Skip to the main content
Patchbay
Ask a question

Incidents

Critical CVEs

From cve.now

  1. CVE-2026-75869: Zoho DDI Central remote command injection in PowerShell DHCP handling

    Posted 13 November 2026 0 replies

  2. CVE-2026-123039: Check Point local privilege escalation to root in DynamicCLI daemon

    Posted 13 November 2026 0 replies

  3. CVE-2026-114713: UnrealIRCd remote command injection in labeled-response module

    Posted 13 November 2026 0 replies

  4. CVE-2026-128014: FrankenPHP out-of-bounds write in bundled Brotli decoder

    Posted 13 November 2026 0 replies

  5. CVE-2026-128023: FrankenPHP authentication bypass in header name handling

    Posted 13 November 2026 0 replies

  6. CVE-2026-128027: FrankenPHP remote code execution via stale libraries in base image

    Posted 13 November 2026 0 replies

  7. CVE-2026-120864: Citrix NetScaler ADC memory overflow in ICA proxy enables denial of service

    Posted 13 November 2026 0 replies

  8. CVE-2026-111334: Citrix NetScaler ADC denial of service in Endpoint Analysis (EPA)

    Posted 13 November 2026 0 replies

  9. CVE-2026-107415: Citrix NetScaler ADC denial of service in email OTP authentication

    Posted 13 November 2026 0 replies

  10. CVE-2026-107412: Citrix NetScaler ADC denial of service via memory overflows in gateway

    Posted 13 November 2026 0 replies

  11. CVE-2026-107410: Citrix NetScaler denial of service via memory overflow in Push

    Posted 13 November 2026 0 replies

  12. CVE-2026-107409: Citrix NetScaler denial of service via memory corruption in DoH

    Posted 13 November 2026 0 replies

  13. CVE-2026-107408: Citrix NetScaler denial of service in DNS and DoH handling

    Posted 13 November 2026 0 replies

  14. CVE-2026-107407: Citrix NetScaler denial of service via memory overflow in SMPP traffic

    Posted 13 November 2026 0 replies

  15. CVE-2026-120868: Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler…

    Posted 13 November 2026 0 replies

  16. CVE-2026-120869: An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance

    Posted 13 November 2026 0 replies

  17. CVE-2026-126872: Google Chrome remote code execution via sandbox escape in FileSystem

    Posted 13 November 2026 0 replies

  18. CVE-2026-126842: Google Chrome sandbox escape via use-after-free in ANGLE

    Posted 13 November 2026 0 replies

  19. CVE-2026-126909: Google Chrome remote code execution via use-after-free in Passwords

    Posted 13 November 2026 0 replies

  20. CVE-2026-126912: Google Chrome remote code execution in Skia

    Posted 13 November 2026 0 replies

  21. CVE-2026-126859: Google Chrome code execution via link following in FileSystem

    Posted 13 November 2026 0 replies

  22. CVE-2026-126846: Google Chrome remote code execution in Skia

    Posted 13 November 2026 0 replies

  23. CVE-2026-126885: Google Chrome remote code execution in ServiceWorker

    Posted 13 November 2026 0 replies

  24. CVE-2026-126229: Fortinet authorization bypass in VDOM access controls

    Posted 13 November 2026 0 replies

  25. CVE-2026-126262: Fortinet FortiAnalyzer remote code execution via SQL injection in OFTP

    Posted 13 November 2026 0 replies

Briefings

  1. Brotli CVE-2026-111497: exploited decoder flaw reaches Node.js, Python, .NET and more

    Live Checked 5 November 2026 0 replies

  2. PHP: CVE-2026-109618 and CVE-2026-109619 exploited, CVE-2026-115560 not yet fixed

    Live Checked 5 November 2026 0 replies

  3. eMudhra: private keys of 8 certificate authorities can be recovered

    Live Checked 5 November 2026 0 replies

  4. PingCAP TiDB Cloud: customer data copied with stolen credentials

    Live Checked 5 November 2026 0 replies

  5. Linux CVE-2026-98432: remote use-after-free in kernel TCP handling of IPv4 options

    Live Checked 5 November 2026 0 replies

  6. Citrix NetScaler CVE-2026-88771: exploited remote code execution without sign-in

    Live Checked 5 November 2026 0 replies