CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 31, 00:17 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105903 | CO ColdFusion Adobe | 9.9 | Oct 13 | ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-75994 | CO ColdFusion Adobe | 9.6 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106090 | CO ColdFusion Adobe | 8.8 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-34634 | CO ColdFusion Adobe | 8.6 | Oct 13 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-106620 | CO ColdFusion Adobe | 9.6 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-76001 | CO ColdFusion Adobe | 7.1 | Oct 13 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-106612 | CO ColdFusion Adobe | 9.9 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106615 | CO ColdFusion Adobe | 8.8 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-75995 | CO ColdFusion Adobe | 8.4 | Oct 13 | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-75748 | CO ColdFusion Adobe | 7.6 | Oct 13 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-105900 | CO ColdFusion Adobe | 7.5 | Oct 13 | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-105901 | CO ColdFusion Adobe | 8.8 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-71385 | CO ColdFusion Adobe | 8.4 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106623 | CO ColdFusion Adobe | 7.5 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-105899 | CO ColdFusion Adobe | 10.0 | Oct 13 | ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) |
| CVE-2026-106617 | CO ColdFusion Adobe | 8.8 | Oct 13 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-49950 | XO xoscar xorbitsai | 9.8 | Oct 13 | Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool |
| CVE-2026-93905 | WA WebSphere Application Server - Liberty IBM | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data |
| CVE-2026-93909 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an authentication bypass |
| CVE-2026-93895 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Improper Access Control |
| CVE-2026-95695 | WA WebSphere Application Server - Liberty IBM | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization |
| CVE-2026-95696 | WA WebSphere Application Server - Liberty IBM | 7.5 | Oct 13 | IBM WebSphere Application Server Liberty Denial of Service |
| CVE-2026-101294 | WA WebSphere Application Server IBM | 8.7 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step |
| CVE-2026-105442 | WA WebSphere Application Server IBM | 7.5 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data |
| CVE-2026-105443 | WA WebSphere Application Server - Liberty IBM | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an improper access control |
| CVE-2026-11713 | WA WebSphere Application Server - Liberty IBM | 5.4 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization |
| CVE-2026-14532 | WA WebSphere Application Server - Liberty IBM | 4.3 | Oct 13 | IBM WebSphere Application Server Liberty Integer Overflow |
| CVE-2026-14909 | WA WebSphere Application Server - Liberty IBM | 6.5 | Oct 13 | IBM WebSphere Application Server Liberty Information Disclosure |
| CVE-2026-77816 | WA WebSphere Application Server - Liberty IBM | 6.5 | Oct 13 | IBM WebSphere Application Server Liberty Improper Certificate Validation |
| CVE-2026-79715 | WA WebSphere Application Server - Liberty IBM | 5.5 | Oct 13 | IBM WebSphere Application Server Liberty Path Traversal |
| CVE-2026-85473 | JA java-jwt Auth0 | 5.3 | Oct 13 | Out-of-Range Timestamp Claim Handling in auth0/java-jwt |
| CVE-2026-78633 | OR Okta RADIUS Agent Okta | 6.5 | Oct 13 | Denial of Service in Okta RADIUS Agent Packet Parser |
| CVE-2026-78632 | OR Okta RADIUS Agent Okta | 5.3 | Oct 13 | Insecure Default File Permissions in Okta RADIUS Agent Windows Installer |
| CVE-2026-107371 | AU auth0.js Auth0 | 5.4 | Oct 13 | Missing Verification of auth_time Claim in auth0.js |
| CVE-2026-107370 | AU auth0-lock Auth0 | 5.3 | Oct 13 | Improper Request Handling for Active Directory Logins in auth0-lock |
| CVE-2026-107369 | NE nextjs-auth0 Auth0 | 6.1 | Oct 13 | Improper Validation of Post-Login Redirect URL in nextjs-auth0 |
| CVE-2026-78628 | OC Okta Credential Provider for Windows Okta | 6.0 | Oct 13 | Improper Input Validation in the Okta Credential Provider for Windows |
| CVE-2026-63171 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Category Description |
| CVE-2026-63169 | AP Agora Project Omnispace | 6.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe |
| CVE-2026-19810 | SE Symantec Endpoint Detection and Response Broadcom | 5.4 | Oct 13 | Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console |
| CVE-2026-63168 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass |
| CVE-2026-63157 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Links Module |
| CVE-2026-63156 | AP Agora Project Omnispace | 6.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter |
| CVE-2026-63148 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename |
| CVE-2026-103852 | AS Adobe Substance 3D Stager Adobe | 5.5 | Oct 13 | Substance3D - Stager | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103832 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103842 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103836 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103835 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103837 | AS Adobe Substance 3D Stager Adobe | 7.8 | Oct 13 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |