CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 13:03 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115377 New | IN incus lxc | 9.9 | Oct 22 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream |
| CVE-2026-115375 New | IN incus lxc | 9.9 | Oct 22 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes |
| CVE-2022-51026 New | BY bytebase bytebase | 9.8 | Oct 22 | Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login |
| CVE-2026-79876 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.3 | Oct 22 | Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing |
| CVE-2026-79875 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.3 | Oct 22 | Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access |
| CVE-2026-79874 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.3 | Oct 22 | Authentication Bypass in the API allows Administrative Access of AOS-10 |
| CVE-2026-79873 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.3 | Oct 22 | Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access |
| CVE-2026-79872 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.4 | Oct 22 | Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 |
| CVE-2026-79871 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 |
| CVE-2026-79870 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Authentication Bypass leads to Unauthorized Access in AOS-8 |
| CVE-2026-79869 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Authentication Bypass Leading to Remote Code Execution in AOS-10 |
| CVE-2026-79868 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 |
| CVE-2026-79867 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Authentication Bypass Leading to Remote Code Execution in AOS-8 |
| CVE-2026-79866 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 |
| CVE-2026-79865 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 |
| CVE-2026-79864 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 |
| CVE-2026-79863 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution |
| CVE-2026-79862 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 22 | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution |
| CVE-2026-79861 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 |
| CVE-2026-79860 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 |
| CVE-2026-79859 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 |
| CVE-2026-79858 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 |
| CVE-2026-79857 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol |
| CVE-2026-79856 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 |
| CVE-2026-79855 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise |
| CVE-2026-79854 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 |
| CVE-2026-79853 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 |
| CVE-2026-79852 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 22 | Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface |
| CVE-2026-79851 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 |
| CVE-2026-79850 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Authentication Bypass Leading to Remote Code Execution in AOS-8 |
| CVE-2026-79849 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 |
| CVE-2026-79848 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 |
| CVE-2026-79847 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 |
| CVE-2026-79846 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Unauthenticated Command Injection Vulnerabilities in AOS-8 |
| CVE-2026-79844 New | AA ArubaOS (AOS) Hewlett Packard Enterprise (HPE) | 10.0 | Oct 22 | Authentication Bypass Leading to Remote Code Execution in AOS-10 |
| CVE-2026-114612 New | LI litellm BerriAI | 9.9 | Oct 22 | LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key |
| CVE-2026-114611 New | OC OCO-Server schorschii | 9.1 | Oct 22 | OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack |
| CVE-2026-114607 New | BE better-auth better-auth | 9.1 | Oct 22 | better-auth: OAuth state can be used as a Magic Link to sign in as another user |
| CVE-2026-97631 New | ED EDK2 TianoCore | 9.5 | Oct 22 | Pre-boot RCE in EDK II PXE driver |
| CVE-2026-111497 In wildKEVNew | BR Brotli Google | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2026-102785 | YP YOOtheme Pro extension for Joomla yootheme.com | 10.0 | Oct 22 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 |
| CVE-2026-112832 | RO Rootblox CozyThemes | 9.8 | Oct 22 | WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability |
| CVE-2022-51022 | YI YiShaAdmin liukuo362573 | 9.1 | Oct 22 | YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint |
| CVE-2021-48016 | DE DedeCMS DedeCMS | 9.8 | Oct 22 | DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php |
| CVE-2021-48014 | FI FineReport FanRuan | 9.8 | Oct 22 | FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer |
| CVE-2026-112241 | SU SureCart Brainstorm Force | 9.8 | Oct 22 | WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability |
| CVE-2026-112327 | AM Amelia TMS | 9.3 | Oct 22 | WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability |
| CVE-2026-114220 | NO NT OneAPP NewType Infortech | 9.1 | Oct 22 | NewType Infortech｜NT OneAPP - Improper Certificate Validation |
| CVE-2026-96355 | DR Drupal Drupal | 9.1 | Oct 22 | Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 |
| CVE-2026-114575 | A9 A950RG TOTOLINK | 10.0 | Oct 22 | TOTOLINK A950RG product.so UploadCustomModule command injection |