Vulnerabilities
Summary — last 7 days
New vulnerabilities5,309▲ 1,890 vs. last week
Critical / high2,689▲ 1,039 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)630▲ 421 vs. last week
410,191 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Critical (9.1) | 0.22% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522. | |
| Awaiting Analysis | Critical (10) | 0.20% | — | Cisco License On-premAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… | |
| Awaiting Analysis | Critical (9.8) | 0.33% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… | |
| Awaiting Analysis | High (8.8) | 0.13% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | Critical (9.8) | 0.52% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+4 | 10/7/2026 | 10/8/2026 | The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause… | |
| Awaiting Analysis | High (8.8) | 0.18% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (7.4) | 0.15% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (8.2) | 0.23% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (7.5) | 0.25% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | Critical (9.8) | 0.45% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS)… | |
| Awaiting Analysis | Critical (9.6) | 0.19% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (8.8) | 0.14% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | Critical (9.8) | 0.31% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/9/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | High (8.6) | 0.28% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | High (8.6) | 0.28% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | High (8.6) | 0.28% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+4 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | Critical (9.8) | 0.28% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | Critical (9.1) | 0.58% | — | Cisco License Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to… | |
| Awaiting Analysis | High (8.8) | 0.34% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+4 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | Medium (4.9) | 0.37% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient validation of… | |
| Awaiting Analysis | Medium (4.9) | 0.52% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user-supplied… | |
| Awaiting Analysis | Critical (9.8) | 0.42% | — | HomerAI | 10/7/2026 | 10/10/2026 | Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under `/api/v1`,… | |
| Awaiting Analysis | Critical (9.8) | 0.65% | — | Sipcapture HomerAI | 10/7/2026 | 10/8/2026 | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change… | |
| Awaiting Analysis | High (8.1) | 0.34% | — | HomerAI | 10/7/2026 | 10/8/2026 | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user can execute arbitrary… | |
| Deferred | Critical (9.1) | 0.46% | — | PraisonaiAI | 10/7/2026 | 10/7/2026 | PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server code by directly interpolating the `agents_file` parameter into an f-string that is then written to a file and executed via `subprocess.Popen()`. An attacker who controls the `agents_file` value (via… |