CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 08:18 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82041 | UT UTMStack UTMStack | 9.9 | Oct 2 | UTMStack < 11.2.16 Missing Authorization via Command WebSocket |
| CVE-2026-104019 | SA sagemaker-distribution AWS | 9.0 | Oct 2 | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio |
| CVE-2026-103956 | LO loom AWS | 10.0 | Oct 2 | Missing authentication for critical function in Loom for AWS |
| CVE-2023-54405 | CV CVM H3C | 9.8 | Oct 2 | H3C CVM Unauthenticated File Upload via fileUpload/upload Token |
| CVE-2026-102795 | AT Apache Traffic Server Apache Software Foundation | 9.3 | Oct 2 | Apache Traffic Server: SNI to Host header matching policy is not properly enforced |
| CVE-2026-104849 | TI tinypool tinylibs | 9.5 | Oct 2 | Tinypool: Prototype Pollution Gadget to RCE in run() options |
| CVE-2026-104848 | TI tinypool tinylibs | 9.5 | Oct 2 | Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution |
| CVE-2026-103630 | CH Chrome Google | 9.6 | Oct 2 | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-103626 | CH Chrome Google | 9.6 | Oct 2 | Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute… |
| CVE-2026-103628 | CH Chrome Google | 9.6 | Oct 2 | Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-103648 | IM image-downloader demsking | 9.1 | Oct 2 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader |
| CVE-2026-104846 | SE seroval lxsmnsyc | 9.8 | Oct 2 | Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) |
| CVE-2026-90970 | GA GitLab AI Gateway GitLab | 9.9 | Oct 2 | Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway |
| CVE-2026-19652 | DM Divi Membership DiviEngine | 9.8 | Oct 2 | Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter |
| CVE-2026-83632 | AT Apache Thrift Apache Software Foundation | 9.2 | Oct 2 | Apache Thrift: C++ THttpTransport grows its line buffer without bound |
| CVE-2026-104611 | AC AC9 Tenda | 9.1 | Oct 2 | Tenda AC9 POST Request fast_setting_internet_set stack-based overflow |
| CVE-2026-104610 | HG HG10 Tenda | 10.0 | Oct 2 | Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow |
| CVE-2026-91135 | AT Apache Thrift Apache Software Foundation | 9.2 | Oct 2 | Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) |
| CVE-2026-86325 | MM MGate MB3170 Series Moxa | 9.4 | Oct 2 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface |
| CVE-2026-103877 | AD Apache Directory LDAP API Apache Software Foundation | 9.8 | Oct 2 | Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements |
| CVE-2026-94541 | WA WPMobile.App – Android and iOS App Builder amauric | 9.8 | Oct 2 | WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter |
| CVE-2026-97637 | JA JSON API Auth parorrey | 9.8 | Oct 2 | JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response |
| CVE-2026-93029 | CP cPanel Webpros | 9.0 | Oct 2 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface |
| CVE-2026-93697 | CP cPanel Webpros | 9.0 | Oct 2 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface |
| CVE-2026-93698 | CP cPanel Webpros | 9.9 | Oct 2 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin |
| CVE-2026-15896 | SF Super Forms – Drag & Drop Form Builder WebRehab | 9.1 | Oct 2 | Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter |
| CVE-2026-19660 | DM Divi Membership DiviEngine | 9.8 | Oct 2 | Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter |
| CVE-2026-14378 | DP DevKit Pro dplugins | 9.8 | Oct 2 | DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow |
| CVE-2026-104480 | LI libdave Discord | 9.4 | Oct 2 | Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership |
| CVE-2026-51911 | Product not mapped yet | 9.8 | Oct 2 | vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py) |
| CVE-2026-51922 | Product not mapped yet | 9.8 | Oct 2 | agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py) |
| CVE-2026-51898 | Product not mapped yet | 9.8 | Oct 2 | sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute |
| CVE-2026-51918 | Product not mapped yet | 9.8 | Oct 2 | FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code () |
| CVE-2026-51904 | Product not mapped yet | 9.8 | Oct 2 | SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller |
| CVE-2026-51915 | Product not mapped yet | 9.8 | Oct 2 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller |
| CVE-2026-51906 | Product not mapped yet | 9.1 | Oct 2 | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary… |
| CVE-2026-86345 | RH Red Hat Directory Server 11 Red Hat | 9.0 | Oct 1 | 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result |
| CVE-2026-103765 | MO Mooncake kvcache-ai | 9.4 | Oct 1 | Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server |
| CVE-2026-103764 | MO Mooncake kvcache-ai | 9.8 | Oct 1 | Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport |
| CVE-2026-18397 | SC SConnect Thales | 9.4 | Oct 1 | SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability |
| CVE-2026-71449 | EF EasyIO FS32 Johnson Controls | 9.3 | Oct 1 | : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data |
| CVE-2026-55395 | AW Aware2 Teledyne FLIR | 9.4 | Oct 1 | Hardcoded Passwords in Teledyne FLIR Robots running Aware2 |
| CVE-2026-55393 | AW Aware2 Teledyne FLIR | 10.0 | Oct 1 | Local File Inclusion in Teledyne FLIR Robots running Aware2 |
| CVE-2026-14984 | AW Aware2 Teledyne FLIR | 9.4 | Oct 1 | Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2 |
| CVE-2026-102628 | CL Cadmos LTI Eummena | 9.3 | Oct 1 | Cadmos LTI exposure of sensitive information via debug mode |
| CVE-2026-56662 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.6 | Oct 1 | GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request |
| CVE-2026-56660 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.1 | Oct 1 | GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction |
| CVE-2026-53953 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.1 | Oct 1 | GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover |
| CVE-2026-104286 In wildKEV | FO FortiMail Fortinet | 9.8 | Oct 1 | Fortinet FortiMail Path Traversal Vulnerability |
| CVE-2026-104056 | AU Authlib Authlib | 9.8 | Oct 1 | Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding |