RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

66,781 CVEs

Hide EOL products

CVEs (66,781, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 101–125 of 66,781 (capped at 500)

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-35308 CRITICAL 10.0 2026-06-17 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). Supported versions that are affected are 12.2.1.4.0, 1…
CVE-2026-35292 CRITICAL 10.0 2026-06-17 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily …
CVE-2026-48836 CRITICAL 10.0 2026-06-15 Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
CVE-2026-40772 CRITICAL 10.0 2026-06-15 Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.
CVE-2026-52704 CRITICAL 10.0 2026-06-15 Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects Woo&hellip;
CVE-2026-48558 CRITICAL Patched 10.0 2026-06-12 SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication i&hellip;
CVE-2026-50086 CRITICAL 10.0 2026-06-12 The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CW&hellip;
CVE-2026-47137 CRITICAL Patched 10.0 2026-06-12 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks&hellip;
CVE-2026-47140 CRITICAL Patched 10.0 2026-06-12 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, a&hellip;
CVE-2026-47208 CRITICAL Patched 10.0 2026-06-12 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can esca&hellip;
CVE-2026-47131 CRITICAL Patched 10.0 2026-06-12 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookup&hellip;
CVE-2026-49261 CRITICAL Patched 10.0 2026-06-11 MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and &hellip;
CVE-2026-46695 CRITICAL Patched 10.0 2026-06-10 Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version &hellip;
CVE-2026-48303 CRITICAL Patched 10.0 2026-06-09 Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in&hellip;
CVE-2026-47938 CRITICAL 10.0 2026-06-09 Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalat&hellip;
CVE-2026-10520 CRITICAL Patched 10.0 2026-06-09 An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote co&hellip;
CVE-2026-11429 NONE Patched &mdash; 2026-06-05 Two endpoints in the Vault Service ScriptsController, shared by Altium Enterprise Server and Altium 365, accept file uploads where a user-supplied filename component is use&hellip;
CVE-2026-46389 CRITICAL Patched 10.0 2026-06-05 UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Identity deployment. In versions 0.11.0 through&hellip;
CVE-2026-49777 CRITICAL Patched 10.0 2026-06-05 Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue af&hellip;
CVE-2026-48567 CRITICAL 10.0 2026-06-04 Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-7312 CRITICAL Patched 10.0 2026-06-02 CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.&hellip;
CVE-2026-10611 CRITICAL Patched 10.0 2026-06-02 An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true&hellip;
CVE-2026-40965 CRITICAL Patched 10.0 2026-06-01 Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys ar&hellip;
CVE-2026-45131 CRITICAL 10.0 2026-06-01 CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled cod&hellip;
CVE-2026-45132 CRITICAL 10.0 2026-06-01 CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials&hellip;