1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 9:10 PM 16,356 active 1,443 known exploited

Catalog summary

16,356

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 9:10 PM 16,356 active 1,443 known exploited

Catalog summary

16,356

Active CVEs

8,457

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 4,001–4,050 of 16,356 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-59855High
    SiYuan: Store XSS To Rce via Asset.render
    CVSS 8.6
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  2. CVE-2026-59832High
    SiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db
    CVSS 7.7
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  3. CVE-2026-59833High
    SiYuan: Stored XSS to RCE in SiYuan via a per-attribute URL-scheme sanitizer gap in Lute (form action / SVG xlink:href)
    CVSS 8.6
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  4. CVE-2026-59834High
    SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content
    CVSS 7.5
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  5. CVE-2026-59831Medium
    GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
    CVSS 4.4
    cli/cligeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  6. CVE-2026-45780Medium
    Discourse: Private event sample invitees are serialized to non-invited event viewers
    CVSS 5.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  7. CVE-2026-53963High
    Discourse: Stored-XSS in 2FA delete confirmation modal
    CVSS 7.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  8. CVE-2026-59828Medium
    Discourse: Hidden post revisions leak through adjacent visible diffs
    CVSS 5.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  9. CVE-2026-44787High
    Discourse: Signup-time primary_group_id assignment grants whisperer access
    CVSS 8.2
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  10. CVE-2026-53962Medium
    Discourse: Insufficient SVG sanitization logic
    CVSS 5.4
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  11. CVE-2026-55424High
    Discourse: Topic featured link susceptible to stored XSS
    CVSS 7.4
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  12. CVE-2026-15276Low
    pdeljanov Symphonia Metadata denial of service
    CVSS 3.3
    pdeljanov/Symphoniageneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  13. CVE-2026-45788Medium
    Discourse: Secure uploads exposed by hotlinked image copying
    CVSS 6.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  14. CVE-2026-49256Medium
    Discourse: Hidden tag names leaked via category serializers
    CVSS 6.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  15. CVE-2026-46413Medium
    Discourse: Regular users can route multipart uploads into the admin backup store
    CVSS 6.5
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  16. CVE-2026-53961Medium
    Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)
    CVSS 6.5
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  17. CVE-2026-15274Low
    lo48576 fbxcel Node Header parser.rs denial of service
    CVSS 3.3
    lo48576/fbxcelgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  18. CVE-2026-15271High
    TOTOLINK EX200 Web boa.conf least privilege violation
    CVSS 7.5
    TOTOLINK/A3000RU, TOTOLINK/A3100R +5generic
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  19. CVE-2026-57054Medium
    Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
    CVSS 5.8
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  20. CVE-2026-57032Medium
    Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  21. CVE-2026-57031Medium
    Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect
    CVSS 4.7
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  22. CVE-2026-55604High
    @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
    CVSS 8.6
    arikusi/deepseek-mcp-servergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  23. CVE-2026-57030Medium
    Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS
    CVSS 5.9
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  24. CVE-2026-57029Medium
    Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
    CVSS 5.3
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  25. CVE-2026-55605Medium
    @arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpoint
    CVSS 5.3
    arikusi/deepseek-mcp-servergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  26. CVE-2026-57028High
    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
    CVSS 7.3
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  27. CVE-2026-57027Medium
    Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  28. CVE-2026-57026High
    Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
    CVSS 7.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-57024Medium
    Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
    CVSS 5.3
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  30. CVE-2026-57023High
    Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
    CVSS 7.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  31. CVE-2026-55689Medium
    OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
    CVSS 6.8
    github.com/openfga/openfga, openfga/openfgageneric · go
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2026-57022Medium
    Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE
    CVSS 5.9
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  33. CVE-2026-57021Medium
    Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
    CVSS 5.3
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  34. CVE-2026-57020Medium
    Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  35. CVE-2026-57019Medium
    Junos OS: MX Series: Specific traffic causes an FPC to reset
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  36. CVE-2026-55170Medium
    OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
    CVSS 5.4
    github.com/openfga/openfga, openfga/openfgageneric · go
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-33803Medium
    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
    CVSS 6.5
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  38. CVE-2026-33802Medium
    Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command
    CVSS 5.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  39. CVE-2026-33801Medium
    Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
    CVSS 6.5
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  40. CVE-2026-33800Medium
    Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 20, 2026 Fix availableView HOL analysis
  41. CVE-2026-33799Medium
    Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
    CVSS 4.3
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  42. CVE-2026-33794Medium
    Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
    CVSS 5.9
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  43. CVE-2026-55207High
    Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass
    CVSS 8.8
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  44. CVE-2026-21901Medium
    Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
    CVSS 4.4
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  45. CVE-2026-55208High
    Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
    CVSS 7.7
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  46. CVE-2026-55212High
    Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
    CVSS 7.1
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  47. CVE-2026-55865High
    Python Liquid: Infinite loop when parsing malformed `{% case %}` tags
    CVSS 7.1
    jg-rp/liquid, python-liquidgeneric · pip
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  48. CVE-2026-15270High
    D-link DIR-823G Web boa.conf least privilege violation
    CVSS 7.5
    D-link/DIR-823Ggeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026View HOL analysis
  49. CVE-2026-0275Low
    Prisma Browser: Local Privilege Escalation on macOS
    CVSS 2.0
    Palo Alto Networks/Prisma Browsergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  50. CVE-2026-0276High
    Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
    CVSS 7.8
    Palo Alto Networks/Cortex XDR Broker VMgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 16, 2026 Fix availableView HOL analysis
Page 81 of 328
Previous7980818283Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,457

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 4,001–4,050 of 16,356 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-59855High
    SiYuan: Store XSS To Rce via Asset.render
    CVSS 8.6
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  2. CVE-2026-59832High
    SiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db
    CVSS 7.7
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  3. CVE-2026-59833High
    SiYuan: Stored XSS to RCE in SiYuan via a per-attribute URL-scheme sanitizer gap in Lute (form action / SVG xlink:href)
    CVSS 8.6
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  4. CVE-2026-59834High
    SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content
    CVSS 7.5
    siyuan-note/siyuangeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  5. CVE-2026-59831Medium
    GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
    CVSS 4.4
    cli/cligeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  6. CVE-2026-45780Medium
    Discourse: Private event sample invitees are serialized to non-invited event viewers
    CVSS 5.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  7. CVE-2026-53963High
    Discourse: Stored-XSS in 2FA delete confirmation modal
    CVSS 7.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  8. CVE-2026-59828Medium
    Discourse: Hidden post revisions leak through adjacent visible diffs
    CVSS 5.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  9. CVE-2026-44787High
    Discourse: Signup-time primary_group_id assignment grants whisperer access
    CVSS 8.2
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  10. CVE-2026-53962Medium
    Discourse: Insufficient SVG sanitization logic
    CVSS 5.4
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  11. CVE-2026-55424High
    Discourse: Topic featured link susceptible to stored XSS
    CVSS 7.4
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026View HOL analysis
  12. CVE-2026-15276Low
    pdeljanov Symphonia Metadata denial of service
    CVSS 3.3
    pdeljanov/Symphoniageneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  13. CVE-2026-45788Medium
    Discourse: Secure uploads exposed by hotlinked image copying
    CVSS 6.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  14. CVE-2026-49256Medium
    Discourse: Hidden tag names leaked via category serializers
    CVSS 6.3
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  15. CVE-2026-46413Medium
    Discourse: Regular users can route multipart uploads into the admin backup store
    CVSS 6.5
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  16. CVE-2026-53961Medium
    Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)
    CVSS 6.5
    discourse/discoursegeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  17. CVE-2026-15274Low
    lo48576 fbxcel Node Header parser.rs denial of service
    CVSS 3.3
    lo48576/fbxcelgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  18. CVE-2026-15271High
    TOTOLINK EX200 Web boa.conf least privilege violation
    CVSS 7.5
    TOTOLINK/A3000RU, TOTOLINK/A3100R +5generic
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  19. CVE-2026-57054Medium
    Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
    CVSS 5.8
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  20. CVE-2026-57032Medium
    Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  21. CVE-2026-57031Medium
    Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect
    CVSS 4.7
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  22. CVE-2026-55604High
    @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
    CVSS 8.6
    arikusi/deepseek-mcp-servergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  23. CVE-2026-57030Medium
    Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS
    CVSS 5.9
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  24. CVE-2026-57029Medium
    Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
    CVSS 5.3
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  25. CVE-2026-55605Medium
    @arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpoint
    CVSS 5.3
    arikusi/deepseek-mcp-servergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  26. CVE-2026-57028High
    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
    CVSS 7.3
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  27. CVE-2026-57027Medium
    Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  28. CVE-2026-57026High
    Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
    CVSS 7.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-57024Medium
    Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
    CVSS 5.3
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  30. CVE-2026-57023High
    Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
    CVSS 7.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  31. CVE-2026-55689Medium
    OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
    CVSS 6.8
    github.com/openfga/openfga, openfga/openfgageneric · go
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2026-57022Medium
    Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE
    CVSS 5.9
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  33. CVE-2026-57021Medium
    Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
    CVSS 5.3
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  34. CVE-2026-57020Medium
    Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  35. CVE-2026-57019Medium
    Junos OS: MX Series: Specific traffic causes an FPC to reset
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  36. CVE-2026-55170Medium
    OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
    CVSS 5.4
    github.com/openfga/openfga, openfga/openfgageneric · go
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-33803Medium
    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
    CVSS 6.5
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  38. CVE-2026-33802Medium
    Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command
    CVSS 5.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  39. CVE-2026-33801Medium
    Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
    CVSS 6.5
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  40. CVE-2026-33800Medium
    Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
    CVSS 6.5
    Juniper Networks/Junos OSgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 20, 2026 Fix availableView HOL analysis
  41. CVE-2026-33799Medium
    Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
    CVSS 4.3
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  42. CVE-2026-33794Medium
    Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
    CVSS 5.9
    Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  43. CVE-2026-55207High
    Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass
    CVSS 8.8
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  44. CVE-2026-21901Medium
    Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
    CVSS 4.4
    Juniper Networks/Junos OS, Juniper Networks/Junos OS Evolvedgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  45. CVE-2026-55208High
    Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
    CVSS 7.7
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  46. CVE-2026-55212High
    Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
    CVSS 7.1
    pimcore/pimcoregeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 10, 2026View HOL analysis
  47. CVE-2026-55865High
    Python Liquid: Infinite loop when parsing malformed `{% case %}` tags
    CVSS 7.1
    jg-rp/liquid, python-liquidgeneric · pip
    PublishedJul 9, 2026First seen at HOL Jun 19, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  48. CVE-2026-15270High
    D-link DIR-823G Web boa.conf least privilege violation
    CVSS 7.5
    D-link/DIR-823Ggeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 13, 2026View HOL analysis
  49. CVE-2026-0275Low
    Prisma Browser: Local Privilege Escalation on macOS
    CVSS 2.0
    Palo Alto Networks/Prisma Browsergeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  50. CVE-2026-0276High
    Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
    CVSS 7.8
    Palo Alto Networks/Cortex XDR Broker VMgeneric
    PublishedJul 9, 2026First seen at HOL Jul 10, 2026Updated Jul 16, 2026 Fix availableView HOL analysis
Page 81 of 328
Previous7980818283Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard