CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:30 UTC )
This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,476 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product pmmp:pocketmine_mp . Show all products
33 CVEs, showing 1 to 33
CVE Severity Title Published CVE-2026-86204 Medium 6.5 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86203 Low 3.7 PocketMine-MP before 5.39.2 Item Duplication via Despawn State Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86202 Medium 4.3 PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86201 High 7.5 PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86200 Medium 5.3 PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86199 High 7.5 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86198 Medium 4.2 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2025-71418 Medium 5.3 PocketMine-MP before 5.25.2 Denial of Service via explode Assigned by VulnCheck
Sep 9, 2026 CVE-2025-71417 Medium 6.5 PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2024-58381 High 7.5 PocketMine-MP before 5.11.1 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2024-58380 Medium 6.5 PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54396 Medium 6.5 PocketMine-MP before 4.8.1 Server Crash via Banner NBT Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54395 Medium 4.3 PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54394 Medium 4.3 PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54393 High 7.5 PocketMine-MP before 4.20.5 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54392 Medium 6.5 PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54390 High 7.5 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54355 High 7.5 PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve Assigned by VulnCheck
Sep 9, 2026 CVE-2022-51018 Medium 6.5 PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51017 High 7.5 PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51016 Medium 6.1 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51015 Medium 6.5 PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51014 Medium 6.5 PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51013 Medium 6.5 PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51012 Medium 6.5 PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51011 Medium 4.3 PocketMine-MP before 4.2.10 Denial of Service via Chat Messages Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51010 Medium 6.5 PocketMine-MP before 4.4.2 Server Crash via Item ID Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51009 High 7.5 PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry Assigned by VulnCheck
Sep 6, 2026 CVE-2022-51008 Medium 5.3 PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions Assigned by VulnCheck
Sep 6, 2026 CVE-2021-48007 Medium 6.5 PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket Assigned by VulnCheck
Sep 6, 2026 CVE-2021-48006 Low 3.3 PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity Assigned by VulnCheck
Sep 6, 2026 CVE-2020-37277 Medium 6.5 PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction Assigned by VulnCheck
Sep 6, 2026 CVE-2023-7332 High 7.1 PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash Assigned by VulnCheck
Dec 31, 2025
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
