🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-125378 MEDIUM PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for /admin/template/<template>/apply... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125377 HIGH Pig before 4.1.2 contains a missing authorization vulnerability in SysClientController that allows authenticated users without client-management permi... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125376 MEDIUM VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125375 MEDIUM MrDoc through 1.1.1 contains a missing authorization vulnerability in the project_doc_sort and manage_project_doc_sort handlers that allows registered... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125374 MEDIUM Krayin CRM before 2.2.8 contains a broken object level authorization vulnerability in Lead TagController attach and detach actions that skip the data-... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125373 MEDIUM IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' record... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125372 MEDIUM REBUILD before 4.5.3 contains an authorization bypass vulnerability in FeedsListController fetchDetails and fetchComments that skips privilege filteri... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125371 MEDIUM Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that compares only trailing hostname ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125370 CRITICAL Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs b... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125369 MEDIUM Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read votes and comments fro... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125368 HIGH OmniAgent through commit 12b98c5 contains an approval bypass vulnerability in ReflexionAgent._is_safe_bash_command that treats any command starting wi... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125367 MEDIUM Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signed-up users to make the server fetch arbi... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125366 MEDIUM Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to make server requests to arbitrary hosts by... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125365 HIGH DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated users to modify other users' a... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125364 HIGH frab through 0.9.1 contains a privilege escalation vulnerability that allows authenticated crew users to grant themselves orga roles by submitting unc... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125363 MEDIUM MikroDash before 0.8.79 contains a server-side request forgery vulnerability that allows any signed-in user, including the viewer role, to target inte... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125362 LOW Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python&... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125361 HIGH Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to impersonate the bsk daemon because r... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125360 HIGH Storyden through 1.26.16 contains a privilege escalation vulnerability that allows users holding MANAGE_ROLES to grant the ADMINISTRATOR permission wi... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125359 MEDIUM Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, including non-owner accounts,... | MEDIUM | ????? | ????? | NVD | 4 days ago |