Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
Loading…
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP chainguard CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic HONA Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer RES Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx Westell WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
378 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock Airoha AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Infoblox Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-107607 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-107606 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-107605 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-65200 2026-10-13Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-h…
-
CVE-2026-65199 2026-10-13Huawei openUBMC low-privilege SNMP to administrator privilege escalation
-
CVE-2026-65198 2026-10-13Huawei Default SNMPv3 USM key
-
CVE-2026-65197 2026-10-13H3C G3/G5 HDM Firmware Verification Key Replacement
-
CVE-2026-12656 2026-10-131732E ArmorBlock® - Multiple Vulnerabilities
-
CVE-2026-12655 2026-10-131732E ArmorBlock® - Multiple Vulnerabilities
-
CVE-2026-0893 2026-10-13Uncleared Password Keystrokes Vulnerability
-
CVE-2026-63316 2026-10-13SQL Injection in Payload CMS
-
CVE-2026-89309 2026-10-13n/a
-
CVE-2026-103316 2026-10-13The macOS version of the DigiD app is not signed with Hardened Runtime
-
CVE-2026-103903 2026-10-12MikroTik RouterOS WinBox split-principal authentication bypass allows…
-
CVE-2026-103902 2026-10-12DigiDoc improper signature verification
-
CVE-2026-103663 2026-10-08Path Traversal leading to Remote Code Execution in Ollama
-
CVE-2026-107278 2026-10-07MISP Object Sync Drops Objects and Attributes When Description Is Empty
-
CVE-2026-107276 2026-10-07MISP Email OTP Race Condition Allows One-Time Password to Be Consumed…
-
CVE-2026-33586 2026-10-07Authenticated SMTP Sender Address Forgery
-
CVE-2026-107180 2026-10-07MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on…
-
CVE-2026-102554 2026-10-09Denial of Service via Eager Array Allocation During Deserialization i…
-
CVE-2026-95702 2026-10-09Code Execution in Host Sentry Process via Double Free in gVisor VFS M…
-
CVE-2026-97032 2026-10-08HTTP/2 server crash due to HPACK encoder race in net/http
-
CVE-2026-94439 2026-10-08HTTP/1 server connection desynchronization after 2xx CONNECT response…
-
CVE-2026-78663 2026-10-08Double flow control refund on HTTP/2 server streams in net/http
-
CVE-2026-78669 2026-10-08Excessive CPU consumption from repeated initial window changes in net/http
-
CVE-2026-78660 2026-10-08HTTP/2 transport accepts malformed framing-related headers in net/http
-
CVE-2026-78667 2026-10-08Lack of limit on size of parsed Range headers in net/http
-
CVE-2026-94440 2026-10-08Memory limit bypass when parsing MIME headers in net/textproto, mime/…
-
CVE-2026-97031 2026-10-08Reject malformed ECH outer extension references in crypto/tls
-
CVE-2026-107607 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-107606 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-107605 2026-10-13Missing authentication for critical function in Swann Communications …
-
CVE-2026-65200 2026-10-13Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-h…
-
CVE-2026-65199 2026-10-13Huawei openUBMC low-privilege SNMP to administrator privilege escalation
-
CVE-2026-65198 2026-10-13Huawei Default SNMPv3 USM key
-
CVE-2026-65197 2026-10-13H3C G3/G5 HDM Firmware Verification Key Replacement
-
CVE-2026-12656 2026-10-131732E ArmorBlock® - Multiple Vulnerabilities
-
CVE-2026-12655 2026-10-131732E ArmorBlock® - Multiple Vulnerabilities
-
CVE-2026-0893 2026-10-13Uncleared Password Keystrokes Vulnerability
-
CVE-2026-96535 2026-10-13Cross-Site Scripting in the YouMind web application
-
CVE-2026-4264 2026-10-09Reflected Cross-Site Scripting in BeeTienda eCommerce platform
-
CVE-2026-4894 2026-10-08Authentication bypass in multiple products from Frappe Technologies
-
CVE-2026-12260 2026-10-08SQL injection in the NetBoard CRM demo platform
-
CVE-2026-92533 2026-10-07Path Traversal in BugTracker.NET
-
CVE-2026-92532 2026-10-07Unrestricted Upload of File with Dangerous Type in BugTracker.NET
-
CVE-2026-92531 2026-10-07Improper Neutralization of Special Elements used in an OS Command in …
-
CVE-2026-5703 2026-10-07Path Traversal in Satel Iberia SenNet Datalogger Serie 200
-
CVE-2026-103831 2026-10-06Insecure deserialization in the TrueLayer Magento 2 plugin
-
CVE-2026-4889 2026-10-06SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies
-
CVE-2026-101020 2026-10-13An incorrect permission assignment for critical resource issue exists…
-
CVE-2026-92862 2026-10-08The Android application "Ticket Ryutsu Center" improperly handles cus…
-
CVE-2026-92861 2026-10-08The Android application "Ticket Ryutsu Center" contains hard-coded cr…
-
CVE-2026-103668 2026-10-07An SQL Injection vulnerability exists in the Site Search function of …
-
CVE-2026-96408 2026-10-07A code injection vulnerability exists in the upgrade script of Movabl…
-
CVE-2026-100727 2026-10-05An improper access control vulnerability exists in GROWI, which allow…
-
CVE-2026-78249 2026-10-01A path traversal vulnerability exists in the web management interface…
-
CVE-2026-82824 2026-10-01Path traversal may allow arbitrary files to be viewed, created, modif…
-
CVE-2026-82825 2026-10-01Missing proper authentication for critical APIs may allow sensitive i…
-
CVE-2026-82826 2026-10-01Authentication information or sensitive data may be intercepted in transit
-
CVE-2026-100128 2026-10-13Bridge | Out-of-bounds Write (CWE-787)
-
CVE-2026-100129 2026-10-13Bridge | Out-of-bounds Write (CWE-787)
-
CVE-2026-100126 2026-10-13Bridge | Out-of-bounds Read (CWE-125)
-
CVE-2026-100127 2026-10-13Bridge | Out-of-bounds Write (CWE-787)
-
CVE-2026-94520 2026-10-13Microsoft SQL Server Denial of Service Vulnerability
-
CVE-2026-94512 2026-10-13SQL Server Remote Code Execution Vulnerability
-
CVE-2026-88089 2026-10-13Microsoft SQL Server Remote Code Execution Vulnerability
-
CVE-2026-88085 2026-10-13Microsoft SQL Server Elevation of Privilege Vulnerability
-
CVE-2026-88088 2026-10-13Microsoft SQL Server Elevation of Privilege Vulnerability
-
CVE-2026-85919 2026-10-13Microsoft SQL Server Elevation of Privilege Vulnerability
-
CVE-2026-110036 2026-10-13Device-mapper-persistent-data: device-mapper-persistent-data: denial …
-
CVE-2026-88834 2026-10-13Busybox: busybox: httpd user existence oracle in non-default shadow-d…
-
CVE-2026-88838 2026-10-13Busybox: busybox: non-root mount option filter bypass allows clearing…
-
CVE-2026-88833 2026-10-13Busybox: busybox: udhcpc integer underflow in dhcp packet length calc…
-
CVE-2026-105460 2026-10-13Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated…
-
CVE-2026-107832 2026-10-13fastify vulnerable to header validation bypass via case-sensitive pro…
-
CVE-2026-109976 2026-10-13Clevis: clevis: integer underflow in pkcs#11 data socket handler cras…
-
CVE-2026-109833 2026-10-13Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vn…
-
CVE-2026-109832 2026-10-13Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e…
-
CVE-2026-109854 2026-10-13M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding
-
CVE-2026-18397 2026-10-01SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
-
CVE-2026-18825 2026-09-28Origin validation error in the connect-xcors npm package
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
46
GNAs registered
3
GNA feeds pulled
455
Publications pulled
309
Published here (GNA-1)
-
GCVE-1-2026-20215 2026-10-07MISP Object Sync Drops Objects and Attributes When Description Is Empty
-
GCVE-1-2026-20315 2026-10-07MISP Email OTP Race Condition Allows One-Time Password to Be Consumed…
-
GCVE-1-2026-20116 2026-10-07MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on…
-
GCVE-1-2026-20264 2026-10-07MISP Correlation Engine Fails to Refresh When Event Distribution or S…
-
GCVE-1-2026-20117 2026-10-06MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Ser…
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
-
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
-
Hardcoded credentials in Yarbo robot firmware
-
Persistent undocumented backdoor access in Yarbo robot
-
NSA Ghidra Auto-Analysis Annotation Command Execution
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0440 2026-10-02SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload i…
-
GCVE-1988-2026-0439 2026-10-02usvg SVGZ decompression bomb in `Tree::from_data`
-
GCVE-1988-2026-0438 2026-10-02[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)
-
GCVE-1988-2026-0437 2026-10-02[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
-
GCVE-1988-2026-0436 2026-10-02[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
309 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
9 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
445 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-129 |
Edgewatch
Occentus Network SL
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |
Latest records imported from the sources outside the CVE and GCVE programs — GitHub advisories, PyPI, OSV ecosystems, national databases, CSAF providers… — grouped as the recent vulnerabilities page lists them. The CVE Program mirrors are covered per root in the CNA Roots tab, the GNA feeds in the GNAs tab.
No source matches this filter.
Community & Open Source Databases
5 sources
GitHub 🐙
GitHub Advisory Database.-
GHSA-4J9V-H7PP-725H 2026-10-13
-
GHSA-MF4X-W4GH-4656 2026-10-13
-
GHSA-PFWJ-2F93-RF42 2026-10-13
-
GHSA-C27M-942F-RCFH 2026-10-13
-
GHSA-W6WH-P4G7-MPJ2 2026-10-13
PySec 🐍
Advisory database for Python packages published on pypi.org.-
PYSEC-2026-4199 2026-10-05
-
PYSEC-2026-4198 2026-10-05
-
PYSEC-2026-4197 2026-10-05
-
PYSEC-2026-4196 2026-10-05
-
PYSEC-2026-4195 2026-10-05
GSD
Global Security Database of the Cloud Security Alliance (archived).-
GSD-2024-33884 2024-04-29
-
GSD-2024-33901 2024-04-29
-
GSD-2024-33887 2024-04-29
-
GSD-2024-33895 2024-04-29
-
GSD-2024-33894 2024-04-29
OpenSSF Malicious Packages ☠
OpenSSF database of reports about malicious open source packages.-
MAL-2026-17862 2026-10-13
-
MAL-2026-17861 2026-10-13
-
MAL-2026-17860 2026-10-13
-
MAL-2026-17859 2026-10-13
-
MAL-2026-17858 2026-10-13
-
MOKSHA-2026-0089 2026-04-24Raw kbps Value Exposure in Private Xenstore via VIF.qos_algorithm_params
-
MOKSHA-2026-0088 2026-04-24Int64 Overflow in bytes_per_interval via VIF.qos_algorithm_params
-
MOKSHA-2026-0087 2026-04-24QEMU Device Model Selection via VM.platform device-model (Limited by …
-
MOKSHA-2026-0086 2026-04-24License Expiry Manipulation via Host.license_params expiry
-
MOKSHA-2026-0085 2026-04-24Feature Restriction Bypass via Host.license_params restrict_* Keys
National Vulnerability Databases
5 sources
CERT FR Alerte 🇫🇷
French national and governmental CERT.-
CERTFR-2026-ALE-012 2026-10-12
-
CERTFR-2026-ALE-011 2026-09-28
-
CERTFR-2026-ALE-010 2026-09-10
-
CERTFR-2026-ALE-009 2026-09-02
-
CERTFR-2026-ALE-008 2026-07-22
CERT FR Avis 🇫🇷
French national and governmental CERT.-
CERTFR-2026-AVI-1295 2026-10-13
-
CERTFR-2026-AVI-1294 2026-10-12
-
CERTFR-2026-AVI-1293 2026-10-12
-
CERTFR-2026-AVI-1292 2026-10-12
-
CERTFR-2026-AVI-1291 2026-10-09
JVNDB 🇯🇵
The database of vulnerability countermeasure information published on JVN.-
JVNDB-2026-000143 2026-10-13
-
JVNDB-2026-000146 2026-10-07
-
JVNDB-2026-000145 2026-10-06
-
JVNDB-2026-000142 2026-10-06
-
JVNDB-2026-000144 2026-10-05
CNVD 🇨🇳
China National Vulnerability Database.-
CNVD-2026-39828 2026-10-09
-
CNVD-2026-39827 2026-10-09
-
CNVD-2026-39826 2026-10-09
-
CNVD-2026-39825 2026-10-09
-
CNVD-2026-39824 2026-10-09
FSTEC 🇷🇺
Federal Service for Technical and Export Control of Russia.-
BDU:2026-16208 2026-10-12
-
BDU:2026-16207 2026-10-12
-
BDU:2026-16206 2026-10-12
-
BDU:2026-16205 2026-10-12
-
BDU:2026-16204 2026-10-12
CSAF Databases
52 sources
CSAF ABB
ABB cyber security advisories in CSAF format.-
3ADR011566 2026-09-28ABB Automation Builder - Deserialization of untrusted data
-
3ADR011565 2026-09-28AC500 V3 - Invalid type usage in visualization
-
2NGA003179 2026-09-28ABB Protection and Control IED Manager (PCM600) - PCM600 Project Impo…
-
2NGA003170 2026-09-28ABB Protection and Control IED Manager PCM600 Scheduler Service Privi…
-
9AKK108473A3188 2026-09-22Mint Workbench I Path traversal Vulnerability
CSAF CERT-Bund 🇩🇪
Advisories of the German federal CERT (BSI CERT-Bund) in CSAF format.-
WID-SEC-W-2026-3867 2026-10-11ImageMagick: Mehrere Schwachstellen
-
WID-SEC-W-2026-3813 2026-10-07IBM Security Verify Access: Mehrere Schwachstellen
-
WID-SEC-W-2026-3801 2026-10-07Checkmk: Schwachstelle ermöglicht Privilegieneskalation
-
WID-SEC-W-2026-3783 2026-10-06ILIAS: Mehrere Schwachstellen
-
WID-SEC-W-2026-3757 2026-10-06SonicWall SMA1000: Mehrere Schwachstellen
CSAF CISA 🇺🇸
CISA ICS advisories in CSAF format.-
ICSA-26-280-01 2026-10-07CISA Malcolm
-
ICSA-26-279-02 2026-10-06Savannah lwIP SMTP client
-
ICSA-26-279-01 2026-10-06Johnson Controls EasyIO FG
-
ICSA-26-274-06 2026-10-01Meari IoT Cloud Platform OpenAPI Service
-
ICSA-26-274-05 2026-10-01Johnson Controls EasyIO Neo Series EC and CW Controllers
CSAF CISCO
Cisco PSIRT security advisories in CSAF format.-
CISCO-SA-SSM-ACCESS-NTTB2DHE 2026-10-07Cisco License (Smart Software Manager) On-Prem Vulnerabilities
-
CISCO-SA-NXOS-NSCPDOS-SNDERKC7 2026-10-07Cisco NX-OS Software Control Plane Denial of Service Vulnerability
-
CISCO-SA-NXOS-MPPE-DHKZAFGB 2026-10-07Cisco NX-OS Software Python Sandbox Escape Vulnerability
-
CISCO-SA-NGOAM-RCE-LWKQ4BU 2026-10-07Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution…
-
CISCO-SA-NAPI-RCE-R2SHWU2J 2026-10-07Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
CSAF Microsoft 🪟
Microsoft Security Response Center advisories in CSAF format.-
MSRC_CVE-2026-93433 2026-10-13Libstoragemgmt: libstoragemgmt: denial of service via stack buffer ov…
-
MSRC_CVE-2026-108266 2026-10-13Privasys rustls fork: RA-TLS challenge mode did not bind attestation …
-
MSRC_CVE-2026-102010 2026-10-13Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via u…
-
MSRC_CVE-2026-95619 2026-10-13Gcc: libstdc++ integer overflow in `new` operator
-
MSRC_CVE-2026-108267 2026-10-13Privasys Go fork: RA-TLS challenge mode did not bind attestation evid…
CSAF NCSC-NL 🇳🇱
Advisories of the Dutch National Cyber Security Centre (NCSC-NL) in CSAF format.-
NCSC-2026-0426 2026-10-13Kwetsbaarheden verholpen in Microsoft Developer Tools
-
NCSC-2026-0425 2026-10-13Kwetsbaarheden verholpen in Microsoft System Center
-
NCSC-2026-0424 2026-10-13Kwetsbaarheden verholpen in Microsoft Dynamics
-
NCSC-2026-0423 2026-10-13Kwetsbaarheden verholpen in Microsoft Windows
-
NCSC-2026-0422 2026-10-13Kwetsbaarheden verholpen in Microsoft Office
CSAF Nozomi Networks
Nozomi Networks security advisories in CSAF format.-
NN-2026:20-01 2026-09-08Disabled and non-configurable certificate/host key validation in Smar…
-
NN-2026:19-01 2026-09-08Incorrect authorization in Credentials Manager in Guardian/CMC before…
-
NN-2026:18-01 2026-09-08Cross-site request forgery in the Guardian/CMC login before 26.3.0
-
NN-2026:17-01 2026-09-08Incorrect authorization in Smart Polling configuration in Guardian/CM…
-
NN-2026:16-01 2026-09-08Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CSAF OpenSuse 🦎
openSUSE security advisories in CSAF format.-
RHSA-2026:80687 2026-10-12security update for flatpak
-
RHSA-2026:80675 2026-10-12security update for libxml2
-
RHSA-2026:80664 2026-10-12security update for environment-modules
-
RHSA-2026:80663 2026-10-12Red Hat Security Advisory: tftp security update
-
RHSA-2026:80605 2026-10-12security update for cjose
CSAF Open-Xchange
Open-Xchange security advisories in CSAF format.-
OXDC-ADV-2026-0002 2026-05-05OX Dovecot Security Advisory OXDC-ADV-2026-0002
-
OXDC-ADV-2026-0001 2026-03-27OX Dovecot Security Advisory OXDC-ADV-2026-0001
-
OXDC-ADV-2025-0001 2025-10-31OX Dovecot Pro Security Advisory OXDC-ADV-2025-0001
-
OXAS-ADV-2025-0003 2025-09-23OX App Suite Security Advisory OXAS-ADV-2025-0003
-
OXAS-ADV-2025-0002 2025-08-11OX App Suite Security Advisory OXAS-ADV-2025-0002
CSAF Red Hat 🎩
Red Hat Product Security advisories in CSAF format.-
RHSA-2026:82346 2026-10-13Red Hat Security Advisory: opentelemetry-collector security update
-
RHSA-2026:82326 2026-10-13Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 and kpatch-pa…
-
RHSA-2026:82316 2026-10-13Red Hat Security Advisory: Red Hat Service Interconnect 2.2.3 Release…
-
RHSA-2026:82280 2026-10-13Red Hat Security Advisory: tftp security update
-
RHSA-2026:79153 2026-10-13Red Hat Security Advisory: OpenShift Container Platform 4.21.37 bug f…
CSAF Schneider Electric
Schneider Electric security notifications in CSAF format.-
SEVD-2026-286-02 2026-10-13SAGE RTU
-
SEVD-2026-286-01 2026-10-13Use of Unmaintained Third-Party Components vulnerability on Pro-face …
-
SEVD-2026-251-04 2026-09-08Incorrect Implementation of Authentication Algorithm vulnerability on…
-
SEVD-2026-251-02 2026-09-08Improper Neutralization of Special Elements used in an OS Command vul…
-
SEVD-2026-251-01 2026-09-08Multiple Vulnerabilities on EcoStruxure IT Data Center Expert
CSAF Sick
SICK PSIRT security advisories in CSAF format.-
SCA-2026-0013 2026-09-11Vulnerabilities Affecting SICK CorivaEngine
-
SCA-2026-0012 2026-09-11Vulnerability Affecting Sentio Creator Extension 'Device Manager'
-
SCA-2026-0011 2026-09-04Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SIC…
-
SCA-2026-0010 2026-08-24AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx …
-
SCA-2026-0009 2026-07-16Vulnerability in several Endress+Hauser products
CSAF Siemens
Siemens ProductCERT security advisories in CSAF format.-
SSA-968435 2026-10-13SSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher
-
SSA-911336 2026-10-13SSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGED…
