CVE Feed

Latest CVEs

Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.

Updated Oct 28, 22:04 UTC
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114625
In wildKEVNew
VO
VeloCloud Orchestrator
Arista Networks
9.9
1%
Oct 22VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host
CVE-2026-111497
In wildKEVNew
BR
Brotli
Google
9.8
55%
Oct 22Out-of-Bounds Write in Google Brotli Decoder
CVE-2026-109618
In wildKEV
PH
PHP
PHP
9.8
100%
Oct 21RCE via OOM corruption
CVE-2026-102764
In wildKEV
RS
Remote Support
BeyondTrust
9.8
19%
Oct 15Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVE-2026-76519
In wildKEV
CS
Cisco Secure Email
Cisco
9.8
2%
Oct 14Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVE-2026-110447
In wildKEV
CO
Collabora Online - Built-in CODE Server
Collabora
9.8
12%
Oct 14Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVE-2026-105134
In wildKEV
AH
AhsayCBS
Ahsay
10.0
82%
Oct 4Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CVE-2026-104286
In wildKEV
FO
FortiMail
Fortinet
9.8
5%
Oct 1Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-102489
In wildKEV
ZA
Zammad
Zammad GmbH
9.8
2%
Sep 30Undisclosed RCE in Zammad v6.3 and higher
CVE-2026-76504
In wildKEV
CC
Cisco Catalyst SD-WAN Manager
Cisco
9.8
39%
Sep 30Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
Showing 10