CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 20:59 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34621 In wildKEV | A2 Acrobat 2024 Adobe | 8.6 | Apr 11 | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) |
| CVE-2026-34486 In wildKEV | TO Tomcat Apache | 7.5 | Apr 9 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor |
| CVE-2026-39987 In wildKEV | MA marimo marimo-team | 9.8 | Apr 9 | marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass |
| CVE-2026-34197 In wildKEV | AC ActiveMQ Apache | 8.8 | Apr 7 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans |
| CVE-2026-35616 In wildKEV | FO FortiClientEMS Fortinet | 9.8 | Apr 4 | Fortinet FortiClient EMS Improper Access Control Vulnerability |
| CVE-2026-5281 In wildKEV | CH Chrome Google | 8.8 | Apr 1 | Google Dawn Use-After-Free Vulnerability |
| CVE-2026-3502 In wildKEV | TC TrueConf Client TrueConf | 7.8 | Mar 30 | TrueConf Client Update Integrity Verification Bypass |
| CVE-2026-33634 In wildKEV | SE setup-trivy aquasecurity | 8.8 | Mar 23 | Trivy ecosystem supply chain briefly compromised |
| CVE-2026-3055 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Mar 23 | Insufficient input validation leading to memory overread |
| CVE-2026-33017 In wildKEV | LA langflow langflow-ai | 9.8 | Mar 20 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint |
| CVE-2026-3910 In wildKEV | CH Chrome Google | 8.8 | Mar 12 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability |
| CVE-2026-3909 In wildKEV | CH Chrome Google | 8.8 | Mar 12 | Google Skia Out-of-Bounds Write Vulnerability |
| CVE-2025-67038 In wildKEV | ES E210 series Lantronix | 9.8 | Mar 11 | Lantronix EDS5000, G520, and X300 OS Command Injection |
| CVE-2026-20131 RansomwareIn wildKEV | CS Cisco Secure Firewall Management Center (FMC) Cisco | 10.0 | Mar 4 | Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability |
| CVE-2026-20079 In wildKEV | CS Cisco Secure Firewall Management Center (FMC) Cisco | 10.0 | Mar 4 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability |
| CVE-2026-21385 In wildKEV | SN Snapdragon Qualcomm, Inc. | 7.8 | Mar 2 | Integer Overflow or Wraparound in Graphics |
| CVE-2026-22719 In wildKEV | TC Telco Cloud Infrastructure VMware | 8.1 | Feb 25 | VMware Aria Operations command injection vulnerability |
| CVE-2026-20122 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 5.4 | Feb 25 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
| CVE-2026-20127 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 10.0 | Feb 25 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
| CVE-2026-20128 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 7.5 | Feb 25 | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
| CVE-2026-20133 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 7.5 | Feb 25 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
| CVE-2026-22769 In wildKEV | RF RecoverPoint for Virtual Machines Dell | 10.0 | Feb 17 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability |
| CVE-2026-2441 In wildKEV | CH Chrome Google | 8.8 | Feb 13 | Google Chromium CSS Use-After-Free Vulnerability |
| CVE-2026-25108 In wildKEV | FI FileZen Soliton Systems K.K. | 8.8 | Feb 13 | Soliton Systems K.K FileZen OS Command Injection Vulnerability |
| CVE-2026-20700 In wildKEV | MA macOS Apple | 7.8 | Feb 11 | Apple Multiple Buffer Overflow Vulnerability |
| CVE-2026-21525 In wildKEV | WI Windows Microsoft | 6.2 | Feb 10 | Windows Remote Access Connection Manager Denial of Service Vulnerability |
| CVE-2026-21514 In wildKEV | OF Office Microsoft | 7.8 | Feb 10 | Microsoft Word Security Feature Bypass Vulnerability |
| CVE-2026-21510 In wildKEV | WI Windows Microsoft | 8.8 | Feb 10 | Windows Shell Security Feature Bypass Vulnerability |
| CVE-2026-21513 In wildKEV | WI Windows Microsoft | 8.8 | Feb 10 | MSHTML Framework Security Feature Bypass Vulnerability |
| CVE-2026-21533 In wildKEV | WI Windows Microsoft | 7.8 | Feb 10 | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-21519 In wildKEV | WI Windows Microsoft | 7.8 | Feb 10 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2025-68686 In wildKEV | FO FortiOS Fortinet | 5.9 | Feb 10 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
| CVE-2026-1603 In wildKEV | EM Endpoint Manager Ivanti | 7.5 | Feb 10 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability |
| CVE-2026-1731 RansomwareIn wildKEV | RS Remote Support BeyondTrust | 9.8 | Feb 6 | Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) |
| CVE-2026-21643 In wildKEV | FO FortiClientEMS Fortinet | 9.8 | Feb 6 | Fortinet FortiClient EMS SQL Injection Vulnerability |
| CVE-2025-15556 In wildKEV | NO notepad-plus-plus notepad-plus-plus | 7.5 | Feb 3 | Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification |
| CVE-2026-1340 In wildKEV | EM Endpoint Manager Mobile Ivanti | 9.8 | Jan 29 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
| CVE-2026-1281 In wildKEV | EM Endpoint Manager Mobile Ivanti | 9.8 | Jan 29 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
| CVE-2025-40551 In wildKEV | WH Web Help Desk SolarWinds | 9.8 | Jan 28 | SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2025-40536 In wildKEV | WH Web Help Desk SolarWinds | 9.8 | Jan 28 | SolarWinds Web Help Desk Security Control Bypass Vulnerability |
| CVE-2026-24858 In wildKEV | FO FortiManager Fortinet | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability |
| CVE-2026-21509 In wildKEV | OF Office Microsoft | 7.8 | Jan 26 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2026-24423 RansomwareIn wildKEV | SM SmarterMail SmarterTools | 9.8 | Jan 23 | SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API |
| CVE-2026-0770 In wildKEV | LA Langflow Langflow | 9.8 | Jan 23 | Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability |
| CVE-2026-23760 RansomwareIn wildKEV | SM SmarterMail SmarterTools | 9.8 | Jan 22 | SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API |
| CVE-2026-20045 In wildKEV | CU Cisco Unified Communications Manager Cisco | 9.8 | Jan 21 | Cisco Unified Communications Products Remote Code Execution Vulnerability |
| CVE-2026-24061 In wildKEV | IN Inetutils GNU | 9.8 | Jan 21 | GNU InetUtils Argument Injection Vulnerability |
| CVE-2026-21962 In wildKEV | OH Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in Oracle Corporation | 10.0 | Jan 20 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability |
| CVE-2026-20963 In wildKEV | SH SharePoint Microsoft | 9.8 | Jan 13 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-20805 In wildKEV | WI Windows Microsoft | 5.5 | Jan 13 | Desktop Window Manager Information Disclosure Vulnerability |