Vulnerabilities (7080)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU148985 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-4878	CWE-367	Low	No	No	-	11.09.2026	SB2026091127 SB2026091131 SB2026091137 and 1 more
#VU148984 - Reachable Assertion CVE-2026-4046	CWE-617	Medium	No	No	-	11.09.2026	SB2026091126 SB2026091132 SB2026091133 and 7 more
#VU146685 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2026-13608	CWE-923	Medium	No	No	-	02.09.2026	SB2026090233 SB2026090401 SB20260907132 and 2 more
#VU146682 - Use After Free CVE-2026-80229	CWE-416	Low	No	No	-	02.09.2026	SB2026090233 SB2026090401 SB20260907132 and 2 more
#VU146681 - Improper Certificate Validation CVE-2026-80230	CWE-295	Low	No	No	-	02.09.2026	SB2026090233 SB2026090401 SB20260907132 and 2 more
#VU146003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-84361	CWE-78	High	No	No	-	27.08.2026	SB20260827147 SB2026090852
#VU140595 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-71557	CWE-22	Low	No	No	-	31.07.2026	SB2026073124 SB2026090865
#VU140594 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-71556	CWE-59	Medium	No	No	-	31.07.2026	SB2026073124 SB2026090865
#VU135084 - Insufficiently Protected Credentials CVE-2026-8926	CWE-522	Low	No	No	-	24.06.2026	SB2026062427 SB2026070135 SB2026072507 and 13 more
#VU128459 - Authentication Bypass by Capture-replay CVE-2026-7168	CWE-294	Medium	No	No	-	29.04.2026	SB2026042955 SB2026050481 SB2026052287 and 13 more
#VU128451 - Exposure of Data Element to Wrong Session CVE-2026-5773	CWE-488	Medium	No	No	-	29.04.2026	SB2026042955 SB2026050481 SB2026052032 and 11 more
#VU125878 - Out-of-bounds read CVE-2026-56374	CWE-125	Low	No	No	-	14.04.2026	SB2026041434 SB20260914124 SB20260914125
#VU125874 - Out-of-bounds write CVE-2026-56370	CWE-787	Low	No	No	-	14.04.2026	SB2026041434 SB2026091498 SB20260914124 and 2 more
#VU125868 - Missing release of memory after effective lifetime CVE-2026-56365	CWE-401	Low	No	No	-	14.04.2026	SB2026041434 SB2026091498 SB20260914124 and 3 more
#VU123571 - Out-of-bounds read CVE-2026-56367	CWE-125	Medium	No	No	-	05.03.2026	SB2026030565 SB2026091498 SB20260914124 and 3 more
#VU123253 - Improper Encoding or Escaping of Output CVE-2026-56379	CWE-116	High	No	No	-	25.02.2026	SB2026022540 SB20260914124 SB20260914125 and 6 more
#VU123251 - Missing release of memory after effective lifetime CVE-2026-56371	CWE-401	Medium	No	No	-	25.02.2026	SB2026022540 SB2026091498 SB20260914124 and 3 more
#VU123250 - Missing release of memory after effective lifetime CVE-2026-56368	CWE-401	Medium	No	No	-	25.02.2026	SB2026022540 SB2026091498 SB20260914124 and 3 more
#VU123170 - Use After Free CVE-2026-56376	CWE-416	High	No	No	-	24.02.2026	SB2026022540 SB2026091498 SB20260914124 and 2 more
#VU121672 - Missing release of memory after effective lifetime CVE-2026-56364	CWE-401	Low	Public exploit available	No	-	20.01.2026	SB2026012004 SB2026091498 SB20260914124 and 2 more



Showing elements 41 - 60 out of 7080