CVE Watch399,114 in full archive

Vulnerabilities exploitable today

14,783in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,748

New KEV · 24H0

Exploit Today ≥ 701,665

Distribution · last window

Critical
3,340
High
15,178
Medium
14,103
Low
1,353

Filters

Window

Severity

Flags

Vulnerabilities161–200 · 14,783

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1123965.9 MED

—

——0Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in ImagingLibTiffEncode; the error path then frees the output buffer without closing or clearing the TIFF handle, and later cleanup flushes through the write callback into freed memory, which can crash the process and may enable code execution. This issue is fixed in version 13.0.0.13h CVE-2026-112392—

—

——0Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.13h CVE-2026-1123616.3 MED

—

——0A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads to protection mechanism failure. The attack can be executed remotely. Upgrading to version 24.0.0 is sufficient to resolve this issue. The name of the patch is 9f9ffa288d4ad2632c1d5dd88272c699a592f4ec. You should upgrade the affected component.13h CVE-2026-1123608.0 HIG

—

——0A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.13h CVE-2026-1123584.1 MED

—

——0A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet/serializers.py of the component APIv1. Executing a manipulation of the argument img_url/image_url can lead to server-side request forgery. The attack can be launched remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The vendor confirms: "[T]he fix (destination IP validation, redirect re-checks, timeout and size limit on remote image download) is already planned in our v2 API, which replaces the affected v1 endpoints. The v1 API, including the three affected serializers, will be removed in our next major release."13h CVE-2026-1122617.8 HIG

—

——0A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.13h CVE-2026-1122587.8 HIG

—

——0A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.13h CVE-2026-1122577.8 HIG

—

——0A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.13h CVE-2026-105815—

—

——0TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated adjacent-network attacker to establish encrypted media sessions without knowledge of the device account password. Successful exploitation may disclose credential and cryptographic material and allow unauthorized access to encrypted media sessions.13h CVE-2026-105814—

—

——0TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including pan-tilt-zoom control, to be executed without a valid authenticated session. Successful exploitation may allow an unauthenticated attacker on the adjacent network to perform protected camera operations, including pan-tilt-zoom (PTZ) control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.13h CVE-2024-54657—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54656—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54655—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54654—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54653—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54652—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54651—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54650—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54649—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54648—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54647—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54646—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54645—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54644—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54643—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54642—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54641—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54640—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54639—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54638—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54637—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54636—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54635—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54634—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54633—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54632—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54631—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54630—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54629—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h CVE-2024-54628—

—

——0Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.13h