https://vulnogram.org/ Most recent CVEs assigned by YesWeHack (yeswehack). https://vulnogram.org/seaview/icons/yeswehack.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2026-18796 https://vulnogram.org/CVE-2026-18796 Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the… Medium Mon, 07 Sep 2026 08:07:31 GMT https://vulnogram.org/CVE-2026-14297 https://vulnogram.org/CVE-2026-14297 A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact can… High Mon, 07 Sep 2026 08:07:08 GMT https://vulnogram.org/CVE-2026-14296 https://vulnogram.org/CVE-2026-14296 When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the currently active slot without additional verification. The MCUboot in the bare (upstream) configuration assumes that if there is… High Mon, 07 Sep 2026 07:58:09 GMT