CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:00 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114625 In wildKEVNew | VO VeloCloud Orchestrator Arista Networks | 9.9 | Oct 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host |
| CVE-2026-111497 In wildKEVNew | BR Brotli Google | 9.2 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2026-109619 In wildKEVNew | PH PHP PHP | 8.1 | Oct 21 | RCE via stale global state |
| CVE-2026-109618 In wildKEVNew | PH PHP PHP | 9.8 | Oct 21 | RCE via OOM corruption |
| CVE-2026-102764 In wildKEV | RS Remote Support BeyondTrust | 9.8 | Oct 15 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support |
| CVE-2026-110936 In wildKEV | SS Siemens Software Center Siemens | 6.7 | Oct 15 | Siemens Software Center Uncontrolled Search Path Element Vulnerability |
| CVE-2026-0322 In wildKEV | PA PAN-OS Palo Alto Networks | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface |
| CVE-2026-76519 In wildKEV | CS Cisco Secure Email Cisco | 9.8 | Oct 14 | Cisco Secure Email Gateway Arbitrary File Write Vulnerability |
| CVE-2026-106931 In wildKEV | SS SiteGuard Server Edition for Apache httpd EG Secure Solutions Inc. | 7.8 | Oct 14 | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
| CVE-2026-110447 In wildKEV | CO Collabora Online - Built-in CODE Server Collabora | 9.8 | Oct 14 | Collabora Online – Built-in CODE Server OS Command Injection Vulnerability |
| CVE-2026-96951 In wildKEV | WI Windows Microsoft | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability |
| CVE-2026-104935 In wildKEV | CS Connect Secure Ivanti | 8.6 | Oct 13 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
| CVE-2026-21589 In wildKEV | CO Confluence Atlassian | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability |
| CVE-2026-105134 In wildKEV | AH AhsayCBS Ahsay | 10.0 | Oct 4 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection |
| CVE-2026-105133 In wildKEV | AH AhsayCBS Ahsay | 7.3 | Oct 4 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication |
| CVE-2026-88779 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service |
| CVE-2026-104286 In wildKEV | FO FortiMail Fortinet | 9.8 | Oct 1 | Fortinet FortiMail Path Traversal Vulnerability |
| CVE-2026-102490 In wildKEV | ZA Zammad Zammad GmbH | 7.8 | Sep 30 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package |
| CVE-2026-102489 In wildKEV | ZA Zammad Zammad GmbH | 9.8 | Sep 30 | Undisclosed RCE in Zammad v6.3 and higher |
| CVE-2026-76504 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 9.8 | Sep 30 | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability |
| CVE-2026-86950 In wildKEV | MA macOS Apple | 8.8 | Sep 28 | Apple Multiple Products Out-of-Bounds Write Vulnerability |
| CVE-2026-88772 In wildKEV | NA NetScaler ADC Citrix | 8.1 | Sep 27 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service |
| CVE-2026-88771 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Sep 27 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands |
| CVE-2026-96656 In wildKEV | MS Media Server Plex | 7.2 | Sep 23 | Plex Media Server arbitrary file write |
| CVE-2026-96655 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server arbitrary-host SSRF |
| CVE-2026-96654 In wildKEV | MS Media Server Plex | 6.5 | Sep 23 | Plex Media Server URL injection |
| CVE-2026-96652 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server SSRF |
| CVE-2026-87902 In wildKEV | WO WordPress WordPress | 8.1 | Sep 22 | WordPress Core Remote File Inclusion Vulnerability |
| CVE-2026-94127 In wildKEV | BI BIG-IP F5 | 9.8 | Sep 22 | BIG-IP APM OAuth vulnerability |
| CVE-2026-93616 In wildKEV | QS Quantum Security Management checkpoint | 9.8 | Sep 22 | Directory Traversal and File upload allows execution of arbitrary script on the Management Server |
| CVE-2026-93952 In wildKEV | VO VeloCloud Orchestrator (VCO) On-Prem Arista Networks | 10.0 | Sep 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host |
| CVE-2026-87886 In wildKEV | AB Acronis Backup extension for Plesk Acronis | 7.8 | Sep 17 | Acronis Backup Incorrect Default Permissions Vulnerability |
| CVE-2026-76460 In wildKEV | CI Cisco Identity Services Engine Software Cisco | 10.0 | Sep 16 | Cisco Identity Services Engine Authentication Bypass Vulnerability |
| CVE-2026-58704 In wildKEV | AN Android Google | 8.8 | Sep 15 | Google Pixel Improper Authorization Vulnerability |
| CVE-2026-76461 In wildKEV | CS Cisco Secure Email Cisco | 9.8 | Sep 14 | Cisco Secure Email Gateway SQL Injection Vulnerability |
| CVE-2026-85706 In wildKEV | GI GitLab GitLab | 10.0 | Sep 12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab |
| CVE-2026-85102 In wildKEV | QS Quantum Security Gateway Check Point | 9.8 | Sep 9 | Improper Certificate Validation in Quantum Security Gateway |
| CVE-2026-87491 In wildKEV | CH Chrome Google | 8.8 | Sep 9 | Google Chromium V8 Out of Bounds Write Vulnerability |
| CVE-2026-84869 In wildKEV | SC ScreenConnect ConnectWise | 9.9 | Sep 8 | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions |
| CVE-2026-81963 In wildKEV | WI Windows Microsoft | 7.8 | Sep 8 | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2026-85880 In wildKEV | WI Windows Microsoft | 7.8 | Sep 8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2026-75650 In wildKEV | CO Commerce Adobe | 10.0 | Sep 7 | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) |
| CVE-2026-86218 In wildKEV | NC N-central N-able | 9.8 | Sep 6 | pre-authentication remote code execution |
| CVE-2026-86060 In wildKEV | RO RouterOS Mikrotik | 9.8 | Sep 5 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS |
| CVE-2026-67279 In wildKEV | RO RouterOS Mikrotik | 6.5 | Sep 5 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS |
| CVE-2026-67277 In wildKEV | RO RouterOS Mikrotik | 8.2 | Sep 5 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service |
| CVE-2026-85046 In wildKEV | CH Chrome Google | 8.8 | Sep 3 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2026-83549 In wildKEV | SM SMA1000 SonicWall | 7.8 | Sep 1 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability |
| CVE-2026-83548 In wildKEV | SM SMA1000 SonicWall | 10.0 | Sep 1 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
| CVE-2026-82329 In wildKEV | AR artifactory jfrog | 9.8 | Aug 28 | Potential authentication bypass leading to administrative access in Artifactory |