| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Known vulnerabilities affecting Ios products and systems
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-71408 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service... | 5.3 | 124 | Neutral | No |
| Yes |
| CVE-2026-71407 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute ar... | 8.1 | 482 | Neutral | No | Yes |
| CVE-2026-67321 | axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. Attackers who control object keys and nested values passed t... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-67320 | axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but reques... | 7.5 | 450 | Neutral | No | Yes |
| CVE-2026-6732 | No description available | 7.5 | 487 | Neutral | Yes | Yes |
| CVE-2026-67319 | axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another comp... | 3.7 | 102 | Neutral | No | Yes |
| CVE-2026-67318 | axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request A... | 5.3 | 124 | Neutral | No | Yes |
| CVE-2026-67317 | axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-le... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-67316 | axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyl... | 7.4 | 367 | Neutral | No | Yes |
| CVE-2026-67315 | axios versions 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0.0 to bypass NO_PROXY rules. Attackers can supply 0.0.0.0 URLs to... | 7.5 | 514 | Neutral | No | Yes |
| CVE-2026-67314 | axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js). When an application is alread... | 6.5 | 216 | Neutral | No | Yes |
| CVE-2026-67313 | axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field name... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-67312 | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-59840 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 th... | 4.3 | 185 | Neutral | No | Yes |
| CVE-2026-59839 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7... | 5.5 | 237 | Neutral | No | Yes |
| CVE-2026-59837 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, Forti... | 6.6 | 213 | Neutral | No | Yes |
| CVE-2026-49471 | Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed,... | 8.3 | 731 | Neutral | Yes | Yes |
| CVE-2026-44496 | DoS (Denial of Service) axios Dependency in Confluence Data Center | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-44495 | RCE (Remote Code Execution) axios Dependency in Confluence Data Center | 7.7 | 584 | Neutral | No | Yes |
| CVE-2026-44494 | Injection axios Dependency in Confluence Data Center | 8.7 | 544 | Neutral | No | Yes |