CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 21:48 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101860 | RA raspap-webgui RaspAP | 8.8 | Sep 29 | RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management |
| CVE-2026-96326 | HC HT Contact Form – Drag & Drop Form Builder for WordPress htplugins | 7.2 | Sep 29 | HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field |
| CVE-2026-101281 | OP OpenDMARC Trusted Domain Project | 7.3 | Sep 29 | Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication |
| CVE-2026-101280 | OP OpenDMARC Trusted Domain Project | 7.3 | Sep 29 | Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing |
| CVE-2026-94954 | Product not mapped yet | 8.8 | Sep 29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030 |
| CVE-2026-67993 | Product not mapped yet | 8.8 | Sep 29 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback |
| CVE-2026-94953 | Product not mapped yet | 8.8 | Sep 29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030 |
| CVE-2026-79403 | Product not mapped yet | 8.4 | Sep 29 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint |
| CVE-2026-67987 | Product not mapped yet | 7.5 | Sep 29 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby… |
| CVE-2026-102335 | NG nginx-proxy-manager NginxProxyManager | 7.1 | Sep 28 | Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config |
| CVE-2026-102334 | NG nginx-proxy-manager NginxProxyManager | 7.4 | Sep 28 | Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection |
| CVE-2026-101091 | SI siyuan siyuan-note | 7.1 | Sep 28 | SiYuan before v3.8.4 SQL Injection via Block Query Embed |