CVE-2026-12692 — Critical vulnerability brief
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before…
Tag: Critical CVE
CVE-2026-45568 — Critical vulnerability brief
zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts…
CVE-2026-54052 — Critical vulnerability brief
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP…
CVE-2026-53512 — Critical vulnerability brief
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token…
CVE-2026-56400 — Critical vulnerability brief
open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. Attackers…
CVE-2026-48284 — Critical vulnerability brief
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-48319 — Critical vulnerability brief
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary…
CVE-2026-48358 — Critical vulnerability brief
Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the…
CVE-2026-48356 — Critical vulnerability brief
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in…
CVE-2026-45063 — Critical vulnerability brief
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12,…