--- title: "CVE Database: search vulnerabilities by CVE ID | CubePath" description: "Look up any CVE ID and see its official description, CVSS score, EPSS exploit prediction and CISA Known Exploited Vulnerabilities status, from the CVE Program." language: en source: https://cubepath.com/security/cve --- # CVE Database: search vulnerabilities by CVE ID | CubePath ## Recently added to CISA KEV The latest entries of the Known Exploited Vulnerabilities catalog. [See the full catalog](https://cubepath.com/security/cve/kev) - [CVE-2026-111560 Added Nov 10, 2026 Barracuda Networks Multiple Products OS Command Injection Vulnerability Barracuda Networks / Multiple Products](https://cubepath.com/security/cve/CVE-2026-111560) - [CVE-2026-111793 Added Nov 10, 2026 Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability Openwave Messaging Limited / Webtop Media Transcoder](https://cubepath.com/security/cve/CVE-2026-111793) - [CVE-2026-116606 Added Nov 10, 2026 Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability Barracuda Networks / Barracuda Email Security Gateway (ESG)](https://cubepath.com/security/cve/CVE-2026-116606) - [CVE-2026-124194 Added Nov 10, 2026 Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability Microsoft / Office](https://cubepath.com/security/cve/CVE-2026-124194) - [CVE-2026-125350 Added Nov 10, 2026 Google Chromium Use-After-Free Vulnerability Google / Chromium](https://cubepath.com/security/cve/CVE-2026-125350) - [CVE-2026-20320 Added Nov 10, 2026 Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability Cisco / BroadWorks](https://cubepath.com/security/cve/CVE-2026-20320) - [CVE-2026-102895 Added Nov 9, 2026 GPUStack Improper Authentication Vulnerability GPUStack / GPUStack](https://cubepath.com/security/cve/CVE-2026-102895) - [CVE-2026-116779 Added Nov 9, 2026 SignalWire FreeSwitch Code Injection Vulnerability SignalWire / FreeSwitch](https://cubepath.com/security/cve/CVE-2026-116779) - [CVE-2026-123158 Added Nov 9, 2026 OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability OpenBSD / OpenSSH](https://cubepath.com/security/cve/CVE-2026-123158) - [CVE-2026-123218 Added Nov 9, 2026 IBM Aspera Faspex Incorrect Authorization Vulnerability IBM / Aspera Faspex](https://cubepath.com/security/cve/CVE-2026-123218) - [CVE-2026-19868 Added Nov 6, 2026 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall / SonicOS SSLVPN](https://cubepath.com/security/cve/CVE-2026-19868) - [CVE-2024-27834 Added Nov 4, 2026 Apple Multiple Products Improper Authentication Vulnerability Apple / Multiple Products](https://cubepath.com/security/cve/CVE-2024-27834) - [CVE-2026-119977 Added Nov 3, 2026 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability WordPress / WordPress Core](https://cubepath.com/security/cve/CVE-2026-119977) - [CVE-2026-111357 Added Oct 30, 2026 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Ivanti / Connect Secure](https://cubepath.com/security/cve/CVE-2026-111357) - [CVE-2026-118527 Added Oct 30, 2026 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Ivanti / Connect Secure](https://cubepath.com/security/cve/CVE-2026-118527) - [CVE-2026-76418 Added Oct 29, 2026 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software](https://cubepath.com/security/cve/CVE-2026-76418) - [CVE-2026-97229 Added Oct 29, 2026 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability GitLab / Community Edition and Enterprise Edition](https://cubepath.com/security/cve/CVE-2026-97229) - [CVE-2026-41709 Added Oct 28, 2026 Broadcom VMWare ESX Insufficient Logging Vulnerability Broadcom / VMware ESX](https://cubepath.com/security/cve/CVE-2026-41709) - [CVE-2026-46300 Added Oct 28, 2026 Linux Kernel Missing Initialization of a Variable Vulnerability Linux / Kernel](https://cubepath.com/security/cve/CVE-2026-46300) - [CVE-2026-111497 Added Oct 27, 2026 Google Brotli Unchecked Return Value Vulnerability Google / Brotli](https://cubepath.com/security/cve/CVE-2026-111497) - [CVE-2026-48356 Added Oct 27, 2026 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe / Commerce and Magento](https://cubepath.com/security/cve/CVE-2026-48356) - [CVE-2026-109618 Added Oct 26, 2026 PHP Memory Corruption Vulnerability PHP Group / PHP](https://cubepath.com/security/cve/CVE-2026-109618) - [CVE-2026-109619 Added Oct 26, 2026 PHP Stale Internal Request-State Vulnerability PHP Group / PHP](https://cubepath.com/security/cve/CVE-2026-109619) - [CVE-2026-110447 Added Oct 23, 2026 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora / Collabora Online – Built-in CODE Server](https://cubepath.com/security/cve/CVE-2026-110447) - [CVE-2026-114625 Added Oct 23, 2026 Arista VeloCloud Orchestrator SQL Injection Vulnerability Arista / VeloCloud Orchestrator](https://cubepath.com/security/cve/CVE-2026-114625) Where the data comes from Each page combines three public sources and keeps no database of its own. Records (description, CVSS, affected products and references) come from the CVE Program and are read when someone opens the page, with copies kept for up to 75 minutes. Known exploited status comes from the CISA KEV catalog, refreshed every 6 hours. Exploit prediction comes from FIRST EPSS, refreshed daily. [Known Exploited Vulnerabilities catalog](https://cubepath.com/security/cve/kev) · [Sources and licenses](https://cubepath.com/security/cve/legal) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)