CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 13:38 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114625 In wildKEVNew | VO VeloCloud Orchestrator Arista Networks | 9.9 | Oct 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host |
| CVE-2026-111497 In wildKEVNew | BR Brotli Google | 9.2 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2026-109619 In wildKEVNew | PH PHP PHP | 8.1 | Oct 21 | RCE via stale global state |
| CVE-2026-109618 In wildKEVNew | PH PHP PHP | 9.8 | Oct 21 | RCE via OOM corruption |
| CVE-2026-102764 In wildKEV | RS Remote Support BeyondTrust | 9.8 | Oct 15 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support |
| CVE-2026-110936 In wildKEV | SS Siemens Software Center Siemens | 6.7 | Oct 15 | Siemens Software Center Uncontrolled Search Path Element Vulnerability |
| CVE-2026-0322 In wildKEV | PA PAN-OS Palo Alto Networks | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface |
| CVE-2026-76519 In wildKEV | CS Cisco Secure Email Cisco | 9.8 | Oct 14 | Cisco Secure Email Gateway Arbitrary File Write Vulnerability |
| CVE-2026-106931 In wildKEV | SS SiteGuard Server Edition for Apache httpd EG Secure Solutions Inc. | 7.8 | Oct 14 | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
| CVE-2026-110447 In wildKEV | CO Collabora Online - Built-in CODE Server Collabora | 9.8 | Oct 14 | Collabora Online – Built-in CODE Server OS Command Injection Vulnerability |
| CVE-2026-96951 In wildKEV | WI Windows Microsoft | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability |
| CVE-2026-104935 In wildKEV | CS Connect Secure Ivanti | 8.6 | Oct 13 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
| CVE-2026-21589 In wildKEV | CO Confluence Atlassian | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability |
| CVE-2026-105134 In wildKEV | AH AhsayCBS Ahsay | 10.0 | Oct 4 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection |
| CVE-2026-105133 In wildKEV | AH AhsayCBS Ahsay | 7.3 | Oct 4 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication |
| CVE-2026-88779 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service |
| CVE-2026-104286 In wildKEV | FO FortiMail Fortinet | 9.8 | Oct 1 | Fortinet FortiMail Path Traversal Vulnerability |
| CVE-2026-102490 In wildKEV | ZA Zammad Zammad GmbH | 7.8 | Sep 30 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package |
| CVE-2026-102489 In wildKEV | ZA Zammad Zammad GmbH | 9.8 | Sep 30 | Undisclosed RCE in Zammad v6.3 and higher |
| CVE-2026-76504 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 9.8 | Sep 30 | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability |
| CVE-2026-86950 In wildKEV | MA macOS Apple | 8.8 | Sep 28 | Apple Multiple Products Out-of-Bounds Write Vulnerability |
Showing 21