--- title: "CVE Database: search vulnerabilities by CVE ID | CubePath" description: "Look up any CVE ID and see its official description, CVSS score, EPSS exploit prediction and CISA Known Exploited Vulnerabilities status, from the CVE Program." language: en source: https://cubepath.com/security/cve --- # CVE Database: search vulnerabilities by CVE ID | CubePath ## Recently added to CISA KEV The latest entries of the Known Exploited Vulnerabilities catalog. [See the full catalog](https://cubepath.com/security/cve/kev) - [CVE-2026-102895 Added Nov 9, 2026 GPUStack Improper Authentication Vulnerability GPUStack / GPUStack](https://cubepath.com/security/cve/CVE-2026-102895) - [CVE-2026-116779 Added Nov 9, 2026 SignalWire FreeSwitch Code Injection Vulnerability SignalWire / FreeSwitch](https://cubepath.com/security/cve/CVE-2026-116779) - [CVE-2026-123158 Added Nov 9, 2026 OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability OpenBSD / OpenSSH](https://cubepath.com/security/cve/CVE-2026-123158) - [CVE-2026-123218 Added Nov 9, 2026 IBM Aspera Faspex Incorrect Authorization Vulnerability IBM / Aspera Faspex](https://cubepath.com/security/cve/CVE-2026-123218) - [CVE-2026-19868 Added Nov 6, 2026 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall / SonicOS SSLVPN](https://cubepath.com/security/cve/CVE-2026-19868) - [CVE-2024-27834 Added Nov 4, 2026 Apple Multiple Products Improper Authentication Vulnerability Apple / Multiple Products](https://cubepath.com/security/cve/CVE-2024-27834) - [CVE-2026-119977 Added Nov 3, 2026 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability WordPress / WordPress Core](https://cubepath.com/security/cve/CVE-2026-119977) - [CVE-2026-111357 Added Oct 30, 2026 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Ivanti / Connect Secure](https://cubepath.com/security/cve/CVE-2026-111357) - [CVE-2026-118527 Added Oct 30, 2026 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Ivanti / Connect Secure](https://cubepath.com/security/cve/CVE-2026-118527) - [CVE-2026-76418 Added Oct 29, 2026 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software](https://cubepath.com/security/cve/CVE-2026-76418) - [CVE-2026-97229 Added Oct 29, 2026 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability GitLab / Community Edition and Enterprise Edition](https://cubepath.com/security/cve/CVE-2026-97229) - [CVE-2026-41709 Added Oct 28, 2026 Broadcom VMWare ESX Insufficient Logging Vulnerability Broadcom / VMware ESX](https://cubepath.com/security/cve/CVE-2026-41709) - [CVE-2026-46300 Added Oct 28, 2026 Linux Kernel Missing Initialization of a Variable Vulnerability Linux / Kernel](https://cubepath.com/security/cve/CVE-2026-46300) - [CVE-2026-111497 Added Oct 27, 2026 Google Brotli Unchecked Return Value Vulnerability Google / Brotli](https://cubepath.com/security/cve/CVE-2026-111497) - [CVE-2026-48356 Added Oct 27, 2026 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe / Commerce and Magento](https://cubepath.com/security/cve/CVE-2026-48356) - [CVE-2026-109618 Added Oct 26, 2026 PHP Memory Corruption Vulnerability PHP Group / PHP](https://cubepath.com/security/cve/CVE-2026-109618) - [CVE-2026-109619 Added Oct 26, 2026 PHP Stale Internal Request-State Vulnerability PHP Group / PHP](https://cubepath.com/security/cve/CVE-2026-109619) - [CVE-2026-110447 Added Oct 23, 2026 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora / Collabora Online – Built-in CODE Server](https://cubepath.com/security/cve/CVE-2026-110447) - [CVE-2026-114625 Added Oct 23, 2026 Arista VeloCloud Orchestrator SQL Injection Vulnerability Arista / VeloCloud Orchestrator](https://cubepath.com/security/cve/CVE-2026-114625) - [CVE-2026-106931 Added Oct 20, 2026 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability EG Secure Solutions / SiteGuard Server Edition](https://cubepath.com/security/cve/CVE-2026-106931) - [CVE-2026-110936 Added Oct 20, 2026 Siemens Software Center Uncontrolled Search Path Element Vulnerability Siemens / Software Center](https://cubepath.com/security/cve/CVE-2026-110936) - [CVE-2026-96652 Added Oct 20, 2026 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex / Media Server](https://cubepath.com/security/cve/CVE-2026-96652) - [CVE-2026-96654 Added Oct 20, 2026 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability Plex / Media Server](https://cubepath.com/security/cve/CVE-2026-96654) - [CVE-2026-96655 Added Oct 20, 2026 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex / Media Server](https://cubepath.com/security/cve/CVE-2026-96655) - [CVE-2026-96656 Added Oct 20, 2026 Plex Media Server External Control of File Name or Path Vulnerability Plex / Media Server](https://cubepath.com/security/cve/CVE-2026-96656) Where the data comes from Each page combines three public sources and keeps no database of its own. Records (description, CVSS, affected products and references) come from the CVE Program and are read when someone opens the page, with copies kept for up to 75 minutes. Known exploited status comes from the CISA KEV catalog, refreshed every 6 hours. Exploit prediction comes from FIRST EPSS, refreshed daily. [Known Exploited Vulnerabilities catalog](https://cubepath.com/security/cve/kev) · [Sources and licenses](https://cubepath.com/security/cve/legal) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)