Miggo Predictive Vulnerability Database
Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.
Concerned about an active attack path? Talk to our security experts and see Miggo in action
Contact UsTop 10 CVEs
New vulnerabilities last 30 days
CVE-2026-58273: Rucio: Authorisation Bypass on REST API endpoint for signing URLs
## Summary
The `/credentials/signurl` endpoint decides authorization from the client-supplied `X-Rucio-Account` HTTP header instead of the authenticated
Analysis:
Available
8.1
high
11/5/2026
CVE-2026-33944: Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter
### Summary
A SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The `localtax1_value` parameter
Analysis:
Available
8.8
high
11/5/2026
CVE-2026-112938: filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses
filelock StrictSoftFileLock symlink race in .filelock directory lets local attackers redirect claim file creation via rename exchange causing lock denial
Analysis:
Available
5.8
medium
11/5/2026
CVE-2026-112913: filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
filelock ReadWriteLock Windows SQLite side file manipulation plants undeletable WAL journal files causing persistent disk I/O errors and arbitrary file deletion
Analysis:
Available
3.3
low
11/5/2026