CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 14:54 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-119136 New | WA wasmtime bytecodealliance | 4.8 | Oct 29 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass |
| CVE-2026-119135 New | WA wasmtime bytecodealliance | 4.8 | Oct 29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch |
| CVE-2026-119134 New | WA wasmtime bytecodealliance | 6.2 | Oct 29 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles |
| CVE-2026-119132 New | WA wasmtime bytecodealliance | 4.8 | Oct 29 | Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter |
| CVE-2026-119131 New | WA wasmtime bytecodealliance | 5.3 | Oct 29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http |
| CVE-2026-119122 New | CR crawl4ai unclecode | 5.3 | Oct 29 | Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check |
| CVE-2026-119121 New | CR crawl4ai unclecode | 4.3 | Oct 29 | Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for |
| CVE-2026-119118 New | CR crawl4ai unclecode | 6.5 | Oct 29 | Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags |
| CVE-2026-90872 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server |
| CVE-2026-90871 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server |
| CVE-2026-90870 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server |
| CVE-2026-90862 New | WS WS_FTP Server Progress Software | 4.3 | Oct 29 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-90861 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server |
| CVE-2026-84296 New | WS WS_FTP Server Progress Software | 6.8 | Oct 29 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-115795 New | PN P-Net RT-Labs | 5.3 | Oct 29 | Out-of-bounds read of DCP block header in DCP Set and Identify request parsing |
| CVE-2026-118084 New | HB Hotel Booking nicdark | 6.5 | Oct 29 | WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-54865 New | PC Podamibe Custom User Gravatar Podamibe Nepal | 6.5 | Oct 29 | WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42690 New | LE LearnPress ThimPress | 5.4 | Oct 29 | WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability |
| CVE-2026-66912 New | ZC Zimbra Collaboration Synacor | 5.3 | Oct 29 | Stored Cross-Site Scripting in Zimbra |
| CVE-2026-66911 New | ZC Zimbra Collaboration Synacor | 5.3 | Oct 29 | Stored Cross-Site Scripting in Zimbra |
| CVE-2026-88078 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-85330 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge for Android Security Feature Bypass Vulnerability |
| CVE-2026-88090 New | ME Microsoft Edge (Chromium-based) Microsoft | 5.4 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-20942 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-77817 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-77819 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-90991 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104308 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104309 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104310 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104312 New | LO Langflow OSS IBM | 6.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104314 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104315 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104316 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-113576 New | AD Adobe Digital Editions Adobe | 6.3 | Oct 29 | Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-104331 New | LO Langflow OSS IBM | 5.4 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110190 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110192 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110200 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110244 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-106036 New | SZ Szafir Krajowa Izba Rozliczeniowa | 6.9 | Oct 29 | Improper certificate validation in Szafir |
| CVE-2026-42694 New | KI Kirki Themeum | 4.3 | Oct 29 | WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability |
| CVE-2026-48200 New | DL Document Library Lite Barn2 Plugins | 5.3 | Oct 29 | WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-116848 New | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH Innovations | 6.5 | Oct 29 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-109891 New | HA Happy Addons for Elementor weDevs | 6.4 | Oct 29 | WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability |
| CVE-2026-25448 New | WE WP ERP weDevs | 4.3 | Oct 29 | WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability |
| CVE-2026-42691 New | EV EventPrime EventPrime | 5.4 | Oct 29 | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability |
| CVE-2026-54852 New | PR Page Restriction WordPress (WP) miniOrange | 5.3 | Oct 29 | WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability |
| CVE-2026-97073 New | MY myCred myCred | 5.3 | Oct 29 | WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability |
| CVE-2026-118097 New | FH Flash & HTML5 Video bPlugins | 6.5 | Oct 29 | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability |