CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 21:15 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82078 In wildKEV | PM PaperCut MF/NG PaperCut | 9.1 | Aug 28 | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector |
| CVE-2026-81578 In wildKEV | PM PaperCut MF/NG PaperCut | 9.8 | Aug 28 | PaperCut MF/NG: Authentication Bypass |
| CVE-2026-60004 In wildKEV | GI Gitea Gitea | 9.8 | Aug 26 | Gitea Code Injection Vulnerability |
| CVE-2026-69836 In wildKEV | ME Microsoft Entra Microsoft | 10.0 | Aug 20 | Microsoft Entra ID Remote Code Execution Vulnerability |
| CVE-2026-72530 In wildKEV | TS TrueConf Server TrueConf | 9.0 | Aug 19 | TrueConf Server Code Injection Vulnerability |
| CVE-2026-72529 In wildKEV | TS TrueConf Server TrueConf | 9.8 | Aug 19 | TrueConf Server Missing Authentication for Critical Function Vulnerability |
| CVE-2026-19490 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 19 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 |
| CVE-2026-64849 In wildKEV | ML mlflow mlflow | 9.3 | Aug 17 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) |
| CVE-2026-73570 In wildKEV | CO Collaboration Zimbra | 8.9 | Aug 13 | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability |
| CVE-2026-42018 In wildKEV | AR artifactory jfrog | 7.5 | Aug 12 | Anonymous user token generation exposure in JFrog Artifactory |
| CVE-2026-66384 In wildKEV | AR artifactory jfrog | 5.3 | Aug 12 | Authenticated users may write data outside the intended Docker cache path |
| CVE-2026-71362 In wildKEV | CO Commerce Adobe | 9.1 | Aug 11 | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-20349 In wildKEV | CS Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability |
| CVE-2026-68820 In wildKEV | W1 Windows 10 Version 1607 Microsoft | 7.0 | Aug 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-65660 In wildKEV | SH SharePoint Microsoft | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-72898 In wildKEV | ME Metabase Metabase | 10.0 | Aug 10 | Metabase SQL injection via password reset endpoint |
| CVE-2026-65400 In wildKEV | MA macOS Apple | 9.8 | Aug 6 | Apple macOS Improper Authentication Vulnerability |
| CVE-2026-5430 In wildKEV | WA WSO2 API Control Plane WSO2 | 10.0 | Aug 6 | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover |
| CVE-2026-18577 In wildKEV | NC N-central N-able | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover |
| CVE-2026-18556 In wildKEV | NC N-central N-able | 7.4 | Aug 1 | Unauthenticated administrative account takeover |
| CVE-2026-41709 In wildKEV | CF Cloud Foundation VMware | 2.7 | Jul 30 | ESX insufficient logging vulnerability |
| CVE-2026-59310 RansomwareIn wildKEV | VS vCenter Server VMware | 9.8 | Jul 30 | vCenter directory-traversal vulnerability |
| CVE-2026-20316 RansomwareIn wildKEV | CS Cisco Secure Firewall Management Center (FMC) Cisco | 5.3 | Jul 29 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability |
| CVE-2026-42016 In wildKEV | AR artifactory jfrog | 8.8 | Jul 27 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation |
| CVE-2026-63077 RansomwareIn wildKEV | TE TeamCity JetBrains | 9.8 | Jul 27 | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability |
| CVE-2026-16812 In wildKEV | VO VeloCloud Orchestrator On-Prem Arista Networks | 10.0 | Jul 27 | VeloCloud Orchestrator OS Command Injection |
| CVE-2026-16232 In wildKEV | MS Multi-Domain Security Management checkpoint | 9.8 | Jul 22 | Authentication Bypass in the SmartConsole Login Process Using an Application Token |
| CVE-2026-63030 In wildKEV | WO WordPress WordPress | 9.8 | Jul 17 | WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution |
| CVE-2026-60137 In wildKEV | WO WordPress WordPress | 5.9 | Jul 17 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query |
| CVE-2026-9198 In wildKEV | LO Langflow OSS IBM | 9.8 | Jul 17 | Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation |
| CVE-2026-9586 In wildKEV | SS Switchvox SMB Edition Sangoma | 9.8 | Jul 17 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB |
| CVE-2021-27137 In wildKEV | DD DD-WRT DD-WRT | 8.1 | Jul 16 | DD-WRT Stack-Based Buffer Overflow Vulnerability |
| CVE-2026-48356 In wildKEV | CO Commerce Adobe | 9.3 | Jul 14 | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) |
| CVE-2026-15410 RansomwareIn wildKEV | SM SMA1000 SonicWall | 7.2 | Jul 14 | SonicWall SMA1000 Appliances Code Injection Vulnerability |
| CVE-2026-15409 RansomwareIn wildKEV | SM SMA1000 SonicWall | 10.0 | Jul 14 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
| CVE-2026-55040 In wildKEV | SH SharePoint Microsoft | 9.1 | Jul 14 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
| CVE-2026-58644 In wildKEV | SH SharePoint Microsoft | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-50522 In wildKEV | SH SharePoint Microsoft | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2026-56164 In wildKEV | SH SharePoint Microsoft | 9.8 | Jul 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-56155 In wildKEV | W1 Windows 10 Version 1607 Microsoft | 7.8 | Jul 14 | Active Directory Federation Services Elevation of Privilege Vulnerability |
| CVE-2026-56291 In wildKEV | BB balbooa.com Balbooa Forms extension for Joomla balbooa.com | 9.8 | Jul 9 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 |
| CVE-2026-59822 In wildKEV | LI litellm BerriAI | 8.2 | Jul 8 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback |
| CVE-2026-53362 In wildKEV | KE Kernel Linux | 7.8 | Jul 4 | ipv6: account for fraggap on the paged allocation path |
| CVE-2026-48282 In wildKEV | CO ColdFusion Adobe | 10.0 | Jun 30 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-8452 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 30 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2026-56290 In wildKEV | JP JoomlaCK.fr Page Builder CK extension for Joomla joomlack.fr | 9.8 | Jun 29 | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 |
| CVE-2026-49869 In wildKEV | KE kestra kestra-io | 10.0 | Jun 26 | Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` |
| CVE-2026-53266 In wildKEV | KE Kernel Linux | 8.8 | Jun 25 | netfilter: bridge: make ebt_snat ARP rewrite writable |
| CVE-2026-55255 In wildKEV | LA langflow langflow-ai | 8.4 | Jun 23 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow |
| CVE-2026-48908 In wildKEV | SP SP Page Builder extension for Joomla joomshaper.net | 9.8 | Jun 20 | Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 |