CVE-2026-104935HIGH KEV

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to e

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

CVSS 8.6

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2d

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untruste

CVSS 10.0

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoin

CVSS 10.0

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remo

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-contro

CVSS 9.9

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to lea

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

CVSS 9.9

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProj

CVSS 9.9

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed

CVSS 9.8

A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under sp

A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific conditions. This could enable an attacker to access administrative functionality th

CVSS 9.8

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra

CVSS 9.8

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::C

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's

CVSS 9.6

RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. P

RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with

CVSS 9.6

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature all

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled t

CVSS 9.4

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVSS 9.3

Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1

Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through

CVSS 9.3

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/rea

CVSS 9.3