CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 18:00 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12569 RansomwareIn wildKEV | FL FlexPLM PTC | 9.8 | Jun 18 | Remote Code Execution (RCE) vulnerability in Windchill PDMlink |
| CVE-2026-7273 In wildKEV | GF GS1900-10HP firmware Zyxel | 8.8 | Jun 16 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |
| CVE-2026-20262 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 6.5 | Jun 15 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability |
| CVE-2026-54420 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 8.5 | Jun 14 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
| CVE-2026-48558 In wildKEV | SI SimpleHelp SimpleHelp | 10.0 | Jun 12 | SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification |
| CVE-2026-35273 RansomwareIn wildKEV | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 9.8 | Jun 11 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability |
| CVE-2026-20253 In wildKEV | SE Splunk Enterprise Splunk | 9.8 | Jun 10 | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise |
| CVE-2026-25089 In wildKEV | FO FortiSandbox Fortinet | 9.8 | Jun 9 | Fortinet FortiSandbox OS Command Injection Vulnerability |
| CVE-2026-10520 In wildKEV | SE Sentry ivanti | 10.0 | Jun 9 | Ivanti Sentry OS Command Injection Vulnerability |
| CVE-2026-11645 In wildKEV | CH Chrome Google | 8.8 | Jun 8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
| CVE-2026-50751 RansomwareIn wildKEV | QS Quantum Security Gateway Check Point | 9.3 | Jun 8 | User Authentication Bypass in VPN Remote Access and Mobile Access |
| CVE-2026-7473 In wildKEV | EO EOS Arista Networks | 5.8 | Jun 5 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass |
| CVE-2026-48907 In wildKEV | JC Joomla Content Editor (JCE) extension for Joomla joomlacontenteditor.net | 9.8 | Jun 5 | Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 |
| CVE-2026-20245 In wildKEV | CC Cisco Catalyst SD-WAN Controller Cisco | 7.8 | Jun 4 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability |
| CVE-2026-28318 In wildKEV | SE Serv-U SolarWinds | 7.5 | Jun 4 | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability |
| CVE-2026-8037 In wildKEV | EC ECS Connections Manager Progress Software | 9.8 | Jun 4 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF |
| CVE-2026-20230 In wildKEV | CU Cisco Unified Communications Manager Cisco | 8.6 | Jun 3 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability |
| CVE-2025-48595 In wildKEV | AN Android Google | 8.4 | Jun 1 | Android Framework Integer Overflow Vulnerability |
| CVE-2026-46817 In wildKEV | OP Oracle Payments Oracle Corporation | 9.8 | May 28 | Oracle E-Business Suite Improper Privilege Management Vulnerability |
| CVE-2026-48027 RansomwareIn wildKEV | NX nx-console nrwl | 9.8 | May 27 | Compromised Nx Console version 18.95.0 |
| CVE-2026-48710 In wildKEV | ST starlette Kludex | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks |
| CVE-2026-45247 In wildKEV | FP Full Page Cache Warmer for Magento 2 Mirasvit | 9.8 | May 26 | Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection |
| CVE-2026-45659 RansomwareIn wildKEV | SH SharePoint Microsoft | 8.8 | May 22 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-34910 In wildKEV | EF EFG Ubiquiti Inc | 10.0 | May 22 | Ubiquiti UniFi OS Improper Input Validation Vulnerability |
| CVE-2026-34908 In wildKEV | EF EFG Ubiquiti Inc | 10.0 | May 22 | Ubiquiti UniFi OS Improper Access Control Vulnerability |
| CVE-2026-34909 In wildKEV | EF EFG Ubiquiti Inc | 10.0 | May 22 | Ubiquiti UniFi OS Path Traversal Vulnerability |
| CVE-2026-34926 In wildKEV | AO Apex One Trend Micro | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
| CVE-2026-48172 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 9.8 | May 21 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability |
| CVE-2026-9082 In wildKEV | DR Drupal Drupal | 9.8 | May 20 | Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 |
| CVE-2026-41091 In wildKEV | MM Microsoft Malware Protection Engine Microsoft | 7.8 | May 20 | Microsoft Defender Elevation of Privilege Vulnerability |
| CVE-2026-45498 In wildKEV | MD Microsoft Defender Antimalware Platform Microsoft | 7.5 | May 20 | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-8398 In wildKEV | DT DAEMON Tools Lite AVB Disc Soft | 9.8 | May 15 | Daemon Tools Lite Embedded Malicious Code Vulnerability |
| CVE-2026-42897 In wildKEV | ES Exchange Server Microsoft | 6.1 | May 14 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-20182 In wildKEV | CC Cisco Catalyst SD-WAN Controller Cisco | 10.0 | May 14 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
| CVE-2026-0257 RansomwareIn wildKEV | PA PAN-OS Palo Alto Networks | 9.1 | May 13 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities |
| CVE-2026-45321 RansomwareIn wildKEV | AR arktype-adapter @tanstack | 9.6 | May 12 | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys |
| CVE-2026-42208 In wildKEV | LI litellm BerriAI | 9.8 | May 8 | LiteLLM: SQL injection in Proxy API key verification |
| CVE-2026-42271 In wildKEV | LI litellm BerriAI | 8.8 | May 8 | LiteLLM: Authenticated command execution via MCP stdio test endpoints |
| CVE-2026-6973 In wildKEV | EM Endpoint Manager Mobile Ivanti | 7.2 | May 7 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability |
| CVE-2026-0300 In wildKEV | PA PAN-OS Palo Alto Networks | 9.8 | May 6 | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal |
| CVE-2026-41940 RansomwareIn wildKEV | CP cPanel WebPros | 9.8 | Apr 29 | WebPros cPanel and WHM Authentication Bypass via Login Flow |
| CVE-2026-31431 In wildKEV | KE Kernel Linux | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place |
| CVE-2026-33824 In wildKEV | W1 Windows 10 Version 1607 Microsoft | 9.8 | Apr 14 | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability |
| CVE-2026-32201 In wildKEV | SH SharePoint Microsoft | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-33825 RansomwareIn wildKEV | MD Microsoft Defender Antimalware Platform Microsoft | 7.8 | Apr 14 | Microsoft Defender Elevation of Privilege Vulnerability |
| CVE-2026-32202 In wildKEV | WI Windows Microsoft | 4.3 | Apr 14 | Windows Shell Spoofing Vulnerability |
| CVE-2025-61624 In wildKEV | FO FortiOS Fortinet | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability |
| CVE-2026-39808 In wildKEV | FO FortiSandbox Fortinet | 9.8 | Apr 14 | Fortinet FortiSandbox OS Command Injection Vulnerability |
| CVE-2026-34621 In wildKEV | A2 Acrobat 2024 Adobe | 8.6 | Apr 11 | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) |
| CVE-2026-34486 In wildKEV | TO Tomcat Apache | 7.5 | Apr 9 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor |