CVE Feed

Latest CVEs

Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.

Updated Oct 28, 13:38 UTC
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109619
In wildKEVNew
PH
PHP
PHP
8.1
100%
Oct 21RCE via stale global state
CVE-2026-0322
In wildKEV
PA
PAN-OS
Palo Alto Networks
7.2
2%
Oct 14PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
CVE-2026-106931
In wildKEV
SS
SiteGuard Server Edition for Apache httpd
EG Secure Solutions Inc.
7.8
3%
Oct 14EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVE-2026-96951
In wildKEV
WI
Windows
Microsoft
8.8
10%
Oct 13Windows Shell Security Feature Bypass Vulnerability
CVE-2026-104935
In wildKEV
CS
Connect Secure
Ivanti
8.6
87%
Oct 13Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2026-21589
In wildKEV
CO
Confluence
Atlassian
7.5
99%
Oct 5Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-105133
In wildKEV
AH
AhsayCBS
Ahsay
7.3
79%
Oct 4Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
CVE-2026-88779
In wildKEV
NA
NetScaler ADC
Citrix
7.5
11%
Oct 4Memory overflow vulnerability leading to Denial of Service
CVE-2026-102490
In wildKEV
ZA
Zammad
Zammad GmbH
7.8
1%
Sep 30Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
CVE-2026-86950
In wildKEV
MA
macOS
Apple
8.8
26%
Sep 28Apple Multiple Products Out-of-Bounds Write Vulnerability
Showing 10