NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-112072 vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has no nesting depth limi... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-109408 vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller ask... 2026-11-05 7.4 NETWORK HIGH NVD
CVE-2026-123033 Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective f... 2026-11-05 8.3 ADJACENT_NETWORK HIGH NVD
CVE-2026-123029 Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wow... 2026-11-05 7.5 NETWORK HIGH NVD
CVE-2026-123025 An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The... 2026-11-05 9.4 NETWORK CRITICAL NVD
CVE-2026-123014 iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands wi... 2026-11-05 8.7 NETWORK HIGH NVD