CVE-2026-109618 PHP out-of-memory corruption RCE (PHP2shell) | Critical | 9.8 | Not listed | — |
CVE-2026-77936 Letta insecure compose defaults: open API and database | Critical | 9.3 | Not listed | — |
CVE-2026-53995 MLflow trace ID path traversal | High | 8.2 | Not listed | — |
CVE-2026-111322 Archon /api/* control API missing authentication | Critical | 9.3 | Not listed | — |
CVE-2026-111391 SGLang debug dumper eval injection | Critical | 9.2 | Not listed | — |
CVE-2026-76519 Cisco Secure Email Gateway AMP arbitrary file write | Critical | 9.8 | Listed | — |
CVE-2026-104935 Ivanti Connect Secure authentication bypass | High | 8.6 | Listed | — |
CVE-2026-110204 Roo Code funsub command approval bypass | High | 7.7 | Not listed | — |
CVE-2026-49950 Xoscar actor-pool deserialization RCE | Critical | 9.3 | Not listed | — |
CVE-2026-108860 BotSharp hard-coded JWT key authentication bypass | Critical | 9.3 | Not listed | — |
CVE-2026-108863 Plano Envoy admin interface leaks LLM API keys | High | 7.5 | Not listed | — |
CVE-2026-86063 Claude Code plugin commit SHA pin bypass | High | 7.5 | Not listed | — |
CVE-2026-105192 LMCache ZMQ transport pickle RCE | Critical | 9.8 | Not listed | — |
CVE-2026-21589 Atlassian Data Center unauthenticated file read | Critical | 9.3 | Listed | — |
CVE-2026-90920 IBM Maximo AI Service code injection | Critical | 9.8 | Not listed | — |
CVE-2026-105134 AhsayCBS Replication Receiver command injection | Critical | 9.3 | Listed | — |
CVE-2026-88779 NetScaler SAML memory overflow denial of service | High | 7.5 | Listed | — |
CVE-2026-104334 Langflow OSS code injection leading to remote code execution | Critical | 9.8 | Not listed | — |
CVE-2026-90970 GitLab AI Gateway prompt template sandbox escape | Critical | 9.9 | Not listed | — |
CVE-2026-93674 IBM Langflow OSS OS command injection | Critical | 9.8 | Not listed | — |
CVE-2026-104286 FortiMail path traversal arbitrary file write | Critical | 9.8 | Listed | — |
CVE-2026-109527 MCP Python SDK unbounded request body DoS | High | 7.5 | Not listed | — |
CVE-2026-59951 MCP Python SDK Streamable HTTP session exhaustion | Medium | 6.9 | Not listed | — |
CVE-2026-76504 Cisco Catalyst SD-WAN Manager API authentication bypass | Critical | 9.8 | Listed | — |
CVE-2026-79538 MetaMCP inspector proxy command injection | Critical | 9.8 | Not listed | — |
CVE-2026-88771 Citrix NetScaler pre-auth remote code execution | Critical | 9.8 | Listed | — |
CVE-2026-93088 SGLang DiffusionServer pickle remote code execution | Critical | 9.8 | Not listed | — |
CVE-2026-94127 F5 BIG-IP APM OAuth heap overflow | Critical | 9.8 | Listed | — |
CVE-2026-109560 Continue CLI Bash permission rule bypass | High | 7.7 | Not listed | — |
CVE-2026-107204 LMCache /run_script unauthenticated RCE | Critical | 9.8 | Not listed | — |
CVE-2026-100587 OpenClaw Codex install command authorization bypass | High | 8.7 | Not listed | — |
CVE-2026-100596 OpenClaw MCP configuration authorization bypass | High | 8.8 | Not listed | — |
CVE-2026-108263 Astron Agent unsandboxed code node cross-tenant RCE | Critical | 9.9 | Not listed | — |
CVE-2026-65660 SharePoint Server code injection RCE | High | 8.8 | Listed | — |
No CVEMAL-2026-11524 keyv / cacheable npm packages hijacked | N/A | — | Not listed | 2026-08-04 |
CVE-2026-96804 MLflow statsmodels flavor pickle control bypass | High | 8.8 | Not listed | — |
CVE-2026-114090 Trigger.dev CLI dev MCP server missing authentication | High | 7.6 | Not listed | — |
CVE-2026-96620 Claude Agent SDK resume option argument injection | Critical | 9.2 | Not listed | — |
CVE-2026-90553 vLLM LlavaOnevision2 ignores trust_remote_code | High | 7.8 | Not listed | 2026-07-11 |
CVE-2026-77244 29 mcp-atlassian vulnerabilities fixed in 0.22.0 | Critical | 10.0 | Not listed | — |
CVE-2026-82021 Hermes Agent MCP catalog not pinned to a commit | Critical | 9.0 | Not listed | 2026-07-07 |
CVE-2026-102697 Ollama agent mode Bash approval bypass | High | 8.5 | Not listed | — |
CVE-2026-61742 DBHub MCP server DNS rebinding | Critical | 9.3 | Not listed | — |
CVE-2026-110644 nodejs-whisper file name command injection | Critical | 9.3 | Not listed | — |
CVE-2026-57118 PraisonAI agent launch server missing authentication | Critical | 9.8 | Not listed | — |
CVE-2026-55107 Kobako sandbox escape to host code execution | Critical | 10.0 | Not listed | — |
CVE-2026-50016 pnpm dependency alias path traversal | High | 8.8 | Not listed | — |
CVE-2026-48501 GitHub CLI verify commands leak token | Critical | 9.1 | Not listed | — |
CVE-2026-48027 Nx Console malicious extension update | Critical | 9.8 | Listed | 2026-05-18 |
CVE-2026-45321 TanStack npm release pipeline hijack | Critical | 9.6 | Listed | 2026-05-11 |
CVE-2026-45758 guardrails-ai malicious PyPI release | Critical | 9.6 | Not listed | 2026-05-11 |
CVE-2026-46421 SAP @cap-js / mbt malicious npm releases | Critical | 9.3 | Not listed | 2026-04-29 |
No CVEGHSA-fw8c-xr5c-95f9 axios npm maintainer account takeover | N/A | — | Not listed | 2026-03-31 |
CVE-2026-105697 Langflow MCP stdio command injection | Critical | 9.9 | Not listed | — |
CVE-2026-33634 Trivy and trivy-action trojanized | High | 8.8 | Listed | 2026-03-19 |
CVE-2026-33017 Langflow public flow unauthenticated RCE | Critical | 9.8 | Listed | — |
CVE-2026-59822 LiteLLM MCP gateway auth bypass | High | 8.2 | Listed | 2026-02-07 |
No CVEMAL-2025-190925 PostHog npm publish token stolen | N/A | — | Not listed | 2025-11-24 |
CVE-2026-5241 Transformers LightGlue config overrides trust_remote_code | Critical | 9.6 | Not listed | 2025-07-25 |
CVE-2026-12537 Gemini CLI headless workspace trust | High | 7.8 | Not listed | 2025-06-25 |
CVE-2026-26030 Semantic Kernel filter runs as code | Critical | 9.9 | Not listed | 2025-06-25 |
CVE-2021-3199 ONLYOFFICE Document Server upload path traversal | Critical | 9.8 | Listed | — |
