CVE-2026-111044 - Disabled Sunshine clients can bypass revocation with a derived client certificate
CVE ID :CVE-2026-111044 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 33 minutes ago Description …
CVE
Updates on the latest vulnerabilities detected.
20.1K articles
CVE-2026-108372 - LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
CVE ID :CVE-2026-108372 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 33 minutes ago Description …
CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path
CVE ID :CVE-2026-30971 Published : Oct. 16, 2026, 7:40 p.m. | 8 minutes ago Description :ZoneMinder…
CVE-2026-108709 - Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)
CVE ID :CVE-2026-108709 Published : Oct. 16, 2026, 7:38 p.m. | 11 minutes ago Description :Authenti…
CVE-2026-69080 - Apache Kylin: Broken Access Control in QuerySQLBlacklistController
CVE ID :CVE-2026-69080 Published : Oct. 16, 2026, 7:37 p.m. | 11 minutes ago Description :Exposure …
CVE-2026-102608 - ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)
CVE ID :CVE-2026-102608 Published : Oct. 16, 2026, 7:35 p.m. | 14 minutes ago Description :ZoneMind…
CVE-2026-69077 - Apache Kylin: JobController allows unauthorized cross-project manipulation
CVE ID :CVE-2026-69077 Published : Oct. 16, 2026, 7:33 p.m. | 16 minutes ago Description :Exposure …
CVE-2026-69076 - Apache Kylin: Unauthorized cross-project job discard
CVE ID :CVE-2026-69076 Published : Oct. 16, 2026, 7:32 p.m. | 17 minutes ago Description :Exposure …
CVE-2026-68573 - Apache Kylin: Unauthenticated Metastore Cleanup
CVE ID :CVE-2026-68573 Published : Oct. 16, 2026, 7:32 p.m. | 17 minutes ago Description :Improper …
CVE-2026-68572 - Apache Kylin: Unauthorized SQL execution to Spark SQL env
CVE ID :CVE-2026-68572 Published : Oct. 16, 2026, 7:32 p.m. | 17 minutes ago Description :Exposure …
CVE-2026-102607 - ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature
CVE ID :CVE-2026-102607 Published : Oct. 16, 2026, 7:29 p.m. | 19 minutes ago Description :ZoneMind…