CVE Find is a real-time vulnerability database indexing 420 263 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 2891 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-123786 |
2026-11-06 15h17 +00:00 |
Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace mem... Server-Side Request Forgery - SSRF |
8.5 |
High |
|
CVE-2026-123783 |
2026-11-06 15h17 +00:00 |
Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to ex... |
8.8 |
High |
|
CVE-2026-123621 |
2026-11-06 15h17 +00:00 |
Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows r... Directory Traversal |
8.8 |
High |
|
CVE-2026-123491 |
2026-11-06 15h17 +00:00 |
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in Gra... SQL Injection |
8.2 |
High |
|
CVE-2026-123490 |
2026-11-06 15h17 +00:00 |
Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerability because getOwners(... |
8.8 |
High |
|
CVE-2026-123488 |
2026-11-06 15h17 +00:00 |
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vuln... SQL Injection |
9.8 |
Critical |
|
CVE-2026-112340 |
2026-11-06 15h17 +00:00 |
Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that ... Authorization problems |
8.2 |
High |
|
CVE-2026-59105 |
2026-11-06 14h09 +00:00 |
Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin... |
9.3 |
Critical |
|
CVE-2026-116624 |
2026-11-06 12h17 +00:00 |
The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versi... Improper Privilege Management |
8.8 |
High |
|
CVE-2026-114630 |
2026-11-06 12h17 +00:00 |
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitr... Directory Traversal |
9.1 |
Critical |