CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 13:30 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97023 | RH Red Hat Enterprise Linux 10 Red Hat | 7.1 | Sep 28 | Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin |
| CVE-2026-84894 | MO moxygen Meta Platforms, Inc | 7.5 | Sep 28 | In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's… |
| CVE-2026-55160 | ST stringer stringer-rss | 7.6 | Sep 28 | Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringer |
| CVE-2026-55157 | TO token-optimizer-mcp ooples | 8.4 | Sep 28 | Token Optimizer MCP: OS command injection in smart_user via username in get-user-info |
| CVE-2026-101909 | AX axios axios | 8.3 | Sep 28 | Axios: Prototype Pollution Gadget in axios toFormData Options |
| CVE-2026-75600 | SE security-reporting FreePBX | 8.8 | Sep 28 | FreePBX: Authenticated API generatedocs Host Command Injection |
| CVE-2026-54710 | SE security-reporting FreePBX | 8.8 | Sep 28 | FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion) |
| CVE-2026-54708 | SE security-reporting FreePBX | 8.8 | Sep 28 | Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module |
| CVE-2026-54675 | SE security-reporting FreePBX | 8.8 | Sep 28 | FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module |
| CVE-2026-54674 | SE security-reporting FreePBX | 8.8 | Sep 28 | Authenticated Command Injection in FreePBX UCP Interface |
| CVE-2026-45562 | SE security-reporting FreePBX | 7.2 | Sep 28 | FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module |
| CVE-2026-101907 | AX axios axios | 7.0 | Sep 28 | Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF |
| CVE-2026-101906 | AX axios axios | 8.2 | Sep 28 | Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location |
| CVE-2026-101905 | AX axios axios | 7.6 | Sep 28 | Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection |
| CVE-2026-101903 | AX axios axios | 8.2 | Sep 28 | Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) |
| CVE-2026-101901 | AX axios axios | 8.2 | Sep 28 | Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization |
| CVE-2026-101898 | AX axios axios | 7.0 | Sep 28 | Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls |
| CVE-2026-87969 | WA WatchGuard AP WatchGuard | 8.6 | Sep 28 | WatchGuard AP Authenticated Command Injection in Diagnostic CLI |
| CVE-2026-87114 | PD Pen Drive Powered by Red Hat Lightspeed Red Hat | 7.1 | Sep 28 | Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo |
| CVE-2026-48100 | PA payy polybase | 8.7 | Sep 28 | Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages |
| CVE-2026-55096 | FA fast-mcp-telegram leshchenko1979 | 7.1 | Sep 28 | SSRF via DNS-resolution gap in _validate_url_security (file download by URL) |
| CVE-2026-54160 | NU nut networkupstools | 8.2 | Sep 28 | Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN |
| CVE-2026-85644 | Product not mapped yet | 7.5 | Sep 28 | XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference |
| CVE-2026-88816 | Product not mapped yet | 7.5 | Sep 28 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName |
| CVE-2026-88805 | RA Rancher SUSE | 8.1 | Sep 28 | Session Not Revoked Server-Side on Logout in Rancher |
| CVE-2026-88808 | RA Rancher SUSE | 8.8 | Sep 28 | Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters |
| CVE-2026-93348 | UN unsloth unslothai | 8.1 | Sep 28 | Unsloth Zoo Code Injection via model_type in config.json |
| CVE-2026-96538 | WA WarehousePG EnterpriseDB | 8.7 | Sep 28 | WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation |
| CVE-2026-4556 | EX Exam4 Extegrity | 7.8 | Sep 28 | macOS Exam4 Local Privilege Escalation via Command Injection |
| CVE-2026-80357 | BO Boot Optimized Server Storage (BOSS) Dell | 7.0 | Sep 28 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on… |
| CVE-2026-93538 | RA Rancher SUSE | 7.1 | Sep 28 | Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet |
| CVE-2026-101073 | NR NR289-GE Netcore | 8.3 | Sep 28 | Netcore NR289-GE CGI Dispatcher boa improper authentication |
| CVE-2026-90925 | LS Logsign SIEM Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. | 7.1 | Sep 28 | Path Traversal in Innotim Software's Logsign SIEM |
| CVE-2026-90926 | LS Logsign SIEM Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. | 8.8 | Sep 28 | Code Injection in Innotim Software's Logsign SIEM |