Data sources·vuln
CISA KEV Catalog
kev
Runs in 30d
0
0 ok · 0 err
Success rate
—
last 30 days
Inserted (30d)
0
new rows
Updated (30d)
0
re-merged rows
Recent runs
| Started | Status | Inserted | Updated | Error / cursor |
|---|---|---|---|---|
| No runs in the last 30 days. | ||||
Recent vulnerabilities from this source
- CVE-2026-9586Critical· 9.8An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into Pos9 h ago
- CVE-2026-9198Critical· 9.8IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Lang9 h ago
- CVE-2026-65400Critical· 9.8An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to au13 h ago
- CVE-2026-66384Medium· 5.3An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.13 h ago
- CVE-2026-42016High· 8.1JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.16 h ago
- CVE-2026-63077Critical· 9.8In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol16 h ago
- CVE-2026-20316Medium· 5.3A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within th16 h ago
- CVE-2026-16232Critical· 9.8An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful e16 h ago
- CVE-2026-16812Critical· 10.0VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrit16 h ago
- CVE-2026-110447—Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS c1 d ago
- CVE-2026-18556High· 7.4Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.1 d ago
- CVE-2026-18577High· 8.1An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.11 d ago
- CVE-2026-42018High· 7.5JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.1 d ago
- CVE-2026-114625Critical· 9.9Arista VeloCloud Orchestrator SQL Injection Vulnerability2 d ago
- CVE-2024-21762Critical· 9.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 t2 d ago