search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-09-23 2026-09-23 2026-09-23 VU#754548 Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
2026-09-23 2026-09-23 2026-09-23 VU#273940 Enterprise Access Management EAM does not rotate RSA keys
2026-09-24 2026-09-24 2026-09-24 VU#676317 Norwegian Cruise Line door access controller contains an improper authentication vulnerability
2026-09-24 2026-09-24 2026-09-25 VU#234131 ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
2026-09-25 2026-09-25 2026-09-25 VU#699627 Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
2026-09-28 2026-09-28 2026-09-28 VU#762428 Authlib library contains a signature‑verification bypass vulnerability
2026-10-01 2026-10-01 2026-10-01 VU#553437 InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
2026-10-12 2026-10-12 2026-10-13 VU#162329 Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
2026-10-13 2026-10-13 2026-10-15 VU#157374 XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
2026-10-13 2026-10-13 2026-10-19 VU#573195 Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
2026-10-13 2026-10-13 2026-10-14 VU#382143 Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
2026-10-13 2026-10-13 2026-10-13 VU#456950 Komodo Periphery Agent Contains an OS Command Injection Vulnerability
2026-10-14 2026-10-14 2026-10-14 VU#166125 Bisheng has authentication bypass vulnerabilities
2026-10-14 2026-10-14 2026-10-19 VU#948176 Multiple TLS Libraries can Bypass Delegation Enforcement
2026-10-14 2026-10-14 2026-10-19 VU#410595 Google BoringSSL Name Constraints Bypass in SAN Validation Logic

Sponsored by CISA.