CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:00 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109619 In wildKEVNew | PH PHP PHP | 8.1 | Oct 21 | RCE via stale global state |
| CVE-2026-0322 In wildKEV | PA PAN-OS Palo Alto Networks | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface |
| CVE-2026-106931 In wildKEV | SS SiteGuard Server Edition for Apache httpd EG Secure Solutions Inc. | 7.8 | Oct 14 | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
| CVE-2026-96951 In wildKEV | WI Windows Microsoft | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability |
| CVE-2026-104935 In wildKEV | CS Connect Secure Ivanti | 8.6 | Oct 13 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
| CVE-2026-21589 In wildKEV | CO Confluence Atlassian | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability |
| CVE-2026-105133 In wildKEV | AH AhsayCBS Ahsay | 7.3 | Oct 4 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication |
| CVE-2026-88779 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service |
| CVE-2026-102490 In wildKEV | ZA Zammad Zammad GmbH | 7.8 | Sep 30 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package |
| CVE-2026-86950 In wildKEV | MA macOS Apple | 8.8 | Sep 28 | Apple Multiple Products Out-of-Bounds Write Vulnerability |
| CVE-2026-88772 In wildKEV | NA NetScaler ADC Citrix | 8.1 | Sep 27 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service |
| CVE-2026-96656 In wildKEV | MS Media Server Plex | 7.2 | Sep 23 | Plex Media Server arbitrary file write |
| CVE-2026-87902 In wildKEV | WO WordPress WordPress | 8.1 | Sep 22 | WordPress Core Remote File Inclusion Vulnerability |
| CVE-2026-87886 In wildKEV | AB Acronis Backup extension for Plesk Acronis | 7.8 | Sep 17 | Acronis Backup Incorrect Default Permissions Vulnerability |
| CVE-2026-58704 In wildKEV | AN Android Google | 8.8 | Sep 15 | Google Pixel Improper Authorization Vulnerability |
| CVE-2026-87491 In wildKEV | CH Chrome Google | 8.8 | Sep 9 | Google Chromium V8 Out of Bounds Write Vulnerability |
| CVE-2026-81963 In wildKEV | WI Windows Microsoft | 7.8 | Sep 8 | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2026-85880 In wildKEV | WI Windows Microsoft | 7.8 | Sep 8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2026-67277 In wildKEV | RO RouterOS Mikrotik | 8.2 | Sep 5 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service |
| CVE-2026-85046 In wildKEV | CH Chrome Google | 8.8 | Sep 3 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2026-83549 In wildKEV | SM SMA1000 SonicWall | 7.8 | Sep 1 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability |
| CVE-2026-73570 In wildKEV | CO Collaboration Zimbra | 8.9 | Aug 13 | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability |
| CVE-2026-42018 In wildKEV | AR artifactory jfrog | 7.5 | Aug 12 | Anonymous user token generation exposure in JFrog Artifactory |
| CVE-2026-20349 In wildKEV | CS Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability |
| CVE-2026-68820 In wildKEV | W1 Windows 10 Version 1607 Microsoft | 7.0 | Aug 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-65660 In wildKEV | SH SharePoint Microsoft | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-18577 In wildKEV | NC N-central N-able | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover |
| CVE-2026-18556 In wildKEV | NC N-central N-able | 7.4 | Aug 1 | Unauthenticated administrative account takeover |
| CVE-2026-42016 In wildKEV | AR artifactory jfrog | 8.8 | Jul 27 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation |
| CVE-2021-27137 In wildKEV | DD DD-WRT DD-WRT | 8.1 | Jul 16 | DD-WRT Stack-Based Buffer Overflow Vulnerability |
| CVE-2026-15410 RansomwareIn wildKEV | SM SMA1000 SonicWall | 7.2 | Jul 14 | SonicWall SMA1000 Appliances Code Injection Vulnerability |
| CVE-2026-56155 In wildKEV | W1 Windows 10 Version 1607 Microsoft | 7.8 | Jul 14 | Active Directory Federation Services Elevation of Privilege Vulnerability |
| CVE-2026-59822 In wildKEV | LI litellm BerriAI | 8.2 | Jul 8 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback |
| CVE-2026-53362 In wildKEV | KE Kernel Linux | 7.8 | Jul 4 | ipv6: account for fraggap on the paged allocation path |
| CVE-2026-53266 In wildKEV | KE Kernel Linux | 8.8 | Jun 25 | netfilter: bridge: make ebt_snat ARP rewrite writable |
| CVE-2026-55255 In wildKEV | LA langflow langflow-ai | 8.4 | Jun 23 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow |
| CVE-2026-7273 In wildKEV | GF GS1900-10HP firmware Zyxel | 8.8 | Jun 16 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |
| CVE-2026-54420 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 8.5 | Jun 14 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
| CVE-2026-11645 In wildKEV | CH Chrome Google | 8.8 | Jun 8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
| CVE-2026-20245 In wildKEV | CC Cisco Catalyst SD-WAN Controller Cisco | 7.8 | Jun 4 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability |
| CVE-2026-28318 In wildKEV | SE Serv-U SolarWinds | 7.5 | Jun 4 | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability |
| CVE-2026-20230 In wildKEV | CU Cisco Unified Communications Manager Cisco | 8.6 | Jun 3 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability |
| CVE-2025-48595 In wildKEV | AN Android Google | 8.4 | Jun 1 | Android Framework Integer Overflow Vulnerability |
| CVE-2026-45659 RansomwareIn wildKEV | SH SharePoint Microsoft | 8.8 | May 22 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-41091 In wildKEV | MM Microsoft Malware Protection Engine Microsoft | 7.8 | May 20 | Microsoft Defender Elevation of Privilege Vulnerability |
| CVE-2026-45498 In wildKEV | MD Microsoft Defender Antimalware Platform Microsoft | 7.5 | May 20 | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-42271 In wildKEV | LI litellm BerriAI | 8.8 | May 8 | LiteLLM: Authenticated command execution via MCP stdio test endpoints |
| CVE-2026-6973 In wildKEV | EM Endpoint Manager Mobile Ivanti | 7.2 | May 7 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability |
| CVE-2026-31431 In wildKEV | KE Kernel Linux | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place |
| CVE-2026-33825 RansomwareIn wildKEV | MD Microsoft Defender Antimalware Platform Microsoft | 7.8 | Apr 14 | Microsoft Defender Elevation of Privilege Vulnerability |