CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 23:47 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113380 | RI RingRTC Signal | 9.3 | Oct 20 | In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and… |
| CVE-2026-86868 | MA macOS Apple | 9.1 | Oct 20 | An authentication issue was addressed with improved state management |
| CVE-2026-77936 | LE letta letta-ai | 9.8 | Oct 20 | Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access |
| CVE-2026-77933 | DB DB-GPT eosphoros-ai | 9.8 | Oct 20 | DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment |
| CVE-2026-77932 | DB DB-GPT eosphoros-ai | 9.8 | Oct 20 | DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent |
| CVE-2026-77930 | EV EvoScientist EvoScientist | 9.8 | Oct 20 | EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents |
| CVE-2026-75128 | LA Langchain-Chatchat chatchat-space | 9.8 | Oct 20 | Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint |
| CVE-2026-109444 | OP opensre Tracer-Cloud | 9.8 | Oct 20 | OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection |
| CVE-2026-109442 | PI piflow cas-bigdatalab | 9.8 | Oct 20 | piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell |
| CVE-2026-109395 | CO compress-lzf ning | 9.1 | Oct 20 | Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder |
| CVE-2026-112371 | MN Magic NX15 H3C | 9.9 | Oct 19 | H3C Magic NX15 RPC esps write code injection |
| CVE-2026-112370 | MN Magic NX15 H3C | 9.9 | Oct 19 | H3C Magic NX15 usrlist sub_416874 os command injection |
| CVE-2026-112900 | PI Pillow python-pillow | 9.8 | Oct 19 | Pillow: Argument Injection in Ghostscript call, potentially leading into RCE |
| CVE-2026-112403 | PI Pillow python-pillow | 9.8 | Oct 19 | Pillow: Heap buffer overflow in ImagingJpegDecode |
| CVE-2026-112398 | PI Pillow python-pillow | 9.8 | Oct 19 | Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution |
| CVE-2026-112393 | PI Pillow python-pillow | 9.8 | Oct 19 | Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO |
| CVE-2026-112779 | GR grav-plugin-api getgrav | 9.8 | Oct 19 | Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass |
| CVE-2026-112776 | CM cms craftcms | 9.8 | Oct 19 | Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations |
| CVE-2026-109437 | CO Cognition CognicellAI | 9.8 | Oct 19 | Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend |
| CVE-2026-110685 | Product not mapped yet | 9.1 | Oct 19 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag |
| CVE-2026-12665 | MA MQ Advanced container images IBM | 9.8 | Oct 19 | IBM MQ Buffer Overflow |
| CVE-2026-107188 | AR Archibus Eptura | 9.6 | Oct 19 | Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution |
| CVE-2026-111862 | RM Rank Math SEO PRO RankMath | 9.8 | Oct 19 | Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code |
| CVE-2026-111058 | ME mercury mljar | 9.8 | Oct 19 | Mercury: Unauthenticated Remote Code Execution via /api/kernels |
| CVE-2026-111057 | ME mercury mljar | 10.0 | Oct 19 | Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass |
| CVE-2026-109432 | C7 Camunda 7 Camunda | 9.8 | Oct 19 | Camunda Expression Injection via orQueries RCE |
| CVE-2026-112296 | FL FlyCms sunkaifei | 9.8 | Oct 19 | FlyCms through commit edfdf724 Default Super Administrator Credentials |
| CVE-2026-112292 | CH checkcle operacle | 9.8 | Oct 19 | CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules |
| CVE-2026-71253 | AJ Apache Johnzon Apache Software Foundation | 9.8 | Oct 19 | Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON |
| CVE-2026-78162 | AC Apache Camel Apache Software Foundation | 10.0 | Oct 19 | Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) |
| CVE-2026-90910 | AA Apache Answer Apache Software Foundation | 9.8 | Oct 19 | Apache Answer: Reaction API authorization bypass for restricted content |
| CVE-2026-110887 | HI HivePress HivePress | 9.9 | Oct 19 | WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-111406 | MA MapSVG PT Norther Lights Production | 9.9 | Oct 19 | WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability |
| CVE-2026-103091 | SA SAM Google | 9.3 | Oct 19 | Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) |
| CVE-2026-102503 | SA SAM Google | 9.3 | Oct 19 | Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) |
| CVE-2026-108983 | GV GV-ASManager GeoVision Inc. | 9.8 | Oct 19 | GV-ASManager Web Server Command Injection Vulnerability |
| CVE-2026-107083 | Product not mapped yet | 9.8 | Oct 19 | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID |
| CVE-2026-107081 | Product not mapped yet | 9.8 | Oct 19 | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php,… |
| CVE-2024-4457 | WA WSO2 API Manager WSO2 | 9.1 | Oct 18 | Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution |
| CVE-2026-98549 | LI Linux Linux | 9.1 | Oct 18 | tcp: prevent collapsing skbs across boundary in rtx queue |
| CVE-2026-98548 | LI Linux Linux | 9.8 | Oct 18 | sctp: discard the rest of the packet on a stale-cookie error |
| CVE-2026-98490 | LI Linux Linux | 9.8 | Oct 18 | net: openvswitch: conntrack: fix helper UAF due to extensions realloc |
| CVE-2026-98464 | LI Linux Linux | 9.3 | Oct 18 | RISC-V: KVM: Synchronize hrtimer callback during teardown |
| CVE-2026-111998 | VA vanus vanus-labs | 9.8 | Oct 18 | Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway |
| CVE-2026-110886 | CF Conversational Forms for ChatBot QuantumCloud | 9.8 | Oct 18 | WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability |
| CVE-2026-109894 | BO Booktics Arraytics | 9.3 | Oct 18 | WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability |
| CVE-2026-110372 | OT OttoKit Brainstorm Force | 9.8 | Oct 18 | WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability |
| CVE-2026-111911 | PH phpMyFAQ thorsten | 9.8 | Oct 17 | phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection |
| CVE-2026-104736 | LW LearnPress – WordPress LMS Plugin for Create and Sell Online Courses thimpress | 9.8 | Oct 17 | LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter |
| CVE-2026-110653 | AB Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress latepoint | 9.1 | Oct 17 | Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter |