CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 15:32 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108307 New | EC Endpoint Configuration Toolset Solution Tanium | 7.8 | Oct 27 | Tanium addressed a heap-based buffer overflow vulnerability in Index. |
| CVE-2026-116662 New | EN Enforce Tanium | 7.5 | Oct 27 | Tanium addressed a compression bomb vulnerability in Enforce. |
| CVE-2026-108305 New | EN end-user-cx Tanium | 7.8 | Oct 27 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. |
| CVE-2026-117516 New | PH php-travel-agency-system oretnom23 | 7.3 | Oct 27 | oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection |
| CVE-2026-117515 New | PH php-travel-agency-system oretnom23 | 7.3 | Oct 27 | oretnom23 php-travel-agency-system traceapplication.php sql injection |
| CVE-2026-116676 New | AT atlantis runatlantis | 8.8 | Oct 27 | Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan |
| CVE-2026-117514 New | PH php-travel-agency-system oretnom23 | 7.3 | Oct 27 | oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection |
| CVE-2026-57201 New | AS asterisk asterisk | 7.5 | Oct 27 | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer |
| CVE-2026-114598 New | EB EPICS Base The EPICS Community | 7.5 | Oct 27 | Access of resource using incompatible type ('type confusion') in EPICS Base |
| CVE-2026-114597 New | EB EPICS Base The EPICS Community | 7.5 | Oct 27 | Improper handling of length parameter inconsistency in EPICS Base |
| CVE-2026-114596 New | EB EPICS Base The EPICS Community | 8.2 | Oct 27 | Integer overflow or wraparound in EPICS Base |
| CVE-2026-116675 New | TI tinymce tinymce | 8.5 | Oct 27 | TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization |
| CVE-2026-117513 New | PH php-travel-agency-system oretnom23 | 7.3 | Oct 27 | oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection |
| CVE-2026-57197 New | AS asterisk asterisk | 7.7 | Oct 27 | Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) |
| CVE-2026-109090 New | LI libXi x.org | 7.5 | Oct 27 | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow |
| CVE-2026-116672 New | AU authlib authlib | 8.8 | Oct 27 | Authlib RFC 7592 examples omit registration-access-token client binding |
| CVE-2026-117512 New | PH php-travel-agency-system oretnom23 | 7.3 | Oct 27 | oretnom23 php-travel-agency-system employee_insert.php unrestricted upload |
| CVE-2026-48379 New | AS Adobe Substance 3D Painter Adobe | 7.8 | Oct 27 | Substance3D - Painter | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-104349 New | CC Creative Cloud Desktop Application Adobe | 7.3 | Oct 27 | Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427) |
| CVE-2026-107671 New | ON ONE Veeam | 8.5 | Oct 27 | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification |
| CVE-2026-106077 New | BF Backup for Microsoft 365 Veeam | 8.3 | Oct 27 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges |
| CVE-2026-105477 New | AF Agent for Linux Veeam | 7.3 | Oct 27 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation |
| CVE-2026-77167 New | SE server Nextcloud | 7.5 | Oct 27 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table |
| CVE-2026-112353 New | GK GFI KerioConnect GFI USA, LLC | 8.2 | Oct 27 | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
| CVE-2026-113775 New | FU Fusion Autodesk | 7.8 | Oct 27 | Dynamic Library Loading Process Control in Autodesk Fusion Desktop |
| CVE-2026-109089 New | LI libXi X.Org | 7.5 | Oct 27 | libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow |
| CVE-2026-102638 New | FU Fusion Autodesk | 7.1 | Oct 27 | Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop |
| CVE-2026-102637 New | FU Fusion Autodesk | 7.1 | Oct 27 | Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop |
| CVE-2026-102636 New | FU Fusion Autodesk | 7.1 | Oct 27 | Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop |
| CVE-2026-107672 New | FP Fusion Post Processor Utility Autodesk | 8.8 | Oct 27 | Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility |
| CVE-2026-117511 New | NO node-tesseract desmondmorris | 7.3 | Oct 27 | desmondmorris node-tesseract Command Builder tesseract.js process os command injection |
| CVE-2026-93862 New | FO Fireware OS WatchGuard | 7.2 | Oct 27 | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service |
| CVE-2026-90464 New | FO Fireware OS WatchGuard | 7.2 | Oct 27 | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root |
| CVE-2026-103593 New | FO Fireware OS WatchGuard | 7.1 | Oct 27 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution |
| CVE-2026-93434 New | FO Fireware OS WatchGuard | 8.7 | Oct 27 | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets |
| CVE-2026-90442 New | FO Fireware OS WatchGuard | 8.6 | Oct 27 | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service |
| CVE-2026-93864 New | FO Fireware OS WatchGuard | 7.1 | Oct 27 | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root |
| CVE-2026-111107 New | FO Fireware OS WatchGuard | 8.7 | Oct 27 | Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service |
| CVE-2026-104189 New | 3D 3Dviewer-Nextcloud maz1987in | 7.5 | Oct 27 | 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share |
| CVE-2026-111585 New | FC Full Client TeamViewer | 8.8 | Oct 27 | Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow |
| CVE-2026-111584 New | TR TeamViewer Remote - Patch Management TeamViewer | 7.3 | Oct 27 | Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows |
| CVE-2026-111583 New | FC Full Client TeamViewer | 7.3 | Oct 27 | Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows |
| CVE-2026-111582 New | RM Remote Management - Monitoring TeamViewer | 7.3 | Oct 27 | Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows |
| CVE-2026-92377 New | FC Full Client TeamViewer | 7.8 | Oct 27 | Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows |
| CVE-2026-92376 New | RM Remote Management - Monitoring TeamViewer | 7.8 | Oct 27 | Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows |
| CVE-2026-92375 New | FC Full Client TeamViewer | 7.8 | Oct 27 | Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring |
| CVE-2026-92374 New | FC Full Client TeamViewer | 7.8 | Oct 27 | Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS |
| CVE-2026-92372 New | FC Full Client TeamViewer | 8.8 | Oct 27 | Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution |
| CVE-2026-117604 New | GR grav getgrav | 7.5 | Oct 27 | Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback |
| CVE-2026-118008 New | Product not mapped yet | 8.8 | Oct 27 | Privilege escalation in the DOM: Navigation component |