CVEs.

Latest CVEs

1. 7.8High

   CVE-2025-33218 ↗ (opens in a new tab)

   NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

   NVNVIDIA· Jan 28, 2026

2. 7.8High

   CVE-2025-33217 ↗ (opens in a new tab)

   NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

   NVNVIDIA· Jan 28, 2026

3. 7.8High

   CVE-2025-57283 ↗ (opens in a new tab)

   The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.

   BRBrowserStack· Jan 28, 2026

4. 6.1Med

   CVE-2026-24778 ↗ (opens in a new tab)

   Ghost is an open source content management system. In Ghost versions 5.43.0 through 5.12.04 and 6.0.0 through 6.14.0, an attacker was able to craft a malicious link that, when accessed by an authenticated staff user or member, would execute JavaScript with the victim's permissions, potentially leading to account takeover. Ghost Portal versions 2.29.1 through 2.51.4 and 2.52.0 through 2.57.0 were vulnerable to this issue. Ghost automatically loads the latest patch of the members Portal component via CDN. For Ghost 5.x users, upgrading to v5.121.0 or later fixes the vulnerability. v5.121.0 loads

   GHGhost(Pro)· Jan 27, 2026

5. 5.3Med

   CVE-2025-12810 ↗ (opens in a new tab)

   Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatically checks in even when the password change fails after reaching its retry limit. This leaves the secret in an inconsistent state with the wrong password. Remediation: Upgrade to 11.9.47 or later. The secret will remain checked out when the password change fails.

   DEDelinea· Jan 27, 2026

6. 7.8High

   CVE-2025-33234 ↗ (opens in a new tab)

   NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

   NVNVIDIA· Jan 27, 2026

7. 7.1High

   CVE-2025-14911 ↗ (opens in a new tab)

   User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

   MAMongoDB Atlas· Jan 27, 2026

8. 9.9Crit

   CVE-2026-1470 ↗ (opens in a new tab)

   n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operatio

   JFJFrog· Jan 27, 2026

9. 8.1High

   CVE-2026-21721 ↗ (opens in a new tab)

   The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.

   GCGrafana Cloud· Jan 27, 2026

10. 7.5High

    CVE-2026-21720 ↗ (opens in a new tab)

    Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.

    GCGrafana Cloud· Jan 27, 2026

11. 7.5High

    CVE-2025-59472 ↗ (opens in a new tab)

    A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the `Next-Resume: 1` header and processes attacker-controlled postponed state data. Two closely related vulnerabilities allow an attacker to crash the server process through memory exhaustion: 1. **Unbounded request body buffering**: The server buffers the entire POST request body into memory using `Buffer.concat()` without enforcing any size limit, allowing arbitrarily large payloads to exhaust ava

    VEVercel· Jan 26, 2026

12. 7.5High

    CVE-2025-59471 ↗ (opens in a new tab)

    A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image optimization endpoint (`/_next/image`) loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause out-of-memory conditions by requesting optimization of arbitrarily large images. This vulnerability requires that `remotePatterns` is configured to allow image optimization from external domains and that the attacker can serve or control a large image on an allowed domain. Strongly consider upgrad

    VEVercel· Jan 26, 2026

13. 7.8High

    CVE-2026-21509 ↗ (opens in a new tab)Known exploited

    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

    M3Microsoft 365· Jan 26, 2026

14. 9.8Crit

    CVE-2026-22586 ↗ (opens in a new tab)

    Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

15. 9.8Crit

    CVE-2026-22585 ↗ (opens in a new tab)

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

16. 9.8Crit

    CVE-2026-22583 ↗ (opens in a new tab)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

17. 9.8Crit

    CVE-2026-22582 ↗ (opens in a new tab)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

    SASalesforce· Jan 24, 2026

18. 6.0Med

    CVE-2026-1386 ↗ (opens in a new tab)

    A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.

