Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-15548 | 7.4 high | 1.0% | no CPE yet | A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. This project is superseded by FreshTomato. | Sat 24 Oct |
| CVE-2025-9611 | 7.2 high | 1.0% | no CPE yet | Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints. | 8 Oct |
| CVE-2025-58063 | 7.1 high | 1.0% | no CPE yet | CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affected services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and uses them as TTL values. Large lease IDs become very large TTLs when cast to uint32. This enables cache pinning attacks. Version 1.12.4 contains a fix for the issue. | 19 Oct |
| CVE-2026-112273 | 6.9 medium | 1.0% | no CPE yet | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority records trigger a one-byte read when parsed, crashing applications on hardened allocators. | 22 Oct |
| CVE-2026-111230 | 6.9 medium | 1.0% | pfsense | Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log. | 19 Oct |
| CVE-2026-50426 | 6.8 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. | 13 h ago |
| CVE-2026-71194 | 6.8 medium | 1.0% | no CPE yet | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-tenant zone overlap described in a different recent CVE, and also affects legitimate same-tenant cross-pool configurations. BIND9 views do not mitigate this issue as mDNS is a shared service upstream of any view configuration. | Sat 24 Oct |
| CVE-2026-61920 | 6.6 medium | 1.0% | microsoft, windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network. | 13 h ago |
| CVE-2026-108129 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-108128 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-108127 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-70119 | 6.5 medium | 1.0% | microsoft, windows_server_2022, windows_server_2025 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. | 16 Oct |
| CVE-2026-70166 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-97844 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97843 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97842 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97841 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97840 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97839 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97838 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97837 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97836 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97835 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97834 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97833 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97832 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97831 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97829 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97828 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97827 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97826 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97825 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97824 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97823 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97822 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97821 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97820 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97819 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-97817 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-70244 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-88130 | 6.5 medium | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-88129 | 6.5 medium | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-88125 | 6.5 medium | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-88123 | 6.5 medium | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-88122 | 6.5 medium | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-112274 | 6.3 medium | 1.0% | no CPE yet | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing strlen to overrun the heap buffer and possibly crash. | 19 Oct |
| CVE-2026-77761 | 6.3 medium | 1.0% | no CPE yet | A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained per-document state that was not completely cleared between conversions. In the STIX 2 parser, galaxy and galaxy-cluster information, including custom galaxy clusters, could survive a parser reset and subsequently be associated with objects from another bundle. The STIX 1 parsers were affected by the same underlying state-management issue. Depending on the parser type, retained information could include galaxies, references, passive DNS bookkeeping, package titles, dates, and timestamps. As a result, parsing a second STIX package with an already-used parser could produce a MISP event containing information that was present only in the previously processed package. For example, a generated event could inherit passive DNS records from an earlier document, reference unrelated galaxy information, combine titles from different packages, or use timestamps originating from another conversion. The issue primarily affects applications using the misp-stix API directly and reusing parser instances across independent STIX documents. Normal conversion entry points that instantiate a new parser for each file are not affected by this particular reuse scenario. An attacker able to influence documents processed by such a long-lived parser could potentially cause information from one conversion to contaminate a subsequent MISP event. This can affect the integrity of generated threat intelligence, resulting in incorrect associations, misleading contextual information, or unrelated indicators being attributed to an event. In environments where consecutive documents have different access controls or distribution scopes, the retained state could additionally result in limited disclosure of information from a previously processed document. Successful exploitation depends on the consuming application reusing the same parser instance and on the ordering of processed documents, which increases attack complexity. No direct availability impact or code execution is involved. | 16 Oct |
| CVE-2026-70091 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2023-7008 | 5.9 medium | 1.0% | systemd_project, systemd | A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records. | 14 Oct |
| CVE-2026-111761 | 5.8 medium | 1.0% | no CPE yet | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects. InMemoryPushNotificationConfigStore.setInfo stores the URL verbatim, and onCreateTaskPushNotificationConfig does not validate the destination. In the default deployment with push notifications enabled, an unauthenticated caller can register a destination through an inline SendMessage configuration or CreateTaskPushNotificationConfig for an existing task, causing task status and artifact updates to send requests from the server's network position to loopback, private, link-local cloud-metadata, IPv6 unique-local, unspecified, or multicast destinations where routing permits. JdkA2AHttpClient and VertxA2AHttpClient follow redirects, allowing a webhook redirect to bypass creation-time destination checks and convert a POST into a GET; hostname-only checks also do not prevent DNS rebinding. Direct POST delivery can push attacker-influenced task data into internal services, whereas a redirected POST-to-GET request drops the body. The sender discards the fetched response and does not expose delivery success or failure, so the demonstrated behavior does not provide response read-back. No credentials or user interaction are required. This issue is fixed in version 1.3.0.Final. | Thu 22 Oct |
Download these 389 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.