CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 19:37 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110936 In wildKEV | SS Siemens Software Center Siemens | 6.7 | Oct 15 | Siemens Software Center Uncontrolled Search Path Element Vulnerability |
| CVE-2026-96655 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server arbitrary-host SSRF |
| CVE-2026-96654 In wildKEV | MS Media Server Plex | 6.5 | Sep 23 | Plex Media Server URL injection |
| CVE-2026-96652 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server SSRF |
| CVE-2026-67279 In wildKEV | RO RouterOS Mikrotik | 6.5 | Sep 5 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS |
| CVE-2026-66384 In wildKEV | AR artifactory jfrog | 5.3 | Aug 12 | Authenticated users may write data outside the intended Docker cache path |
| CVE-2026-20316 RansomwareIn wildKEV | CS Cisco Secure Firewall Management Center (FMC) Cisco | 5.3 | Jul 29 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability |
| CVE-2026-60137 In wildKEV | WO WordPress WordPress | 5.9 | Jul 17 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query |
| CVE-2026-20262 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 6.5 | Jun 15 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability |
| CVE-2026-7473 In wildKEV | EO EOS Arista Networks | 5.8 | Jun 5 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass |
| CVE-2026-48710 In wildKEV | ST starlette Kludex | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks |
| CVE-2026-34926 In wildKEV | AO Apex One Trend Micro | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
| CVE-2026-42897 In wildKEV | ES Exchange Server Microsoft | 6.1 | May 14 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-32201 In wildKEV | SH SharePoint Microsoft | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-32202 In wildKEV | WI Windows Microsoft | 4.3 | Apr 14 | Windows Shell Spoofing Vulnerability |
| CVE-2025-61624 In wildKEV | FO FortiOS Fortinet | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability |
| CVE-2026-20122 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 5.4 | Feb 25 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
| CVE-2026-21525 In wildKEV | WI Windows Microsoft | 6.2 | Feb 10 | Windows Remote Access Connection Manager Denial of Service Vulnerability |
| CVE-2025-68686 In wildKEV | FO FortiOS Fortinet | 5.9 | Feb 10 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
| CVE-2026-20805 In wildKEV | WI Windows Microsoft | 5.5 | Jan 13 | Desktop Window Manager Information Disclosure Vulnerability |
| CVE-2025-66376 In wildKEV | CO Collaboration Zimbra | 6.1 | Jan 5 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability |
| CVE-2025-40602 In wildKEV | SM SMA1000 SonicWall | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability |
| CVE-2025-68461 In wildKEV | WE Webmail Roundcube | 6.1 | Dec 18 | RoundCube Webmail Cross-site Scripting Vulnerability |
| CVE-2025-43520 In wildKEV | MA macOS Apple | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability |
| CVE-2025-48633 In wildKEV | AN Android Google | 5.5 | Dec 8 | Android Framework Information Disclosure Vulnerability |
Showing 25