search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-09-01 2026-09-01 2026-09-24 VU#456290 Hugging Face Transformers library writes remote code to disk prior to consent check
2026-09-23 2026-09-23 2026-09-23 VU#754548 Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
2026-09-23 2026-09-23 2026-09-23 VU#273940 Enterprise Access Management EAM does not rotate RSA keys
2026-09-16 2026-09-16 2026-09-23 VU#369093 MLflow dspy and statsmodels flavors bypass pickle deserialization control
2026-09-03 2026-09-03 2026-09-22 VU#889462 Casdoor authentication server is vulnerable to authorization bypass
2026-09-22 2026-09-22 2026-09-22 VU#738147 Vendor-signed UEFI Shell applications allow Secure Boot bypass
2020-06-02 2020-06-01 2026-09-21 VU#636397 IP-in-IP protocol routes arbitrary traffic by default
2025-01-17 2025-01-17 2026-09-21 VU#199397 Insecure Implementation of Tunneling Protocols (GRE/IPIP/4in6/6in4)
2026-09-17 2026-09-17 2026-09-17 VU#280377 Dokploy is vulnerable to OS command injection
2026-09-16 2026-09-16 2026-09-16 VU#212479 Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
2026-08-21 2026-08-21 2026-09-15 VU#756733 Retraction of "Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability"
2026-09-11 2026-09-11 2026-09-11 VU#369611 ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
2026-06-18 2026-06-18 2026-09-09 VU#457458 Vendor-signed UEFI applications found vulnerable to Secure Boot bypass
2026-09-08 2026-09-08 2026-09-08 VU#718077 UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
2026-09-08 2026-09-08 2026-09-08 VU#859658 Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis