CVE-2026-16681 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NVD · CVE récentes
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
2302Items
1708Last 7 days
209Today
924Critical + high
11/10/2026 19:32Last collection
CVE-2026-103755 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NVD · CVE récentes
CVE-2026-108269 — Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prio…
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certifi…
NVD · CVE récentesCWE-346
CVE-2026-108268 — Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation.…
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public…
NVD · CVE récentesCWE-346
CVE-2026-108267 — Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior…
Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate pub…
NVD · CVE récentesCWE-346
CVE-2026-92705 — Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automa…
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the…
CVSS 7.8
CVE-2026-62376 — Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset,…
Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table in plaintext. If an attacker gains…
CVSS 8.1
CVE-2026-62367 — Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an admi…
Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `emailfallback` option on an OpenID Connect provider, Vikunja links an SSO …
CVE-2026-57458 — Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited…
Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST /api/v1/oauth/authorize`, obtain an OAuth authorization cod…
CVSS 8.1
NVD · CVE récentesCWE-269
CVE-2026-108266 — Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding…
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was …
NVD · CVE récentesCWE-346
CVE-2026-108265 — Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to was…
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and clie…
NVD · CVE récentesCWE-346
CVE-2026-108264 — Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers…
Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app…
CVSS 9.1
NVD · CVE récentesCWE-1336