CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 18:05 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118769 New | BO botan randombit | 9.2 | Oct 29 | Botan: Integer overflow when reporting block size in FFI can cause memory corruption |
| CVE-2026-118762 New | MO monkeytype monkeytypegame | 9.3 | Oct 29 | Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN |
| CVE-2026-119145 New | FR frappe frappe | 9.9 | Oct 29 | Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload |
| CVE-2026-90868 New | WS WS_FTP Server Progress Software | 9.9 | Oct 29 | OS Command Injection in Progress WS_FTP Server |
| CVE-2026-90866 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Virtual Folder Path Confinement Bypass in Progress WS_FTP Server |
| CVE-2026-90865 New | WS WS_FTP Server Progress Software | 9.0 | Oct 29 | Command Injection via FTP Notification Variables in Progress WS_FTP Server |
| CVE-2026-90864 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Host Administrator Path Containment Bypass in Progress WS_FTP Server |
| CVE-2026-90863 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Privilege Escalation via Missing Authorization in WS_FTP Manager |
| CVE-2026-84295 New | WS WS_FTP Server Progress Software | 10.0 | Oct 29 | Improper Authentication in Progress WS_FTP Server |
| CVE-2026-111732 New | PN P-Net RT-Labs | 9.3 | Oct 29 | Out-of-bounds write when parsing AR Vendor Block requests |
| CVE-2026-112256 New | AA Advanced Authentication Server OpenText | 9.2 | Oct 29 | Logon bypass (trust of attacker-controlled completed-methods list) |
| CVE-2026-62131 New | ZF Zoho Flow Zoho Flow | 9.8 | Oct 29 | WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability |
| CVE-2026-62018 New | GU Gunslinger ThemeREX | 9.8 | Oct 29 | WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62017 New | GH Good Homes ThemeREX | 9.8 | Oct 29 | WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability |
| CVE-2026-62016 New | GA Gamic ThemeREX | 9.8 | Oct 29 | WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability |
| CVE-2026-62015 New | GA Gamezone ThemeREX | 9.8 | Oct 29 | WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability |
| CVE-2026-62014 New | EM EmojiNation ThemeREX | 9.8 | Oct 29 | WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability |
| CVE-2026-62013 New | ED Edge Decor ThemeREX | 9.8 | Oct 29 | WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability |
| CVE-2026-62012 New | CO Coinpress ThemeREX | 9.8 | Oct 29 | WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability |
| CVE-2026-62011 New | BO Bonbon ThemeREX | 9.8 | Oct 29 | WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62010 New | AV Avventure ThemeREX | 9.8 | Oct 29 | WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability |
| CVE-2026-62009 New | FI Filmax ThemeREX | 9.8 | Oct 29 | WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability |
| CVE-2026-62008 New | OR Orpheus ThemeREX | 9.8 | Oct 29 | WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability |
| CVE-2026-62006 New | NU Nuts ThemeREX | 9.8 | Oct 29 | WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability |
| CVE-2026-62005 New | MU Muzicon ThemeREX | 9.8 | Oct 29 | WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability |
| CVE-2026-62004 New | MO Motorix ThemeREX | 9.8 | Oct 29 | WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62003 New | MI Mission ThemeREX | 9.8 | Oct 29 | WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability |
| CVE-2026-62002 New | MW Meals & Wheels ThemeREX | 9.8 | Oct 29 | WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability |
| CVE-2026-62001 New | MA Marcell ThemeREX | 9.8 | Oct 29 | WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability |
| CVE-2026-61998 New | LT Le Truffe ThemeREX | 9.8 | Oct 29 | WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability |
| CVE-2026-61997 New | LS Legal Stone ThemeREX | 9.8 | Oct 29 | WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability |
| CVE-2026-61992 New | GM GEO my WordPress Von Eyal Fitoussi | 9.8 | Oct 29 | WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability |
| CVE-2026-61991 New | AC AjaxLoadMore Cache Ajax Load More | 10.0 | Oct 29 | WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-54860 New | OZ Ozisti ThemeREX | 9.8 | Oct 29 | WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability |
| CVE-2026-54859 New | PR Preservation ThemeREX | 9.8 | Oct 29 | WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability |
| CVE-2026-54858 New | PR Printy ThemeREX | 9.8 | Oct 29 | WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability |
| CVE-2026-54857 New | QU Quirky ThemeREX | 9.8 | Oct 29 | WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability |
| CVE-2026-54856 New | RE RexCoin ThemeREX | 9.8 | Oct 29 | WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability |
| CVE-2026-93680 New | LO Langflow OSS IBM | 9.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104339 New | LO Langflow OSS IBM | 9.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-107327 New | LO Langflow OSS IBM | 9.9 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-107328 New | LO Langflow OSS IBM | 9.9 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-107329 New | LO Langflow OSS IBM | 9.9 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110186 New | LO Langflow OSS IBM | 9.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97854 New | NW NWR100 Yamaha Corporation | 9.8 | Oct 29 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability |
| CVE-2026-115964 New | MO Motors StylemixThemes | 9.3 | Oct 29 | WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability |
| CVE-2026-114358 New | RX Radius Xenia M2M Platform Radius Synergies | 9.3 | Oct 29 | SQL Injection Vulnerability in Radius Xenia M2M Platform |
| CVE-2026-115245 New | CA Chat AI with Dispatcher | 9.8 | Oct 29 | Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload |
| CVE-2026-113617 New | AI Automated Import Products to Cart | 9.9 | Oct 29 | Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal |
| CVE-2026-113616 New | LA LogixFast Auth | 9.8 | Oct 29 | LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset |