CERT Vulnerability Notes Database

Published	Public	Updated	ID	Title
2026-09-01	2026-09-01	2026-09-24	VU#456290	Hugging Face Transformers library writes remote code to disk prior to consent check
2026-09-24	2026-09-24	2026-09-24	VU#676317	Norwegian Cruise Line door access controller contains an improper authentication vulnerability
2026-09-25	2026-09-25	2026-09-25	VU#699627	Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
2026-09-24	2026-09-24	2026-09-25	VU#234131	ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
2026-09-28	2026-09-28	2026-09-28	VU#762428	Authlib library contains a signature‑verification bypass vulnerability
2026-10-01	2026-10-01	2026-10-01	VU#553437	InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
2026-10-12	2026-10-12	2026-10-12	VU#162329	Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
2026-09-10	2026-09-10	2026-10-12	VU#687587	AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks

Software Engineering Institute