Export limit exceeded: 416358 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (416358 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-106087 | 1 Hitachienergy | 1 Tro600 Firmware | 2026-10-28 | N/A |
| TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information. | ||||
| CVE-2026-100164 | 1 Rolantis Information Technologies Tourism Industry And Trade Co. Ltd. | 1 Agentis | 2026-10-28 | 7.5 High |
| Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8. | ||||
| CVE-2026-65151 | 1 Nvidia | 1 Nemo Agent Toolkit | 2026-10-28 | 8.4 High |
| NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure. | ||||
| CVE-2026-65145 | 1 Nvidia | 1 Nemo Agent Toolkit | 2026-10-28 | 10 Critical |
| NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | ||||
| CVE-2026-47486 | 1 Nvidia | 1 Physx | 2026-10-28 | 7.8 High |
| NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure. | ||||
| CVE-2026-15586 | 1 İdvlabs Software And Consulting Services Inc. | 1 Ontime | 2026-10-28 | 5.3 Medium |
| Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2026-92546 | 1 Keepnet Labs Cybersecurity | 1 Agentic Ai / Agentic Ally | 2026-10-28 | 7.5 High |
| Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e. | ||||
| CVE-2026-117558 | 1 Ai-sdlc-framework | 1 Ai-sdlc | 2026-10-28 | 7.8 High |
| The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is interpolated into gh issue view or gh pr view commands run via execSync(), letting prompt-injected agents execute commands as the MCP server user. | ||||
| CVE-2026-117559 | 1 Hyperb1iss | 1 Droidmind | 2026-10-28 | 7.8 High |
| DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices. | ||||
| CVE-2026-117560 | 1 Atxp | 1 Gemini-cli-extension | 2026-10-28 | 7.8 High |
| ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user. | ||||
| CVE-2026-117561 | 1 Codefriar | 1 Sf-mcp | 2026-10-28 | 7.8 High |
| Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize backticks, $() substitution, and other shell metacharacters, these values reach execSync in executeSfCommand and run as the MCP server user. | ||||
| CVE-2026-117562 | 1 Anyant | 1 Rssant | 2026-10-28 | 5.3 Medium |
| rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story_get endpoint. Because UnionStory.get_by_feed_offset ignores the only_publish flag, attackers can enumerate feed IDs and offsets to retrieve private feed stories. | ||||
| CVE-2026-117564 | 1 Buqiyuan | 1 Nest-admin | 2026-10-28 | 9.8 Critical |
| nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access. | ||||
| CVE-2026-117565 | 1 Artalkjs | 1 Artalk | 2026-10-28 | 5.3 Medium |
| Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a page_key to an internal URL, which GetTitleByURL fetches after only scheme validation, then read the page title through the public comment list. | ||||
| CVE-2026-117567 | 1 Horw | 1 Esp-mcp | 2026-10-28 | 7.8 High |
| esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port, project_path, or project_name values passed to asyncio.create_subprocess_shell, executing commands as the MCP server user. | ||||
| CVE-2026-117568 | 1 Bitscorp-mcp | 1 Mcp-ffmpeg | 2026-10-28 | 7 High |
| mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backticks or a closing double quote in an existing file or directory name to break out of the child_process.exec command string and execute commands as the MCP server user. | ||||
| CVE-2026-117569 | 1 Alishahid74 | 1 Kali-gpt | 2026-10-28 | 7.8 High |
| Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP server user. | ||||
| CVE-2026-117570 | 1 Vorota-ai | 1 Nmap-mcp | 2026-10-28 | 5.2 Medium |
| Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script, running intrusive, brute-force, exploit, or denial-of-service scripts against scan targets. | ||||
| CVE-2026-117573 | 1 Masc-ucsc | 1 Hagent | 2026-10-28 | 7.8 High |
| hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated into arduino-cli and idf.py commands run with subprocess.run(shell=True) to execute commands as the MCP server user. | ||||
| CVE-2026-94346 | 1 Dell | 1 Powerprotect Data Domain Virtual Edition | 2026-10-28 | 7.2 High |
| PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. | ||||