CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 20:18 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65825 New | AP appointment-booking-software open-reception | 7.5 | Oct 23 | OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants |
| CVE-2026-65824 New | AP appointment-booking-software open-reception | 7.4 | Oct 23 | OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie |
| CVE-2026-58202 New | AP appointment-booking-software open-reception | 8.3 | Oct 23 | OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation` |
| CVE-2026-115877 New | TW twisted twisted | 5.4 | Oct 23 | Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value |