🔓 CVEs & KEV
CVE-2026-101090 — nezhahq nezha — CVSS 9.3 — Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uriNezha 2.2.3 ...
CVE-2026-101084 — obot-platform obot — CVSS 9.3 — obot before v0.21.1 Authorization Bypass via /mcp-connectobot versions before...
CVE-2026-101065 — obot-platform obot — CVSS 9.3 — Obot Quickstart Docker Deployment Unauthenticated Admin AccessObot is an open...
CVE-2026-101062 — obot-platform obot — CVSS 8.7 — Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registrati...
CVE-2026-101064 — obot-platform obot — CVSS 8.3 — Obot before v0.23.0 Server-Side Request Forgery via MCPObot before v0.23.0 co...
CVE-2026-96280 — Red Hat Enterprise Linux 10 — CVSS 7.5 — Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit sy...
CVE-2026-101086 — nezhahq nezha — CVSS 7.1 — Nezha Dashboard before 2.3.5 Task Type Validation BypassNezha Dashboard versi...
CVE-2026-101085 — nezhahq nezha — CVSS 7.1 — Nezha before 2.3.8 Denial of Service via Alert RuleNezha before 2.3.8 fails t...
CVE-2026-101063 — obot-platform obot — CVSS 6.9 — Obot before v0.23.0 Authentication Bypass via Registry APIObot versions befor...
CVE-2026-96279 — Red Hat Enterprise Linux 10 — CVSS 6.5 — Flatpak: flatpak: path traversal issue in oci archive extraction via hardlink...
CVE-2026-96281 — Red Hat Enterprise Linux 10 — CVSS 6.2 — Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks f...
CVE-2026-101088 — nezhahq nezha — CVSS 6.0 — Nezha before 2.3.1 Denial of Service via Concurrent Server DeleteNezha is a s...
📋 ADVISORIES
- 📄 Source for CISA adds exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 to KEV — nvd.nist.gov