NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102156 Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high... 2026-10-06 6.8 NETWORK MEDIUM NVD
CVE-2026-102155 An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious reque... 2026-10-06 8.5 NETWORK HIGH NVD
CVE-2026-101158 A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored c... 2026-10-06 8.4 NETWORK HIGH NVD
CVE-2026-101157 A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that ... 2026-10-06 8.7 ADJACENT_NETWORK HIGH NVD
CVE-2026-101156 A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configurati... 2026-10-06 8.4 NETWORK HIGH NVD
CVE-2026-101155 An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specia... 2026-10-06 9.1 NETWORK CRITICAL NVD
CVE-2026-101154 An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specia... 2026-10-06 7.2 NETWORK HIGH NVD
CVE-2026-101153 On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with suff... 2026-10-06 8.0 NETWORK HIGH NVD
CVE-2026-101152 Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a u... 2026-10-06 8.0 NETWORK HIGH NVD
CVE-2026-101151 Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-101150 Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinatio... 2026-10-06 4.1 NETWORK MEDIUM NVD
CVE-2026-101149 Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinatio... 2026-10-06 4.1 NETWORK MEDIUM NVD
CVE-2026-101029 Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address th... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-101027 When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its resolved address against the ... 2026-10-06 7.7 NETWORK HIGH NVD
CVE-2026-9226 Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's ... 2026-10-06 6.8 ADJACENT_NETWORK MEDIUM NVD