Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.9 MEDIUM
CVE-2026-59951 — MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resour…

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServ…

Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-33798 — Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when …

A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high…

junos junos_os_evolved | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33796 — Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP …

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary comma…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-33795 — Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-…

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP P…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33792 — Junos OS: SRX Series: An attacker causes remote code execution and denial of service when…

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of se…

junos | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-33789 — Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a spec…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and …

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.1 HIGH
CVE-2026-19673 — Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a trun…

ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When the ethertype is 0x8100 and VLAN is enabl…

zephyr zephyr | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-15102 — Cleartext Transmission of Sensitive Information in ADP Desktop SDK

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

| Cryptography
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-109439 — Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718

Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device conf…

Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-105659 — HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream …

Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDOW_UPDATE frames. A …

bandit | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.3 MEDIUM
CVE-2026-105236 — TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust bound…

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual hos…

erlang\/otp otp | Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-103994 — Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB cont…

| Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.9 MEDIUM
CVE-2026-103993 — Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and gracef…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities t…

| Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-103946 — SQL Injection

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

nessus | Remote | Injection
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102185 — Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN mult…

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102184 — Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling pe…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102183 — Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd…

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause a…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-102182 — Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certific…

junos | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102180 — Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming tel…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session t…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102179 — Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RI…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a den…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
Showing 20 of 16664 Results