NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-103435 Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write... 2026-10-07 7.7 NETWORK HIGH NVD
CVE-2026-102256 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in th... 2026-10-07 7.8 LOCAL HIGH NVD
CVE-2026-102255 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing th... 2026-10-07 10.0 NETWORK CRITICAL NVD
CVE-2026-107159 MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network at... 2026-10-07 6.5 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-106059 GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository file... 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-106058 GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by ... 2026-10-07 7.5 NETWORK HIGH NVD
CVE-2026-106056 Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Win... 2026-10-07 7.5 NETWORK HIGH NVD
CVE-2026-96408 A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl ... 2026-10-07 9.3 NETWORK CRITICAL NVD
CVE-2026-103668 An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary... 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-93026 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update creden... 2026-10-07 6.1 NETWORK MEDIUM NVD
CVE-2026-90466 Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a pa... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-58069 This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. 2026-10-07 8.3 NETWORK HIGH NVD
CVE-2026-58068 This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. 2026-10-07 6.8 LOCAL MEDIUM NVD
CVE-2026-19186 ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len... 2026-10-07 8.1 ADJACENT_NETWORK HIGH NVD
CVE-2026-15894 The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixe... 2026-10-07 8.8 ADJACENT_NETWORK HIGH NVD