Core

This hub aggregates every CVE we track for Core, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Core.

• CVE-2026-48795Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser8.6Jul 15, 2026
• CVE-2026-49858API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate5.9Jul 1, 2026
• CVE-2026-54164API Platform Core: Missing IRI type check enables resource type confusion6.5Jul 1, 2026
• CVE-2026-55844Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data7.5Jun 29, 2026
• CVE-2026-54318Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location7.1Jun 23, 2026
• CVE-2026-54317Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN7.6Jun 23, 2026
• CVE-2024-14036Dräger Core 1.0.5 Denial of Service via Malformed SDC Message7.5Jun 2, 2026
• CVE-2026-44698Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection8.3May 29, 2026
• CVE-2026-44473Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse7.1May 27, 2026
• CVE-2026-44475Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest6.1May 27, 2026
• CVE-2026-44474Ella Core: Handover failures during concurrent Security Mode Command3.7May 27, 2026
• CVE-2026-45158OPNsense: Command Injection via Attacker-Controlled DHCP Config9.1May 13, 2026
• CVE-2026-44194OPNsense: RCE on user managment9.1May 13, 2026
• CVE-2026-44195OPNsense: Authentication lockout bypass5.3May 13, 2026
• CVE-2026-44193OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method9.1May 13, 2026