CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 06:49 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105196 | AB Appointment Booking Plugin | 3.3 | Oct 8 | LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API |
| CVE-2026-105195 | BC Booking Calendar | 2.7 | Oct 8 | Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure |
| CVE-2026-104645 | IP Image Photo Gallery Final Tiles Grid | 2.7 | Oct 8 | Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR |
| CVE-2026-107449 | HE Heimdall linuxserver | 3.4 | Oct 8 | linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via… |
| CVE-2026-107448 | MT Magic: The Gathering Arena Wizards of the Coast | 3.4 | Oct 8 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel… |
| CVE-2026-94584 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94583 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-92862 | TR Ticket Ryutsu Center Wavedash Co., Ltd. | 3.3 | Oct 8 | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent |
| CVE-2026-87726 | NX NxpNfcRdLib NXP | 3.9 | Oct 8 | Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended… |
| CVE-2026-67693 | Product not mapped yet | 3.7 | Oct 8 | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key… |
| CVE-2026-88648 | Product not mapped yet | 3.7 | Oct 8 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized… |
| CVE-2026-107284 | AS async-http-client AsyncHttpClient | 3.7 | Oct 7 | AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check |
| CVE-2026-107283 | AS async-http-client AsyncHttpClient | 3.7 | Oct 7 | AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source |
| CVE-2026-107269 | GO gophish gophish | 3.7 | Oct 7 | Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy |
| CVE-2026-107170 | RH Red Hat Enterprise Linux 10 Red Hat | 2.9 | Oct 7 | M17n-lib: null dereference in minput_open_im() after failed m17n_init() |
| CVE-2026-78243 | AY Apache YuniKorn Apache Software Foundation | 2.1 | Oct 7 | Apache YuniKorn: LDAP Group provider panics on lowercase attribute name |
| CVE-2026-92393 | AY Apache YuniKorn Apache Software Foundation | 2.0 | Oct 7 | Apache YuniKorn: Admission control bypass via workload UPDATE operation |
| CVE-2026-104678 | CM CP Media Player | 2.7 | Oct 7 | CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update |
| CVE-2026-106589 | OP OpenSSH OpenBSD | 2.9 | Oct 6 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges |
| CVE-2026-106588 | OP OpenSSH OpenBSD | 3.1 | Oct 6 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected |
| CVE-2026-106587 | OP OpenSSH OpenBSD | 3.3 | Oct 6 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled |
| CVE-2026-106584 | OP OpenSSH OpenBSD | 3.3 | Oct 6 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling |
| CVE-2026-106582 | OP OpenSSH OpenBSD | 3.7 | Oct 6 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings |
| CVE-2026-106449 | LZ lz4-java yawkat | 3.7 | Oct 6 | yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError |
| CVE-2026-102164 | WA Wi-Fi Access Points Arista Networks | 3.1 | Oct 6 | On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a cr |
| CVE-2026-106339 | CH Chrome Google | 3.1 | Oct 6 | Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data… |
| CVE-2026-106399 | CH Chrome Google | 3.3 | Oct 6 | Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file |
| CVE-2026-106210 | CH Chrome Google | 3.1 | Oct 6 | Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension |
| CVE-2026-106180 | CH Chrome Google | 3.1 | Oct 6 | Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page |
| CVE-2026-106224 | CH Chrome Google | 3.1 | Oct 6 | Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a… |
| CVE-2026-106101 | QU quasar quasarframework | 3.1 | Oct 6 | Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service |
| CVE-2026-105950 | FO formwork getformwork | 3.5 | Oct 6 | getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting |
| CVE-2026-105800 | I1 i18next-http-backend i18next | 3.7 | Oct 6 | i18next-http-backend incomplete URL validation permits SSRF |
| CVE-2026-105799 | RE redis @langchain | 2.3 | Oct 6 | LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values |
| CVE-2026-105795 | KI kiota microsoft | 3.1 | Oct 6 | Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests |
| CVE-2026-106026 | TF tftp-hpa H. Peter Anvin | 3.7 | Oct 6 | tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule |
| CVE-2026-56596 | HB HCL BigFix Service Management HCL Software | 3.5 | Oct 6 | HCL BigFix Service Management is affected by multiple security vulnerabilities. |
| CVE-2026-75820 | AS Aspell GNU | 1.8 | Oct 6 | Integer Truncation Leading to Heap Corruption in GNU Aspell |
| CVE-2026-75819 | AS Aspell GNU | 1.8 | Oct 6 | Out-of-bounds Read in GNU Aspell |
| CVE-2026-75818 | AS Aspell GNU | 1.8 | Oct 6 | Heap Buffer Overflow in GNU Aspell's prezip utility |
| CVE-2026-105808 | SS Simple Student Information System SourceCodester | 3.5 | Oct 6 | SourceCodester Simple Student Information System searchresults.php clean cross site scripting |
| CVE-2026-105611 | SP SpringBlade chillzhuang | 2.7 | Oct 6 | chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization |
| CVE-2026-105752 | VL vllm vllm-project | 3.1 | Oct 5 | vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle |
| CVE-2026-105767 | CA Chainguard Academy (edu) Chainguard | 3.3 | Oct 5 | Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands |
| CVE-2026-105766 | CA Chainguard Academy (edu) Chainguard | 3.1 | Oct 5 | Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP |
| CVE-2026-105683 | GH Ghost TryGhost | 3.8 | Oct 5 | Ghost: Path Traversal Vulnerability in Ghost ImageSize Service |
| CVE-2026-105682 | GH Ghost TryGhost | 2.7 | Oct 5 | Ghost: Server-Side Request Forgery in Webhook Trigger |
| CVE-2026-105652 | GH Ghost TryGhost | 3.1 | Oct 5 | Ghost: Password Hash Ordering Disclosure in Ghost Admin API |
| CVE-2026-105326 | RH Red Hat Enterprise Linux 10 Red Hat | 2.5 | Oct 5 | Cups: cups: argument injection in mailto notifier via notify-recipient-uri |
| CVE-2026-105712 | GN GnuPG GnuPG | 3.6 | Oct 5 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive |