CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 20:24 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27588 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass |
| CVE-2026-27587 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass |
| CVE-2026-27586 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed |
| CVE-2026-27515 | 1N 10G08-0800GSM Network Switch Binardat Ltd. | 9.1 | Feb 24 | Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers |
| CVE-2026-27507 | 1N 10G08-0800GSM Network Switch Binardat Ltd. | 9.8 | Feb 24 | Binardat 10G08-0800GSM Network Switch Hard-coded Credentials |
| CVE-2026-2807 | FI Firefox Mozilla | 9.8 | Feb 24 | Memory safety bugs fixed in Firefox 148 and Thunderbird 148 |
| CVE-2026-2806 | FI Firefox Mozilla | 9.1 | Feb 24 | Uninitialized memory in the Graphics: Text component |
| CVE-2026-2805 | FI Firefox Mozilla | 9.8 | Feb 24 | Invalid pointer in the DOM: Core & HTML component |
| CVE-2026-2800 | FI Firefox Mozilla | 9.8 | Feb 24 | Spoofing issue in the WebAuthn component in Firefox for Android |
| CVE-2026-2799 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-2797 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: GC component |
| CVE-2026-2796 | FI Firefox Mozilla | 9.8 | Feb 24 | JIT miscompilation in the JavaScript: WebAssembly component |
| CVE-2026-2795 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: GC component |
| CVE-2026-2634 | FI Firefox Mozilla | 9.8 | Feb 24 | Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS |
| CVE-2026-2793 | FI Firefox Mozilla | 9.8 | Feb 24 | Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 |
| CVE-2026-2792 | FI Firefox Mozilla | 9.8 | Feb 24 | Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 |
| CVE-2026-2791 | FI Firefox Mozilla | 9.8 | Feb 24 | Mitigation bypass in the Networking: Cache component |
| CVE-2026-2790 | FI Firefox Mozilla | 9.8 | Feb 24 | Same-origin policy bypass in the Networking: JAR component |
| CVE-2026-2789 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the Graphics: ImageLib component |
| CVE-2026-2788 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Audio/Video: GMP component |
| CVE-2026-2787 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the DOM: Window and Location component |
| CVE-2026-2786 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2785 | FI Firefox Mozilla | 9.8 | Feb 24 | Invalid pointer in the JavaScript Engine component |
| CVE-2026-2784 | FI Firefox Mozilla | 9.8 | Feb 24 | Mitigation bypass in the DOM: Security component |
| CVE-2026-2782 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Netmonitor component |
| CVE-2026-2781 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the Libraries component in NSS |
| CVE-2026-2780 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Netmonitor component |
| CVE-2026-2779 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Networking: JAR component |
| CVE-2026-2778 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component |
| CVE-2026-2777 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Messaging System component |
| CVE-2026-2776 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software |
| CVE-2026-2775 | FI Firefox Mozilla | 9.8 | Feb 24 | Mitigation bypass in the DOM: HTML Parser component |
| CVE-2026-2774 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the Audio/Video component |
| CVE-2026-2773 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Web Audio component |
| CVE-2026-2772 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the Audio/Video: Playback component |
| CVE-2026-2771 | FI Firefox Mozilla | 9.8 | Feb 24 | Undefined behavior in the DOM: Core & HTML component |
| CVE-2026-2770 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the DOM: Bindings (WebIDL) component |
| CVE-2026-2768 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape in the Storage: IndexedDB component |
| CVE-2026-2767 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-2766 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine: JIT component |
| CVE-2026-2765 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2764 | FI Firefox Mozilla | 9.8 | Feb 24 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component |
| CVE-2026-2763 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2762 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the JavaScript: Standard Library component |
| CVE-2026-2761 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape in the Graphics: WebRender component |
| CVE-2026-2760 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component |
| CVE-2026-2759 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Graphics: ImageLib component |
| CVE-2026-2758 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: GC component |
| CVE-2026-2757 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the WebRTC: Audio/Video component |
| CVE-2025-14577 | IP IPL Slican | 9.8 | Feb 24 | PHP Function Injection in Slican NPC/IPL/IPM/IPU |