plaincve:~$

Topics /

Infrastructure

Network gear, VPNs, virtualization and cloud consoles

Vulnerability · KEV
CVE-2026-77936
Letta insecure compose defaults: open API and database
AI securityInfrastructureInsecure default configuration
Critical9.3Not listed—
CVE-2026-76519
Cisco Secure Email Gateway AMP arbitrary file write
InfrastructurePath traversal/arbitrary write
Critical9.8Listed—
CVE-2026-104935
Ivanti Connect Secure authentication bypass
InfrastructureAuth bypass by spoofing
High8.6Listed—
CVE-2026-49950
Xoscar actor-pool deserialization RCE
InfrastructureUnsafe deserialization
Critical9.3Not listed—
CVE-2026-108863
Plano Envoy admin interface leaks LLM API keys
AI securityInfrastructureMissing authentication
High7.5Not listed—
CVE-2026-105192
LMCache ZMQ transport pickle RCE
AI securityInfrastructureUnsafe deserialization
Critical9.8Not listed—
CVE-2026-90920
IBM Maximo AI Service code injection
InfrastructureAI securityCode injection
Critical9.8Not listed—
CVE-2026-105134
AhsayCBS Replication Receiver command injection
InfrastructureWeb appsOS command injection
Critical9.3Listed—
CVE-2026-88779
NetScaler SAML memory overflow denial of service
InfrastructureMemory overflow / DoS
High7.5Listed—
CVE-2026-104286
FortiMail path traversal arbitrary file write
InfrastructurePath traversal
Critical9.8Listed—
CVE-2026-76504
Cisco Catalyst SD-WAN Manager API authentication bypass
InfrastructureWeb appsAuth bypass (URL encoding)
Critical9.8Listed—
CVE-2026-88771
Citrix NetScaler pre-auth remote code execution
InfrastructureRemote code execution
Critical9.8Listed—
CVE-2026-94127
F5 BIG-IP APM OAuth heap overflow
InfrastructureMemory corruption
Critical9.8Listed—
CVE-2026-107204
LMCache /run_script unauthenticated RCE
AI securityInfrastructureUnauthenticated RCE
Critical9.8Not listed—
CVE-2026-65660
SharePoint Server code injection RCE
Web appsInfrastructureCode injection
High8.8Listed—
CVE-2021-3199
ONLYOFFICE Document Server upload path traversal
Web appsInfrastructurePath traversal
Critical9.8Listed—