high8.7
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
140 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
medium6.9
critical9.8
CVE-2026-63377
TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover
fctr-id · okta-ai-agent
critical9.6
high8.7
CVE-2026-62302
MyTube: Unauthenticated Media Access via Static Routes Bypassing Login
franklioxygen · MyTube
medium6.9
critical9.3
CVE-2026-61730
SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount
socfortress · CoPilot
critical9.4
CVE-2026-61729
SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection
socfortress · CoPilot
medium5.4
CVE-2026-111500
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability.
Dell · OpenManage Enterprise
high8.7
CVE-2026-22110
Missing authentication check on POST/PUT requests
Delta Electronics · Delta UFC500 / Delta Electronics · Delta UFC500
critical9.4
CVE-2026-82104
API permission bypass via logic bug
Teltonika Networks · RUT / Teltonika Networks · RUTX
high8.7
CVE-2026-92744
Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
Delinea · Privilege Manager
high7.5
medium6.2
CVE-2026-88941
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center.
Kaspersky · Network Agent / Kaspersky · Administration Server
high8.6
high7.3
CVE-2026-61571
AVideo-Encoder: missing authentication on control and status endpoints
WWBN · AVideo-Encoder
critical9.8
CVE-2026-118690
Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs
SignalK · signalk-server
high8.6
CVE-2026-61542
Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools
drhelius · Gearboy
critical9.4
CVE-2026-63190
FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS
fearlessgeekmedia · FearlessCMS
critical9.8
CVE-2026-103409
Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed
Juniper Networks · Session Smart Router
critical9.4
CVE-2026-112197
Missing Authentication for Critical Function in Tactis' NoviGest Desktop App
Tactis · NoviGest Desktop App
medium5.3
CVE-2026-102816
Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
TP-Link Systems Inc. · RE305 v3
high8.7
CVE-2026-90465
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
WatchGuard · Fireware OS / WatchGuard · Fireware OS
medium6.0
CVE-2026-104381
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
WatchGuard · Fireware OS / WatchGuard · Fireware OS
critical9.2
CVE-2026-93865
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
WatchGuard · Fireware OS / WatchGuard · Fireware OS
high7.5
CVE-2026-104189
3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share
maz1987in · 3Dviewer-Nextcloud
critical10.0
CVE-2026-65145
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.
NVIDIA · NeMo Agent Toolkit
high8.7
CVE-2026-106087
TRO600 contains an arbitrary file read vulnerability.
Hitachi Energy · TRO600 Series Firmware
critical9.8
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability in HiRDB
Hitachi · HiRDB Server Version 10 / Hitachi · HiRDB Server Version 9
critical9.8
CVE-2026-18450
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
SMCI · X12SPI