Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content

Your agent Now with CVE context

Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.

MoxsoSponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tab
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV

Find vulnerabilities that affect you.

Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.

Recent security developments
Severity
Clear filters
6 matching advisories · 6 shown
Follow substantive record changes →
SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high8.4
CVE-2026-95723

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Hewlett Packard Enterprise (HPE) · Virtual Intranet Access (VIA)
medium6.4
CVE-2026-77157

ast-cli: Auto-update downloads are not verified against a checksum before execution

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime".

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Checkmarx · github.com/checkmarx/ast-cli
high7.5
CVE-2026-28854

The issue was addressed with additional app bundle integrity checks.

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Apple · macOS
medium5.3
CVE-2026-84533

A cryptographic issue was addressed with improved integrity checks.

A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Apple · iOS and iPadOS / Apple · macOS
medium4.4
CVE-2026-81049

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability.

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Dell · ThinOS 10
medium6.5
CVE-2026-58224

Samba: ctdb fails to do integrity checking of received packets

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Red Hat · Red Hat Ceph Storage 9.2 / Red Hat · Red Hat Enterprise Linux 10