CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 00:14 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114662 New | OB obot obot-platform | 8.1 | Oct 22 | Obot before 0.26.0 API Key Theft via CLI Login Token Request |
| CVE-2026-114661 New | OP openremote openremote | 8.5 | Oct 22 | OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints |
| CVE-2026-114658 New | GR grav-plugin-login getgrav | 8.8 | Oct 22 | Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite |
| CVE-2026-114656 New | TR traefik traefik | 7.5 | Oct 22 | Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher |
| CVE-2026-114642 New | TR traefik traefik | 8.7 | Oct 22 | Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper |
| CVE-2026-114640 New | TR traefik traefik | 8.7 | Oct 22 | Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router |
| CVE-2026-114639 New | TR traefik traefik | 8.7 | Oct 22 | Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool |
| CVE-2026-114638 New | TR traefik traefik | 8.7 | Oct 22 | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision |
| CVE-2026-114637 New | TR traefik traefik | 8.7 | Oct 22 | Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak |
| CVE-2026-114636 New | TR traefik traefik | 8.7 | Oct 22 | Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router |
| CVE-2026-114635 New | TR traefik traefik | 8.7 | Oct 22 | Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme |
| CVE-2026-114720 New | WE Webmail Roundcube | 7.1 | Oct 22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability |
| CVE-2026-96365 New | DR Drupal Drupal | 7.5 | Oct 22 | Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 |
| CVE-2026-114716 New | WE Webmail Roundcube | 8.5 | Oct 22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability |