CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 10:39 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84748 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration |
| CVE-2026-84747 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments |
| CVE-2026-84727 New | AB Apache bRPC Apache Software Foundation | 5.4 | Oct 21 | Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message |
| CVE-2026-82953 New | AB Apache bRPC Apache Software Foundation | 5.3 | Oct 21 | Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service |
| CVE-2026-82942 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service |
| CVE-2026-82425 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service |
| CVE-2026-82231 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client |
| CVE-2026-82230 New | AB Apache bRPC Apache Software Foundation | 7.5 | Oct 21 | Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser |
| CVE-2026-82210 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames |
| CVE-2026-114407 New | E1 e107 e107inc | 6.1 | Oct 21 | e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter |
| CVE-2026-81755 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request |
| CVE-2026-80463 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly |
| CVE-2026-79704 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling |
| CVE-2026-78334 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Missing Authentication for Streaming RPC Frames |
| CVE-2026-78066 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes |
| CVE-2026-78058 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path |
| CVE-2026-78048 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder |
| CVE-2026-74758 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling |
| CVE-2026-74757 New | AB Apache bRPC Apache Software Foundation | 7.5 | Oct 21 | Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count |
| CVE-2026-74755 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service |
| CVE-2026-114242 New | IN Insurance-Management-System dhikshitha29 | 7.3 | Oct 21 | dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection |
| CVE-2026-66392 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names |
| CVE-2026-61916 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms |
| CVE-2026-61902 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits |
| CVE-2026-58064 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation |
| CVE-2026-56388 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Out-of-Bounds Write in Redis Command Parser |
| CVE-2026-56387 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser |
| CVE-2026-56386 New | AB Apache bRPC Apache Software Foundation | 7.5 | Oct 21 | Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser |
| CVE-2026-54427 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser |
| CVE-2026-54426 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser |
| CVE-2026-54425 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding |
| CVE-2026-48830 New | AB Apache bRPC Apache Software Foundation | – | Oct 21 | Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests |
| CVE-2026-59229 New | AI Apache IoTDB Apache Software Foundation | – | Oct 21 | Apache IoTDB: Legacy Pipe Privilege Escalation |
| CVE-2026-59562 New | AI Apache IoTDB Apache Software Foundation | – | Oct 21 | Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC |
| CVE-2026-41114 New | AI Apache IoTDB JDBC driver Apache Software Foundation | – | Oct 21 | Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver |
| CVE-2026-58663 New | AI Apache IoTDB Apache Software Foundation | – | Oct 21 | Apache IoTDB: Auth Bypass in pipeTransfer() interface |