CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 21:13 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93629 New | CO Collaboration Zimbra | 5.3 | Oct 23 | Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity |
| CVE-2026-93628 New | CO Collaboration Zimbra | 5.3 | Oct 23 | Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response |
| CVE-2026-93627 New | CO Collaboration Zimbra | 5.3 | Oct 23 | Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer |
| CVE-2026-115752 New | SI signalk-server SignalK | 4.2 | Oct 23 | Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon |
| CVE-2026-115729 New | CO common pdfme | 6.8 | Oct 23 | @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass |
| CVE-2026-55190 New | EV eventschedule eventschedule | 6.5 | Oct 23 | Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import |
| CVE-2026-55422 New | CO conda-forge.github.io conda-forge | 4.6 | Oct 23 | conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard |
| CVE-2026-115725 New | CH chatwoot chatwoot | 4.2 | Oct 23 | Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id |
| CVE-2026-115722 New | RP rply diegonehab | 6.1 | Oct 23 | RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header |
| CVE-2026-94263 New | AC Advanced Custom Fields: Extended | 4.8 | Oct 23 | Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message |
| CVE-2026-111965 New | PB Profile Builder | 4.3 | Oct 23 | Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass |
| CVE-2026-105963 New | PL plug elixir-plug | 5.1 | Oct 23 | Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments |
| CVE-2026-89319 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.3 | Oct 23 | JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation |
| CVE-2026-89318 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.9 | Oct 23 | JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check) |
| CVE-2026-89317 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.3 | Oct 23 | JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11) |
| CVE-2026-89316 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.3 | Oct 23 | LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion |
| CVE-2026-89315 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.9 | Oct 23 | JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix |
| CVE-2026-89314 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.9 | Oct 23 | Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s |
| CVE-2026-89313 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.3 | Oct 23 | JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil |
| CVE-2026-89312 New | EK Eclipse KeyPont - GOSE Eclipse Foundation | 6.9 | Oct 23 | AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV |
| CVE-2025-58403 New | CC CGM CLININET CGM | 5.1 | Oct 23 | Reflected Cross-Site Scripting (XSS) in CGM CLININET |
| CVE-2025-30053 New | CC CGM CLININET CGM | 6.9 | Oct 23 | Missing Authentication in CGM CLININET |
| CVE-2025-30051 New | CC CGM CLININET CGM | 6.8 | Oct 23 | Insecure File Permissions in CGM CLININET |
| CVE-2026-115657 New | KA KNIME Analytics Platform KNIME | 4.8 | Oct 23 | KNIME Analytics Platform logs credentials of configured proxy when used as an executor |
| CVE-2026-112821 New | KP Knit Pay Knit Pay | 6.5 | Oct 23 | WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability |
| CVE-2026-112825 New | CR Car Rental Manager Magepeople inc. | 6.5 | Oct 23 | WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability |
| CVE-2026-4952 New | WA WebOrderSystem (AuftragsManager) VertiGIS Ltd. | 5.1 | Oct 23 | Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem |
| CVE-2026-4951 New | WK WebOrderSystem (KundenManager) VertiGIS Ltd. | 5.1 | Oct 23 | Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem |
| CVE-2026-4950 New | WK WebOrderSystem (KundenManager) VertiGIS Ltd. | 4.8 | Oct 23 | Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem |
| CVE-2026-63243 New | CS Creative Sound Blaster Katana V2, V2X, SE Creative Labs | 4.3 | Oct 23 | Firmware verification vulnerability |
| CVE-2026-94264 New | AC Advanced Custom Fields: Extended | 6.8 | Oct 23 | Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes |
| CVE-2026-113472 New | DP Depicter — Popup & Slider Builder | 5.4 | Oct 23 | Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload |
| CVE-2026-112219 New | DM Download Monitor | 4.9 | Oct 23 | Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route |
| CVE-2026-111966 New | UP User Profile Builder | 6.8 | Oct 23 | Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute |
| CVE-2026-111738 New | SO Speed Optimizer | 5.5 | Oct 23 | Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option |
| CVE-2026-109935 New | OB Otter Blocks | 5.3 | Oct 23 | Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API |
| CVE-2026-109934 New | OB Otter Blocks | 5.3 | Oct 23 | Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API |
| CVE-2026-109933 New | OB Otter Blocks | 6.8 | Oct 23 | Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes |
| CVE-2026-55835 New | LO lookyloo Lookyloo | 6.9 | Oct 23 | Lookyloo: Potential sub-system DoS due to parameter missmatch in notification |
| CVE-2026-86020 New | PA Part-DB-server Part-DB | 4.6 | Oct 23 | Part-DB: Spreadsheet Formula Injection in XLSX Part Exports |
| CVE-2026-86019 New | PA Part-DB-server Part-DB | 5.3 | Oct 23 | Part-DB: Attachment Size Limit Bypass via API Base64 Upload |
| CVE-2026-86018 New | PA Part-DB-server Part-DB | 5.3 | Oct 23 | Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads |
| CVE-2026-59188 New | PA Part-DB-server Part-DB | 5.4 | Oct 23 | Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer |
| CVE-2026-55600 New | PA Part-DB-server Part-DB | 5.7 | Oct 23 | Part-DB: Stored HTML injection in BOM validation results via unescaped Part name |
| CVE-2026-54631 New | PA Part-DB-server Part-DB | 6.3 | Oct 23 | Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie |
| CVE-2026-90458 New | IR Ironic OpenStack | 5.4 | Oct 23 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service |
| CVE-2026-54615 New | PA Part-DB-server Part-DB | 6.0 | Oct 23 | Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap) |
| CVE-2026-89419 New | IR Ironic OpenStack | 5.0 | Oct 23 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific… |
| CVE-2026-115638 New | IR Ironic OpenStack | 4.3 | Oct 23 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb |
| CVE-2026-115537 New | HO HospitalManagement gedelumbung | 4.3 | Oct 23 | gedelumbung HospitalManagement URL Validation routing_pages.php simpan redirect |