CVE ID :CVE-2026-107492 Published : Nov. 6, 2026, 12:43 a.m. | 26 minutes ago Description :Improper Authentication in the jwt_authn HTTP filter in envoyproxy envoy versions up to and including 1.38.0 allows an…
CVE-2025-71458 – FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo
CVE ID :CVE-2025-71458 Published : Nov. 6, 2026, 12:20 a.m. | 49 minutes ago Description :FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the…
CVE-2026-63774 – Subnet Solutions PowerSYSTEM Center SQL Injection
CVE ID :CVE-2026-63774 Published : Nov. 6, 2026, 12:05 a.m. | 1 hour, 4 minutes ago Description :Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL…
CVE-2026-63017 – Subnet Solutions PowerSYSTEM Center Incorrect Authorization
CVE ID :CVE-2026-63017 Published : Nov. 6, 2026, 12:01 a.m. | 1 hour, 8 minutes ago Description :Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators….
CVE-2026-92698 – FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read
CVE ID :CVE-2026-92698 Published : Nov. 5, 2026, 11:17 p.m. | 1 hour, 52 minutes ago Description :FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, process_sflow_flow_sample() in src/sflow_plugin/sflow_collector.cpp passes…
CVE-2026-58273 – Rucio: Authorisation Bypass on REST API endpoint for signing URLs
CVE ID :CVE-2026-58273 Published : Nov. 5, 2026, 10:18 p.m. | 50 minutes ago Description :Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads…
CVE-2026-33944 – Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter
CVE ID :CVE-2026-33944 Published : Nov. 5, 2026, 10:18 p.m. | 50 minutes ago Description :Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.5 and 23.0.1, there…
CVE-2026-122267 – MinIO Signature V4 Authentication Bypass Vulnerability
CVE ID :CVE-2026-122267 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into…
CVE-2026-119757 – BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure
CVE ID :CVE-2026-119757 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers…
CVE-2026-111494 – Incorrect validation of TLS certificates in the MatchPoint Android app
CVE ID :CVE-2026-111494 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate…