CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.
All High & Critical Critical High Exploited (KEV) Public exploit
-
CVE-2026-119777: Red Hat Enterprise Linux 10 (High, CVSS 7.8)
A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a…
-
CVE-2026-119718: Blender Foundation Blender (High, CVSS 8.5)
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file…
-
CVE-2026-119719: Blender Foundation Blender (High, CVSS 8.5)
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_vertical_flip(). Attackers can craft a .blend file…
-
CVE-2026-119722: Blender Foundation Blender (High, CVSS 8.5)
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a…
-
CVE-2026-104066: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with…
-
CVE-2026-104067: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched…
-
CVE-2026-104064: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with…
-
CVE-2026-104065: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when…
-
CVE-2026-104061: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a…
-
CVE-2026-104062: Scribus (High, CVSS 8.5)
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can…
-
High CVSS 7.1 Hands-On-Keyboard Crypttech Crypto and Informatics Technologies Industry and Trade Inc.
CVE-2026-86715: Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP (High, CVSS 7.1)
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This issue affects Vatos DLP: from 1.1.176 before…
-
CVE-2026-119578: Project-MONAI MONAI (High, CVSS 8.5)
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious…
-
CVE-2026-119528: Red Hat Enterprise Linux 10 (High, CVSS 7.8)
A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted…
-
CVE-2026-119586: SQLite (High, CVSS 8.5)
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a…
-
CVE-2026-119373: SQLite (High, CVSS 8.5)
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with…
-
CVE-2026-119374: SQLite (High, CVSS 8.5)
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a…
-
CVE-2026-119379: SQLite (High, CVSS 8.5)
SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table…
-
CVE-2026-114148: Microsoft .NET 10.0 installed on Linux (High, CVSS 7.8)
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
-
CVE-2026-15564: Red Hat JBoss Enterprise Application Platform 7 (High, CVSS 7.4)
Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects…
-
CVE-2026-118753: danoli3 FreeImage (High, CVSS 8.5)
FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF…
-
CVE-2026-118692: giuspen cherrytree (High, CVSS 7.1)
CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to execute commands by embedding shell metacharacters in web link URLs. When the non-default Custom Web Link Clicked…
-
CVE-2026-118752: danoli3 FreeImage (High, CVSS 8.5)
FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM…
-
CVE-2026-112357: GFI USA, LLC GFI KerioConnect (High, CVSS 8.5)
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the…
-
CVE-2026-118378: TabularisDB tabularis (High, CVSS 8.5)
Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI…
-
CVE-2026-48379: Adobe Substance 3D Painter (High, CVSS 7.8)
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
-
CVE-2026-113775: Autodesk Fusion (High, CVSS 7.8)
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion…
-
CVE-2026-102637: Autodesk Fusion (High, CVSS 7.1)
A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting (XSS) vulnerability in…
-
CVE-2026-102638: Autodesk Fusion (High, CVSS 7.1)
A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting (XSS)…
-
CVE-2026-104349: Adobe Creative Cloud Desktop Application (High, CVSS 7.3)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this…
-
CVE-2026-102636: Autodesk Fusion (High, CVSS 7.1)
A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application.…
-
CVE-2026-117602: spesmilo electrum (High, CVSS 8.6)
Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its…
-
CVE-2026-117567: horw esp-mcp (High, CVSS 8.5)
esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt…
-
CVE-2026-117568: bitscorp-mcp mcp-ffmpeg (High, CVSS 7.3)
mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can…
-
CVE-2026-117569: alishahid74 kali-gpt (High, CVSS 8.5)
Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell…
-
CVE-2026-117573: masc-ucsc hagent (High, CVSS 8.5)
hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers…
-
CVE-2026-117560: atxp gemini-cli-extension (High, CVSS 8.5)
ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email…
-
CVE-2026-117561: codefriar sf-mcp (High, CVSS 8.5)
Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize…
-
CVE-2026-117558: ai-sdlc-framework ai-sdlc (High, CVSS 8.5)
The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is…
-
CVE-2026-117559: hyperb1iss droidmind (High, CVSS 8.5)
DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through…
-
CVE-2026-116816: ggml-org llama.cpp (High, CVSS 8.5)
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose negative…