All CVEs — page 433 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• LOW 3.1CVE-2026-101057public exploit available2026-09-27
• MEDIUM 5.3CVE-2026-101056public exploit available2026-09-27
• LOW 3.1CVE-2026-101051public exploit available2026-09-27
• MEDIUM 5.4CVE-2026-101048public exploit available2026-09-27
• MEDIUM 5.3CVE-2026-101047public exploit available2026-09-27
• LOW 3.1CVE-2026-101046public exploit available2026-09-27
• HIGH 8CVE-2026-101045public exploit available2026-09-27

  The flaw allows an attacker to inject shell metacharacters into app install and uninstall scripts, enabling arbitrary command execution as root on managed macOS hosts.

• HIGH 7.1CVE-2026-101044public exploit available2026-09-27
• HIGH 7.4CVE-2026-101043public exploit available2026-09-27
• HIGH 7.5CVE-2026-887782026-09-27

  This vulnerability allows attackers to predict exact values based on previous values in Citrix NetScaler ADC and Gateway systems, potentially enabling unauthorized access or data manipulation. The flaw stems from predictable random number generation that can be exploited without authentication.

• CRITICAL 9.8CVE-2026-887772026-09-27

  A memory overflow vulnerability exists in Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, leading to potential Denial of Service (DoS) conditions.

• CRITICAL 9.8CVE-2026-887762026-09-27

  The flaw is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway, which can lead to Denial of Service (DoS). This issue is critical as it can be exploited to crash the affected systems, rendering them unusable.

• CRITICAL 9.8CVE-2026-887752026-09-27

  This vulnerability allows for a memory overflow, leading to potential Denial of Service (DoS) conditions or unpredictable behavior in Citrix NetScaler ADC and Gateway versions prior to the specified patches.

• HIGH 7.2CVE-2026-887742026-09-27
• CRITICAL 10CVE-2026-887732026-09-27

  This vulnerability allows for inconsistent interpretation of HTTP requests, leading to potential HTTP Request/Response smuggling attacks, which can be exploited to manipulate network traffic and potentially execute unauthorized actions.

• HIGH 8.1CVE-2026-887722026-09-27

  The vulnerability allows for Remote Code Execution or Denial of Service in Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, respectively. This flaw is significant as it can be exploited remotely, leading to severe system compromise.

• CRITICAL 9.8CVE-2026-887712026-09-27

  This vulnerability allows unauthenticated attackers to execute arbitrary commands due to improper input validation in Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, respectively.

• MEDIUM 6.5CVE-2026-101050public exploit available2026-09-27
• MEDIUM 6.5CVE-2026-101049public exploit available2026-09-27
• MEDIUM 6.4CVE-2026-101042public exploit available2026-09-27
• UNSCOREDCVE-2026-101041public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-101033public exploit available2026-09-27
• HIGH 7CVE-2026-101032public exploit available2026-09-27
• HIGH 7.5CVE-2026-100872public exploit available2026-09-27

  Sylius fails to validate payment amounts during cart recalculation, allowing attackers to inflate order totals after payment initiation. This creates a potential for financial loss when the system marks inflated orders as fully paid while only capturing the original payment amount from the gateway.

• HIGH 8.8CVE-2026-100871public exploit available2026-09-27

  The flaw allows attackers to obtain an administrator's token by registering a shop customer account with an administrator's email, granting full administrative access. This is due to the lack of firewall identification in JWT tokens issued by separate Admin and Shop API endpoints.