CVE Find is a real-time vulnerability database indexing 407 752 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 4941 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-91881 |
2026-10-14 16h17 +00:00 |
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Valid... Authorization problems |
9 |
Critical |
|
CVE-2026-89067 |
2026-10-14 16h17 +00:00 |
Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. ... |
8.8 |
High |
|
CVE-2026-87093 |
2026-10-14 16h17 +00:00 |
Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. Th... |
8.8 |
High |
|
CVE-2026-86002 |
2026-10-14 16h17 +00:00 |
Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-l... |
9 |
Critical |
|
CVE-2026-102695 |
2026-10-14 16h17 +00:00 |
OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.... |
8.2 |
High |
|
CVE-2026-91184 |
2026-10-14 15h17 +00:00 |
Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spe... |
8.8 |
High |
|
CVE-2026-71184 |
2026-10-14 15h17 +00:00 |
Gitea's pull request review notifier does not attach the pull request to the Actions notification, s... Authorization problems |
8.8 |
High |
|
CVE-2026-59774 |
2026-10-14 15h17 +00:00 |
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endp... Directory Traversal |
9.8 |
Critical |
|
CVE-2026-110650 |
2026-10-14 15h17 +00:00 |
The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_... OS Command Injection |
9.8 |
Critical |
|
CVE-2026-110649 |
2026-10-14 15h17 +00:00 |
Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execut... OS Command Injection |
9.8 |
Critical |