Archive

November 2026

Vulnerabilities first published in this month (UTC), newest first.

← October 2026 2026 / November

1102
2473
3780
4395
5456
6465
7474
8323
9525
102065
11692
12388
13516
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.8

CVE-2026-125350 Exploited Public exploit

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code insid…

Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi

Nov 10, 2026
KEV Nov 10, 2026
High 7.5

CVE-2026-19868 Exploited Public exploit

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…

SonicWall SonicOS Network devices

Nov 6, 2026
KEV Nov 6, 2026
High 8.1

CVE-2026-123158 Exploited Public exploit EPSS 19%

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentic…

OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine

Nov 5, 2026
KEV Nov 9, 2026
High 8.6

CVE-2026-111560 Exploited

OS Command Injection in Barracuda Appliances

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the craf…

Barracuda Networks Barracuda Email Security Gateway (ESG) Barracuda Web Application Firewall (WAF) Barracuda Message Archiver (BMA)

Nov 2, 2026
KEV Nov 10, 2026