-
SSA-832641 2026-10-13SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge…
-
SSA-784472 2026-10-13SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of …
-
SSA-765416 2026-10-13SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Sta…
CSAF Suse 🦎
SUSE security advisories in CSAF format.-
SUSE-SU-2026:4637-1 2026-10-13Security update for gcc48
-
SUSE-SU-2026:4636-1 2026-10-13Security update for xorg-x11-server
-
SUSE-SU-2026:4635-1 2026-10-13Security update for bind
-
SUSE-SU-2026:4633-1 2026-10-13Security update for python
-
SUSE-SU-2026:4626-1 2026-10-12Security update for python-Django
CERT@VDE
Advisories coordinated by CERT@VDE for industrial automation vendors, in CSAF format.-
VDE-2025-028 2025-08-05Draeger: ICMHelper is vulnerable to a privilege escalation
-
VDE-2019-012 2019-06-04TECSON/GOK: Improper Authentication and Access Control on multiple devices
-
VDE-2026-027 2026-09-16Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 …
-
VDE-2025-056 2026-08-12Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext…
-
VDE-2026-008 2026-07-30Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SE…
-
VDE-2026-060 2026-06-03Phoenix Contact: Unauthenticated log download vulnerability in the fi…
-
VDE-2026-050 2026-05-27Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and…
-
VDE-2025-085 2025-09-10Welotec: Path Traversal in SmartEMS Upload Handling
-
VDE-2025-076 2025-08-26Welotec: Hard-coded JWT secret in egOS WebGUI
-
VDE-2024-043 2024-08-22Welotec: Multiple products are vulnerable to regreSSHion
-
VDE-2024-023 2024-04-23Welotec: Clickjacking Vulnerability in WebUI
-
VDE-2024-009 2024-04-09Welotec: Two vulnerabilities in TK500v1 router series
-
ADVISORY2026-12_VDE-2026-097 2026-09-30CODESYS Control Runtime - Improper Synchronization in Monitoring
-
ADVISORY2026-06_VDE-2026-041 2026-07-29CODESYS PROFINET Controller - Out-of-bounds Write
-
ADVISORY2026-04_VDE-2026-040 2026-07-13CODESYS EtherNetIP - Improper timeout handling
-
ADVISORY2026-10_VDE-2026-057 2026-05-26CODESYS Control - Out-of-bounds Write
-
ADVISORY2026-09_VDE-2026-055 2026-05-26CODESYS Development System - Incorrect Default Permissions
-
VDE-2025-067 2025-08-10Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
-
VDE-2025-024 2025-05-13Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2025-032 2025-05-06Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site…
-
VDE-2025-031 2025-04-28Wiesemann & Theis: Multiple products from Wiesemann & Theis support d…
-
VDE-2024-018 2024-02-28Wiesemann & Theis: Multiple products prone to unquoted search path
-
VDE-2026-068 2026-06-23MB connect line: Authenticated unintended access to critical program …
-
VDE-2026-054 2026-05-27MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
-
VDE-2026-044 2026-05-27MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-030 2026-04-02MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-024 2026-03-23MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
-
VDE-2026-070 2026-06-23Helmholz: Authenticated unintended access to critical program paramet…
-
VDE-2026-059 2026-05-27Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
-
VDE-2026-058 2026-05-21Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
-
VDE-2026-015 2026-04-21Helmholz: Use of a Broken or Risky Cryptographic Algorithm
-
VDE-2026-043 2026-04-13Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
-
FSA-202601 2026-02-26Several CODESYS vulnerabilities in Festo Automation Suite
-
FSA-202406 2024-12-03Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
-
FSA-202405 2024-09-09Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products co…
-
FSA-202402 2024-02-27Several Vulnerabilities in MES PC (Windows 10)
-
FSA-202401 2024-01-30Festo: Multiple products contain CoDe16 vulnerability
-
VDE-2026-014 2026-09-16Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vu…
-
VDE-2025-011 2025-05-26PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by …
-
VDE-2025-002 2025-02-25PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
-
VDE-2024-065 2024-11-26PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
-
VDE-2024-063 2024-10-08PEPPERL+FUCHS: Multiple products are affected by regreSSHion
-
PPSA-2026-003 2026-08-04Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
-
PPSA-2026-002 2026-04-23Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2026-001 2026-02-02Pilz: Multiple Vulnerabilities affecting the PIT User Authentication …
-
PPSA-2025-004 2025-10-20Pilz: Vulnerability affecting PASvisu Runtime
-
PPSA-2025-003 2025-07-01Pilz: Authentication Bypass in IndustrialPI Webstatus
-
VDE-2025-102 2026-10-01WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
-
VDE-2025-081 2026-10-01WAGO: Multiple PLCs and Communication Components are Affected by mult…
-
VDE-2026-031 2026-07-13WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
-
VDE-2024-008 2026-04-08Wago: Vulnerability in WBM through Open VPN
-
VDE-2026-021 2026-03-30WAGO: Multiple Vulnerabilities in WAGO VC Hub
-
VDE-2026-005 2026-05-06ifm: Multiple Vulnerabilities in CR3171
-
VDE-2024-061 2025-06-30ifm: Improper Access Control vulnerability
-
VDE-2024-012 2024-07-09ifm: Vulnerabilities in ifm AC14 firmware
-
VDE-2024-028 2024-05-06ifm moneo password reset can be exploited
-
VDE-2022-050 2022-12-12IFM: weak password recovery vulnerability in moneo appliance
-
VDE-2025-092 2026-01-27Beckhoff: Privilege escalation and information leak via Beckhoff Devi…
-
VDE-2025-106 2026-01-26Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
-
VDE-2025-075 2025-09-09Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
-
VDE-2024-064 2024-10-31Beckhoff: Local command injection via TwinCAT Package Manager
-
VDE-2021-008 2024-10-21Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
-
VDE-2026-091 2026-09-15TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
-
VDE-2026-007 2026-02-23TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
-
VDE-2025-078 2025-08-25TRUMPF: Remote support uses an outdated encryption algorithm
-
VDE-2024-004 2025-04-22TRUMPF: Multiple products affected by log4net vulnerability
-
VDE-2024-040 2024-06-25Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerab…
-
VDE-2026-089 2026-09-21Lenze: VPN Client Remote Code Execution in combination with Lenze x50…
-
VDE-2026-077 2026-07-27Lenze: Incorrect signature validation in the enable SSH routine
-
VDE-2025-043 2025-06-25Lenze: PLC Designer V4 with insecure storage of sensitive information
-
VDE-2025-042 2025-05-27Lenze: VPN Client Privilege Escalation in combination with Lenze x500…
-
VDE-2024-053 2024-09-03Lenze: Install Directory with insufficient permissions
-
VDE-2026-028 2026-09-16Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple …
-
VDE-2022-029 2022-09-26Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.0
-
VDE-2025-047 2025-06-10AUMA: Incorrect delivery status of the Bluetooth configuration
-
VDE-2025-026 2025-05-12AUMA Riester: Buffer overflow in service telegram
-
VDE-2023-028 2023-08-07AUMA: SIMA Master Station affected by WRECK vulnerability
-
VDE-2023-027 2023-08-07AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
-
VDE-2022-032 2022-08-09AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
-
VDE-2026-109 2026-10-13Bender Customer&Partner Platform Vulnerability - Privilege Escalation
-
VDE-2025-084 2025-09-08Bender Charge Controller Vulnerability - Unsecure Communication
-
VDE-2025-061 2025-09-08Bender Charge Controller Vulnerability - Disclosure Of Stored Credent…
-
VDE-2021-047 2022-04-26Bender/ebee: Multiple Charge Controller Vulnerabilities
-
VDE-2020-043 2020-10-16Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vuln…
-
VDE-2026-065 2026-08-03Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package…
-
VDE-2026-045 2026-07-16Endress+Hauser: Multiple products affected by SopasET interface vulne…
-
VDE-2026-032 2026-04-21Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW
-
VDE-2026-003 2026-03-31Endress+Hauser: Multiple products prone to multiple vulnerabilities i…
-
VDE-2026-002 2026-03-02Endress+Hauser: buffer overflow in glibc ld.so leading to privilege e…
-
VDE-2026-078 2026-08-20Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
-
VDE-2025-030 2025-07-07Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerab…
-
VDE-2023-049 2023-12-11Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
-
VDE-2023-038 2023-09-21Frauscher: Multiple Vulnerabilities in FDS101
-
VDE-2023-011 2023-07-05Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vul…
-
VDE-2022-052 2022-11-21Miele: Vulnerability in ease2pay cloud service used by appWash
-
VDE-2022-015 2022-04-27Miele: Security vulnerability in Benchmark Programming Tool
-
VDE-2020-024 2020-07-08Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communicatio…
-
VDE-2019-010 2019-05-20Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
-
VDE-2026-083 2026-08-25Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are af…
-
VDE-2026-085 2026-07-28Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
-
VDE-2026-081 2026-07-28Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by…
-
VDE-2025-096 2026-03-10Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Ener…
-
VDE-2025-052 2025-06-11Weidmueller: Security routers IE-SR-2TX are affected by multiple vuln…
-
VDE-2025-066 2025-08-27SMA: Directory Traversal in Sunny Boy
-
VDE-2025-050 2025-08-19SMA: Sunny Portal limited disclosure of personal data of registered u…
-
VDE-2025-010 2025-05-13SMA: Sunny Portal demo system privilege escalation
-
VDE-2025-012 2025-02-26SMA: Sunny Portal Remote Code Execution
-
VDE-2024-075 2025-01-27SMA: Sunny Webbox clickjacking vulnerability
-
VDE-2024-013 2024-02-13HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
-
VDE-2022-059 2023-01-16HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
-
VDE-2026-108 2026-10-06Murrelektronik: Missing Authentication in aas-edge-client Reference I…
-
VDE-2026-061 2026-08-24Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' functio…
-
VDE-2026-063 2026-07-14Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
-
VDE-2026-062 2026-07-14Several Murrelektronik Devices use Default SNMP Community Names
-
VDE-2025-091 2025-10-14Murrelektronik: Cleartext Transmission of Sensitive Information in IM…
-
VDE-2020-016 2020-05-28SWARCO: Critical Vulnerability in CPU LS4000
-
VDE-2026-076 2026-07-28ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
-
VDE-2025-033 2025-04-14ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC…
-
VDE-2024-016 2024-02-19ADS-TEC Industrial IT: Docker vulnerability affects multiple products
-
VDE-2023-009 2023-05-08ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
-
VDE-2022-061 2023-03-15VARTA: Multiple devices prone to hard-coded credentials
-
VDE-2026-093 2026-09-01SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mec…
-
VDE-2025-060 2025-10-21Sauter: Multiple vulnerabilities in SAUTER modulo 6
-
VDE-2025-079 2026-03-10Janitza: Multiple vulnerabilities in UMG 96RM-E
-
VDE-2025-094 2025-11-24Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
-
VDE-2026-088 2026-08-20METTLER TOLEDO: LabX Standard and Enterprise Report on External Compo…
-
VDE-2026-066 2026-07-14METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
-
VDE-2026-064 2026-06-09METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
-
VDE-2026-053 2026-05-26METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnera…
-
VDE-2026-029 2026-04-23METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances
TIBCO
TIBCO security advisories in CSAF format.-
TIBCO-2023-454 2023-05-23TIBCO Security Advisory TIBCO-2023-454
-
TIBCO-2023-453 2023-05-23TIBCO Security Advisory TIBCO-2023-453
-
TIBCO-2023-460 2023-04-18TIBCO Security Advisory TIBCO-2023-460
-
TIBCO-2023-450 2023-02-22TIBCO Security Advisory TIBCO-2023-450
-
TIBCO-2023-446 2023-02-22TIBCO Security Advisory TIBCO-2023-446
Trend Micro
Trend Micro security bulletins in CSAF format.-
2026-0521-TM-A1-001 2026-05-21ITW SECURITY BULLETIN: Apex One and Vision One and Standard Endpoint …
-
2025-0805-TM-A1-002 2025-08-05ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Man…
-
2025-0627-TM-WF-001 2025-06-27SECURITY BULLETIN: June 2025 for Trend Micro Worry-Free Business Secu…
-
2025-0610-TM-TMEE-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Endpoint Encryption PolicySer…
-
2025-0610-TM-AC-001 2025-06-10CRITICAL SECURITY BULLETIN: Trend Micro Apex Central (June 2025)
-
VDE-2026-048 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Blueto…
-
VDE-2026-047 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS Air products
-
VDE-2026-046 2026-05-04VEGA: Missing Authentication for critical function in VEGAPULS two- a…
-
VDE-2026-016 2026-04-22VEGA: Unsecured Configuration Interface Allows Unauthorized Access Le…
-
HBSA-2025-0003 2026-02-18JBL: DoS vulnerability in Flip 4
-
HBSA-2025-0002 2025-12-10BLE ICM Vulnerability in JBL Headphones
-
HBSA-2025-0001 2025-12-10BLE GATT Service Vulnerability in JBL Headphones
-
VDE-2026-071 2026-06-23JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON …
-
VDE-2026-009 2026-05-26JUMO: Multiple products affected by nodejs vulnerability
-
VDE-2025-086 2025-11-10Jumo: Predictable debug-interface password in variTRON series
-
VDE-2025-098 2026-04-02Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in …
-
VDE-2025-097 2025-11-18METZ CONNECT: Config API – Authentication bypass leads to admin takeo…
OSV Sources
13 sources
OSV AlmaLinux
AlmaLinux security advisories in OSV format.-
ALSA-2026:81613 2026-10-12
-
ALSA-2026:81532 2026-10-12
-
ALSA-2026:81522 2026-10-12
-
ALSA-2026:81518 2026-10-12
-
ALSA-2026:81517 2026-10-12
OSV BellSoft
BellSoft advisories for Alpaquita Linux and its hardened containers, in OSV format.-
BELL-CVE-2026-98385 2026-10-13
-
BELL-CVE-2026-101273 2026-10-12
-
BELL-CVE-2026-98379 2026-10-12
-
BELL-CVE-2026-98384 2026-10-12
-
BELL-CVE-2026-98383 2026-10-12
OSV Haskell λ
Haskell Security Advisory Database (HSEC) in OSV format.-
HSEC-2026-0010 2026-09-29
-
HSEC-2026-0008 2026-06-03
-
HSEC-2026-0007 2026-05-22
-
HSEC-2026-0006 2026-04-08
-
HSEC-2026-0004 2026-03-28
OSV Homebrew 🍺
OSV records for Homebrew formulae patched against known vulnerabilities.-
BREW-VIRTUALENVWRAPPER-CVE-2026-102938 2026-10-13
-
BREW-VIRTUALENVWRAPPER-CVE-2026-102930 2026-10-13
-
BREW-VIRTUALENVWRAPPER-CVE-2026-102925 2026-10-13
-
BREW-PWNTOOLS-CVE-2026-97687 2026-10-13
-
BREW-PARSEDMARC-CVE-2026-104874 2026-10-13
OSV Ocaml 🐫
OCaml security advisories in OSV format.-
OSEC-2026-20 2026-09-10
-
OSEC-2026-19 2026-09-10
-
OSEC-2026-18 2026-09-10
-
OSEC-2026-16 2026-08-20
-
OSEC-2026-17 2026-08-17
OSV openEuler
openEuler security advisories (OESA) in OSV format.-
OESA-2026-4230 2026-09-30
-
OESA-2026-4229 2026-09-30
-
OESA-2026-4228 2026-09-30
-
OESA-2026-4227 2026-09-30
-
OESA-2026-4226 2026-09-30
OSV OSS Fuzz 🧪
Vulnerabilities found by Google OSS-Fuzz, in OSV format.-
OSV-2026-1239 2026-09-06
-
OSV-2026-1235 2026-09-06
-
OSV-2026-1220 2026-08-31
-
OSV-2026-1198 2026-08-25
-
OSV-2026-1196 2026-08-25
OSV Rocky Linux
Rocky Linux security advisories in OSV format, served by the Apollo API.-
RLSA-2026:82280 2026-10-13
-
RLSA-2026:80664 2026-10-13
-
RLSA-2026:80605 2026-10-13
-
RLSA-2026:80498 2026-10-13
-
RLSA-2026:80495 2026-10-13
OSV Rustsec 🦀
RustSec advisory database for Rust crates.-
RUSTSEC-2026-0344 2026-10-11
-
RUSTSEC-2026-0337 2026-10-09
-
RUSTSEC-2026-0336 2026-10-09
-
RUSTSEC-2026-0335 2026-10-09
-
RUSTSEC-2026-0333 2026-10-06
OSV Ubuntu
Ubuntu security notices and CVE records in OSV format.-
USN-8924-1 2026-10-13
-
USN-8918-1 2026-10-13
-
USN-8921-1 2026-10-13
-
USN-8920-1 2026-10-13
-
USN-8923-1 2026-10-13
Bitnami VulnDB
Bitnami vulnerability database for the applications it packages.-
BIT-GHOST-2026-105683 2026-10-13
-
BIT-GHOST-2026-105682 2026-10-13
-
BIT-GHOST-2026-105681 2026-10-13
-
BIT-GHOST-2026-105680 2026-10-13
-
BIT-GHOST-2026-105679 2026-10-13
-
CLEANSTART-2026-ZX34882 2026-10-13
-
CLEANSTART-2026-KA88072 2026-10-13
-
CLEANSTART-2026-ML70772 2026-10-13
-
CLEANSTART-2026-SA69441 2026-10-13
-
CLEANSTART-2026-HU64344 2026-10-13
Drupal 💧
Drupal core and contributed project security advisories.-
DRUPAL-CONTRIB-2026-217 2026-10-07
-
DRUPAL-CONTRIB-2026-216 2026-10-07
-
DRUPAL-CONTRIB-2026-215 2026-10-07
-
DRUPAL-CONTRIB-2026-214 2026-10-07
-
DRUPAL-CONTRIB-2026-213 2026-10-07
Specialized Sources
3 sources
Tailscale
Tailscale security bulletins.-
TS-2026-011 2026-08-18
-
TS-2026-010 2026-07-24
-
TS-2026-009 2026-07-13
-
TS-2026-008 2026-07-13
-
TS-2026-007 2026-07-10
AVID 🤖
AI Vulnerability Database of failure reports for AI/ML systems.-
AVID-2023-V028 2023-03-31
-
AVID-2023-V027 2023-03-31
-
AVID-2023-V026 2023-03-31
-
AVID-2023-V016 2023-03-31
-
AVID-2023-V015 2023-03-31
VARIoT 📡
Vulnerability database focused on vulnerabilities in the Internet of Things (IoT) ecosystem.-
VAR-202407-2188 2024-07-23
-
VAR-202406-3119 2024-07-23
-
VAR-202407-1740 2024-07-23
-
VAR-202407-1417 2024-07-23
-
VAR-202407-1103 2024-07-23