Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-78541 |
8.5 (4.0)
|
Command Injection in Parent Control of TP-Link Archer … |
TP-Link Systems Inc. |
Archer BE3600 v1 |
2026-08-24T18:26:11.670Z | 2026-08-24T19:14:56.464Z |
| CVE-2026-78417 |
N/A
|
Insufficient verification of data authenticity in… |
Devolutions |
Remote Desktop Manager |
2026-08-24T18:26:25.739Z | 2026-08-24T18:26:25.739Z |
| CVE-2026-75371 |
N/A
|
An integer handling flaw in the cobs_decode funct… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T18:19:30.601Z |
| CVE-2026-75370 |
N/A
|
An out-of-bounds read/write vulnerability in the … |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T18:23:53.679Z |
| CVE-2026-71832 |
N/A
|
Aria2 version 1.37.0 and below is affected by a D… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T18:51:36.903Z |
| CVE-2026-71509 |
7.1 (4.0)
6.5 (3.1)
|
Dolibarr < 24.0.0 Expense Report REST API Improper Aut… |
Dolibarr |
dolibarr |
2026-08-24T19:04:52.122Z | 2026-08-24T19:04:52.122Z |
| CVE-2026-71508 |
7.1 (4.0)
6.5 (3.1)
|
Dolibarr < 24.0.0 REST API Improper Authorization via … |
Dolibarr |
dolibarr |
2026-08-24T19:03:59.694Z | 2026-08-24T19:19:36.472Z |
| CVE-2026-71507 |
7.1 (4.0)
6.5 (3.1)
|
Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:03:01.493Z | 2026-08-24T19:03:01.493Z |
| CVE-2026-71506 |
7.2 (4.0)
8.1 (3.1)
|
Dolibarr < 24.0.0 Payments REST API Improper Authoriza… |
Dolibarr |
dolibarr |
2026-08-24T19:01:47.408Z | 2026-08-24T19:01:47.408Z |
| CVE-2026-71505 |
7.1 (4.0)
7.1 (3.1)
|
Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:00:47.470Z | 2026-08-24T19:28:36.838Z |
| CVE-2026-71504 |
8.6 (4.0)
8.1 (3.1)
|
Dolibarr < 24.0.0 Members REST API Improper Authorizat… |
Dolibarr |
dolibarr |
2026-08-24T18:57:47.028Z | 2026-08-24T19:00:17.376Z |
| CVE-2026-71503 |
5.1 (4.0)
6.1 (3.1)
|
Dolibarr < 24.0.0 Reflected XSS via Extra Fields Admin… |
Dolibarr |
dolibarr |
2026-08-24T18:57:05.485Z | 2026-08-24T18:57:56.389Z |
| CVE-2026-40877 |
8.7 (3.1)
|
Combodo iTop: PHP Object Injection Leading to Remote C… |
Combodo |
iTop |
2026-08-24T18:57:55.017Z | 2026-08-24T18:57:55.017Z |
| CVE-2026-39975 |
9.4 (4.0)
|
Combodo iTop: Remote code execution using external aut… |
Combodo |
iTop |
2026-08-24T18:50:48.920Z | 2026-08-24T18:50:48.920Z |
| CVE-2026-30864 |
8.9 (3.1)
|
Combodo iTop: Reflected XSS in dashboard revert |
Combodo |
iTop |
2026-08-24T18:52:43.685Z | 2026-08-24T19:31:23.588Z |
| CVE-2026-13081 |
N/A
|
Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs for these vulnerabilities. | N/A | N/A | 2026-08-24T18:20:06.120Z | |
| CVE-2026-13047 |
N/A
|
Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs for these vulnerabilities. | N/A | N/A | 2026-08-24T18:20:06.876Z | |
| CVE-2025-26238 |
N/A
|
In D-Link DI-8100G 17.12.20A1, the flag parameter… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T18:48:59.180Z |
| CVE-2025-26237 |
N/A
|
D-Link DI-7001 MINI_5G 19.10.31A1 contains a code… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T18:46:53.581Z |
| CVE-2026-9254 |
8.7 (4.0)
|
Command Injection Vulnerability in Parent Control of M… |
TP-Link Systems Inc. |
Archer BE800 V1 |
2026-08-24T17:25:30.486Z | 2026-08-24T17:47:29.558Z |
| CVE-2026-78475 |
6.1 (3.1)
|
Gimp: unbounded stack vla and 21-byte stack over-read … |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-24T17:20:48.050Z | 2026-08-24T17:20:48.050Z |
| CVE-2026-76838 |
8.4 (4.0)
8.5 (3.1)
|
Hi.Events before 1.11.1-beta Server-Side Request Forge… |
HiEventsDev |
Hi.Events |
2026-08-24T17:36:02.928Z | 2026-08-24T17:36:02.928Z |
| CVE-2026-76837 |
5.3 (4.0)
6.4 (3.1)
|
Baserow before 2.3.0 Stored Cross-Site Scripting via R… |
Baserow |
Baserow |
2026-08-24T17:36:02.268Z | 2026-08-24T18:12:09.134Z |
| CVE-2026-76836 |
8.7 (4.0)
8.8 (3.1)
|
AzuraCast through 0.23.8 Liquidsoap Configuration Writ… |
AzuraCast |
AzuraCast |
2026-08-24T17:36:01.620Z | 2026-08-24T17:36:01.620Z |
| CVE-2026-76835 |
9.3 (4.0)
9.1 (3.1)
|
OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypa… |
oauth2-proxy |
oauth2-proxy |
2026-08-24T17:55:39.829Z | 2026-08-24T17:55:39.829Z |
| CVE-2026-76073 |
8.7 (4.0)
8.8 (3.1)
|
Label Studio through 1.23.0 Cross-Organization Annotat… |
HumanSignal |
label-studio |
2026-08-24T17:55:39.204Z | 2026-08-24T17:55:39.204Z |
| CVE-2026-76072 |
8.3 (4.0)
7.4 (3.1)
|
Continue CLI through 1.5.47 Incomplete Destructive Com… |
continuedev |
continue |
2026-08-24T17:55:38.529Z | 2026-08-24T18:36:09.720Z |
| CVE-2026-71982 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-08-24T18:07:52.169Z | |
| CVE-2026-71943 |
8.6 (4.0)
7.2 (3.1)
|
DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:06.077Z | 2026-08-24T17:08:06.077Z |
| CVE-2026-71942 |
8.6 (4.0)
7.2 (3.1)
|
DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:05.410Z | 2026-08-24T18:38:01.010Z |