All CVEs — page 44 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• CRITICAL 9.8CVE-2026-887712026-09-27

  This vulnerability allows unauthenticated attackers to execute arbitrary commands due to improper input validation in Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, respectively.

• MEDIUM 6.5CVE-2026-101050public exploit available2026-09-27
• MEDIUM 6.5CVE-2026-101049public exploit available2026-09-27
• MEDIUM 6.4CVE-2026-101042public exploit available2026-09-27
• UNSCOREDCVE-2026-101041public exploit available2026-09-27
• MEDIUM 4.3CVE-2026-101033public exploit available2026-09-27
• HIGH 7CVE-2026-101032public exploit available2026-09-27
• HIGH 7.5CVE-2026-100872public exploit available2026-09-27
• HIGH 8.8CVE-2026-100871public exploit available2026-09-27

  The flaw allows attackers to obtain an administrator's token by registering a shop customer account with an administrator's email, granting full administrative access. This is due to the lack of firewall identification in JWT tokens issued by separate Admin and Shop API endpoints.

• HIGH 8.8CVE-2026-100870public exploit available2026-09-27
• MEDIUM 5.9CVE-2026-100869public exploit available2026-09-27
• MEDIUM 6.3CVE-2026-100868public exploit available2026-09-27
• LOW 3.3CVE-2026-100867public exploit available2026-09-27
• LOW 3.3CVE-2026-100866public exploit available2026-09-27
• UNSCOREDCVE-2026-971652026-09-27
• UNSCOREDCVE-2026-971642026-09-27
• UNSCOREDCVE-2026-1007492026-09-27
• UNSCOREDCVE-2026-1007482026-09-27
• UNSCOREDCVE-2026-1007472026-09-27
• MEDIUM 5.3CVE-2026-94417public exploit available2026-09-27
• UNSCOREDCVE-2026-93304public exploit available2026-09-27
• UNSCOREDCVE-2026-93302public exploit available2026-09-27
• UNSCOREDCVE-2026-89136public exploit available2026-09-27
• UNSCOREDCVE-2026-89135public exploit available2026-09-27
• UNSCOREDCVE-2026-89134public exploit available2026-09-27