RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

43,411 CVEs

Hide EOL products

CVEs (43,411, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 476–500 of 43,411 (capped at 500)

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-85878 CRITICAL 9.9 2026-09-18 Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
CVE-2026-85885 CRITICAL 9.9 2026-09-17 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
CVE-2026-92957 CRITICAL Patched 9.9 2026-09-17 vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Althoug…
CVE-2026-92948 CRITICAL Patched 9.9 2026-09-17 vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder explicitly all&hellip;
CVE-2026-92951 CRITICAL Patched 9.9 2026-09-17 vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching instead of full package-n&hellip;
CVE-2026-92938 CRITICAL Patched 9.9 2026-09-17 vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or through builtin: &hellip;
CVE-2026-92939 CRITICAL Patched 9.9 2026-09-17 vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only p&hellip;
CVE-2026-20332 CRITICAL 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense&hellip;
CVE-2026-20322 CRITICAL 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard&nbsp;engineering team has conducted a comprehensive internal secu&hellip;
CVE-2026-20324 CRITICAL 9.9 2026-09-16 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker &hellip;
CVE-2026-20325 CRITICAL 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard&nbsp;engineering team has conducted a comprehensive internal secu&hellip;
CVE-2026-20329 CRITICAL 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense&hellip;
CVE-2026-20330 CRITICAL 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense&hellip;
CVE-2026-20234 CRITICAL Patched 9.9 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC)&hellip;
CVE-2026-20307 CRITICAL 9.9 2026-09-16 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating s&hellip;
CVE-2026-87172 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easil&hellip;
CVE-2026-83282 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is&hellip;
CVE-2026-83055 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 1&hellip;
CVE-2026-83056 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 1&hellip;
CVE-2026-83057 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 1&hellip;
CVE-2026-83058 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 1&hellip;
CVE-2026-83038 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 12.2.1.4.0, 14.1&hellip;
CVE-2026-83039 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0&hellip;
CVE-2026-83031 CRITICAL 9.9 2026-09-15 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1&hellip;
CVE-2026-82997 CRITICAL 9.9 2026-09-15 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and &hellip;