CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 23:34 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71973 | UB u-boot u-boot | 5.2 | Sep 29 | U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation |
| CVE-2026-71972 | UB u-boot u-boot | 5.9 | Sep 29 | U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder |
| CVE-2026-102938 | VI virtualenv pypa | 5.8 | Sep 29 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection |
| CVE-2026-81842 | GR Grafana Grafana | 4.3 | Sep 29 | Library panel can be moved into a folder without library panel create permission |
| CVE-2026-102904 | JU jupyterlab jupyterlab | 5.4 | Sep 29 | JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs |
| CVE-2026-81841 | GR Grafana Grafana | 5.3 | Sep 29 | Paused shared dashboard access tokens still expose data source configuration |
| CVE-2026-102879 | CL ClaraVerse claraverse-space | 5.0 | Sep 29 | ClaraVerse through 0.3.1 SSRF Protection Bypass |
| CVE-2026-102877 | FI fider getfider | 4.4 | Sep 29 | Fider before 0.38.0 SSRF via DNS rebinding in webhook validation |
| CVE-2026-100299 | YS YSSD-RTMP-H5 Anjvision | 6.8 | Sep 29 | Use of Weak Credentials in Anjvision YSSD-RTMP-H5 |
| CVE-2026-100297 | YS YSSD-RTMP-H5 Anjvision | 5.3 | Sep 29 | Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5 |
| CVE-2026-102305 | CH Chrome Google | 5.4 | Sep 29 | UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page |
| CVE-2026-102314 | CH Chrome Google | 5.4 | Sep 29 | UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page |
| CVE-2026-102330 | CH Chrome Google | 6.5 | Sep 29 | Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via… |
| CVE-2026-102310 | CH Chrome Google | 6.5 | Sep 29 | Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a… |
| CVE-2026-102320 | CH Chrome Google | 6.5 | Sep 29 | Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted… |
| CVE-2026-102329 | CH Chrome Google | 6.1 | Sep 29 | Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page |
| CVE-2026-102318 | CH Chrome Google | 4.7 | Sep 29 | Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page |
| CVE-2026-102325 | CH Chrome Google | 4.3 | Sep 29 | Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page |
| CVE-2026-102300 | CH Chrome Google | 4.3 | Sep 29 | Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page |
| CVE-2026-102303 | CH Chrome Google | 4.3 | Sep 29 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page |
| CVE-2026-102307 | CH Chrome Google | 4.7 | Sep 29 | Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page |
| CVE-2026-102313 | CH Chrome Google | 4.7 | Sep 29 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page |
| CVE-2026-102312 | CH Chrome Google | 4.3 | Sep 29 | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page |
| CVE-2026-100295 | YS YSSD-RTMP-H5 Anjvision | 6.3 | Sep 29 | Active debug code in Anjvision YSSD-RTMP-H5 |
| CVE-2026-53989 | DO dockhand Finsys | 4.7 | Sep 29 | Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint |
| CVE-2026-102252 | OS OSV-SCALIBR Google | 6.9 | Sep 29 | Path Traversal in VMDK Extractor in OSV-SCALIBR |
| CVE-2026-76735 | IO Instant ON Hewlett Packard Enterprise (HPE) | 4.1 | Sep 29 | Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On |
| CVE-2026-76734 | IO Instant ON Hewlett Packard Enterprise (HPE) | 4.8 | Sep 29 | Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On |
| CVE-2026-76733 | IO Instant ON Hewlett Packard Enterprise (HPE) | 4.9 | Sep 29 | Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint |
| CVE-2026-76732 | IO Instant ON Hewlett Packard Enterprise (HPE) | 6.4 | Sep 29 | Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON |
| CVE-2026-76731 | IO Instant ON Hewlett Packard Enterprise (HPE) | 6.5 | Sep 29 | Authentication Bypass in the Captive Portal of HPE Networking Instant On |
| CVE-2026-76730 | IO Instant ON Hewlett Packard Enterprise (HPE) | 6.5 | Sep 29 | Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs |
| CVE-2026-76729 | IO Instant ON Hewlett Packard Enterprise (HPE) | 6.6 | Sep 29 | Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint |
| CVE-2026-102830 | JU jupyterlab jupyterlab | 6.8 | Sep 29 | JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) |
| CVE-2026-102824 | RU russh Eugeny | 4.3 | Sep 29 | Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange |
| CVE-2026-102821 | RU russh Eugeny | 6.5 | Sep 29 | Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey |
| CVE-2026-102820 | RU russh Eugeny | 6.2 | Sep 29 | pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows) |
| CVE-2026-102729 | GU GUIX Eclipse Foundation | 5.9 | Sep 29 | `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id |
| CVE-2026-102727 | ND NetX Duo Eclipse Foundation | 6.0 | Sep 29 | FTP Passive Data Connection Not Bound to the Authenticated Control Peer |
| CVE-2026-102639 | MO MobilityDB MobilityDB | 6.5 | Sep 29 | MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization |
| CVE-2026-102726 | ND NetX Duo Eclipse Foundation | 6.0 | Sep 29 | Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read |
| CVE-2026-102725 | ND NetX Duo Eclipse Foundation | 6.0 | Sep 29 | Out-of-bounds Read from Unvalidated MSRP Attribute List Length |
| CVE-2026-102724 | ND NetX Duo Eclipse Foundation | 6.0 | Sep 29 | NULL Pointer Dereference When Evicting the Sole MSRP Attribute |
| CVE-2026-102723 | ND NetX Duo Eclipse Foundation | 6.0 | Sep 29 | NULL Pointer Dereference on MSRP Attribute Table Exhaustion |
| CVE-2026-102722 | ND NetX Duo Eclipse Foundation | 6.9 | Sep 29 | In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply |
| CVE-2026-102721 | ND NetX Duo Eclipse Foundation | 6.9 | Sep 29 | A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram |
| CVE-2026-102720 | EC eclipse-threadx/netxduo Eclipse Foundation | 5.3 | Sep 29 | A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message |
| CVE-2026-12345 | CP CPython Python Software Foundation | 5.9 | Sep 29 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory |
| CVE-2026-102719 | NE netxduo Eclipse Foundation | 6.3 | Sep 29 | Predictable DTLS HelloVerifyRequest Cookie in NetX Secure |
| CVE-2026-102711 | EM `eclipse-threadx/threadx` (module manager / loadable-module loader) Eclipse Foundation | 5.7 | Sep 29 | Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `_txm_module_manager_memory_load` /… |