{"api_version":"v1","data":[{"canonical_url":"https://cvefeed.io/vuln/detail/CVE-2026-8332","excerpt":"CVE-2026-8332 TimePictra root password hardcoded in installation files Description A vulnerability in Microchip TimePictra. This issue affects TimePictra: before 12.0. INFO Published Date : Nov. 12, 2026, 6:19 a.m. Last ","id":417,"identifiers":["CVE-2026-8332"],"last_checked_at":1794467709,"publisher":"CVE Feed","source_published_at":1794441600,"title":"CVE-2026-8332 - TimePictra root password hardcoded in installation files"},{"canonical_url":"https://cvefeed.io/vuln/detail/CVE-2026-8331","excerpt":"CVE-2026-8331 TimePictra ermote code execution via file upload Description An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrai","id":416,"identifiers":["CVE-2026-8331"],"last_checked_at":1794467709,"publisher":"CVE Feed","source_published_at":1794441600,"title":"CVE-2026-8331 - TimePictra ermote code execution via file upload"},{"canonical_url":"https://cvefeed.io/vuln/detail/CVE-2026-8333","excerpt":"CVE-2026-8333 TimePictra Stored Cross-site Scripting Description A vulnerability in Microchip TimePictra. This issue affects TimePictra: before 12.0. INFO Published Date : Nov. 12, 2026, 6:18 a.m. Last Modified : Nov. 12","id":409,"identifiers":["CVE-2026-8333"],"last_checked_at":1794465927,"publisher":"CVE Feed","source_published_at":1794441600,"title":"CVE-2026-8333 - TimePictra Stored Cross-site Scripting"},{"canonical_url":"https://cvefeed.io/vuln/detail/CVE-2026-87772","excerpt":"CVE-2026-87772 Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About Description Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows","id":407,"identifiers":["CVE-2026-87772"],"last_checked_at":1794465927,"publisher":"CVE Feed","source_published_at":1794441600,"title":"CVE-2026-87772 - Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-p9cv-8g75-4xcg","excerpt":"GHSA: GHSA-p9cv-8g75-4xcg Reported severity: medium Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: < 2.3.0 Patched version: 2.3.0 Advisory package entry 2: Af","id":397,"identifiers":["GHSA-53MR-W429-C597","GHSA-P9CV-8G75-4XCG"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794382087,"title":"Symlink swap after validation lets read_text_file return files outside allowedDirectories"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-q74p-4wrc-q7w6","excerpt":"GHSA: GHSA-q74p-4wrc-q7w6 Reported severity: medium Advisory package entry 1: Affected package: mcp-server-git (pip) Affected versions: >= 2026.10.28, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Patche","id":396,"identifiers":["GHSA-Q74P-4WRC-Q7W6","GHSA-W766-5X43-WHVW"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794382062,"title":"mcp-server-git: Incomplete Fix for GHSA-w766-5x43-whvw in validate_opened_repo() Allows --repository Confinement Bypass via objects/info/alternates and Linked-Worktree common_dir Confusion"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-f9hh-cmx9-2f23","excerpt":"GHSA: GHSA-f9hh-cmx9-2f23 Reported severity: low Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 0.6.1, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Summary mcp-","id":395,"identifiers":["GHSA-3JQG-R5PP-RMP2","GHSA-F9HH-CMX9-2F23"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794382024,"title":"mcp-server-fetch: robots.txt path-canonicalization bypass (e.g. //private fetched while Disallow: /private)"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-6hqx-gqrx-c5r2","excerpt":"GHSA: GHSA-6hqx-gqrx-c5r2 Reported severity: high Advisory package entry 1: Affected package: mcp-server-git (pip) Affected versions: < 2026.11.11 Patched version: 2026.11.11 Advisory description: Patched versions Fixed ","id":394,"identifiers":["CVE-2026-45033","CVE-2026-71963","CVE-2026-72718","GHSA-6HQX-GQRX-C5R2","GHSA-9CCR-R5HG-74GF"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794381922,"title":"mcp-server-git: arbitrary command execution via a repository's own Git configuration (core.fsmonitor) during read-only tools"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-3rxj-6jhw-qfv7","excerpt":"GHSA: GHSA-3rxj-6jhw-qfv7 Reported severity: low Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 2026.10.10, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Summary","id":393,"identifiers":["GHSA-3RXJ-6JHW-QFV7"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794381900,"title":"mcp-server-fetch: IPv6 site-local fec0::/10 classified as public (SSRF guard classifier gap, CWE-918)"},{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-7m4x-rv66-mxhh","excerpt":"GHSA: GHSA-7m4x-rv66-mxhh Reported severity: medium Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: < 2.3.0 Patched version: 2.3.0 Advisory package entry 2: Af","id":392,"identifiers":["GHSA-7M4X-RV66-MXHH"],"last_checked_at":1794467703,"publisher":"MCP server advisories","source_published_at":1794381877,"title":"server-filesystem: `move_file`'s same-device rename leaves the source unpinned — a swapped source parent moves an outside file into the allowed directories, where it becomes readable"},{"canonical_url":"https://github.com/advisories/GHSA-x8x8-p968-x646","excerpt":"GHSA: GHSA-x8x8-p968-x646 CVE: CVE-2026-118745 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.","id":333,"identifiers":["CVE-2026-118745","GHSA-X8X8-P968-X646"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794358040,"title":"Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-xf35-v9jh-g65w","excerpt":"GHSA: GHSA-xf35-v9jh-g65w CVE: CVE-2026-114152 