All CVEs — page 167 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• LOW 3.3CVE-2026-57225public exploit available2026-09-18
• HIGH 7CVE-2026-57223public exploit available2026-09-18
• MEDIUM 4.3CVE-2026-93873public exploit available2026-09-18
• HIGH 7.5CVE-2026-93872public exploit available2026-09-18
• MEDIUM 5.4CVE-2026-93871public exploit available2026-09-18
• MEDIUM 4.3CVE-2026-93870public exploit available2026-09-18
• MEDIUM 6.1CVE-2026-93869public exploit available2026-09-18
• HIGH 8.1CVE-2026-93868public exploit available2026-09-18
• LOW 3.7CVE-2026-93841public exploit available2026-09-18
• LOW 3.7CVE-2026-93840public exploit available2026-09-18
• CRITICAL 9.8CVE-2026-93839public exploit available2026-09-18

  LightLLM through 1.2.0 allows unauthenticated attackers to register arbitrary nodes via the /pd_register WebSocket endpoint, leading to potential full user prompt disclosure, denial of service, or internal network request issues.

• MEDIUM 5.9CVE-2026-93838public exploit available2026-09-18
• HIGH 8.8CVE-2026-930312026-09-18

  The flaw allows attackers to upload arbitrary files, leading to potential remote code execution, due to missing capability checks and lack of file validation.

• HIGH 7.5CVE-2026-92708public exploit available2026-09-18
• MEDIUM 6CVE-2026-912052026-09-18
• MEDIUM 6CVE-2026-912032026-09-18
• MEDIUM 6.1CVE-2026-912022026-09-18
• HIGH 8.1CVE-2026-842412026-09-18
• HIGH 7.6CVE-2026-842392026-09-18
• HIGH 8.1CVE-2026-841082026-09-18
• HIGH 8.9CVE-2026-841062026-09-18

  The flaw allows a remote authenticated attacker to execute arbitrary code, posing a significant risk due to improper input handling in web page generation.

• HIGH 7.7CVE-2026-841052026-09-18
• HIGH 7.8CVE-2026-840892026-09-18
• HIGH 7.2CVE-2026-840862026-09-18
• HIGH 8.1CVE-2026-840852026-09-18