RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

478 CVEs · Critical severity

Hide EOL products

CVEs (478)

Showing 1–25 of 478

CVE ID Severity Patch CVSS ↓ Published Description
CVE-2026-42933 CRITICAL 10.0 2026-07-23 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypa…
CVE-2025-71389 CRITICAL Patched 10.0 2026-07-23 Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components (RSC) req…
CVE-2026-6516 CRITICAL Patched 10.0 2026-07-23 Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
CVE-2026-47668 CRITICAL 10.0 2026-07-23 DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection …
CVE-2026-64812 CRITICAL Patched 10.0 2026-07-23 In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
CVE-2026-64813 CRITICAL Patched 10.0 2026-07-23 In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
CVE-2026-59555 CRITICAL 10.0 2026-07-23 Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.
CVE-2026-60366 CRITICAL 10.0 2026-07-22 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected a&hellip;
CVE-2026-60644 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 &hellip;
CVE-2026-60389 CRITICAL 10.0 2026-07-21 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-60379 CRITICAL 10.0 2026-07-21 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-60358 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and &hellip;
CVE-2026-60360 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.&hellip;
CVE-2026-60365 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The &hellip;
CVE-2026-60217 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 an&hellip;
CVE-2026-47056 CRITICAL 10.0 2026-07-21 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.&hellip;
CVE-2026-16367 CRITICAL Patched 10.0 2026-07-21 Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-46412 CRITICAL 10.0 2026-07-20 @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an att&hellip;
CVE-2026-44359 CRITICAL 10.0 2026-07-20 Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_req&hellip;
CVE-2026-63795 CRITICAL 10.0 2026-07-19 In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set&hellip;
CVE-2026-16117 CRITICAL Patched 10.0 2026-07-18 Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes path&hellip;
CVE-2026-54159 CRITICAL Patched 10.0 2026-07-17 PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the ps_facetedsearch module rebuilds selected search filters from the &hellip;
CVE-2026-63732 CRITICAL Patched 9.9 2026-07-23 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticates any fresh installation, a bypass of the LOCAL&hellip;
CVE-2024-58354 CRITICAL 9.9 2026-07-23 cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Actions workflows. The workflow pr.yml uses the pull_req&hellip;
CVE-2026-47724 CRITICAL 9.9 2026-07-23 nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the `/api/v1/*` route surface trusts the bearer token alon&hellip;