Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.4 HIGH
CVE-2026-103414 — GUIX Binary Resource Loader Heap-based Buffer Overflow

The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` …

| Memory Corruption
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
7.5 HIGH
CVE-2026-103081 — WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0.

Remote | Injection
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
9.1 CRITICAL
CVE-2026-102476 — Eclipse Vert.x Improper SSL Context Caching Vulnerability

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the…

vert.x | Remote | Misconfiguration
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.7 HIGH
CVE-2026-102077 — Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to re…

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-base…

junos | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-101983 — Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtua…

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-101982 — Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise w…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on J…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-101981 — Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or…

junos junos_os_evolved | Memory Corruption
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-101979 — Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or den…

A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101976 — Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sendi…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101975 — Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when pref…

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic p…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101972 — Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF…

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101964 — Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP messa…

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet r…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101963 — Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihom…

An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihomi…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101962 — Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash…

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically m…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101961 — Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qua…

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101959 — Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacen…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-101954 — Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover…

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacke…

junos junos_os_evolved | Remote | Authentication
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.7 HIGH
CVE-2026-101952 — Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP…

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause a…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101949 — Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a speci…

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of serv…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.0 HIGH
CVE-2026-100413 — SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deplo…

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sf…

seaweedfs | Remote | Misconfiguration
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
Showing 20 of 14360 Results