high8.5
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
52 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high8.8
CVE-2026-108303
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Tanium · Certificate Manager
high8.8
CVE-2026-108329
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium · Threat Response
high8.8
CVE-2026-107672
Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility
Autodesk · Fusion Post Processor Utility
high7.5
CVE-2026-117511
desmondmorris node-tesseract Command Builder tesseract.js process os command injection
desmondmorris · node-tesseract
high8.7
CVE-2026-90465
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
WatchGuard · Fireware OS / WatchGuard · Fireware OS
critical9.2
CVE-2026-93865
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
WatchGuard · Fireware OS / WatchGuard · Fireware OS
critical9.9
critical9.4
CVE-2026-116505
TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
TOTOLINK · A950RG
critical9.9
CVE-2026-116504
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
TOTOLINK · A950RG
high7.5
CVE-2026-116369
Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
Sunwood-ai-labs · github-kanban-mcp-server
medium6.5
high7.5
CVE-2026-116109
continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
continuedev · Continue
high7.5
CVE-2026-116102
QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
QuantGeekDev · docker-mcp
medium5.3
CVE-2026-116053
dbcli mycli Whitelist source.py source_special_command_is_safe os command injection
dbcli · mycli
critical10.0
CVE-2026-115995
Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection
Unitree Robotics · Unitree Go2
high7.5
critical9.1
high8.3
CVE-2026-79882
Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
high8.8
CVE-2026-79878
Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
critical9.6
CVE-2026-79864
Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
critical9.8
CVE-2026-79861
Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
critical10.0
CVE-2026-79846
Unauthenticated Command Injection Vulnerabilities in AOS-8
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
critical10.0
high8.8
high8.8
CVE-2026-97781
Microsoft Office OneNote Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
high8.8
CVE-2026-96951 Known exploited
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based) / Microsoft · Outlook.com
high7.8
CVE-2026-69718
Windows Update Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 23H2 / Microsoft · Windows 11 Version 23H2
high8.8
critical10.0
CVE-2026-105134 Known exploited
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
Ahsay · AhsayCBS