CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 20:29 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118541 New | DR Drupal Drupal | – | Oct 30 | Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256 |
| CVE-2026-118542 New | DR Drupal Drupal | – | Oct 30 | Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257 |
| CVE-2026-118543 New | DR Drupal Drupal | – | Oct 30 | Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258 |
| CVE-2026-118544 New | DR Drupal Drupal | – | Oct 30 | Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259 |
| CVE-2026-118555 New | DR Drupal Drupal | – | Oct 30 | Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260 |
| CVE-2026-118556 New | DR Drupal Drupal | – | Oct 30 | Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261 |
| CVE-2026-118557 New | DR Drupal Drupal | – | Oct 30 | Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262 |
| CVE-2026-118558 New | DR Drupal Drupal | – | Oct 30 | Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263 |
| CVE-2026-118559 New | DR Drupal Drupal | – | Oct 30 | Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264 |
| CVE-2026-118560 New | DR Drupal Drupal | – | Oct 30 | Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265 |
| CVE-2026-118545 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266 |
| CVE-2026-118546 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267 |
| CVE-2026-118548 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268 |
| CVE-2026-118549 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269 |
| CVE-2026-118550 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270 |
| CVE-2026-118551 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271 |
| CVE-2026-118552 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272 |
| CVE-2026-118553 New | DR Drupal Drupal | – | Oct 30 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273 |
| CVE-2026-118561 New | DR Drupal Drupal | – | Oct 30 | Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274 |
| CVE-2026-118562 New | DR Drupal Drupal | – | Oct 30 | Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275 |
| CVE-2026-118563 New | DR Drupal Drupal | – | Oct 30 | CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276 |
| CVE-2026-118564 New | DR Drupal Drupal | – | Oct 30 | PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277 |
| CVE-2026-118565 New | DR Drupal Drupal | – | Oct 30 | GroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-278 |
| CVE-2026-118582 New | DR Drupal Drupal | – | Oct 30 | CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281 |
| CVE-2026-118569 New | DR Drupal Drupal | – | Oct 30 | Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282 |
| CVE-2026-118570 New | DR Drupal Drupal | – | Oct 30 | Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283 |
| CVE-2026-118574 New | DR Drupal Drupal | – | Oct 30 | S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279 |
| CVE-2026-118567 New | DR Drupal Drupal | – | Oct 30 | Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280 |
| CVE-2026-118572 New | DR Drupal Drupal | – | Oct 30 | OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284 |
| CVE-2026-118575 New | DR Drupal Drupal | – | Oct 30 | Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285 |
| CVE-2026-118576 New | DR Drupal Drupal | – | Oct 30 | Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286 |
| CVE-2026-118554 New | DR Drupal Drupal | – | Oct 30 | OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287 |
| CVE-2026-118583 New | DR Drupal Drupal | – | Oct 30 | Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288 |
| CVE-2026-118584 New | DR Drupal Drupal | – | Oct 30 | Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289 |
| CVE-2026-118573 New | DR Drupal Drupal | – | Oct 30 | OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290 |
| CVE-2026-118568 New | DR Drupal Drupal | – | Oct 30 | Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291 |
| CVE-2026-118571 New | DR Drupal Drupal | – | Oct 30 | Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292 |
| CVE-2026-74915 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - OOB write in UntwiddlePOTSquare64bpp |
| CVE-2026-74912 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB |
| CVE-2026-19199 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet |
| CVE-2026-18629 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation |
| CVE-2026-65587 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change |
| CVE-2026-65586 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM |
| CVE-2026-65584 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo |
| CVE-2026-118475 New | RH Red Hat Enterprise Linux 6 Red Hat | 3.6 | Oct 30 | Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk |
| CVE-2026-112922 New | RH Red Hat Enterprise Linux 10 Red Hat | 3.3 | Oct 30 | Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading |
| CVE-2026-15466 New | GD Graphics DDK Imagination Technologies | – | Oct 30 | GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM() |
| CVE-2026-91920 New | RH Red Hat build of Apache Camel for Spring Boot 4 Red Hat | 6.5 | Oct 30 | Undertow: undertow: chunkreader message length permits chunk-size overflow |
| CVE-2026-112605 New | XC Xcode Apple | – | Oct 30 | This issue was addressed with improved handling of symlinks |
| CVE-2026-112602 New | XC Xcode Apple | – | Oct 30 | An authorization issue was addressed with improved state management |