CVE Find is a real-time vulnerability database indexing 413 209 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3901 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-50053 |
2026-10-23 13h15 +00:00 |
A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticate... |
8.7 |
High |
|
CVE-2026-89320 |
2026-10-23 08h56 +00:00 |
`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of ... |
8.8 |
High |
|
CVE-2026-63244 |
2026-10-23 07h24 +00:00 |
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) co... |
9.8 |
Critical |
|
CVE-2026-93489 |
2026-10-23 07h07 +00:00 |
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP... Authorization problems |
8.7 |
High |
|
CVE-2026-115547 |
2026-10-23 03h06 +00:00 |
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of sp... Code Injection |
9.1 |
Critical |
|
CVE-2026-19678 |
2026-10-23 01h23 +00:00 |
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11... Server-Side Request Forgery - SSRF |
8.7 |
High |
|
CVE-2026-96616 |
2026-10-22 21h55 +00:00 |
Authentication tokens issued by the E3's web management interface on login are given an expiration t... Authorization problems |
8.3 |
High |
|
CVE-2026-97785 |
2026-10-22 21h44 +00:00 |
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over ... Authorization problems |
10 |
Critical |
|
CVE-2026-114612 |
2026-10-22 19h17 +00:00 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 un... Improper Privilege Management |
9.9 |
Critical |
|
CVE-2022-51026 |
2026-10-22 19h17 +00:00 |
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthentic... |
9.8 |
Critical |