CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 23:07 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96187 New | ME Microsoft Edge (Chromium-based) Microsoft | 7.4 | Oct 29 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2026-85899 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.1 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-114148 New | N1 .NET 10.0 installed on Linux Microsoft | 7.8 | Oct 29 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-96203 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-96192 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-103092 New | LO Langflow OSS IBM | 8.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-101288 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104317 New | LO Langflow OSS IBM | 8.1 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104324 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104328 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-107326 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110193 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110196 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110244 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110245 New | LO Langflow OSS IBM | 7.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110309 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-96199 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-96198 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-85897 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-85890 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-93570 New | SZ Szafir Krajowa Izba Rozliczeniowa | 8.2 | Oct 29 | XML External Entity injection in Szafir and Szafir Weryfikująca |
| CVE-2026-115713 New | EC Elastic Cloud Enterprise Elastic | 7.5 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification |
| CVE-2026-115709 New | EC Elastic Cloud Enterprise Elastic | 8.2 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss |
| CVE-2026-115708 New | EC Elastic Cloud Enterprise Elastic | 7.2 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass |
| CVE-2026-39736 New | JE JetEngine Crocoblock | 8.5 | Oct 29 | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability |
| CVE-2026-116399 New | IC InstaWP Connect InstaWP | 8.8 | Oct 29 | WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-119052 New | LL llama.cpp ggml-org | 7.5 | Oct 29 | llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length |
| CVE-2026-119050 New | AG agno agno-agi | 8.1 | Oct 29 | Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection |
| CVE-2026-119049 New | FR FreeMail idinging | 7.6 | Oct 29 | FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming |
| CVE-2019-25781 New | MA Markdown Python-Markdown | 7.5 | Oct 29 | Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing |
| CVE-2026-49142 New | OP openemr openemr | 8.8 | Oct 29 | OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] |
| CVE-2026-119028 New | OA oapi-codegen oapi-codegen | 8.8 | Oct 29 | oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values |
| CVE-2026-119027 New | OA oapi-codegen oapi-codegen | 7.5 | Oct 29 | oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension |
| CVE-2026-103665 New | YL Yamaha LAN Monitor for Windows Yamaha Corporation | 7.8 | Oct 29 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs) |
| CVE-2026-115821 New | NE NewsmanApp newsmanapp | 7.2 | Oct 29 | NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters |
| CVE-2026-110184 New | NE Newsmatic blazethemes | 7.5 | Oct 29 | Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter |
| CVE-2026-96767 New | NU NEX-Forms – Ultimate Forms Plugin for WordPress webaways | 7.2 | Oct 29 | NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header |
| CVE-2026-119025 New | OP opencode anomalyco | 7.5 | Oct 29 | open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows |
| CVE-2026-115611 New | TA TableOn PluginUs.Net | 7.1 | Oct 29 | WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115592 New | OC OceanWP OceanWP | 7.1 | Oct 29 | WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-116409 New | UO Upsell Order Bump Offer for WooCommerce WP Swings | 7.1 | Oct 29 | WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-112827 New | HD HANDMADE – Dropshipping for Etsy and WooCommerce VillaTheme | 7.1 | Oct 29 | WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability |
| CVE-2026-114193 New | GM GEO my WordPress Eyal Fitoussi | 7.5 | Oct 29 | WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability |
| CVE-2026-115599 New | LE LearnPress ThimPress | 7.5 | Oct 29 | WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability |
| CVE-2026-115965 New | BU BuddyPress BuddyPress | 8.5 | Oct 29 | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability |
| CVE-2026-115967 New | LW Login with phone number Hamid Alinia | 8.8 | Oct 29 | WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability |
| CVE-2026-115963 New | BL Broadcast Live Video VideoWhisper.com | 7.1 | Oct 29 | WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability |
| CVE-2026-33924 New | CM CMC Nozomi Networks | 7.2 | Oct 29 | Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 |
| CVE-2026-33923 New | CM CMC Nozomi Networks | 7.2 | Oct 29 | Update bundle signature bypass in Guardian/CMC before 26.4.0 |
| CVE-2026-111417 New | FO foxit.com Foxit Software Inc. | 7.5 | Oct 29 | Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service |