CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 31, 05:04 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-79805 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager |
| CVE-2026-79801 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent |
| CVE-2026-79798 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.9 | Oct 6 | Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface |
| CVE-2026-79796 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Authentication Bypass Vulnerabilities in ClearPass Policy Manager |
| CVE-2026-79794 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.1 | Oct 6 | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface |
| CVE-2026-76754 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager |
| CVE-2026-76753 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager |
| CVE-2026-76752 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access |
| CVE-2026-76751 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution |
| CVE-2026-76750 | CP ClearPass Policy Manager (CPPM) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager |
| CVE-2026-76747 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.1 | Oct 6 | Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S |
| CVE-2026-76746 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.3 | Oct 6 | Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S |
| CVE-2026-76745 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.6 | Oct 6 | Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S |
| CVE-2026-76744 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S |
| CVE-2026-76743 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Authentication Bypass Vulnerability in the Management Interface of AOS-S |
| CVE-2026-76742 | AA AOS-Switch (AOS-S) Hewlett Packard Enterprise (HPE) | 9.8 | Oct 6 | Authentication Bypass in the Web Management Interface of AOS-S |
| CVE-2026-106511 | MU multisig-improved MultiversX Labs S.R.L. | 9.8 | Oct 6 | MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a… |
| CVE-2026-82162 | CC Command | Configure (DCC) Dell | 9.8 | Oct 6 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability |
| CVE-2026-106234 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox… |
| CVE-2026-106294 | CH Chrome Google | 9.1 | Oct 6 | Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic |
| CVE-2026-106195 | CH Chrome Google | 9.1 | Oct 6 | Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic |
| CVE-2026-106237 | CH Chrome Google | 9.6 | Oct 6 | Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page |
| CVE-2026-106417 | CH Chrome Google | 9.6 | Oct 6 | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106372 | CH Chrome Google | 9.6 | Oct 6 | Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106401 | CH Chrome Google | 9.6 | Oct 6 | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106375 | CH Chrome Google | 9.6 | Oct 6 | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106414 | CH Chrome Google | 9.6 | Oct 6 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… |
| CVE-2026-106241 | CH Chrome Google | 9.6 | Oct 6 | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… |
| CVE-2026-106329 | CH Chrome Google | 9.6 | Oct 6 | Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside… |
| CVE-2026-106211 | CH Chrome Google | 9.6 | Oct 6 | Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… |
| CVE-2026-106227 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106298 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-106281 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106323 | CH Chrome Google | 9.6 | Oct 6 | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… |
| CVE-2026-106419 | CH Chrome Google | 9.6 | Oct 6 | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106239 | CH Chrome Google | 9.6 | Oct 6 | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-102322 | CH Chrome Google | 9.6 | Oct 6 | Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page |
| CVE-2026-106358 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106197 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-106382 | CH Chrome Google | 9.6 | Oct 6 | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-55330 | AN Android Google | 9.8 | Oct 6 | In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code |
| CVE-2026-86360 | SU System Update Dell | 9.6 | Oct 6 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability |
| CVE-2026-106102 | QU quasar quasarframework | 10.0 | Oct 6 | Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() |
| CVE-2026-105863 | PA payload payloadcms | 9.4 | Oct 6 | Payload authentication token field handling issue |
| CVE-2026-106218 | TE TeamCity JetBrains | 10.0 | Oct 6 | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
| CVE-2026-105859 | PA payload payloadcms | 9.8 | Oct 6 | Payload: Unauthorized update to collection documents |
| CVE-2026-105857 | PA payload payloadcms | 10.0 | Oct 6 | Payload: RCE in Payload Form Builder |
| CVE-2026-104070 | SC SPIP Crayons Plugin SPIP | 9.8 | Oct 6 | SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE |
| CVE-2026-105848 | PL plugin-stripe @payloadcms | 9.6 | Oct 6 | Payload: Insufficient Access Control in Stripe REST Proxy |
| CVE-2026-105845 | PA payload payloadcms | 9.8 | Oct 6 | Payload: SQL Injection in SQLite and Postgres |