1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 7:40 PM 16,269 active 1,443 known exploited

Catalog summary

16,269

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 7:40 PM 16,269 active 1,443 known exploited

Catalog summary

16,269

Active CVEs

8,418

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 1,251–1,300 of 16,269 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-47617High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  2. CVE-2026-70470Critical
    Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
    CVSS 9.5
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  3. CVE-2026-47616High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  4. CVE-2026-47615High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  5. CVE-2026-18790Low
    Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds
    CVSS 3.3
    Systerel/S2OPCgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  6. CVE-2026-47763Medium
    pdm: Project-Local State and Config Writes Follow Symlinks
    CVSS 6.8
    pdm, pdm-project/pdmgeneric · pip
    PublishedAug 4, 2026First seen at HOL Jun 11, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2026-47614High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  8. CVE-2026-47613High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  9. CVE-2026-47612High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  10. CVE-2026-24255High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  11. CVE-2026-24254Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  12. CVE-2026-69264Critical
    Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  13. CVE-2026-24253High
    CISA ADP Vulnrichment
    CVSS 8.2
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  14. CVE-2026-47487Medium
    CISA ADP Vulnrichment
    CVSS 4.4
    NVIDIA/Triton Inference Servergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  15. CVE-2026-18788High
    Trippo ResponsiveFilemanager dialog.php unrestricted upload
    CVSS 7.3
    Trippo/ResponsiveFilemanagergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  16. CVE-2026-18787High
    GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection
    CVSS 8.8
    GL.iNet/AX1800generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  17. CVE-2026-15314High
    Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
    CVSS 7.1
    TP-Link Systems Inc./P110 v1generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026 Fix availableView HOL analysis
  18. CVE-2026-69263High
    Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
    CVSS 8.7
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  19. CVE-2026-69262High
    Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
    CVSS 7.1
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  20. CVE-2026-48121Medium
    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access
    CVSS 6.7
    @langchain/langgraph-checkpoint-mongodb, langchain-ai/langgraphjsgeneric · npm
    PublishedAug 4, 2026First seen at HOL Jun 19, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  21. CVE-2026-18785Medium
    o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free
    CVSS 5.3
    o6/open62541generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  22. CVE-2026-63456Critical
    Authentication bypass via spoofed HTTP headers Orchestrator REST API
    CVSS 9.8
    Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  23. CVE-2026-63455Critical
    Authentication bypass via spoofed HTTP headers Orchestrator REST API
    CVSS 9.8
    Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  24. CVE-2026-18784Medium
    o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow
    CVSS 5.3
    o6/open62541generic
    PublishedAug 4, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  25. CVE-2026-18775Medium
    NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  26. CVE-2026-69259Critical
    Flowise RCE via SQLite Record Manager Node
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  27. CVE-2026-18774Medium
    NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  28. CVE-2026-56848Unknown severity
    CISA ADP Vulnrichment
    Not scoredSource severity not reported
    nodejs/nodegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  29. CVE-2026-69258High
    Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
    CVSS 8.8
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2026-58072Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2026-58074High
    CISA ADP Vulnrichment
    CVSS 8.6
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  32. CVE-2026-64630Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  33. CVE-2026-58073Critical
    CISA ADP Vulnrichment
    CVSS 9.5
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2026-64631High
    CISA ADP Vulnrichment
    CVSS 8.5
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  35. CVE-2026-58075High
    CISA ADP Vulnrichment
    CVSS 8.7
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  36. CVE-2026-64633Critical
    CISA ADP Vulnrichment
    CVSS 10.0
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  37. CVE-2026-64634High
    CISA ADP Vulnrichment
    CVSS 8.4
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  38. CVE-2026-58071High
    CISA ADP Vulnrichment
    CVSS 8.2
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  39. CVE-2026-58067High
    CISA ADP Vulnrichment
    CVSS 8.7
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  40. CVE-2026-15920Medium
    Potential cross-site scripting via URLField values in the admin
    CVSS 6.1
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  41. CVE-2026-15830Medium
    Potential denial-of-service vulnerability via nested geometry collections
    CVSS 5.3
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  42. CVE-2026-15337Medium
    Potential denial-of-service vulnerability in check_for_language()
    CVSS 5.3
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  43. CVE-2026-15307High
    Server-side file-write and request forgery via spatial lookups
    CVSS 8.8
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-69256Critical
    Flowise: Remote Code Execution Vulnerability in CSVAgent
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-69255Critical
    Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
    CVSS 9.2
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  46. CVE-2026-10032Medium
    Arbitrary JavaScript Execution via openUrl in @a2ui/web_core
    CVSS 6.1
    Google/@a2ui/web_coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  47. CVE-2026-69254Critical
    Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  48. CVE-2026-69098Critical
    kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization
    CVSS 9.8
    Cinnamon/kotaemongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  49. CVE-2026-69253Critical
    Flowise Sandbox Escape to RCE
    CVSS 9.0
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-25292High
    Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
    CVSS 7.6
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
Page 26 of 326
Previous2425262728Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,418

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 1,251–1,300 of 16,269 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-47617High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  2. CVE-2026-70470Critical
    Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
    CVSS 9.5
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  3. CVE-2026-47616High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  4. CVE-2026-47615High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  5. CVE-2026-18790Low
    Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds
    CVSS 3.3
    Systerel/S2OPCgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  6. CVE-2026-47763Medium
    pdm: Project-Local State and Config Writes Follow Symlinks
    CVSS 6.8
    pdm, pdm-project/pdmgeneric · pip
    PublishedAug 4, 2026First seen at HOL Jun 11, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2026-47614High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  8. CVE-2026-47613High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  9. CVE-2026-47612High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  10. CVE-2026-24255High
    CISA ADP Vulnrichment
    CVSS 7.5
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  11. CVE-2026-24254Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  12. CVE-2026-69264Critical
    Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  13. CVE-2026-24253High
    CISA ADP Vulnrichment
    CVSS 8.2
    NVIDIA/Dynamogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026View HOL analysis
  14. CVE-2026-47487Medium
    CISA ADP Vulnrichment
    CVSS 4.4
    NVIDIA/Triton Inference Servergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  15. CVE-2026-18788High
    Trippo ResponsiveFilemanager dialog.php unrestricted upload
    CVSS 7.3
    Trippo/ResponsiveFilemanagergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  16. CVE-2026-18787High
    GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection
    CVSS 8.8
    GL.iNet/AX1800generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  17. CVE-2026-15314High
    Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
    CVSS 7.1
    TP-Link Systems Inc./P110 v1generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 7, 2026 Fix availableView HOL analysis
  18. CVE-2026-69263High
    Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
    CVSS 8.7
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  19. CVE-2026-69262High
    Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
    CVSS 7.1
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  20. CVE-2026-48121Medium
    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access
    CVSS 6.7
    @langchain/langgraph-checkpoint-mongodb, langchain-ai/langgraphjsgeneric · npm
    PublishedAug 4, 2026First seen at HOL Jun 19, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  21. CVE-2026-18785Medium
    o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free
    CVSS 5.3
    o6/open62541generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  22. CVE-2026-63456Critical
    Authentication bypass via spoofed HTTP headers Orchestrator REST API
    CVSS 9.8
    Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  23. CVE-2026-63455Critical
    Authentication bypass via spoofed HTTP headers Orchestrator REST API
    CVSS 9.8
    Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  24. CVE-2026-18784Medium
    o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow
    CVSS 5.3
    o6/open62541generic
    PublishedAug 4, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  25. CVE-2026-18775Medium
    NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  26. CVE-2026-69259Critical
    Flowise RCE via SQLite Record Manager Node
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  27. CVE-2026-18774Medium
    NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  28. CVE-2026-56848Unknown severity
    CISA ADP Vulnrichment
    Not scoredSource severity not reported
    nodejs/nodegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  29. CVE-2026-69258High
    Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
    CVSS 8.8
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2026-58072Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2026-58074High
    CISA ADP Vulnrichment
    CVSS 8.6
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  32. CVE-2026-64630Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  33. CVE-2026-58073Critical
    CISA ADP Vulnrichment
    CVSS 9.5
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2026-64631High
    CISA ADP Vulnrichment
    CVSS 8.5
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  35. CVE-2026-58075High
    CISA ADP Vulnrichment
    CVSS 8.7
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  36. CVE-2026-64633Critical
    CISA ADP Vulnrichment
    CVSS 10.0
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  37. CVE-2026-64634High
    CISA ADP Vulnrichment
    CVSS 8.4
    Veeam/ONEgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  38. CVE-2026-58071High
    CISA ADP Vulnrichment
    CVSS 8.2
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  39. CVE-2026-58067High
    CISA ADP Vulnrichment
    CVSS 8.7
    Veeam/Service Provider Consolegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  40. CVE-2026-15920Medium
    Potential cross-site scripting via URLField values in the admin
    CVSS 6.1
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  41. CVE-2026-15830Medium
    Potential denial-of-service vulnerability via nested geometry collections
    CVSS 5.3
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  42. CVE-2026-15337Medium
    Potential denial-of-service vulnerability in check_for_language()
    CVSS 5.3
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  43. CVE-2026-15307High
    Server-side file-write and request forgery via spatial lookups
    CVSS 8.8
    djangoproject/Djangogeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-69256Critical
    Flowise: Remote Code Execution Vulnerability in CSVAgent
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-69255Critical
    Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
    CVSS 9.2
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  46. CVE-2026-10032Medium
    Arbitrary JavaScript Execution via openUrl in @a2ui/web_core
    CVSS 6.1
    Google/@a2ui/web_coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  47. CVE-2026-69254Critical
    Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
    CVSS 9.4
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  48. CVE-2026-69098Critical
    kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization
    CVSS 9.8
    Cinnamon/kotaemongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  49. CVE-2026-69253Critical
    Flowise Sandbox Escape to RCE
    CVSS 9.0
    FlowiseAI/Flowise, flowise +1generic · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-25292High
    Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
    CVSS 7.6
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
Page 26 of 326
Previous2425262728Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard