attack_Feed
CVE Tracker

Vulnerabilities in the news

This page tracks every CVE (Common Vulnerabilities and Exposures identifier) mentioned across the security stories AttackFeed aggregates. When a headline or summary references a CVE, we look up its official NVD CVSS base score and severity, then group all coverage of that vulnerability together — so you can see, at a glance, which flaws are actually being reported on right now and how serious they are. It updates hourly. Currently tracking 150 CVEs from recent coverage, 117 with an official CVSS score.

CVECVSSLatest reportingLinks
CVE-2026-838448.1HIGHMicrosoft Paint RCE Fix Now Available, but Windows Update Won't Deliver Itabout 4 hours agoNVD·Coverage
CVE-2026-1199778.1HIGHCISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerabilityabout 5 hours agoNVD·Coverage
CVE-2026-116606—Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Loginabout 10 hours agoNVD·Coverage
CVE-2023-2019810.0CRITICALVulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)1 day agoNVD·Coverage
CVE-2026-1074418.8HIGHZyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day1 day agoNVD·Coverage
CVE-2024-278345.5MEDIUMHackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says1 day agoNVD·Coverage
CVE-2024-318538.1HIGHSEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication1 day agoNVD·Coverage
CVE-2026-1095939.1CRITICALSonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records2 days agoNVD·Coverage
CVE-2000-04115.0MEDIUMThe Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)2 days agoNVD·Coverage
CVE-2026-58868—Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction2 days agoNVD·Coverage
CVE-2026-121752—ZDI-26-871: (0Day) Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability2 days agoNVD·Coverage
CVE-2026-121743—ZDI-26-873: (0Day) Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability2 days agoNVD·Coverage
CVE-2026-121744—ZDI-26-870: (0Day) Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability2 days agoNVD·Coverage
CVE-2026-121742—ZDI-26-874: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability2 days agoNVD·Coverage
CVE-2026-114556—ZDI-26-869: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability2 days agoNVD·Coverage
CVE-2026-121753—ZDI-26-872: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability2 days agoNVD·Coverage
CVE-2026-984329.8CRITICALRed Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing3 days agoNVD·Coverage
CVE-2026-921878.8HIGHZDI-26-852: Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-921899.8CRITICALZDI-26-861: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-92198—ZDI-26-864: Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability3 days agoNVD·Coverage
CVE-2026-92199—ZDI-26-863: Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability3 days agoNVD·Coverage
CVE-2026-921958.8HIGHZDI-26-856: Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-921918.8HIGHZDI-26-859: Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-92200—ZDI-26-865: Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability3 days agoNVD·Coverage
CVE-2026-921889.8CRITICALZDI-26-854: Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-92194—ZDI-26-857: Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-200439.0CRITICALZDI-26-867: Cisco Snort sf_unfold_header Out-Of-Bounds Write Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-921868.8HIGHZDI-26-858: Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-92185—ZDI-26-862: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability3 days agoNVD·Coverage
CVE-2026-921928.8HIGHZDI-26-855: Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-92196—ZDI-26-866: Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-921909.8CRITICALZDI-26-851: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-921936.5MEDIUMZDI-26-853: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability3 days agoNVD·Coverage
CVE-2026-921978.8HIGHZDI-26-860: Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability3 days agoNVD·Coverage
CVE-2026-5811510.0CRITICALAttackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors3 days agoNVD·Coverage
CVE-2026-8164810.0CRITICALAttackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials3 days agoNVD·Coverage
CVE-2026-16305—VU#203719: INFINITT PACS System Manager Contains Multiple Code Execution Vulnerabilities4 days agoNVD·Coverage
CVE-2026-1113577.0HIGHIvanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain4 days agoNVD·Coverage
CVE-2026-58882—New Android SMS of Death exploit can remotely crash unpatched phones6 days agoNVD·Coverage
CVE-2026-9722910.0CRITICALMax-Severity GitLab Vulnerability Exploited Against Alpine Linux7 days agoNVD·Coverage
CVE-2026-1115858.8HIGHTeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines7 days agoNVD·Coverage
CVE-2026-118539—Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw7 days agoNVD·Coverage
CVE-2026-2012710.0CRITICALHackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware8 days agoNVD·Coverage
CVE-2026-764188.6HIGHCisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls8 days agoNVD·Coverage
CVE-2026-417092.7LOWChinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day8 days agoNVD·Coverage
CVE-2026-1186277.8HIGHZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability8 days agoNVD·Coverage
CVE-2026-80844—ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-1186288.2HIGHZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability8 days agoNVD·Coverage
CVE-2026-1186265.4MEDIUMZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-712117.1HIGHZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability8 days agoNVD·Coverage
CVE-2026-938267.5HIGHZDI-26-835: Linux Kernel Logitech HIDPP Protocol Use-After-Free Local Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2024-370528.8HIGHZDI-26-845: MLflow Statsmodels _load_model Deserialization of Untrusted Data Remote Code Execution Vulnerability8 days agoNVD·Coverage
CVE-2026-98231—ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-1186245.4MEDIUMZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability8 days agoNVD·Coverage
CVE-2026-723157.8HIGHZDI-26-836: Linux Kernel CIFS File System Use-After-Free Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-648499.3CRITICALZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability8 days agoNVD·Coverage
CVE-2026-1186256.3MEDIUMZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-580937.0HIGHZDI-26-838: FreeBSD Kernel TTY Race Condition Local Privilege Escalation Vulnerability8 days agoNVD·Coverage
CVE-2026-1186237.8HIGHZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability8 days agoNVD·Coverage
CVE-2026-1096189.8CRITICALRe: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)8 days agoNVD·Coverage
CVE-2026-1017679.8CRITICALHackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch9 days agoNVD·Coverage
CVE-2026-1043519.9CRITICALAdobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass9 days agoNVD·Coverage
CVE-2026-352739.8CRITICALShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws9 days agoNVD·Coverage
CVE-2026-1114979.8CRITICALAdobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges9 days agoNVD·Coverage
CVE-2026-1186116.8MEDIUMZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186096.8MEDIUMZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186108.8HIGHZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186076.8MEDIUMZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability9 days agoNVD·Coverage
CVE-2026-1186068.8HIGHZDI-26-824: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186058.0HIGHZDI-26-823: (0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186137.8HIGHZDI-26-812: (0Day) Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-60647.3HIGHZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability9 days agoNVD·Coverage
CVE-2026-1186016.3MEDIUMZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-869747.5HIGHZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186083.5LOWZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability9 days agoNVD·Coverage
CVE-2026-1186157.8HIGHZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186177.8HIGHZDI-26-816: (0Day) Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1126563.3LOWZDI-26-831: Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability9 days agoNVD·Coverage
CVE-2026-1186046.8MEDIUMZDI-26-822: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186027.8HIGHZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability9 days agoNVD·Coverage
CVE-2026-1186038.0HIGHZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186198.8HIGHZDI-26-818: (0Day) Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186187.8HIGHZDI-26-817: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186167.8HIGHZDI-26-815: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-1186147.8HIGHZDI-26-813: (0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability9 days agoNVD·Coverage
CVE-2026-869508.8HIGHApple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads10 days agoNVD·Coverage
CVE-2026-800978.6HIGHMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens10 days agoNVD·Coverage
CVE-2026-483569.3CRITICALCISA Adds Two Known Exploited Vulnerabilities to Catalog10 days agoNVD·Coverage
CVE-2026-4950—SEC Consult SA-20261023-0 :: Multiple Cross-Site Scripting Vulnerabilities in VertiGIS WebOrderSystem10 days agoNVD·Coverage
CVE-2026-1145526.5MEDIUMZDI-26-811: MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability10 days agoNVD·Coverage
CVE-2026-1145515.9MEDIUMZDI-26-810: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability10 days agoNVD·Coverage
CVE-2026-115560—PHP Publishes Mitigation Advice for New RCE Flaw11 days agoNVD·Coverage
CVE-2026-114550—ZDI-26-792: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability11 days agoNVD·Coverage
CVE-2026-92211—ZDI-26-791: Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability11 days agoNVD·Coverage
CVE-2026-1104479.8CRITICALCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud13 days agoNVD·Coverage
CVE-2026-1146259.9CRITICALCISA Adds One Known Exploited Vulnerability to Catalog14 days agoNVD·Coverage
CVE-2026-112900—Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image14 days agoNVD·Coverage
CVE-2026-02579.1CRITICALQilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks15 days agoNVD·Coverage
CVE-2026-341829.1CRITICALZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability15 days agoNVD·Coverage
CVE-2026-1145499.8CRITICALZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability15 days agoNVD·Coverage
CVE-2026-630739.8CRITICALZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability15 days agoNVD·Coverage
CVE-2026-242507.8HIGHZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability15 days agoNVD·Coverage
CVE-2026-202185.8MEDIUMZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability15 days agoNVD·Coverage
CVE-2026-966524.3MEDIUMCISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws16 days agoNVD·Coverage
CVE-2026-1061739.8CRITICALCritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution17 days agoNVD·Coverage
CVE-2026-1109366.7MEDIUMClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan17 days agoNVD·Coverage
CVE-2026-999999.3CRITICALLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking19 days agoNVD·Coverage
CVE-2026-10384910.0CRITICALCritical BlockStrap flaw lets hackers run code on Magento servers21 days agoNVD·Coverage
CVE-2025-616246.0MEDIUMCISA Adds Two Known Exploited Vulnerabilities to Catalog21 days agoNVD·Coverage
CVE-2026-1027649.8CRITICALCISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support21 days agoNVD·Coverage
CVE-2026-6045—ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-63273—ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-580947.8HIGHZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability21 days agoNVD·Coverage
CVE-2026-63274—ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-935365.3MEDIUMZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-88794—ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-215897.5HIGHCISA Adds One Known Exploited Vulnerability to Catalog22 days agoNVD·Coverage
CVE-2026-350298.8HIGHWarning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool22 days agoNVD·Coverage
CVE-2026-1057409.9CRITICALLangflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts22 days agoNVD·Coverage
CVE-2026-1051337.3HIGHAhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches22 days agoNVD·Coverage
CVE-2026-03227.2HIGHPalo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation22 days agoNVD·Coverage
CVE-2026-93325—ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-93515—ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability22 days agoNVD·Coverage
CVE-2026-935165.5MEDIUMZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability22 days agoNVD·Coverage
CVE-2026-935197.8HIGHZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-935187.8HIGHZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-93517—ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-935237.8HIGHZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-111185—ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2018-103889.8CRITICALZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-836617.8HIGHZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-93524—ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability22 days agoNVD·Coverage
CVE-2026-1111847.8HIGHZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-1111839.8CRITICALZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-1111057.0HIGHZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-1076569.8CRITICALZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability22 days agoNVD·Coverage
CVE-2026-888127.8HIGHZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-1061704.9MEDIUMZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability22 days agoNVD·Coverage
CVE-2026-956367.8HIGHZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-1022577.2HIGHZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-935217.8HIGHZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-935227.8HIGHZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2026-935207.8HIGHZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability22 days agoNVD·Coverage
CVE-2024-475759.8CRITICALUnit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant23 days agoNVD·Coverage
CVE-2026-1049358.6HIGHCISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts23 days agoNVD·Coverage
CVE-2026-745808.8HIGHAI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host23 days agoNVD·Coverage
CVE-2026-969518.8HIGHMicrosoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day23 days agoNVD·Coverage
CVE-2026-399199.8CRITICALGhostscript flaw lets hackers hijack servers via PDF uploads24 days agoNVD·Coverage
CVE-2026-167538.8HIGHVU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration24 days agoNVD·Coverage
CVE-2026-1049378.1HIGHVU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE24 days agoNVD·Coverage

CVSS scores and severity ratings are sourced from the U.S. National Vulnerability Database (NVD) and may lag or differ from a vendor's own assessment. Always verify against primary sources before acting.