Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-9508 |
10 (4.0)
|
Incorrect Permission Assignment for Critical Resource … |
Suprema |
BioStar 2 (server) |
2026-05-29T12:09:02.026Z | 2026-05-29T13:33:31.937Z |
| CVE-2026-9152 |
10 (4.0)
|
Unauthenticated SOAP Endpoint in Altium 365 SearchServ… |
Altium |
Altium 365 |
2026-05-21T00:47:24.365Z | 2026-05-21T12:41:39.633Z |
| CVE-2026-8985 |
10 (4.0)
|
Unauthenticated Command Injection |
Autel |
MaxiCharger Single |
2026-07-21T21:11:25.089Z | 2026-07-22T19:37:37.583Z |
| CVE-2026-8984 |
10 (4.0)
|
Unauthenticated RCE |
Autel |
MaxiCharger Single |
2026-07-21T21:08:49.622Z | 2026-07-22T19:38:02.292Z |
| CVE-2026-8983 |
10 (4.0)
|
Backdoor Authentication Token |
Autel |
MaxiCharger Single |
2026-07-21T21:03:22.675Z | 2026-07-22T19:40:28.831Z |
| CVE-2026-8982 |
10 (4.0)
|
Hard-coded / Backdoor Accounts |
Autel |
MaxiCharger Single |
2026-07-21T21:01:02.360Z | 2026-07-22T19:40:35.197Z |
| CVE-2026-8326 |
10 (4.0)
|
Remote Spark SparkView Path Traversal in RDP Drive Red… |
Remote Spark (https://www.remotespark.com/) |
SparkView |
2026-05-29T11:47:02.652Z | 2026-05-29T13:34:00.474Z |
| CVE-2026-8054 |
10 (4.0)
|
Unauthenticated SQL Injection in dotCMS Publish Audit API |
dotCMS |
dotCMS Core |
2026-05-27T07:55:25.905Z | 2026-05-27T13:40:13.159Z |
| CVE-2026-7411 |
10 (3.1)
|
In Eclipse BaSyx Java Server SDK versions prior t… |
Eclipse Foundation |
Eclipse BaSyx |
2026-05-05T14:07:53.476Z | 2026-05-06T15:25:50.007Z |
| CVE-2026-7312 |
10 (3.1)
|
CWE‑522: Insufficiently Protected Credentials in web s… |
Progress Software |
Sitefinity |
2026-06-02T13:09:06.250Z | 2026-06-03T12:55:14.770Z |
| CVE-2026-6516 |
10 (3.1)
|
Remote Code Execution |
Zohocorp |
ManageEngine ADAudit Plus |
2026-07-23T17:22:26.627Z | 2026-07-23T19:04:33.790Z |
| CVE-2026-64813 |
10 (3.1)
|
In JetBrains IntelliJ IDEA before 2026.2 unauthor… |
JetBrains |
IntelliJ IDEA |
2026-07-23T11:36:59.917Z | 2026-07-23T13:20:50.194Z |
| CVE-2026-64812 |
10 (3.1)
|
In JetBrains IntelliJ IDEA before 2026.2 unauthor… |
JetBrains |
IntelliJ IDEA |
2026-07-23T11:36:59.500Z | 2026-07-23T13:25:14.275Z |
| CVE-2026-63795 |
10 (3.1)
|
9p: avoid putting oldfid in p9_client_walk() error path |
Linux |
Linux |
2026-07-19T12:02:04.069Z | 2026-07-20T13:40:06.613Z |
| CVE-2026-62422 |
10 (3.1)
|
In JetBrains YouTrack before 2026.1.13757, 2025.3… |
JetBrains |
YouTrack |
2026-07-14T10:17:59.267Z | 2026-07-15T04:00:57.907Z |
| CVE-2026-6213 |
10 (4.0)
|
Remote Spark SparkView RCE |
Remote Spark (https://www.remotespark.com/) |
SparkView |
2026-05-08T09:04:24.188Z | 2026-05-11T07:48:23.801Z |
| CVE-2026-61900 |
10 (4.0)
|
Joomla Extension - dj-extensions.com - Unauthenticated… |
dj-extensions.com |
jDownloads extension for Joomla |
2026-07-20T18:34:32.512Z | 2026-07-23T14:58:00.984Z |
| CVE-2026-61447 |
10 (4.0)
10 (3.1)
|
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent |
MervinPraison |
PraisonAI |
2026-07-11T13:01:05.162Z | 2026-07-13T15:21:34.593Z |
| CVE-2026-61424 |
10 (4.0)
|
Joomla Extension - dj-extensions.com - Unauthenticated… |
dj-extensions.com |
DJ-Classifieds extension for Joomla |
2026-07-20T18:34:51.203Z | 2026-07-23T14:58:24.757Z |
| CVE-2026-60644 |
10 (3.1)
|
Vulnerability in the Oracle WebCenter Content pro… |
Oracle Corporation |
Oracle WebCenter Content |
2026-07-21T21:36:20.315Z | 2026-07-21T21:36:20.315Z |
| CVE-2026-60389 |
10 (3.1)
|
Vulnerability in the Service Delivery Platform pr… |
Oracle Corporation |
Service Delivery Platform |
2026-07-21T21:35:00.447Z | 2026-07-21T21:35:00.447Z |
| CVE-2026-60379 |
10 (3.1)
|
Vulnerability in the Service Delivery Platform pr… |
Oracle Corporation |
Service Delivery Platform |
2026-07-21T21:34:56.962Z | 2026-07-21T21:34:56.962Z |
| CVE-2026-60366 |
10 (3.1)
|
Vulnerability in the Oracle Platform Security for… |
Oracle Corporation |
Oracle Platform Security for Java |
2026-07-22T22:23:50.502Z | 2026-07-23T14:37:07.291Z |
| CVE-2026-60365 |
10 (3.1)
|
Vulnerability in the Oracle Weblogic Server Proxy… |
Oracle Corporation |
Oracle HTTP Server |
2026-07-21T21:34:46.574Z | 2026-07-21T21:34:46.574Z |
| CVE-2026-60360 |
10 (3.1)
|
Vulnerability in the Oracle Unified Directory pro… |
Oracle Corporation |
Oracle Unified Directory |
2026-07-21T21:34:44.816Z | 2026-07-21T21:34:44.816Z |
| CVE-2026-60358 |
10 (3.1)
|
Vulnerability in the Oracle Access Manager produc… |
Oracle Corporation |
Oracle Access Manager |
2026-07-21T21:34:44.139Z | 2026-07-21T21:34:44.139Z |
| CVE-2026-60217 |
10 (3.1)
|
Vulnerability in the Oracle Coherence product of … |
Oracle Corporation |
Oracle Coherence |
2026-07-21T21:33:46.482Z | 2026-07-23T16:42:31.622Z |
| CVE-2026-59726 |
10 (3.1)
|
Ruflo: Unauthenticated RCE in MCP bridge default docke… |
ruvnet |
ruflo |
2026-07-09T17:31:20.627Z | 2026-07-09T18:43:24.749Z |
| CVE-2026-59555 |
10 (3.1)
|
WordPress Participants Database plugin <= 2.7.8.3 - Ar… |
Roland Barker |
Participants Database |
2026-07-23T11:18:24.720Z | 2026-07-23T16:05:31.206Z |
| CVE-2026-57827 |
10 (4.0)
|
Joomla Extension - rsjoomla.com - Unauthenticated file… |
rsjoomla.com |
rsjoomla.com RSFiles extension for Joomla |
2026-07-11T09:29:03.863Z | 2026-07-23T15:01:02.375Z |