Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-112146 |
5.3 (4.0)
7.4 (3.1)
7.4 (3.0)
|
D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded c… |
D-Link |
E15 |
2026-10-19T14:00:20.611Z | 2026-10-19T14:00:20.611Z |
| CVE-2026-107194 |
9.2 (4.0)
|
Sungrow iSolarCloud before 2026-08-25 allows auth… |
Sungrow |
iSolarCloud |
2026-10-07T13:54:45.211Z | 2026-10-19T13:58:48.206Z |
| CVE-2026-112296 |
9.3 (4.0)
9.8 (3.1)
|
FlyCms through commit edfdf724 Default Super Administr… |
sunkaifei |
FlyCms |
2026-10-19T13:55:36.847Z | 2026-10-19T13:55:36.847Z |
| CVE-2026-112295 |
5.3 (4.0)
5.4 (3.1)
|
FlyCms through commit edfdf724 Mass Assignment via /uc… |
sunkaifei |
FlyCms |
2026-10-19T13:55:36.176Z | 2026-10-19T13:55:36.176Z |
| CVE-2026-112294 |
5.3 (4.0)
4.3 (3.1)
|
FlyCms through commit edfdf724 Missing Authorization v… |
sunkaifei |
FlyCms |
2026-10-19T13:55:35.493Z | 2026-10-19T13:55:35.493Z |
| CVE-2026-112293 |
5.3 (4.0)
5.4 (3.1)
|
BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authoriz… |
BoxyHQ |
saas-starter-kit |
2026-10-19T13:55:34.785Z | 2026-10-19T13:55:34.785Z |
| CVE-2026-112292 |
9.3 (4.0)
9.8 (3.1)
|
CheckCle through 1.6.0 Missing Authorization via Empty… |
operacle |
checkcle |
2026-10-19T13:55:34.097Z | 2026-10-19T13:55:34.097Z |
| CVE-2026-112291 |
6.9 (4.0)
5.3 (3.1)
|
Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-bet… |
Flarum |
Extension Manager |
2026-10-19T13:55:33.404Z | 2026-10-19T13:55:33.404Z |
| CVE-2026-112290 |
2.3 (4.0)
4.7 (3.1)
|
MI6 @ukic/canary-web-components 3.0.0-canary.12 before… |
MI6 |
Intelligence Community UI Kit canary web components |
2026-10-19T13:55:32.741Z | 2026-10-19T13:55:32.741Z |
| CVE-2026-112289 |
5.1 (4.0)
5.4 (3.1)
|
Koalixcrm through 1.14.0 Stored XSS via Task Title in … |
KoalixSwitzerland |
koalixcrm |
2026-10-19T13:55:32.059Z | 2026-10-19T13:55:32.059Z |
| CVE-2026-112288 |
2.1 (4.0)
3.3 (3.1)
|
Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via D… |
krayin |
laravel-crm |
2026-10-19T13:55:31.283Z | 2026-10-19T13:55:31.283Z |
| CVE-2026-112287 |
7.1 (4.0)
7.1 (3.1)
|
Krayin CRM before 2.2.7 Broken Object Level Authorizat… |
krayin |
laravel-crm |
2026-10-19T13:55:30.623Z | 2026-10-19T13:55:30.623Z |
| CVE-2026-112286 |
7.1 (4.0)
6.5 (3.1)
|
Krayin CRM before 2.2.7 IDOR via Quote Search and Lead… |
krayin |
laravel-crm |
2026-10-19T13:55:29.924Z | 2026-10-19T13:55:29.924Z |
| CVE-2026-112285 |
5.3 (4.0)
4.3 (3.1)
|
Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypas… |
Thelia |
Thelia |
2026-10-19T13:55:29.184Z | 2026-10-19T13:55:29.184Z |
| CVE-2026-112284 |
4.8 (4.0)
3.3 (3.1)
|