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.","id":334,"identifiers":["CVE-2026-114152","GHSA-XF35-V9JH-G65W"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357972,"title":"Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-6856-87hx-p5x7","excerpt":"GHSA: GHSA-6856-87hx-p5x7 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.TestPlatform.CLI (nuget) Affected versions: >= 17.2.0-preview-20220301-01, < 17.3.0 Patched version: 17.3.4 Adviso","id":335,"identifiers":["CVE-2026-105544","GHSA-6856-87HX-P5X7"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357552,"title":"Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-fpxj-5c99-g7vj","excerpt":"GHSA: GHSA-fpxj-5c99-g7vj CVE: CVE-2026-114151 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.","id":336,"identifiers":["CVE-2026-114151","GHSA-FPXJ-5C99-G7VJ"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357302,"title":"Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-r8h3-p8p6-ggp7","excerpt":"GHSA: GHSA-r8h3-p8p6-ggp7 CVE: CVE-2026-114158 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.","id":337,"identifiers":["CVE-2026-114158","GHSA-R8H3-P8P6-GGP7"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357253,"title":"Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-3cgx-w6gm-fqrx","excerpt":"GHSA: GHSA-3cgx-w6gm-fqrx CVE: CVE-2026-114159 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.","id":338,"identifiers":["CVE-2026-114159","GHSA-3CGX-W6GM-FQRX"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357179,"title":"Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-q6jf-24jf-m3cg","excerpt":"GHSA: GHSA-q6jf-24jf-m3cg CVE: CVE-2026-120792 Reported severity: high Advisory package entry 1: Affected package: Aspire.Cli (nuget) Affected versions: >= 13.2.0, < 13.6.5 Patched version: 13.6.5 Advisory package entry ","id":339,"identifiers":["CVE-2026-120792","GHSA-Q6JF-24JF-M3CG"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357083,"title":"Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-m63f-xhvm-6mv5","excerpt":"GHSA: GHSA-m63f-xhvm-6mv5 CVE: CVE-2026-120778 Reported severity: high Advisory package entry 1: Affected package: Aspire.Cli (nuget) Affected versions: >= 13.2.0, < 13.6.5 Patched version: 13.6.5 Advisory package entry ","id":340,"identifiers":["CVE-2026-120778","GHSA-M63F-XHVM-6MV5"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794357006,"title":"Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-3893-7fxc-qvff","excerpt":"GHSA: GHSA-3893-7fxc-qvff CVE: CVE-2026-114154 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.Server.HttpSys (nuget) Affected versions: = 2.3.10 Patched version: 2.3.14 Advisor","id":341,"identifiers":["CVE-2026-114154","GHSA-3893-7FXC-QVFF"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356881,"title":"Microsoft Security Advisory CVE-2026-114154 - ASP.NET Core Denial of Service Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-7phj-vgxq-r67h","excerpt":"GHSA: GHSA-7phj-vgxq-r67h CVE: CVE-2026-114157 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.win-arm64 (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <= 8.","id":342,"identifiers":["CVE-2026-114157","GHSA-7PHJ-VGXQ-R67H"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356704,"title":"Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-8w29-6cjc-h6w4","excerpt":"GHSA: GHSA-8w29-6cjc-h6w4 CVE: CVE-2026-114156 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.7.26381.103, <=","id":343,"identifiers":["CVE-2026-114156","GHSA-8W29-6CJC-H6W4"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356645,"title":"Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-wr8v-9x5q-ggcm","excerpt":"GHSA: GHSA-wr8v-9x5q-ggcm CVE: CVE-2026-114147 Reported severity: high Advisory package entry 1: Affected package: Microsoft.AspNetCore.SignalR.StackExchangeRedis (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <=","id":344,"identifiers":["CVE-2026-114147","GHSA-WR8V-9X5Q-GGCM"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356612,"title":"Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-r3qf-p3jm-8h4p","excerpt":"GHSA: GHSA-r3qf-p3jm-8h4p CVE: CVE-2026-109478 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <= 8.","id":345,"identifiers":["CVE-2026-109478","GHSA-R3QF-P3JM-8H4P"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356563,"title":"Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-67wp-ghc2-fw2g","excerpt":"GHSA: GHSA-67wp-ghc2-fw2g CVE: CVE-2026-114146 Reported severity: high Advisory package entry 1: Affected package: Microsoft.AspNetCore.Http.Connections (nuget) Affected versions: >= 1.2.0, <= 1.2.13 Patched version: 1.2","id":346,"identifiers":["CVE-2026-114146","GHSA-67WP-GHC2-FW2G"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356516,"title":"Microsoft Security Advisory CVE-2026-114146 - ASP.NET Core Elevation of Privilege Vulnerability"},{"canonical_url":"https://github.com/advisories/GHSA-6vjv-7wm8-p67r","excerpt":"GHSA: GHSA-6vjv-7wm8-p67r CVE: CVE-2026-114150 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.2.26159.112, <=","id":347,"identifiers":["CVE-2026-114150","GHSA-6VJV-7WM8-P67R"],"last_checked_at":1794467705,"publisher":"GitHub Advisory Database","source_published_at":1794356447,"title":"Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability"}],"editorial_status":"Attributed discovery links; not reviewed Egret reporting.","last_checked_at":1794467707,"pagination":{"limit":25,"next":"https://www.clawpit.io/api/v1/sources.json?page=2&limit=25","page":1,"pages":12,"total":300}}