CVE Find is a real-time vulnerability database indexing 417 966 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3587 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-119085 |
2026-11-02 18h18 +00:00 |
Improper neutralization of special elements used in a template engine in the publishing component of... |
8.8 |
High |
|
CVE-2026-105769 |
2026-11-02 17h17 +00:00 |
kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manag... |
9.3 |
Critical |
|
CVE-2026-88811 |
2026-11-02 16h48 +00:00 |
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials ... |
9.1 |
Critical |
|
CVE-2026-77880 |
2026-11-02 16h17 +00:00 |
Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability ... OS Command Injection |
8.4 |
High |
|
CVE-2026-77877 |
2026-11-02 16h17 +00:00 |
Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability... Authorization problems |
8.4 |
High |
|
CVE-2026-77876 |
2026-11-02 16h17 +00:00 |
Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability ... OS Command Injection |
9.8 |
Critical |
|
CVE-2026-109142 |
2026-11-02 16h17 +00:00 |
When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS me... Authorization problems |
8.4 |
High |
|
CVE-2026-109141 |
2026-11-02 16h17 +00:00 |
The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission... Authorization problems |
8.4 |
High |
|
CVE-2026-109140 |
2026-11-02 16h17 +00:00 |
The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter... |
8.4 |
High |
|
CVE-2026-104080 |
2026-11-02 16h17 +00:00 |
Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability ... OS Command Injection |
8.4 |
High |