RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

80,425 CVEs

Hide EOL products

CVEs (80,425, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 226–250 of 80,425 (capped at 500)

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-10561 CRITICAL Patched 10.0 2026-06-22 IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthentic…
CVE-2026-45480 CRITICAL 10.0 2026-06-19 Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-48772 CRITICAL Patched 10.0 2026-06-19 ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 2.0.0 through 3.0.8, the ProxySQL MySQL frontend accepts the `PROXY UNKNOWN <addr> <addr> <p&hellip;
CVE-2026-50242 CRITICAL Patched 10.0 2026-06-19 In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to &hellip;
CVE-2026-49257 CRITICAL Patched 10.0 2026-06-18 mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP se&hellip;
CVE-2026-3490 CRITICAL Patched 10.0 2026-06-17 picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE c&hellip;
CVE-2026-48055 CRITICAL Patched 10.0 2026-06-17 Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identifi&hellip;
CVE-2026-0092 NONE &mdash; 2026-06-17 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional&hellip;
CVE-2026-46978 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easily exploitabl&hellip;
CVE-2026-46846 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-46798 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1&hellip;
CVE-2026-46800 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1&hellip;
CVE-2026-46803 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-46778 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.&hellip;
CVE-2026-46781 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.&hellip;
CVE-2026-35301 CRITICAL 10.0 2026-06-17 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily &hellip;
CVE-2026-35307 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 an&hellip;
CVE-2026-35308 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). Supported versions that are affected are 12.2.1.4.0, 1&hellip;
CVE-2026-35292 CRITICAL 10.0 2026-06-17 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily &hellip;
CVE-2026-48836 CRITICAL 10.0 2026-06-15 Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
CVE-2026-40772 CRITICAL 10.0 2026-06-15 Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.
CVE-2026-52704 CRITICAL 10.0 2026-06-15 Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects Woo&hellip;
CVE-2026-48558 CRITICAL Patched 10.0 2026-06-12 SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication i&hellip;
CVE-2026-50086 CRITICAL 10.0 2026-06-12 The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CW&hellip;
CVE-2026-47137 CRITICAL Patched 10.0 2026-06-12 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks&hellip;