RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

43,412 CVEs

Hide EOL products

CVEs (43,412, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 151–175 of 43,412 (capped at 500)

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-62104 CRITICAL 10.0 2026-09-17 Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.
CVE-2026-76460 CRITICAL 10.0 2026-09-16 A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to &hellip;
CVE-2026-92808 NONE &mdash; 2026-09-16 A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server &hellip;
CVE-2026-76423 CRITICAL 10.0 2026-09-16 A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This &hellip;
CVE-2026-20130 CRITICAL Patched 10.0 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC)&hellip;
CVE-2026-20192 CRITICAL Patched 10.0 2026-09-16 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC)&hellip;
CVE-2026-73456 CRITICAL 10.0 2026-09-16 Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft &hellip;
CVE-2026-70416 CRITICAL Patched 10.0 2026-09-16 Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially ex&hellip;
CVE-2026-73453 CRITICAL 10.0 2026-09-16 An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected p&hellip;
CVE-2026-87230 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easil&hellip;
CVE-2026-83099 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and &hellip;
CVE-2026-83059 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 1&hellip;
CVE-2026-83020 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected a&hellip;
CVE-2026-83021 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0&hellip;
CVE-2026-71133 CRITICAL 10.0 2026-09-15 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-53710 CRITICAL Patched 10.0 2026-09-15 MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_se&hellip;
CVE-2026-59971 CRITICAL Patched 10.0 2026-09-15 MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_ser&hellip;
CVE-2026-65381 CRITICAL Patched 10.0 2026-09-14 A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golde&hellip;
CVE-2026-81648 CRITICAL 10.0 2026-09-13 The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke &hellip;
CVE-2026-85706 CRITICAL Patched 10.0 2026-09-12 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before&hellip;
CVE-2026-87985 NONE &mdash; 2026-09-11 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not prop&hellip;
CVE-2026-87986 NONE &mdash; 2026-09-11 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unpars&hellip;
CVE-2026-87987 NONE &mdash; 2026-09-11 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowliste&hellip;
CVE-2026-87988 NONE &mdash; 2026-09-11 An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing p&hellip;
CVE-2026-80462 CRITICAL 10.0 2026-09-11 A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate function&hellip;