CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 20:18 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110082 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-110081 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-110080 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110079 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110078 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110077 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110076 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110075 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110074 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-110073 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-110037 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-109415 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-107682 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-107305 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-106634 | AE Adobe Experience Manager 6.5 Adobe | 7.7 | Oct 13 | Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-106633 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-106632 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-106631 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-106630 | AE Adobe Experience Manager 6.5 Adobe | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-106629 | AE Adobe Experience Manager 6.5 Adobe | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-106628 | AE Adobe Experience Manager 6.5 Adobe | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
| CVE-2026-106626 | AE Adobe Experience Manager 6.5 Adobe | 9.1 | Oct 13 | Adobe Experience Manager | Improper Input Validation (CWE-20) |
| CVE-2026-105895 | AE Adobe Experience Manager 6.5 Adobe | 9.9 | Oct 13 | Adobe Experience Manager | Improper Input Validation (CWE-20) |
| CVE-2026-63146 | AP Agora Project Omnispace | 9.8 | Oct 13 | Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php |
| CVE-2026-103848 | AE Adobe Experience Manager 6.5 Adobe | 9.9 | Oct 13 | Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) |
| CVE-2026-110005 | KO Komodo Komodo | 8.8 | Oct 13 | Moghtech Komodo contains an OS command injection vulnerability |
| CVE-2026-104252 | VI vitess vitessio | 9.8 | Oct 13 | Vitess vttablet /twopcz reflected XSS |
| CVE-2026-16753 | LO Lowcoder Lowcoder | 8.8 | Oct 13 | Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one… |
| CVE-2026-86022 | VN vnote vnotex | 7.0 | Oct 13 | VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling |
| CVE-2026-86016 | VN vnote vnotex | 8.2 | Oct 13 | VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration |
| CVE-2026-55601 | MU multitail folkertvanheusden | 7.3 | Oct 13 | MultiTail: Shell injection in execute-on-match command handling |
| CVE-2026-56826 | SH shopper shopperlabs | 5.4 | Oct 13 | Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration |
| CVE-2026-104875 | EN ente ente | 7.1 | Oct 13 | Ente: Accepted emergency contact can bypass the recovery notice period |
| CVE-2026-110256 | DO dockhand Finsys | 3.7 | Oct 13 | Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth |
| CVE-2026-110255 | DO dockhand Finsys | 8.5 | Oct 13 | Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint |
| CVE-2026-110254 | DO dockhand Finsys | 4.3 | Oct 13 | Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory |
| CVE-2026-110130 | DO dockhand Finsys | 10.0 | Oct 13 | Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check |
| CVE-2026-110112 | DO dockhand Finsys | 8.1 | Oct 13 | Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation |
| CVE-2026-110111 | XE xen-orchestra vatesfr | 7.5 | Oct 13 | Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxi |
| CVE-2026-102599 | SO socket.io socketio | 7.5 | Oct 13 | Socket.IO: Engine.IO Protocol Revision Mismatch DoS |
| CVE-2026-86063 | CL claude-code anthropics | 7.5 | Oct 13 | Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning |
| CVE-2026-97781 | OF Office Microsoft | 8.8 | Oct 13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
| CVE-2026-105016 | N1 .NET 10.0 runtime Microsoft | 9.8 | Oct 13 | Microsoft QUIC Remote Code Execution Vulnerability |
| CVE-2026-97801 | MN Microsoft .NET Framework 3.5 Microsoft | 7.5 | Oct 13 | .NET Framework Tampering Vulnerability |
| CVE-2026-108463 | W1 Windows 11 Version 24H2 Microsoft | 8.8 | Oct 13 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2026-108471 | W1 Windows 10 Version 1809 Microsoft | 8.8 | Oct 13 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-108136 | W1 Windows 10 Version 1607 Microsoft | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-108135 | W1 Windows 10 Version 21H2 Microsoft | 7.0 | Oct 13 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-108134 | W1 Windows 11 Version 24H2 Microsoft | 7.0 | Oct 13 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-108133 | WS Windows Server 2022 Microsoft | 7.8 | Oct 13 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |