CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/10/2026 |
| CVE-2026-116678 | 中危5.8 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get_page_with_referer() without applying should_block_host() to the second-stage host. Th | 27/10/2026 |
| CVE-2026-116677 | 中危5.3 | OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organization manager with CA view permission to retrieve another organization's certificat | 27/10/2026 |
| CVE-2026-116676 | 高危8.8 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command arguments that are joined with strings.Join(args, " ") and executed through sh | 27/10/2026 |
| CVE-2026-116662 | 高危7.5 | Tanium addressed a compression bomb vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116660 | 中危4.3 | Tanium addressed an improper access controls vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116659 | 中危4.3 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116658 | 中危6.5 | Tanium addressed a denial of service vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116657 | 中危5.3 | Tanium addressed a denial of service vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116656 | 高危7.5 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116649 | 高危7.1 | Tanium addressed an improper output sanitization vulnerability in Enforce. | 27/10/2026 |
| CVE-2026-116647 | 高危7.1 | Tanium addressed an improper output sanitization vulnerability in Comply. | 27/10/2026 |
| CVE-2026-108333 | 低危2.5 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | 27/10/2026 |
| CVE-2026-108332 | 中危6.3 | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | 27/10/2026 |
| CVE-2026-108331 | 低危3.3 | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | 27/10/2026 |
| CVE-2026-108330 | 低危3.6 | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | 27/10/2026 |
| CVE-2026-108329 | 高危8.8 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | 27/10/2026 |
| CVE-2026-108328 | 中危4.2 | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | 27/10/2026 |