🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-124858 HIGH Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160,... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124857 HIGH Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 16... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124856 HIGH Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124855 UNKNOWN Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.... | UNKNOWN | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124854 HIGH Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbir... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124853 CRITICAL Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, ... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124852 HIGH Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-120399 HIGH A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A net... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-82509 CRITICAL V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerabil... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-12708 HIGH Summary
Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every p... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-16478 HIGH Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer allows Privilege... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124747 HIGH A flaw was found in BusyBox. When resuming a download over File Transfer Protocol (FTP), the wget utility fails to verify that the resume offset does ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-121267 HIGH Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality No... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-100962 MEDIUM NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forg... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125744 LOW Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125871 MEDIUM The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) vulnerability. When a user with permissi... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125745 LOW Custom Post Types and Custom Fields creator (WCK) before 2.4.1 contains a missing authorization vulnerability that allows authenticated attackers with... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-12572 HIGH Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command exe... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-12573 HIGH Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrar... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-12574 HIGH Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation... | HIGH | ????? | ????? | NVD | 3 days ago |