CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 10:39 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103799 New | PD PowerProtect Data Domain Management Center Dell | 9.6 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-112197 New | ND NoviGest Desktop App Tactis | 9.4 | Oct 28 | Missing Authentication for Critical Function in Tactis' NoviGest Desktop App |
| CVE-2026-86384 New | PD PowerProtect Data Domain Dell | 9.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-14571 New | FS Futurum Software User Authentication Module Futurum Software | 9.1 | Oct 28 | SQL injection (SQLi) in the user authentication module of Futurum Software |
| CVE-2026-86397 New | PD PowerProtect Data Domain Dell | 9.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86400 New | PD PowerProtect Data Domain Dell | 9.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-90717 New | PD PowerProtect Data Domain Management Center Dell | 9.1 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-109218 New | CM Contact Manager kleor | 9.8 | Oct 28 | Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass |
| CVE-2026-104383 New | AQ Aquila EagleCloud | 9.4 | Oct 28 | Code injection in EagleCloud Aquila on-premises version |
| CVE-2026-84999 New | PR Pie Register Premium Pie Register | 9.8 | Oct 28 | Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler |
| CVE-2026-106013 New | JX Jupiter X Core artbees | 9.8 | Oct 28 | Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter |
| CVE-2026-110879 New | JA jackson-databind FasterXML | 9.8 | Oct 28 | jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512) |
| CVE-2026-58256 New | GR GRR JeromeDevome | 9.1 | Oct 27 | GRR vulnerable to Remote Code Execution Via PHP Code Injection |
| CVE-2026-116692 New | ML mlflow mlflow | 9.8 | Oct 27 | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules |
| CVE-2026-112352 New | SU SureLine Sunhillo Corporation | 9.1 | Oct 27 | Sunhillo SureLine Authentication Bypass via Session Cookie |
| CVE-2026-104353 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) |
| CVE-2026-105780 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) |
| CVE-2026-105489 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104350 New | AC Adobe Campaign Classic Adobe | 9.3 | Oct 27 | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-105781 New | AC Adobe Campaign Classic Adobe | 10.0 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104351 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-104354 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-105779 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-108015 New | NC Notes Client HCLSoftware | 9.1 | Oct 27 | eMudhra Compromised Certificate vulnerability impacts HCL Notes Client |
| CVE-2026-114595 New | EB EPICS Base The EPICS Community | 9.8 | Oct 27 | Integer overflow or wraparound in EPICS Base |
| CVE-2026-48360 New | AC Adobe Connect Android Mobile App Adobe | 9.6 | Oct 27 | Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-108014 New | DS Domino Server HCLSoftware | 9.1 | Oct 27 | eMudhra Compromised Certificate vulnerability impacts HCL Domino Server |
| CVE-2026-108142 New | BR Backup & Replication Veeam | 9.1 | Oct 27 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service |
| CVE-2026-106076 New | BF Backup for Microsoft 365 Veeam | 9.0 | Oct 27 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to… |
| CVE-2026-116863 New | NE Newsletters Tribulant Software | 9.6 | Oct 27 | WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-90465 New | FO Fireware OS WatchGuard | 9.4 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation |
| CVE-2026-112709 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-112710 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-93857 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution |
| CVE-2026-93866 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write |
| CVE-2026-103594 New | FO Fireware OS WatchGuard | 9.5 | Oct 27 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution |
| CVE-2026-93865 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection |
| CVE-2026-117564 New | NE nest-admin buqiyuan | 9.8 | Oct 27 | nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret |
| CVE-2026-65145 New | NA NeMo Agent Toolkit NVIDIA | 10.0 | Oct 27 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue |
| CVE-2026-115216 New | EI Eclipse ioFog Eclipse Foundation | 9.1 | Oct 27 | Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials |
| CVE-2026-112362 New | FA @fastify/express @fastify/express | 9.1 | Oct 27 | @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets |
| CVE-2026-117532 New | CO core redaxo | 9.8 | Oct 27 | REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin |
| CVE-2026-82117 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Authentication Bypass by Spoofing Vulnerability in HiRDB |
| CVE-2026-82116 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Missing Authentication for Critical Function Vulnerability in HiRDB |
| CVE-2026-82118 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82120 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Heap-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82119 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | OS Command Injection Vulnerability in HiRDB |
| CVE-2026-82122 New | HS HiRDB Server Version 10 Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-76939 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.8 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76936 New | JJ JP1/Automatic Job Management System 3 - Manager Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |