All CVEs — page 42 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• CRITICAL 10CVE-2026-100886public exploit available2026-09-27

  The vulnerability in Seetong T8108, T8108P, T8116, and T8232 4.6.1.4-build202604241011 allows for remote improper authentication due to an unknown function in the Debug Service, making it critical.

• HIGH 7.3CVE-2026-100885public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-100884public exploit available2026-09-27
• MEDIUM 6.3CVE-2026-100883public exploit available2026-09-27
• LOW 3.3CVE-2026-96283public exploit available2026-09-27
• LOW 3.1CVE-2026-96282public exploit available2026-09-27
• LOW 2.4CVE-2026-100882public exploit available2026-09-27
• LOW 2.6CVE-2026-100881public exploit available2026-09-27
• MEDIUM 6.2CVE-2026-96281public exploit available2026-09-27
• HIGH 7.5CVE-2026-96280public exploit available2026-09-27
• CRITICAL 9.8CVE-2026-101090public exploit available2026-09-27

  The flaw allows an attacker to inject a Host header, leading to a redirect_uri that can be controlled, potentially enabling unauthorized account access.

• LOW 3.1CVE-2026-101089public exploit available2026-09-27
• MEDIUM 5.3CVE-2026-101088public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-101087public exploit available2026-09-27
• MEDIUM 6.5CVE-2026-101086public exploit available2026-09-27
• MEDIUM 6.5CVE-2026-101085public exploit available2026-09-27
• CRITICAL 9.6CVE-2026-101084public exploit available2026-09-27

  The flaw allows any authenticated user to connect to restricted MCP servers by possessing the server ID, bypassing authorization checks and accessing sensitive backend systems.

• CRITICAL 9.8CVE-2026-101065public exploit available2026-09-27

  The flaw allows unauthenticated access to the Obot API and UI, granting full administrative control to any party who can reach the exposed port.

• HIGH 7.6CVE-2026-101064public exploit available2026-09-27
• MEDIUM 5.3CVE-2026-101063public exploit available2026-09-27
• HIGH 8.8CVE-2026-101062public exploit available2026-09-27

  The flaw allows an attacker to register an OAuth client without authentication, leading to unauthorized access to the victim's resources via a crafted authorization URL.

• LOW 3.5CVE-2026-100880public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-100879public exploit available2026-09-27
• MEDIUM 6.3CVE-2026-100878public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-100877public exploit available2026-09-27