CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 18:32 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96419 | WI Wireshark Wireshark Foundation | 7.8 | Sep 29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark |
| CVE-2026-96423 | WI Wireshark Wireshark Foundation | 7.1 | Sep 29 | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96440 | A4 Agentflow 4.0 Flowring Technology Corp | 7.1 | Sep 29 | Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） |
| CVE-2026-92142 | AK Apache Karaf Apache Software Foundation | 8.8 | Sep 29 | Apache Karaf: Authorization bypass in JMX MBean lifecycle operations |
| CVE-2026-96430 | A4 Agentflow 4.0 Flowring Technology Corp | 8.7 | Sep 29 | Flowring Agentflow 4.0 - Exposed Dangerous Method or Function |
| CVE-2026-101169 | OS Octopus Server Octopus Deploy | 8.7 | Sep 29 | In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object |
| CVE-2026-86158 | PT Progress® Telerik® Fiddler® Everywhere Progress Software | 7.7 | Sep 29 | Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere |
| CVE-2026-102293 | TA tacomall realjerrytang | 7.3 | Sep 29 | realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorization |
| CVE-2026-102422 | SH shell-quote | 8.1 | Sep 29 | shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token |
| CVE-2026-102249 | RE REBUILD Rebuild | 7.3 | Sep 29 | REBUILD file-editor-save authorization |
| CVE-2026-102248 | RE Rebuild Rebuild | 7.3 | Sep 29 | Rebuild Login Endpoint login improper authentication |
| CVE-2026-97024 | RH Red Hat Enterprise Linux 10 Red Hat | 7.1 | Sep 29 | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc |
| CVE-2026-102245 | SU SurfSense MODSetter | 7.3 | Sep 29 | MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication |
| CVE-2026-102243 | SU SurfSense MODSetter | 7.4 | Sep 29 | MODSetter SurfSense MCP Connector Integration test command injection |
| CVE-2026-97685 | LI LimeSurvey LimeSurvey | 7.1 | Sep 29 | LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations |
| CVE-2026-101878 | BS bitwarden server bitwarden | 7.5 | Sep 29 | Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation |
| CVE-2026-101860 | RA raspap-webgui RaspAP | 8.8 | Sep 29 | RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management |
| CVE-2026-96326 | HC HT Contact Form – Drag & Drop Form Builder for WordPress htplugins | 7.2 | Sep 29 | HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field |
| CVE-2026-101281 | OP OpenDMARC Trusted Domain Project | 7.3 | Sep 29 | Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication |
| CVE-2026-101280 | OP OpenDMARC Trusted Domain Project | 7.3 | Sep 29 | Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing |
| CVE-2026-94954 | Product not mapped yet | 8.8 | Sep 29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030 |
| CVE-2026-67993 | Product not mapped yet | 8.8 | Sep 29 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback |
| CVE-2026-94953 | Product not mapped yet | 8.8 | Sep 29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030 |
| CVE-2026-79403 | Product not mapped yet | 8.4 | Sep 29 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint |
| CVE-2026-67987 | Product not mapped yet | 7.5 | Sep 29 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby… |
| CVE-2026-102335 | NG nginx-proxy-manager NginxProxyManager | 7.1 | Sep 28 | Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config |
| CVE-2026-102334 | NG nginx-proxy-manager NginxProxyManager | 7.4 | Sep 28 | Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection |
| CVE-2026-101091 | SI siyuan siyuan-note | 7.1 | Sep 28 | SiYuan before v3.8.4 SQL Injection via Block Query Embed |
| CVE-2024-42002 | RO Robot Operating System 2 (ROS 2) Open Source Robotics Foundation | 8.4 | Sep 28 | Unsafe use of eval() method in ros2 topic hz tool |
| CVE-2026-102281 | NE nest nestjs | 7.5 | Sep 28 | Nest: Remote process termination via a deeply nested microservice message pattern |
| CVE-2026-101188 | PO POWER13 Netcore | 8.3 | Sep 28 | Netcore POWER13 ubus routerd.passwd_set password recovery |
| CVE-2026-102278 | BR brace-expansion juliangruber | 7.5 | Sep 28 | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion |
| CVE-2026-102276 | BR brace-expansion juliangruber | 7.5 | Sep 28 | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion |
| CVE-2026-102275 | PY pyjwt jpadilla | 8.2 | Sep 28 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion |
| CVE-2026-91096 | PR proxygen Facebook | 7.5 | Sep 28 | In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before v2025.08.18.00) failed to unregister… |
| CVE-2026-84895 | PR proxygen Facebook | 7.3 | Sep 28 | In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method |
| CVE-2026-102274 | PY pyjwt jpadilla | 7.5 | Sep 28 | PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set |
| CVE-2026-102273 | PY pyjwt jpadilla | 7.4 | Sep 28 | PyJWT accepts public JWK containers as HMAC secrets |
| CVE-2026-102272 | PY pyjwt jpadilla | 7.4 | Sep 28 | PyJWT BOM Bypass |
| CVE-2026-102271 | PY pyjwt jpadilla | 7.4 | Sep 28 | PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard |
| CVE-2026-100392 | IN InvoicePlane InvoicePlane | 7.0 | Sep 28 | InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization) |
| CVE-2026-100371 | IN InvoicePlane InvoicePlane | 8.7 | Sep 28 | InvoicePlane: Incomplete Authorization Remediation in Users::form() Enables Primary Administrator Account Takeover via Email Reassignment and Password Recovery |
| CVE-2026-101918 | PY pyjwt jpadilla | 7.5 | Sep 28 | PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False) |
| CVE-2026-101917 | PY pyjwt jpadilla | 7.5 | Sep 28 | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524) |
| CVE-2026-101916 | GR grpc-node grpc | 7.4 | Sep 28 | @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized |
| CVE-2026-18415 | ZE zephyr zephyrproject | 7.1 | Sep 28 | Out-of-bounds write in the IEEE 802.15.4 L2 transmit path for oversized non-6LoWPAN frames |
| CVE-2026-18414 | ZE zephyr zephyrproject | 7.8 | Sep 28 | Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation |
| CVE-2026-18413 | ZE zephyr zephyrproject | 7.8 | Sep 28 | Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation |
| CVE-2026-16513 | ZE zephyr zephyrproject | 7.8 | Sep 28 | Missing write validation of user-supplied handle pointer in the RTIO syscall verifier allows arbitrary kernel write |
| CVE-2026-87741 | CO ConvertPlus Brainstorm Force | 8.8 | Sep 28 | ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter |