CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 00:52 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-51897 | Product not mapped yet | 9.8 | Oct 1 | RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app) |
| CVE-2026-51893 | Product not mapped yet | 9.8 | Oct 1 | infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap |
| CVE-2026-51880 | Product not mapped yet | 9.8 | Oct 1 | deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute |
| CVE-2026-51881 | Product not mapped yet | 9.8 | Oct 1 | deeptutor 1.4.0 contains code injection in ExecTool.execute |
| CVE-2026-51875 | Product not mapped yet | 9.1 | Oct 1 | In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project… |
| CVE-2026-51883 | Product not mapped yet | 9.1 | Oct 1 | The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal |
| CVE-2026-51882 | Product not mapped yet | 9.1 | Oct 1 | The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal |
| CVE-2026-51876 | Product not mapped yet | 9.1 | Oct 1 | DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow |
| CVE-2026-51879 | Product not mapped yet | 9.1 | Oct 1 | deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file |
| CVE-2026-101283 | IP iperf3 esnet | 9.2 | Sep 30 | iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length… |
| CVE-2026-101276 | IP iperf3 esnet | 9.2 | Sep 30 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their… |
| CVE-2026-92173 | MH Meta Horizon OS Meta Platforms, Inc | 9.1 | Sep 30 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an… |
| CVE-2026-102105 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102106 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway improper authentication |
| CVE-2026-102115 | CO Core Kiteworks | 9.8 | Sep 30 | Kiteworks Core Authentication Bypass in the Password Reset Workflow |
| CVE-2026-102104 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102103 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102102 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102149 | EP Email Protection Gateway Kiteworks | 9.4 | Sep 30 | Kiteworks Email Protection Gateway Improper Access Control |
| CVE-2026-102147 | CO Core Kiteworks | 9.3 | Sep 30 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) |
| CVE-2026-102095 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102992 | PI piscina piscinajs | 9.2 | Sep 30 | piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env |
| CVE-2026-103547 | OP OpenBSD OpenBSD | 9.2 | Sep 30 | In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client file descriptor and… |
| CVE-2026-100512 | NP Nested Pages Hook & Filter | 9.8 | Sep 30 | WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability |
| CVE-2026-103475 | YI yii2-starter-kit yii2-starter-kit | 9.1 | Sep 30 | yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure |
| CVE-2026-55107 | KO kobako elct9620 | 10.0 | Sep 30 | Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service) |
| CVE-2026-62308 | TU tugtainer Quenary | 9.1 | Sep 30 | Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint |
| CVE-2026-55494 | TU tugtainer Quenary | 9.8 | Sep 30 | Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset |
| CVE-2026-55181 | TU tugtainer Quenary | 9.4 | Sep 30 | Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false |
| CVE-2026-55176 | SE security Soft-Machine-io | 9.0 | Sep 30 | Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token |
| CVE-2026-75969 | L4 Link 4K 12X PTZOptics | 9.1 | Sep 30 | PTZOptics Missing Authentication in Firmware Upload |
| CVE-2026-102489 In wildKEV | ZA Zammad Zammad GmbH | 9.8 | Sep 30 | Undisclosed RCE in Zammad v6.3 and higher |
| CVE-2026-19445 | CP CPython Python Software Foundation | 9.2 | Sep 30 | Use-after-free of a server-side SSLContext when sni_callback switches contexts |
| CVE-2026-103470 | GR Grouper Internet2 | 9.3 | Sep 30 | In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges |
| CVE-2026-100277 | YO YouTrack JetBrains | 9.8 | Sep 30 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature |
| CVE-2026-100273 | YO YouTrack JetBrains | 9.8 | Sep 30 | In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution |
| CVE-2026-100255 | TE TeamCity JetBrains | 9.8 | Sep 30 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset |
| CVE-2026-102427 | OJ OrdaSoft Joomla CCK ordasoft.com | 10.0 | Sep 30 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 |
| CVE-2026-103395 | LI LightLLM ModelTC | 9.8 | Sep 30 | LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service |
| CVE-2026-76570 | JE JCTables extension for Joomla joomcode.com | 9.1 | Sep 30 | Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1 |
| CVE-2026-18782 | TM Trex MES Trex Digital Smart Manufacturing Systems Inc. | 9.8 | Sep 30 | SQL Injection in Trex Digital Manufacturing's Trex MES |
| CVE-2026-93903 | LW LiteSpeed Web Server litespeedtech | 9.4 | Sep 30 | LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case." |
| CVE-2026-82307 | SO SOPLOG Dolusoft Software Technologies | 9.8 | Sep 30 | Multiple Vulnerabilities in Dolusoft Software's SOPLOG |
| CVE-2026-76504 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 9.8 | Sep 30 | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability |
| CVE-2026-97274 | OS OAuth Single Sign On – SSO (OAuth Client) miniOrange | 9.8 | Sep 30 | WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability |
| CVE-2026-97248 | BA Booking Activities Booking Activities Team | 9.8 | Sep 30 | WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability |
| CVE-2026-96822 | BG Books Gallery Hossni Mubarak | 9.3 | Sep 30 | WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability |
| CVE-2026-96350 | ES Estatik Estatik | 9.8 | Sep 30 | WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability |
| CVE-2026-96349 | SI SiteSkite SiteSkite | 10.0 | Sep 30 | WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-94389 | AS AcyMailing SMTP Newsletter AcyMailing Newsletter Team | 9.0 | Sep 30 | WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability |