CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 10:29 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88619 | Product not mapped yet | 8.1 | Sep 15 | 1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module |
| CVE-2026-79551 | Product not mapped yet | 7.5 | Sep 15 | Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key |
| CVE-2026-51134 | Product not mapped yet | 7.5 | Sep 15 | The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml |
| CVE-2025-66974 | Product not mapped yet | 7.5 | Sep 15 | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an… |
| CVE-2026-90841 | BD Blood Donor Management System PHPGurukul | 7.3 | Sep 14 | PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection |
| CVE-2026-90840 | BD Blood Donor Management System PHPGurukul | 7.3 | Sep 14 | PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication |
| CVE-2026-91200 | DE devspace devspace | 8.8 | Sep 14 | DevSpace through 6.3.21 Path Traversal via tar extraction |
| CVE-2026-91145 | AC Activiti Activiti | 7.1 | Sep 14 | Activiti through 7.1.0.M6 Expression Injection via Mail Task |
| CVE-2026-91144 | ZF zfile zfile-dev | 7.5 | Sep 14 | ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint |
| CVE-2026-91143 | GO goproxy snail007 | 7.2 | Sep 14 | goproxy through 15.3 Authentication Bypass via CONNECT |
| CVE-2026-12756 | BA Business Automation Workflow containers and traditional IBM | 7.1 | Sep 14 | Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 |
| CVE-2026-13275 | MQ MQ IBM | 7.1 | Sep 14 | IBM MQ Managed File Transfer is vulnerable to XML external entity injection |
| CVE-2026-13285 | MQ MQ IBM | 7.1 | Sep 14 | IBM MQ Managed File Transfer is vulnerable to XML external entity injection |
| CVE-2026-13293 | MQ MQ IBM | 8.8 | Sep 14 | IBM MQ Java messaging is vulnerable to remote code execution |
| CVE-2026-13287 | MQ MQ IBM | 7.1 | Sep 14 | IBM MQ Managed File Transfer is vulnerable to XML external entity injection |
| CVE-2026-90896 | ET Ecommerce Template MarcosCamara01 | 8.2 | Sep 14 | Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII |
| CVE-2026-19290 | SF Sterling File Gateway IBM | 7.5 | Sep 14 | IBM Sterling File Gateway is Vulnerable to Improper Access Control |
| CVE-2026-68489 | PE Plesk extension "Node.js Toolkit" WebPros | 8.7 | Sep 14 | Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom… |
| CVE-2026-28960 | IO iOS Apple | 7.5 | Sep 14 | A denial-of-service issue was addressed with improved validation |
| CVE-2026-84631 | MA macOS Apple | 7.8 | Sep 14 | This issue was addressed with additional entitlement checks |
| CVE-2026-84563 | MA macOS Apple | 7.5 | Sep 14 | A logic issue was addressed with improved checks |
| CVE-2026-43686 | MA macOS Apple | 8.8 | Sep 14 | A use-after-free issue was addressed with improved memory management |
| CVE-2026-84575 | MA macOS Apple | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking |
| CVE-2026-64701 | MA macOS Apple | 7.8 | Sep 14 | A permissions issue was addressed with additional restrictions |
| CVE-2026-84543 | MA macOS Apple | 7.5 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking |
| CVE-2026-86895 | IO iOS Apple | 7.5 | Sep 14 | An information disclosure issue was addressed with improved state management |
| CVE-2026-84580 | MA macOS Apple | 8.4 | Sep 14 | The issue was addressed with improved checks |
| CVE-2026-84611 | MA macOS Apple | 7.3 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking |
| CVE-2026-84607 | MA macOS Apple | 7.8 | Sep 14 | A race condition was addressed with improved state management |
| CVE-2026-84578 | MA macOS Apple | 8.8 | Sep 14 | A logic issue was addressed with improved checks |
| CVE-2026-86904 | IO iOS Apple | 7.5 | Sep 14 | A privacy issue was addressed with improved state management |
| CVE-2026-84606 | MA macOS Apple | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of identifiers |
| CVE-2026-84581 | MA macOS Apple | 8.4 | Sep 14 | A buffer overflow was addressed with improved bounds checking |
| CVE-2026-86894 | MA macOS Apple | 7.5 | Sep 14 | A logic issue was addressed with improved checks |
| CVE-2026-84515 | MA macOS Apple | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking |
| CVE-2026-43691 | MA macOS Apple | 7.8 | Sep 14 | A path handling issue was addressed with improved validation |
| CVE-2026-84535 | MA macOS Apple | 8.2 | Sep 14 | An authorization issue was addressed with improved state management |
| CVE-2026-64761 | IO iOS Apple | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of user preferences |
| CVE-2026-43783 | MA macOS Apple | 7.8 | Sep 14 | A race condition was addressed with improved locking |
| CVE-2026-64736 | MA macOS Apple | 7.1 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking |
| CVE-2026-84553 | MA macOS Apple | 7.5 | Sep 14 | A resource exhaustion issue was addressed with improved input validation |
| CVE-2026-65415 | MA macOS Apple | 8.1 | Sep 14 | A race condition was addressed with additional validation |
| CVE-2026-84512 | MA macOS Apple | 8.8 | Sep 14 | A buffer overflow was addressed with improved bounds checking |
| CVE-2026-84549 | MA macOS Apple | 7.5 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking |
| CVE-2026-84565 | MA macOS Apple | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking |
| CVE-2026-43815 | MA macOS Apple | 8.8 | Sep 14 | A buffer overflow was addressed with improved bounds checking |
| CVE-2026-84572 | MA macOS Apple | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking |
| CVE-2026-43697 | MA macOS Apple | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking |
| CVE-2026-84548 | MA macOS Apple | 7.1 | Sep 14 | An integer overflow was addressed with improved input validation |
| CVE-2026-65398 | MA macOS Apple | 7.8 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking |