search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-09-17 2026-09-17 2026-09-17 VU#280377 Dokploy is vulnerable to OS command injection
2026-09-16 2026-09-16 2026-09-16 VU#212479 Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
2026-08-21 2026-08-21 2026-09-15 VU#756733 Retraction of "Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability"
2026-09-11 2026-09-11 2026-09-11 VU#369611 ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
2026-06-18 2026-06-18 2026-09-09 VU#457458 Vendor-signed UEFI applications found vulnerable to Secure Boot bypass
2026-09-08 2026-09-08 2026-09-08 VU#718077 UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
2026-09-08 2026-09-08 2026-09-08 VU#859658 Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability
2026-09-08 2026-09-08 2026-09-08 VU#943094 ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability
2026-04-21 2026-04-21 2026-09-02 VU#890999 Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser
2026-08-25 2026-08-25 2026-08-28 VU#308749 Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers
2026-08-24 2026-08-24 2026-08-24 VU#728712 Konami's Metal Gear Online 3 contains a heap-based buffer overflow
2026-08-10 2026-08-10 2026-08-24 VU#614868 OpenCart ecommerce platform contains directory traversal vulnerability
2026-08-19 2026-08-19 2026-08-19 VU#874418 RDK-B WebUI contains multiple vulnerabilities
2026-08-06 2026-08-06 2026-08-18 VU#487613 Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations
2026-07-16 2026-07-16 2026-08-14 VU#885548 Denial-of-service vulnerability in HTTP/2 servers via stalled flow-control conditions

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis