CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 09:32 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104418 | GH Ghost TryGhost | 7.2 | Oct 2 | Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files |
| CVE-2026-104416 | GH Ghost TryGhost | 7.5 | Oct 2 | Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API |
| CVE-2026-104414 | GH Ghost TryGhost | 8.1 | Oct 2 | Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses |
| CVE-2026-104413 | GH Ghost TryGhost | 7.3 | Oct 2 | Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images |
| CVE-2026-104411 | GH Ghost TryGhost | 7.3 | Oct 2 | Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads |
| CVE-2026-104410 | SI siyuan siyuan-note | 7.5 | Oct 2 | SiYuan before 3.8.5 Information Disclosure via /api/export/preview |
| CVE-2026-82459 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process |
| CVE-2026-82458 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available |
| CVE-2026-96288 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) |
| CVE-2026-96292 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) |
| CVE-2026-96294 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection |
| CVE-2026-61373 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation |
| CVE-2026-96990 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound |
| CVE-2026-94642 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception |
| CVE-2026-94644 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound |
| CVE-2026-94645 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound |
| CVE-2026-94650 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) |
| CVE-2026-94651 | AT Apache Thrift Apache Software Foundation | 7.5 | Oct 2 | Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error |
| CVE-2026-85493 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) |
| CVE-2026-85494 | AT Apache Thrift Apache Software Foundation | 7.5 | Oct 2 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) |
| CVE-2026-86326 | MM MGate MB3170 Series Moxa | 8.6 | Oct 2 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of… |
| CVE-2026-91137 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements |
| CVE-2026-93925 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id |
| CVE-2026-93926 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path |
| CVE-2026-94633 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length |
| CVE-2026-94634 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default |
| CVE-2026-103885 | AD Apache Directory LDAP API Apache Software Foundation | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via crafted telephone number values |
| CVE-2026-103880 | AD Apache Directory LDAP API Apache Software Foundation | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords |
| CVE-2026-103878 | AD Apache Directory LDAP API Apache Software Foundation | 7.5 | Oct 2 | Apache Directory LDAP API: Injection of plaintext responses during StartTLS |
| CVE-2026-103552 | AD Apache Directory LDAP API Apache Software Foundation | 7.3 | Oct 2 | Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder |
| CVE-2026-94639 | AT Apache Thrift Apache Software Foundation | 8.2 | Oct 2 | Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) |
| CVE-2026-87920 | WT W3 Total Cache boldgrid | 7.2 | Oct 2 | W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content |
| CVE-2026-102731 | AD Apache Directory LDAP API Apache Software Foundation | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode |
| CVE-2026-94635 | AT Apache Thrift Apache Software Foundation | 8.7 | Oct 2 | Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name |
| CVE-2026-80298 | SA Sef - AI Chatbot Platform HAVELSAN Inc. | 8.8 | Oct 2 | SQL Injection in HAVELSAN's Sef - AI Chatbot Platform |
| CVE-2026-80443 | SA Sef - AI Chatbot Platform HAVELSAN Inc. | 7.4 | Oct 2 | Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform |
| CVE-2026-18036 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | NTRU leaks private key information by reducing secret values with a non-constant-time integer division |
| CVE-2026-95670 | NE No External Links mihdan | 7.2 | Oct 2 | No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect |
| CVE-2026-93756 | SB Smash Balloon Social Post Feed – Simple Social Feeds for WordPress smub | 7.2 | Oct 2 | Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview |
| CVE-2026-100107 | KA Kubio AI Page Builder extendthemes | 7.2 | Oct 2 | Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass) |
| CVE-2026-96871 | MB Mang Board kitae-park | 7.2 | Oct 2 | Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter |
| CVE-2026-97342 | JD JetFormBuilder — Dynamic Blocks Form Builder jetmonsters | 7.2 | Oct 2 | JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action |
| CVE-2026-103426 | RP Relevanssi Premium Relevanssi | 7.2 | Oct 2 | Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter |
| CVE-2026-96566 | NS Newsletter – Send awesome emails from WordPress satollo | 7.2 | Oct 2 | Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter |
| CVE-2026-100182 | DM Download Monitor wpchill | 7.2 | Oct 2 | Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor |
| CVE-2026-97641 | RA Relevanssi – A Better Search comesio | 7.2 | Oct 2 | Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content |
| CVE-2026-102772 | CM CMB2 jtsternberg | 7.2 | Oct 2 | CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field |
| CVE-2026-95817 | DC DoFollow Case by Case apasionados | 7.2 | Oct 2 | DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content |
| CVE-2026-97336 | CM CMB2 jtsternberg | 7.2 | Oct 2 | CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type |
| CVE-2026-96567 | MW MW WP Form websoudan | 7.2 | Oct 2 | MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta) |