Vulnerabilities
Summary — last 7 days
New vulnerabilities3,527▼ 1,287 vs. last week
Critical / high1,365▼ 1,397 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)710▲ 647 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.6) | 0.19% | — | Huawei OpenubmcAIHuawei IbmcAI | 10/13/2026 | 10/16/2026 | Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization… | |
| Modified | Medium (4.3) | 0.54% | — | Huawei Ibmc Firmware | 3/9/2018 | 6/17/2026 | Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure. | |
| Modified | High (7.5) | 1.7% | — | Libmcrypt | 1/17/2003 | 6/16/2026 | Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash). | |
| Modified | Medium (5) | 1.5% | — | Libmcrypt | 1/17/2003 | 6/16/2026 | Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool. |