Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 CVE-2026-9780

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability_CVE-2026-9780

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass aut...

Quest NetVault Backup 14.0.1.7 CVE
HIGH 8.8 CVE-2026-7570

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability_CVE-2026-7570

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr...

Quest NetVault Backup 14.0.0.19 CVE
HIGH 8.8 CVE-2026-7569

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability_CVE-2026-7569

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass aut...

Quest NetVault Backup 14.0.1.7 CVE
HIGH 8.6 CVE-2026-40079

Cacti: Command Injection via escape_command() no-op in RRDtool execution_CVE-2026-40079

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sa...

Cacti cacti < 1.2.31 CVE
HIGH 7.6 CVE-2026-39951

Cacti: Stored SQL Injection via graph_name_regexp in Reports feature_CVE-2026-39951

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through gra...

Cacti cacti < 1.2.31 CVE
HIGH 7.3 CVE-2026-7539

HP Dock Accessory WMI Provider Installer Security Update_CVE-2026-7539

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow e...

HP Inc. HP Dock Accessory CVE
MEDIUM 5.4 CVE-2026-52816

Gogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS_CVE-2026-52816

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipynb allo...

gogs gogs < 0.14.3 CVE
MEDIUM 5.5 CVE-2026-52815

Gogs: Unauthenticated Organization Teams Information Disclosure via API_CVE-2026-52815

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/...

gogs gogs < 0.14.3 CVE
MEDIUM 5.5 CVE-2026-52814

Gogs: Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)_CVE-2026-52814

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric De...

gogs gogs < 0.14.3 CVE
MEDIUM 4.8 CVE-2026-52807

Gogs: DOM-based XSS via Milestone Name on New Issue Page_CVE-2026-52807

Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names are rendered with Go's default auto-escaping ({{...

gogs gogs < 0.14.3 CVE