libaribcaption 1.1.0 through 1.1.2 Out-of-Bounds Read … |
xqq |
libaribcaption |
2026-10-19T13:55:28.447Z | 2026-10-19T13:55:28.447Z |
| CVE-2026-112283 |
6.8 (4.0)
5.5 (3.1)
|
libbluray through 1.5.1 Uncontrolled Memory Allocation… |
VideoLAN |
libbluray |
2026-10-19T13:55:27.741Z | 2026-10-19T13:55:27.741Z |
| CVE-2026-112282 |
6.8 (4.0)
5.5 (3.1)
|
VideoLAN libbluray through 1.5.1 Out-of-Bounds Read vi… |
VideoLAN |
libbluray |
2026-10-19T13:55:27.008Z | 2026-10-19T13:55:27.008Z |
| CVE-2026-112281 |
6.9 (4.0)
6.1 (3.1)
|
libaribb24 through 1.0.3 Stack Buffer Overflow via dec… |
nkoriyama |
aribb24 |
2026-10-19T13:55:26.323Z | 2026-10-19T13:55:26.323Z |
| CVE-2026-112280 |
6.9 (4.0)
6.1 (3.1)
|
libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflo… |
nkoriyama |
aribb24 |
2026-10-19T13:55:25.644Z | 2026-10-19T13:55:25.644Z |
| CVE-2026-112279 |
7.1 (4.0)
6.5 (3.1)
|
rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:24.937Z | 2026-10-19T13:55:24.937Z |
| CVE-2026-112278 |
7.1 (4.0)
6.5 (3.1)
|
rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:24.239Z | 2026-10-19T13:55:24.239Z |
| CVE-2026-112277 |
7.1 (4.0)
6.5 (3.1)
|
rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:23.436Z | 2026-10-19T13:55:23.436Z |
| CVE-2026-112276 |
6.9 (4.0)
6.1 (3.1)
|
Netpbm through 11.16.00 Heap Out-of-Bounds Read via ra… |
Netpbm |
Netpbm |
2026-10-19T13:55:22.723Z | 2026-10-19T13:55:22.723Z |
| CVE-2026-112275 |
6.9 (4.0)
6.1 (3.1)
|
Netpbm through 11.16.00 Heap Out-of-Bounds Write via r… |
Netpbm |
Netpbm |
2026-10-19T13:55:22.019Z | 2026-10-19T13:55:22.019Z |
| CVE-2026-112274 |
6.3 (4.0)
3.7 (3.1)
|
libtins through 4.6 Out-of-Bounds Read via DNS::soa_re… |
libtins |
libtins |
2026-10-19T13:55:21.345Z | 2026-10-19T13:55:21.345Z |
| CVE-2026-112273 |
6.9 (4.0)
5.3 (3.1)
|
libtins through 4.6 Heap Out-of-Bounds Read via DNS::c… |
libtins |
libtins |
2026-10-19T13:55:20.684Z | 2026-10-19T13:55:20.684Z |
| CVE-2026-112272 |
6.8 (4.0)
5.5 (3.1)
|
libdisplay-info 0.4.0 Heap Out-of-Bounds Read via Disp… |
emersion |
libdisplay-info |
2026-10-19T13:55:20.018Z | 2026-10-19T13:55:20.018Z |
| CVE-2026-112271 |
6.8 (4.0)
5.5 (3.1)
|
libdisplay-info through 0.4.0 Heap Out-of-Bounds Read … |
emersion |
libdisplay-info |
2026-10-19T13:55:19.362Z | 2026-10-19T13:55:19.362Z |
| CVE-2026-112270 |
7.1 (4.0)
6.5 (3.1)
|
SGLang through 0.5.22 Memory Exhaustion via Mooncake S… |
sgl-project |
sglang |
2026-10-19T13:55:18.694Z | 2026-10-19T13:55:18.694Z |
| CVE-2026-112269 |
7.1 (4.0)
6.5 (3.1)
|
SGLang through 0.5.22 Memory Exhaustion via Unauthenti… |
sgl-project |
sglang |
2026-10-19T13:55:17.954Z | 2026-10-19T13:55:17.954Z |