    AWAmazon Web Services· Jan 23, 2026

19. 9.9Crit

    CVE-2026-24304 ↗ (opens in a new tab)

    Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jan 23, 2026

20. 9.8Crit

    CVE-2026-24306 ↗ (opens in a new tab)

    Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jan 22, 2026

21. 7.4High

    CVE-2026-21524 ↗ (opens in a new tab)

    Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Jan 22, 2026

22. 7.5High

    CVE-2026-21520 ↗ (opens in a new tab)

    Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

    M3Microsoft 365· Jan 22, 2026

23. 9.8Crit

    CVE-2026-21227 ↗ (opens in a new tab)

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jan 22, 2026

24. 8.1High

    CVE-2026-0535 ↗ (opens in a new tab)

    A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

    AUAutodesk· Jan 22, 2026

25. 8.1High

    CVE-2026-0534 ↗ (opens in a new tab)

    A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

    AUAutodesk· Jan 22, 2026

26. 8.1High

    CVE-2026-0533 ↗ (opens in a new tab)

    A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

    AUAutodesk· Jan 22, 2026

27. 7.5High

    CVE-2026-1102 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending repeated malformed SSH authentication requests.

    GIGitLab· Jan 22, 2026

28. 7.4High

    CVE-2026-0723 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses.

    GIGitLab· Jan 22, 2026

29. 7.5High

    CVE-2025-13928 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrect authorization validation in API endpoints.

    GIGitLab· Jan 22, 2026

30. 7.5High

    CVE-2025-13927 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with malformed authentication data.

    GIGitLab· Jan 22, 2026

31. 6.5Med

    CVE-2025-13335 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.

    GIGitLab· Jan 22, 2026

32. 6.3Med

    CVE-2026-24055 ↗ (opens in a new tab)

    Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow, and the callback stores installations based on this untrusted metadata. This allows an attacker to bind their Slack workspace to any project and potentially receive changes to prompts stored in Langfuse Prompt Management. An attacker can replace existing Prompt Slack Automation integrations or pre-reg

    LALangfuse· Jan 22, 2026

33. 5.3Med

    CVE-2026-21852 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix

    ANAnthropic (Claude)· Jan 21, 2026

34. 7.7High

    CVE-2026-0933 ↗ (opens in a new tab)

    SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metac

    CLCloudflare· Jan 20, 2026

35. 7.8High

    CVE-2025-33233 ↗ (opens in a new tab)

    NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Jan 20, 2026

36. 6.7Med

    CVE-2025-33231 ↗ (opens in a new tab)

    NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service and information disclosure.

    NVNVIDIA· Jan 20, 2026

37. 7.3High

    CVE-2025-33230 ↗ (opens in a new tab)

    NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jan 20, 2026

38. 7.3High

    CVE-2025-33229 ↗ (opens in a new tab)

    NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jan 20, 2026

39. 7.3High

    CVE-2025-33228 ↗ (opens in a new tab)

    NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jan 20, 2026

40. 9.9Crit

    CVE-2026-22844 ↗ (opens in a new tab)

    A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.

    ZOZoom· Jan 20, 2026

41. 9.9Crit

    CVE-2026-0863 ↗ (opens in a new tab)

    Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under "Internal" execution mode. If the instance is operating under the "External" execution mode (ex. n8n's official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significan

    JFJFrog· Jan 18, 2026

42. 6.5Med

    CVE-2025-14435 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops.

    MCMattermost Cloud· Jan 16, 2026

43. 7.5High

    CVE-2025-14844 ↗ (opens in a new tab)

    The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, the plugin does not check a user-controlled key, which makes it possible for unauthenticated attackers to leak Stripe SetupIntent client_secret values for any membership.

    LWLiquid Web· Jan 16, 2026

44. 6.5Med

    CVE-2025-14822 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens

    MCMattermost Cloud· Jan 16, 2026

45. 8.2High

    CVE-2025-67823 ↗ (opens in a new tab)

    A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.

    MIMitel· Jan 15, 2026

46. 9.4Crit

    CVE-2025-67822 ↗ (opens in a new tab)

    A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.

    MIMitel· Jan 15, 2026

47. 6.6Med

    CVE-2026-0227 ↗ (opens in a new tab)

    A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

    PAPalo Alto Networks· Jan 15, 2026

48. 7.8High

    CVE-2025-33206 ↗ (opens in a new tab)

    NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and denial of service.

    NVNVIDIA· Jan 14, 2026

49. 5.4Med

    CVE-2025-11224 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality.

    GIGitLab· Jan 14, 2026

50. 7.2High

    CVE-2026-22708 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, certain shell built-ins can still be executed without appearing in the allowlist and without requiring user approval. This allows an attacker via indirect or direct prompt injection to poison the shell environment by setting, modifying, or removing environment variables that influence trusted commands. This vulnerability is fixed in 2.3.

    CUCursor· Jan 14, 2026