CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 15:10 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49950 | XO xoscar xorbitsai | 9.8 | Oct 13 | Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool |
| CVE-2026-93905 | WA WebSphere Application Server - Liberty IBM | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data |
| CVE-2026-93909 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an authentication bypass |
| CVE-2026-93895 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Improper Access Control |
| CVE-2026-95695 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization |
| CVE-2026-95696 | WA WebSphere Application Server - Liberty IBM | 7.5 | Oct 13 | IBM WebSphere Application Server Liberty Denial of Service |
| CVE-2026-101294 | WA WebSphere Application Server IBM | 8.7 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step |
| CVE-2026-105442 | WA WebSphere Application Server IBM | 7.5 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data |
| CVE-2026-105443 | WA WebSphere Application Server - Liberty IBM | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an improper access control |
| CVE-2026-11713 | WA WebSphere Application Server - Liberty IBM | 5.4 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization |
| CVE-2026-14532 | WA WebSphere Application Server - Liberty IBM | 4.3 | Oct 13 | IBM WebSphere Application Server Liberty Integer Overflow |
| CVE-2026-14909 | WA WebSphere Application Server - Liberty IBM | 6.5 | Oct 13 | IBM WebSphere Application Server Liberty Information Disclosure |
| CVE-2026-77816 | WA WebSphere Application Server - Liberty IBM | 6.5 | Oct 13 | IBM WebSphere Application Server Liberty Improper Certificate Validation |
| CVE-2026-79715 | WA WebSphere Application Server - Liberty IBM | 5.5 | Oct 13 | IBM WebSphere Application Server Liberty Path Traversal |
| CVE-2026-85473 | JA java-jwt Auth0 | 5.3 | Oct 13 | Out-of-Range Timestamp Claim Handling in auth0/java-jwt |
| CVE-2026-78633 | OR Okta RADIUS Agent Okta | 6.5 | Oct 13 | Denial of Service in Okta RADIUS Agent Packet Parser |
| CVE-2026-78632 | OR Okta RADIUS Agent Okta | 5.3 | Oct 13 | Insecure Default File Permissions in Okta RADIUS Agent Windows Installer |
| CVE-2026-107371 | AU auth0.js Auth0 | 5.4 | Oct 13 | Missing Verification of auth_time Claim in auth0.js |
| CVE-2026-107370 | AU auth0-lock Auth0 | 5.3 | Oct 13 | Improper Request Handling for Active Directory Logins in auth0-lock |
| CVE-2026-107369 | NE nextjs-auth0 Auth0 | 6.1 | Oct 13 | Improper Validation of Post-Login Redirect URL in nextjs-auth0 |
| CVE-2026-78628 | OC Okta Credential Provider for Windows Okta | 6.0 | Oct 13 | Improper Input Validation in the Okta Credential Provider for Windows |
| CVE-2026-63171 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Category Description |
| CVE-2026-63169 | AP Agora Project Omnispace | 6.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe |
| CVE-2026-19810 | SE Symantec Endpoint Detection and Response Broadcom | 5.4 | Oct 13 | Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console |
| CVE-2026-63168 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass |
| CVE-2026-63157 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Links Module |
| CVE-2026-63156 | AP Agora Project Omnispace | 6.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter |
| CVE-2026-63148 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename |
| CVE-2026-103852 | AS Adobe Substance 3D Stager Adobe | 5.5 | Oct 13 | Substance3D - Stager | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103832 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103842 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103836 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103835 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103837 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103833 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103834 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103841 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103839 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103850 | AS Adobe Substance 3D Stager Adobe | 5.5 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103838 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103851 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103840 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103830 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103843 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Use After Free (CWE-416) |
| CVE-2026-63147 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name |
| CVE-2026-63172 | AP Agora Project Omnispace | 7.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit |
| CVE-2026-63161 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 Session Fixation via Authentication |
| CVE-2026-63174 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList |
| CVE-2026-63153 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() |
| CVE-2026-63165 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter |