Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-101961 — Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qua…

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-101959 — Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacen…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
5.3 MEDIUM
CVE-2026-67418 — RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmq_mqtt/src/rabbit_mqtt_packet.erl accepts Request-Problem-…

Remote | Misconfiguration
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.9 MEDIUM
CVE-2026-59951 — MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resour…

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServ…

Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-92150 — F´: GenericHub Malformed Buffer Assertion DoS

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handler deserialization i…

fprime | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-33798 — Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when …

A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high…

junos junos_os_evolved | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33796 — Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP …

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary comma…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-33795 — Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-…

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP P…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33792 — Junos OS: SRX Series: An attacker causes remote code execution and denial of service when…

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of se…

junos | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33789 — Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a spec…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and …

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.1 HIGH
CVE-2026-19673 — Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a trun…

ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When the ethertype is 0x8100 and VLAN is enabl…

zephyr zephyr | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-15102 — Cleartext Transmission of Sensitive Information in ADP Desktop SDK

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

| Cryptography
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-109439 — Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718

Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device conf…

Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-105659 — HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream …

Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDOW_UPDATE frames. A …

bandit | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.3 MEDIUM
CVE-2026-105236 — TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust bound…

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual hos…

erlang\/otp otp | Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-103994 — Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB cont…

| Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.9 MEDIUM
CVE-2026-103993 — Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and gracef…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities t…

| Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-103946 — SQL Injection

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

nessus | Remote | Injection
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102185 — Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN mult…

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102184 — Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling pe…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
Showing 20 of 16664 Results