CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 11:09 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-9209 | MJ mJobTime mJob | 9.8 | Oct 8 | mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx |
| CVE-2026-14269 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Buffer Overflow |
| CVE-2026-107640 | EN Enswitch Integrics | 9.1 | Oct 8 | Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API |
| CVE-2026-14502 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Improper Authentication |
| CVE-2026-14508 | DG DataPower Gateway 10.5.0 IBM | 9.1 | Oct 8 | IBM DataPower Gateway Use After Free |
| CVE-2026-14888 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Buffer Overflow |
| CVE-2026-14988 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Out-of-bounds Read |
| CVE-2026-93034 | SG SGLang SGLang | 9.8 | Oct 8 | SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in… |
| CVE-2026-14992 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Out-of-bounds Write |
| CVE-2026-14990 | DG DataPower Gateway 10.6.0 IBM | 9.3 | Oct 8 | IBM DataPower Gateway affected by cross-site scripting |
| CVE-2026-14991 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Out-of-bounds Write |
| CVE-2026-15762 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Out-of-bounds Write |
| CVE-2026-16340 | DG DataPower Gateway 10.5.0 IBM | 9.8 | Oct 8 | IBM DataPower Gateway Out-of-bounds Write |
| CVE-2026-19218 | MY MyRezzta AKIN Software Computer Import-Export Industry and Trade Co. Ltd. | 9.1 | Oct 8 | Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta |
| CVE-2026-92555 | AW AKINSOFT WOLVOX Control Panel AKIN Software Computer Import-Export Industry and Trade Co. Ltd. | 9.8 | Oct 8 | Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel |
| CVE-2026-107510 | NI NIOS Infoblox | 9.1 | Oct 8 | Authenticated argument injection in NIOS command line leading to privilege escalation |
| CVE-2026-105110 | IN Innbox Iskratel | 9.8 | Oct 8 | Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter |
| CVE-2026-12260 | NC NetBoard CRM Demo Platform NetBoard CRM | 10.0 | Oct 8 | SQL injection in the NetBoard CRM demo platform |
| CVE-2026-85097 | BR Bricksforge Bricksforge | 9.8 | Oct 8 | Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter |
| CVE-2026-103692 | FD Frontend Dashboard | 9.8 | Oct 8 | Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call |
| CVE-2026-103646 | UM Ultimate Multisite | 9.8 | Oct 8 | Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter |
| CVE-2026-107459 | SP SecuShare Pro Openfind | 9.8 | Oct 8 | Openfind｜SecuShare Pro - OS Command Injection |
| CVE-2026-17609 | SF Super Forms – Drag & Drop Form Builder WebRehab | 9.1 | Oct 8 | Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter |
| CVE-2026-87659 | FO Fabric OS Brocade | 9.8 | Oct 8 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87684 | FO Fabric OS Brocade | 9.8 | Oct 8 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1 |
| CVE-2026-107282 | AS async-http-client AsyncHttpClient | 9.4 | Oct 7 | AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host |
| CVE-2026-76285 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Improper Adherence to Coding Standards in Splunk Enterprise |
| CVE-2026-76284 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Improper Neutralization in Splunk Enterprise |
| CVE-2026-76268 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise |
| CVE-2026-95606 | TE The Events Calendar Liquid Web / StellarWP | 9.8 | Oct 7 | WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability |
| CVE-2026-95605 | WD WP Data Access Passionate Programmer Peter | 9.3 | Oct 7 | WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability |
| CVE-2026-76464 | CC Cisco Campus Gateway Software Cisco | 9.6 | Oct 7 | Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities |
| CVE-2026-76501 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability |
| CVE-2026-76500 | CA Cisco Application Policy Infrastructure Controller (APIC) Cisco | 9.8 | Oct 7 | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities |
| CVE-2026-76498 | CA Cisco Application Policy Infrastructure Controller (APIC) Cisco | 9.8 | Oct 7 | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities |
| CVE-2026-76499 | CA Cisco Application Policy Infrastructure Controller (APIC) Cisco | 9.8 | Oct 7 | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities |
| CVE-2026-76486 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability |
| CVE-2026-76485 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability |
| CVE-2026-76483 | CL Cisco License On-Prem Cisco | 9.1 | Oct 7 | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76482 | CL Cisco License On-Prem Cisco | 10.0 | Oct 7 | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76480 | CL Cisco License On-Prem Cisco | 9.8 | Oct 7 | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76459 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities |
| CVE-2026-76471 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco NX-OS Software NX-API Remote Code Execution Vulnerability |
| CVE-2026-76455 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities |
| CVE-2026-76465 | CN Cisco NX-OS Software Cisco | 9.8 | Oct 7 | Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability |
| CVE-2026-62252 | HO homer sipcapture | 9.8 | Oct 7 | Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login |
| CVE-2026-76454 | CL Cisco License On-Prem Cisco | 9.1 | Oct 7 | Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability |
| CVE-2026-20328 | CL Cisco License On-Prem Cisco | 9.1 | Oct 7 | Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability |
| CVE-2026-62253 | HO homer sipcapture | 9.8 | Oct 7 | Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default) |
| CVE-2026-62176 | PR PraisonAI MervinPraison | 9.1 | Oct 7 | PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation |