Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's WWW-Authenticate header without validating the scheme, hostname, or IP range. A malicious OCI registry can set the realm to an internal URL (e.g., http://127.0.0.1:3000/), causing Model Runner running on the host to make arbitrary GET requests to internal services and reflect the full response body back to the

    DODocker· Apr 1, 2026

35. 5.8Med

    CVE-2026-34452 ↗ (opens in a new tab)

    The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a symlink between validation and use, causing reads or writes to escape the sandbox. The synchronous memory tool implementation was not affected. This issue has been patched in

    ANAnthropic (Claude)· Mar 31, 2026

36. 6.3Med

    CVE-2026-34451 ↗ (opens in a new tab)

    Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. This issue has been patched in version 0.81.0.

    ANAnthropic (Claude)· Mar 31, 2026

37. 4.8Med

    CVE-2026-34450 ↗ (opens in a new tab)

    The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could modify memory files to influence subsequent model behavior. Both the synchronous and asynchronous memory tool

    ANAnthropic (Claude)· Mar 31, 2026

38. 8.8High

    CVE-2026-24165 ↗ (opens in a new tab)

    NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· Mar 31, 2026

39. 9.8Crit

    CVE-2026-24164 ↗ (opens in a new tab)

    NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· Mar 31, 2026

40. 6.8Med

    CVE-2026-24154 ↗ (opens in a new tab)

    NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.

    NVNVIDIA· Mar 31, 2026

41. 5.5Med

    CVE-2026-24153 ↗ (opens in a new tab)

    NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.

    NVNVIDIA· Mar 31, 2026

42. 9.4Crit

    CVE-2026-24148 ↗ (opens in a new tab)

    NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

    NVNVIDIA· Mar 31, 2026

43. 4.7Med

    CVE-2026-22561 ↗ (opens in a new tab)

    Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer.

    ANAnthropic (Claude)· Mar 31, 2026

44. 7.5High

    CVE-2026-34070 ↗ (opens in a new tab)

    LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an application passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for templates, .json/.yaml for examples). This issue has been patched in version 1.2.22.

    L/LangChain / LangSmith· Mar 31, 2026

45. 7.1High

    CVE-2026-34060 ↗ (opens in a new tab)

    Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a user opens a project containing a malicious .vscode/settings.json. This issue has been patched in Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9.

    SHShopify· Mar 31, 2026

46. 7.8High

    CVE-2026-34040 ↗ (opens in a new tab)

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

    DODocker· Mar 31, 2026

47. 8.1High

    CVE-2026-33997 ↗ (opens in a new tab)

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.

    DODocker· Mar 31, 2026

48. 6.0Med

    CVE-2026-5170 ↗ (opens in a new tab)

    A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31.

    MAMongoDB Atlas· Mar 30, 2026

49. 7.1High

    CVE-2026-4315 ↗ (opens in a new tab)

    A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

    WAWatchGuard· Mar 30, 2026

50. 8.4High

    CVE-2026-4266 ↗ (opens in a new tab)

    An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35.

    WAWatchGuard· Mar 30, 2026