CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 11:26 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58256 New | GR GRR JeromeDevome | 9.1 | Oct 27 | GRR vulnerable to Remote Code Execution Via PHP Code Injection |
| CVE-2026-116692 New | ML mlflow mlflow | 9.8 | Oct 27 | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules |
| CVE-2026-112352 New | SU SureLine Sunhillo Corporation | 9.1 | Oct 27 | Sunhillo SureLine Authentication Bypass via Session Cookie |
| CVE-2026-104353 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) |
| CVE-2026-105780 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) |
| CVE-2026-105489 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104350 New | AC Adobe Campaign Classic Adobe | 9.3 | Oct 27 | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-105781 New | AC Adobe Campaign Classic Adobe | 10.0 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104351 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-104354 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-105779 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-108015 New | NC Notes Client HCLSoftware | 9.1 | Oct 27 | eMudhra Compromised Certificate vulnerability impacts HCL Notes Client |
| CVE-2026-114595 New | EB EPICS Base The EPICS Community | 9.8 | Oct 27 | Integer overflow or wraparound in EPICS Base |
| CVE-2026-48360 New | AC Adobe Connect Android Mobile App Adobe | 9.6 | Oct 27 | Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-108014 New | DS Domino Server HCLSoftware | 9.1 | Oct 27 | eMudhra Compromised Certificate vulnerability impacts HCL Domino Server |
| CVE-2026-108142 New | BR Backup & Replication Veeam | 9.1 | Oct 27 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service |
| CVE-2026-106076 New | BF Backup for Microsoft 365 Veeam | 9.0 | Oct 27 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to… |
| CVE-2026-116863 New | NE Newsletters Tribulant Software | 9.6 | Oct 27 | WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-90465 New | FO Fireware OS WatchGuard | 9.4 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation |
| CVE-2026-112709 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-112710 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-93857 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution |
| CVE-2026-93866 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write |
| CVE-2026-103594 New | FO Fireware OS WatchGuard | 9.5 | Oct 27 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution |
| CVE-2026-93865 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection |
| CVE-2026-117564 New | NE nest-admin buqiyuan | 9.8 | Oct 27 | nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret |
| CVE-2026-65145 New | NA NeMo Agent Toolkit NVIDIA | 10.0 | Oct 27 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue |
| CVE-2026-115216 New | EI Eclipse ioFog Eclipse Foundation | 9.1 | Oct 27 | Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials |
| CVE-2026-112362 New | FA @fastify/express @fastify/express | 9.1 | Oct 27 | @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets |
| CVE-2026-117532 New | CO core redaxo | 9.8 | Oct 27 | REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin |
| CVE-2026-82117 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Authentication Bypass by Spoofing Vulnerability in HiRDB |
| CVE-2026-82116 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Missing Authentication for Critical Function Vulnerability in HiRDB |
| CVE-2026-82118 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82120 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | Heap-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82119 New | HS HiRDB Server Version 10 Hitachi | 9.8 | Oct 27 | OS Command Injection Vulnerability in HiRDB |
| CVE-2026-82122 New | HS HiRDB Server Version 10 Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-76939 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.8 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76936 New | JJ JP1/Automatic Job Management System 3 - Manager Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76937 New | JJ JP1/Automatic Job Management System 3 - Manager Hitachi | 9.4 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76938 New | JJ JP1/Automatic Job Management System 3 - Manager Hitachi | 9.8 | Oct 27 | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76935 New | JJ JP1/Automatic Job Management System 3 - Manager Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76934 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.8 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76932 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76933 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.4 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-86577 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.4 | Oct 27 | Out-of-bounds Write Vulnerability in JP1 Products |
| CVE-2026-86576 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.4 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86575 New | JJ JP1/Automatic Job Management System 3 - Agent Hitachi | 9.4 | Oct 27 | Stack-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86574 New | JP JP1/Base Hitachi | 9.8 | Oct 27 | Heap-based Buffer Overflow Vulnerability in JP1/Base |
| CVE-2026-102788 New | GE Gridbox extension for Joomla balbooa.com | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 |
| CVE-2026-102789 New | GE Gridbox extension for Joomla balbooa.com | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 |