CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/10/2026 |
| CVE-2026-108310 | 中危5.3 | Tanium addressed a denial of service vulnerability in Tanium Server. | 27/10/2026 |
| CVE-2026-108309 | 中危5.5 | Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. | 27/10/2026 |
| CVE-2026-108308 | 中危6.5 | Tanium addressed a SQL injection vulnerability in Patch. | 27/10/2026 |
| CVE-2026-108307 | 高危7.8 | Tanium addressed a heap-based buffer overflow vulnerability in Index. | 27/10/2026 |
| CVE-2026-108306 | 高危7.8 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 27/10/2026 |
| CVE-2026-108305 | 高危7.8 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 27/10/2026 |
| CVE-2026-108304 | 高危7.8 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 27/10/2026 |
| CVE-2026-108303 | 高危8.8 | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | 27/10/2026 |
| CVE-2026-108302 | 中危4.3 | Tanium addressed an improper access controls vulnerability in Comply. | 27/10/2026 |
| CVE-2026-108301 | 中危6.0 | Tanium addressed an improper access controls vulnerability in Comply. | 27/10/2026 |
| CVE-2026-102816 | 中危5.3 | An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.
Successful exploitation may cause wireless connect | 27/10/2026 |
| CVE-2026-102815 | 中危6.9 | An
operating-system command injection vulnerability exists in the tmpServer
service of TP-Link RE305 V3. The service runs with root privileges and listens
on the local loopback interface. A local attacker with access to a
low-privileged process on the device may submit a crafted request to the TDDPv1
service and execut | 27/10/2026 |
| CVE-2026-102814 | 高危8.7 | An
authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305
V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an
unauthenticated attacker on the same local network to forge protocol packets
and access privileged TDDP operations, including functionality that can lead to
oper | 27/10/2026 |
| CVE-2026-102813 | 中危6.1 | An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or l | 27/10/2026 |
| CVE-2026-102812 | 中危6.9 | A hard-coded
cryptographic key vulnerability exists in the user-configuration backup
mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and
initialization vector are embedded in the firmware configuration-management
component. An attacker who obtains an affected configuration backup file may
extract th | 27/10/2026 |