CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 03:54 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105977 | PF Portfolio Filter Gallery | 2.2 | Oct 10 | Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnail |
| CVE-2026-104754 | RM Rank Math SEO | 3.5 | Oct 10 | Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL |
| CVE-2026-104742 | AP AI Puffer – AI Chatbot, AI Writer & Automation senols | 3.1 | Oct 10 | AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action |
| CVE-2026-104741 | AP AI Puffer – AI Chatbot, AI Writer & Automation senols | 3.1 | Oct 10 | AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint |
| CVE-2026-107848 | CO contao contao | 3.5 | Oct 9 | Contao: Cross-site request forgery in custom backend actions |
| CVE-2026-104116 | IL illumos-gate illumos | 1.9 | Oct 9 | Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones |
| CVE-2026-104117 | IL illumos-gate illumos | 1.9 | Oct 9 | Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership |
| CVE-2026-101130 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading… |
| CVE-2026-101094 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files,… |
| CVE-2026-96395 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity… |
| CVE-2026-96394 | AF affinity canva | 2.9 | Oct 9 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook… |
| CVE-2026-96393 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer… |
| CVE-2026-78017 | SC Secure Connect Gateway (SCG) Policy Manager Dell | 3.8 | Oct 9 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability |
| CVE-2026-106095 | CS Code Snippets | 3.3 | Oct 9 | Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet |
| CVE-2026-107727 | ST strawberry strawberry-graphql | 3.7 | Oct 8 | Strawberry legacy graphql-ws retains naturally completed subscription slots |
| CVE-2026-106438 | MO MongoDB MongoDB | 3.7 | Oct 8 | Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver |
| CVE-2026-106428 | MO MongoDB MongoDB | 3.7 | Oct 8 | Out-of-bounds read in SCRAM response parsing in MongoDB C Driver |
| CVE-2026-107296 | MS msgpack5 mcollina | 3.7 | Oct 8 | msgpack5: Decoding negative int64 values mutates the input buffer |
| CVE-2026-107676 | FF FFmpeg FFmpeg | 3.3 | Oct 8 | FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer |
| CVE-2026-107288 | PY pydantic-ai pydantic | 3.7 | Oct 8 | Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently |
| CVE-2026-89290 | EI eimzamip İzometri IT Services Domestic and Foreign Trade Co. Ltd. | 3.5 | Oct 8 | HTML Injection in İzometri Informatics' eimzamip |
| CVE-2026-104634 | BE beam_mcp ScriptKittyOS | 2.3 | Oct 8 | beam_mcp: JSON boolean and null tool arguments reach dispatch as strings |
| CVE-2026-107570 | MU mutt mutt | 2.5 | Oct 8 | Use of Out-of-range Pointer Offset in mutt |
| CVE-2026-94258 | SA SMS Alert | 2.7 | Oct 8 | SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions |
| CVE-2026-105197 | AB Appointment Booking Plugin | 2.7 | Oct 8 | LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR |
| CVE-2026-105196 | AB Appointment Booking Plugin | 3.3 | Oct 8 | LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API |
| CVE-2026-105195 | BC Booking Calendar | 2.7 | Oct 8 | Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure |
| CVE-2026-104645 | IP Image Photo Gallery Final Tiles Grid | 2.7 | Oct 8 | Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR |
| CVE-2026-107449 | HE Heimdall linuxserver | 3.4 | Oct 8 | linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via… |
| CVE-2026-107448 | MT Magic: The Gathering Arena Wizards of the Coast | 3.4 | Oct 8 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel… |
| CVE-2026-94584 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94583 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-92862 | TR Ticket Ryutsu Center Wavedash Co., Ltd. | 3.3 | Oct 8 | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent |
| CVE-2026-87726 | NX NxpNfcRdLib NXP | 3.9 | Oct 8 | Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended… |
| CVE-2026-88648 | Product not mapped yet | 3.7 | Oct 8 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized… |
| CVE-2026-67693 | Product not mapped yet | 3.7 | Oct 8 | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key… |
| CVE-2026-107284 | AS async-http-client AsyncHttpClient | 3.7 | Oct 7 | AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check |
| CVE-2026-107283 | AS async-http-client AsyncHttpClient | 3.7 | Oct 7 | AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source |
| CVE-2026-107269 | GO gophish gophish | 3.7 | Oct 7 | Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy |
| CVE-2026-107170 | RH Red Hat Enterprise Linux 10 Red Hat | 2.9 | Oct 7 | M17n-lib: null dereference in minput_open_im() after failed m17n_init() |
| CVE-2026-78243 | AY Apache YuniKorn Apache Software Foundation | 2.1 | Oct 7 | Apache YuniKorn: LDAP Group provider panics on lowercase attribute name |
| CVE-2026-92393 | AY Apache YuniKorn Apache Software Foundation | 2.0 | Oct 7 | Apache YuniKorn: Admission control bypass via workload UPDATE operation |
| CVE-2026-104678 | CM CP Media Player | 2.7 | Oct 7 | CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update |
| CVE-2026-106589 | OP OpenSSH OpenBSD | 2.9 | Oct 6 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges |
| CVE-2026-106588 | OP OpenSSH OpenBSD | 3.1 | Oct 6 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected |
| CVE-2026-106587 | OP OpenSSH OpenBSD | 3.3 | Oct 6 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled |
| CVE-2026-106584 | OP OpenSSH OpenBSD | 3.3 | Oct 6 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling |
| CVE-2026-106582 | OP OpenSSH OpenBSD | 3.7 | Oct 6 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings |
| CVE-2026-106449 | LZ lz4-java yawkat | 3.7 | Oct 6 | yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError |
| CVE-2026-102164 | WA Wi-Fi Access Points Arista Networks | 3.1 | Oct 6 | On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a cr |