All CVEs — page 375 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• CRITICAL 9.4CVE-2026-55181public exploit available2026-09-30

  The flaw allows an attacker to bypass the OIDC disable switch in Tugtainer, initiating the OIDC login flow even when OIDC is supposed to be disabled, leading to unauthorized access.

• UNSCOREDCVE-2026-55177public exploit available2026-09-30
• CRITICAL 9CVE-2026-55176public exploit available2026-09-30

  The flaw allows any tenant to use a shared secret to authenticate to any other tenant's workspace API, enabling cross-workspace read, write, and destructive operations.

• HIGH 8.3CVE-2026-46711public exploit available2026-09-30

  The flaw allows unauthorized access to arbitrary files within the workspace and the ability to download project trees, posing a significant security risk.

• UNSCOREDCVE-2026-19553public exploit available2026-09-30
• UNSCOREDCVE-2026-19445public exploit available2026-09-30
• UNSCOREDCVE-2026-1034442026-09-30
• UNSCOREDCVE-2026-1034432026-09-30
• MEDIUM 5.3CVE-2026-103241public exploit available2026-09-30
• MEDIUM 6.3CVE-2026-103233public exploit available2026-09-30
• HIGH 7.3CVE-2026-103232public exploit available2026-09-30
• CRITICAL 9.8CVE-2026-1024902026-09-30

  This flaw allows the local zammad user to escalate privileges to root, enabling full control over the system.

• CRITICAL 9.8CVE-2026-1024892026-09-30

  Zammad versions 6.3.0 to 6.5.4 and 7.0.0 to 7.1.3 are vulnerable to a session hijack that can lead to remote code execution as the zammad user, with versions 7.0.0 to 7.1.3 not being fully exploitable due to environment conditions.

• UNSCOREDCVE-2026-80490public exploit available2026-09-30
• MEDIUM 5.9CVE-2026-55174public exploit available2026-09-30
• MEDIUM 5.5CVE-2026-47604public exploit available2026-09-30
• MEDIUM 5.5CVE-2026-47603public exploit available2026-09-30
• HIGH 7.1CVE-2026-47602public exploit available2026-09-30
• HIGH 7.8CVE-2026-47601public exploit available2026-09-30

  The flaw allows an unprivileged local user to exploit a vulnerability in the NVIDIA GPU Display Driver's DMA-BUF import path, potentially leading to code execution and privilege escalation.

• HIGH 7.8CVE-2026-47600public exploit available2026-09-30

  This vulnerability in NVIDIA GPU drivers allows an attacker to execute arbitrary code, escalate privileges, and cause a denial of service, leading to significant security risks.

• HIGH 7.8CVE-2026-47599public exploit available2026-09-30

  The flaw allows an unprivileged local user to cause improper memory access permissions during DMA mapping, potentially leading to code execution and privilege escalation.

• HIGH 7CVE-2026-47598public exploit available2026-09-30
• HIGH 7.8CVE-2026-47597public exploit available2026-09-30

  This vulnerability in the NVIDIA GPU Display Driver allows an unprivileged local user to cause a use-after-free condition, potentially leading to code execution and privilege escalation.

• HIGH 7CVE-2026-47596public exploit available2026-09-30
• HIGH 7.8CVE-2026-47595public exploit available2026-09-30

  The flaw allows an unprivileged user to write to read-only memory in the NVIDIA GPU Display Driver for Linux, leading to potential code execution and privilege escalation.