CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 15:32 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100798 | FI Firefox Mozilla | 8.1 | Sep 29 | Cryptography misuse in Storage: Quota Manager component |
| CVE-2026-100797 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to use-after-free in the Graphics: WebRender component |
| CVE-2026-100796 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-100792 | FI Firefox Mozilla | 7.1 | Sep 29 | JIT miscompilation in the JavaScript: WebAssembly component |
| CVE-2026-100791 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100790 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the XSLT component |
| CVE-2026-100789 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component |
| CVE-2026-100785 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100784 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Layout: Text and Fonts component |
| CVE-2026-100782 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to incorrect boundary conditions in the Graphics component |
| CVE-2026-100780 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100779 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the XSLT component |
| CVE-2026-100777 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component |
| CVE-2026-100776 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-100774 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100773 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Storage: IndexedDB component |
| CVE-2026-100772 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100771 | FI Firefox Mozilla | 8.1 | Sep 29 | Undefined behavior in the DOM: Streams component |
| CVE-2026-100769 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-100768 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: WebGPU component |
| CVE-2026-100767 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Networking: Cache component |
| CVE-2026-100765 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-100764 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component |
| CVE-2026-100761 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to use-after-free in the Graphics: WebGPU component |
| CVE-2026-100759 | FI Firefox Mozilla | 8.1 | Sep 29 | Uninitialized memory in the Storage: Quota Manager component |
| CVE-2026-100757 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Widget component |
| CVE-2026-100756 | FI Firefox Mozilla | 8.1 | Sep 29 | Incorrect boundary conditions in the Audio/Video: Playback component |
| CVE-2026-7193 | T4 T-CPE301K 4G Mini WiFi Router Shenzhen Dbit Network Equipment | 8.6 | Sep 29 | Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment |
| CVE-2026-102437 | DE DeepSeek-Reasonix esengine | 7.8 | Sep 29 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix |
| CVE-2026-73598 | SC Secure Connect Gateway (SCG) Policy Manager Dell | 7.8 | Sep 29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability |
| CVE-2026-73597 | SC Secure Connect Gateway (SCG) Policy Manager Dell | 8.1 | Sep 29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2026-87748 | QD Qorela DC Interprobe Information Technologies Inc. | 8.8 | Sep 29 | Privilege Escalation via Account Takeover in Interprobe's Qorela DC |
| CVE-2026-102497 | AX Apache XMLSchema Apache Software Foundation | 7.5 | Sep 29 | Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker |
| CVE-2026-102496 | AX Apache XMLSchema Apache Software Foundation | 7.5 | Sep 29 | Apache XMLSchema: Denial of service through deeply nested schema structures |
| CVE-2026-102495 | AX Apache XMLSchema Apache Software Foundation | 7.5 | Sep 29 | Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes |
| CVE-2026-73594 | SC Secure Connect Gateway (SCG) Policy Manager Dell | 8.8 | Sep 29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability |
| CVE-2026-95520 | RH Red Hat Enterprise Linux 10 Red Hat | 7.1 | Sep 29 | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages |
| CVE-2026-95509 | QF Qt for MCUs qt | 8.8 | Sep 29 | Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs |
| CVE-2026-19547 | GH Ghostscript Artifex Software Inc. | 7.0 | Sep 29 | Local Privilege Escalation in Ghostscript for Windows |
| CVE-2026-76719 | HO HPE OneView Hewlett Packard Enterprise | 8.2 | Sep 29 | HPE OneView - Cross-site scripting vulnerability |
| CVE-2026-76718 | HO HPE OneView Hewlett Packard Enterprise | 8.2 | Sep 29 | HPE OneView - Cross-site scripting vulnerability |
| CVE-2026-7395 | AS Asset Suite Hitachi Energy | 8.5 | Sep 29 | Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity… |
| CVE-2026-84739 | GI GitLab GitLab | 8.7 | Sep 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab |
| CVE-2026-95389 | WI Wireshark Wireshark Foundation | 8.1 | Sep 29 | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-95387 | WI Wireshark Wireshark Foundation | 8.8 | Sep 29 | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96419 | WI Wireshark Wireshark Foundation | 7.8 | Sep 29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark |
| CVE-2026-96423 | WI Wireshark Wireshark Foundation | 7.1 | Sep 29 | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96440 | A4 Agentflow 4.0 Flowring Technology Corp | 7.1 | Sep 29 | Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） |
| CVE-2026-92142 | AK Apache Karaf Apache Software Foundation | 8.8 | Sep 29 | Apache Karaf: Authorization bypass in JMX MBean lifecycle operations |
| CVE-2026-96430 | A4 Agentflow 4.0 Flowring Technology Corp | 8.7 | Sep 29 | Flowring Agentflow 4.0 - Exposed Dangerous Method or Function |