CVEs published in November 2026
1,109 tracked CVEs from 13 vendors had their first vendor advisory published in November 2026: 43 critical, 709 high, 7 in CISA KEV. Newest first.
723 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-105560High
Windows DHCP Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105559Medium
Windows Active Directory Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105558High
Windows Deployment Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105557Medium
Windows DHCP Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105554High
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105553High
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105552Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105551High
Windows NetBIOS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105549Medium
Windows Smart Card Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105547High
Windows Setup and Deployment Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105546High
Windows Management Instrumentation Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105545High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105543High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105542High
Windows NTFS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105541High
Windows Audio Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105540High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105537Medium
Mailslot File System Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105534High
Windows Storage Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105533High
Windows COM Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105532High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105531Medium
Windows Print Spooler Components Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105530Medium
Windows System Events Broker Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105529High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105528High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105527Medium
Windows Encrypting File System (EFS) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105526High
Winsock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105525High
Windows Network Connection Broker Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105524High
Windows Management Instrumentation Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105522High
Winlogon Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105520High
Windows DNS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105518High
Windows iSCSI Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105515High
Windows Message Queuing Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105513High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105512High
Microsoft QUIC Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105511High
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105510High
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105507High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105506Medium
Windows Shell Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105505High
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105504High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105503High
Windows Management Instrumentation Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105501High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105499High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105498High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105497High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105496High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105495High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105493High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105492Medium
Microsoft Remote Registry Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105491High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105490High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105028High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105026High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105025High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105024High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105023High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105022High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105021High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105020High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105018Medium
Windows Partition Management Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105017High
Volume Shadow Copy Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-103571High
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102219High
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102200Medium
Windows NTFS Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-100223High
Windows NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-119078High
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output
Apache · 1 advisory - Added
The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names
Apache · 1 advisory - Added
CVE-2026-120367High
Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
CVE-2026-123753High
Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
CVE-2026-123766Medium
Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java
Apache · 1 advisory - Added
Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
CVE-2026-120761High
Improper Restriction of XML External Entity Reference vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
CVE-2026-120832Medium
Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java
Apache · 1 advisory - Added
CVE-2026-118196Critical
OAuth 1 rebinding vulnerability in Apache Allura
Apache · 1 advisory - Added
CVE-2026-82436High
Apache Storm: Description `DefaultStateSerializer`, used to persist and restore stateful bolt checkpoints, configured Kryo with class registration disabled and an instantiation strategy that constructs objects without invoking their constructors, then deserialized whatever bytes the state store returned
Apache · 1 advisory - Added
CVE-2026-82440Medium
Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it
Apache · 1 advisory - Added
Apache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `ImportError.can_read` permission when the failing file has no registered DAG
Apache · 1 advisory - Added
CVE-2026-50204Medium
Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the secrets masker matched only on configured sensitive key names
Apache · 1 advisory - Added
CVE-2026-68982High
Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token
Apache · 1 advisory - Added
CVE-2026-76185High
Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide
Apache · 1 advisory - Added
CVE-2026-86829High
Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies
Apache · 1 advisory - Added
CVE-2026-82337Medium
Apache Airflow rebuilt deadline alert fields through generic deserialization, which imports and instantiates the class named in the serialized Dag, in the scheduler and API server
Apache · 1 advisory - Added
Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing `--description` on Variable commands, `--conn-extra`, and the inline `--password` of `airflow keycloak-auth-manager` commands
Apache · 1 advisory - Added
CVE-2026-96285Medium
Apache Airflow 3.3.1 shipped a fix for CVE-2026-67260 that checks the scheduler's decoded `next_kwargs` value is a dictionary, but performs that check only after deserializing the whole stored payload
Apache · 1 advisory - Added
Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was silently ignored and logout still reported success
Apache · 1 advisory - Added
The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's `ipaddress` module and then placed it into a shell command
Apache · 1 advisory - Added
CVE-2026-113504Medium
Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the masker — for example a Connection password or a Variable value — that appeared more than five containers deep under non-sensitive keys was shown in cleartext in task logs and rendered template fields
Apache · 1 advisory - Added
CVE-2026-107474High
Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext
Apache · 1 advisory - Added
CVE-2026-111395Medium
Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`
Apache · 1 advisory - Added
CVE-2026-111421High
Apache Airflow's Task Execution API stored XCom values written by a task without the reserved-key check applied elsewhere, so a Dag author's task could write an XCom that, when a user later viewed it through the API with deserialization enabled, made the API server instantiate classes from the `airflow.*` namespace with arguments the Dag author chose
Apache · 1 advisory - Added
Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under camelCase keys such as `privateKey`, `connectionString`, `webhookUrl` or `accessKey` — for example in a Connection's extra or a Variable — were not redacted in task logs, rendered template fields or API responses
Apache · 1 advisory - Added
CVE-2026-111453Medium
Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `dag_id` query parameter, but deleted the queued events of every Dag the caller could read
Apache · 1 advisory - Added
Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read
Apache · 1 advisory - Added
Apache Airflow's asynchronous connection test checked permissions when the test was queued — only create permission when the connection ID did not exist yet — but, when the test completed with `commit_on_success`, wrote the tested connection under that ID
Apache · 1 advisory - Added
CVE-2026-96656HighCISA KEV
Plex Media Server External Control of File Name or Path Vulnerability
Synology · 1 advisory - Added
CVE-2026-96655HighCISA KEV
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Synology · 1 advisory - Added
CVE-2026-96654HighCISA KEV
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Synology · 1 advisory - Added
CVE-2026-96652HighCISA KEV
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Synology · 1 advisory - Added
CVE-2026-19703High
weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential
SonicWall · 2 advisories