Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.1 CVE-2026-48119

Nezha Monitoring: Authenticated agents can forge service-monitor results for other users’ services_CVE-2026-48119

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authe...

nezhahq nezha >= 0.20.0, < 2.0.12 CVE
HIGH 7.1 CVE-2026-47120

Nezha Monitoring: RoleMember can fire other users’ cron tasks via AlertRule.FailTriggerTasks (no ownership check)_CVE-2026-47120

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleM...

nezhahq nezha >= 1.4.0, < 2.0.8 CVE
HIGH 7.7 CVE-2026-46717

Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification_CVE-2026-46717

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's...

nezhahq nezha >= 1.4.0, < 2.0.8 CVE
HIGH 8.6 5581E532-E0A6-

Exploit for CVE-2026-20230_5581E532-E0A6-5210-9EB3-48C5BA4A5411

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unifi...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 3F8B37D2-6288-

Exploit for Uncontrolled Resource Consumption in Solarwinds Serv-U_3F8B37D2-6288-5724-B73B-D65A8373E501

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318, an unauthenticated denial-of-serv...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts_CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is...

ARODLAND Crypt::PBKDF2 CVE
HIGH 7.8 CVE-2026-53406

CVE-2026-53406_CVE-2026-53406

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticate...

Zoom Communications Remote Control for Zoom Contact Center CVE
HIGH 8 CVE-2026-48165

MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side_CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before ...

MariaDB server >= 10.6.1, < 10.6.27 CVE
HIGH 8 CVE-2026-48163

MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)_CVE-2026-48163

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before ...

MariaDB server >= 10.6.1, < 10.6.27 CVE
HIGH 7.8 CVE-2026-47965

Acrobat Reader | Out-of-bounds Write (CWE-787)_CVE-2026-47965

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary ...

Adobe Acrobat Reader CVE