Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.newCreate a CVE report

Your agent Now with CVE context

Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.

MoxsoSponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tab
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV

Find vulnerabilities that affect you.

Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.

Recent security developments
Severity
Clear filters
10 matching advisories · 10 shown
Explore packages Subscribe to these results
Follow substantive record changes →
SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
critical9.6
CVE-2026-107360

Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.

Review the recorded instructions. Guidance may be a workaround rather than a fixed version.

Exploitation not established

Red Hat · Red Hat Satellite 6.16 for RHEL 8 / Red Hat · Red Hat Satellite 6.16 for RHEL 9
high7.0
CVE-2026-16478

Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer

Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer allows Privilege Escalation.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

TÜBİTAK BİLGEM Software Technologies Research Institute · pardus-nvidia-installer
medium5.2
CVE-2026-117570

nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script, running intrusive, brute-force, exploit, or denial-of-service scripts against scan targets.

No structured fix or guidance is available here. Check the latest publisher advisory.

Public exploit reference

Vorota-ai · nmap-mcp
critical9.8
CVE-2026-115915Package fixes recorded

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox escape through vLLM's image-loading path and can execute commands with the vLLM process's privileges. A bounded marker-command payload executed through the PyPI wheel's actual ImageMediaIO.load_base64() implementation using Debian Ghostscript 10.03.0. The loader-level execution is reproduced; the HTTP request path is source-traced but was not exercised end to end. This report concerns vLLM's untrusted-format dispatch and does not claim a new Ghostscript vulnerability. Exploitation requires an image-capable request path, a caller able to reach it under the deployment's authentication policy, and a vulnerable host Ghostscript build.

Recorded fixes — vllm: 0.32.0. Check your release branch.

Exploitation not established

PyPI / vllm
high7.5
CVE-2026-116339

iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/exec_ddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

No structured fix or guidance is available here. Check the latest publisher advisory.

Public exploit reference

iFlytek · astron-agent
low2.3
CVE-2026-113786

pypdf: Unvalidated JPEG image data loading

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow dependency are not affected. This issue is fixed in version 6.21.1.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

py-pdf · pypdf
medium6.5
CVE-2026-96229

.NET Information Disclosure Vulnerability

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Microsoft · .NET 10.0 runtime / Microsoft · .NET 11.0 runtime
critical10.0
CVE-2026-3490

picklescan - Universal Blocklist Bypass via pkgutil.resolve_name

picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote code execution.

No structured fix or guidance is available here. Check the latest publisher advisory.

Public exploit reference

picklescan · picklescan
high8.8
CVE-2026-29514

NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with exporttemplate or configtemplate permissions to execute arbitrary code by specifying malicious Python callables in the environment_params field. Attackers can bypass Jinja2 SandboxedEnvironment protections by setting the finalize parameter to any importable Python callable such as subprocess.getoutput, which is invoked on every rendered expression outside the sandbox's call interception mechanism, achieving remote code execution as the NetBox service user.

No structured fix or guidance is available here. Check the latest publisher advisory.

Public exploit reference

netbox-community · netbox
medium5.3
CVE-2023-7250

Iperf3: possible denial of service

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Red Hat · Red Hat Enterprise Linux 8 / Red Hat · Red Hat Enterprise Linux 9