CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 11:26 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-7438 | BT Bold Timeline Lite boldthemes | 6.4 | Sep 11 | Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2026-18562 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 6.1 | Sep 11 | HUSKY <= 1.4.3 - Reflected Cross-Site Scripting |
| CVE-2026-19985 | RA Relevanssi – A Better Search comesio | 6.1 | Sep 11 | Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting |
| CVE-2026-11446 | BA Booktics – Appointment Booking Calendar for Service Businesses arraytics | 5.3 | Sep 11 | Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization |
| CVE-2026-84960 | WM WP-Members Membership Plugin cbutlerjr | 6.1 | Sep 11 | WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting |
| CVE-2026-18964 | FC Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty premio | 6.1 | Sep 11 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting |
| CVE-2026-11496 | PB PDF Builder for WooCommerce. Create invoices,packing slips and more edgarrojas | 6.5 | Sep 11 | Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure |
| CVE-2026-12215 | OL OTP Login & Register Woocommerce xootix | 5.3 | Sep 11 | OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force |
| CVE-2026-77150 | UE Unlimited Elements For Elementor unitecms | 6.1 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting |
| CVE-2026-88914 | RH Red Hat Enterprise Linux 10 Red Hat | 4.4 | Sep 11 | Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser |
| CVE-2026-78129 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption |
| CVE-2026-78126 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin |
| CVE-2026-78123 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin |
| CVE-2026-89092 | GL glibc The GNU C Library | 4.2 | Sep 11 | Stack overflow in nscd due to unbounded alloca use |
| CVE-2026-89145 | FL flextype flextype | 4.2 | Sep 11 | Flextype CMS 0.9.9 through 1.0.0-alpha.3 Stored XSS via Plugin Directory |
| CVE-2026-79035 | Product not mapped yet | 6.1 | Sep 11 | A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary Javascript in the… |
| CVE-2025-69904 | Product not mapped yet | 4.9 | Sep 11 | Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input |
| CVE-2026-84941 | OV OC200 v3 TP-Link Systems Inc. | 6.9 | Sep 10 | Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read |
| CVE-2026-81906 | CC Concrete CMS Concrete CMS | 6.3 | Sep 10 | [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks |
| CVE-2026-81905 | CC Concrete CMS Concrete CMS | 6.3 | Sep 10 | Concrete CMS below 9.5.3 does not enforce validation-hash type on redemption, allowing a hash issued for one purpose to be redeemed for another. |
| CVE-2026-18121 | CC Concrete CMS Concrete CMS | 6.3 | Sep 10 | Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) in the Calendar block's frontend event dialog (/ccm/calendar/view_event/{bID}/{occurrence_id}). |
| CVE-2026-16172 | ED Endpoint DLP Netskope | 6.0 | Sep 10 | Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash |
| CVE-2026-49838 | GO gobgp osrg | 5.9 | Sep 10 | GoBGP confederation validation panics on empty AS_PATH attribute |
| CVE-2026-49837 | GO gobgp osrg | 5.9 | Sep 10 | GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries |
| CVE-2026-54054 | TR transmute transmute-app | 6.5 | Sep 10 | Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects |
| CVE-2026-49836 | PS psd-tools psd-tools | 4.6 | Sep 10 | psd-tools: arbitrary file write via smart-object filename |
| CVE-2026-79723 | LO Langflow OSS IBM | 5.0 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches |
| CVE-2026-79725 | LO Langflow OSS IBM | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation |
| CVE-2026-80378 | DO DataStage on Cloud Pak for Data IBM | 6.5 | Sep 10 | DataStage on Cloud Pak for Data has several vulnerabilities due to open source software |
| CVE-2026-80434 | DO DataStage on Cloud Pak for Data IBM | 5.0 | Sep 10 | DataStage on Cloud Pak for Data has several vulnerabilities due to open source software |
| CVE-2026-45767 | SU suricata OISF | 4.4 | Sep 10 | Suricata datasets: save to absolute filename can be bypassed when combined with load command |
| CVE-2026-81554 | DO DataStage on Cloud Pak for Data IBM | 6.5 | Sep 10 | DataStage on Cloud Pak for Data has several vulnerabilities due to open source software |
| CVE-2026-82092 | DO DataStage on Cloud Pak for Data IBM | 6.5 | Sep 10 | DataStage on Cloud Pak for Data has several vulnerabilities due to open source software |
| CVE-2026-82100 | DO DataStage on Cloud Pak for Data IBM | 6.5 | Sep 10 | DataStage on Cloud Pak for Data has several vulnerabilities due to open source software |
| CVE-2026-86087 | DB Db2 IBM | 4.3 | Sep 10 | IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system |
| CVE-2026-9667 | WA WebSphere Application Server IBM | 5.3 | Sep 10 | IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities |
| CVE-2026-9225 | LO Langflow OSS IBM | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation |
| CVE-2026-3096 | WA WSO2 API Control Plane WSO2 | 4.7 | Sep 10 | Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft |
| CVE-2026-45752 | SU suricata OISF | 5.9 | Sep 10 | Suricata detect/transform: use-after-free in decompress transforms |
| CVE-2026-89089 | HO Horizon The OpenNMS Group | 6.5 | Sep 10 | OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER) |
| CVE-2026-76652 | AM Archer MR600 TP-Link Systems Inc. | 4.8 | Sep 10 | Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600 |
| CVE-2026-76653 | AM Archer MR600 TP-Link Systems Inc. | 5.3 | Sep 10 | Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600 |
| CVE-2026-19596 | HO Horizon The OpenNMS Group | 5.9 | Sep 10 | OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host |
| CVE-2026-84432 | CC Concrete CMS Concrete CMS | 5.3 | Sep 10 | Concrete CMS 9 through 9.5.2 is vulnerable to CSRFin the Boards custom slot dialog controller |
| CVE-2026-88061 | CA career-ops santifer | 5.8 | Sep 10 | career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command execution |
| CVE-2026-88060 | AN angular angular | 6.1 | Sep 10 | Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements |
| CVE-2026-88059 | AN angular angular | 5.8 | Sep 10 | Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent` |
| CVE-2026-87107 | CO Consul HashiCorp | 5.4 | Sep 10 | Consul vulnerable to an authorization bypass in the catalog deregistration path |
| CVE-2026-88058 | AN angular angular | 6.1 | Sep 10 | Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements |
| CVE-2026-87106 | CO Consul HashiCorp | 6.5 | Sep 10 | Consul vulnerable to a denial of service in the native RPC listener |