CVE Tracker

Vulnerabilities in the news

This page tracks every CVE (Common Vulnerabilities and Exposures identifier) mentioned across the security stories AttackFeed aggregates. When a headline or summary references a CVE, we look up its official NVD CVSS base score and severity, then group all coverage of that vulnerability together — so you can see, at a glance, which flaws are actually being reported on right now and how serious they are. It updates hourly. Currently tracking 150 CVEs from recent coverage, 120 with an official CVSS score.

CVECVSSLatest reportingLinks
CVE-2026-969518.8HIGHMicrosoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day28 minutes agoNVD·Coverage
CVE-2026-399199.8CRITICALGhostscript flaw lets hackers hijack servers via PDF uploadsabout 10 hours agoNVD·Coverage
CVE-2026-16753—VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationabout 12 hours agoNVD·Coverage
CVE-2026-1049358.6HIGHIvanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPNabout 13 hours agoNVD·Coverage
CVE-2026-104937—VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCEabout 14 hours agoNVD·Coverage
CVE-2026-105445—Docker Hub flaw let attackers impersonate users, tamper with imagesabout 16 hours agoNVD·Coverage
CVE-2026-350298.8HIGHWhen LLM Gateways Go Wrong: Findings from LiteLLMabout 17 hours agoNVD·Coverage
CVE-2026-850979.8CRITICALBricksforge WordPress Plugin Vulnerability Exploited in the Wild2 days agoNVD·Coverage
CVE-2026-10225510.0CRITICALCritical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch2 days agoNVD·Coverage
CVE-2026-82077—Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)5 days agoNVD·Coverage
CVE-2026-1051337.3HIGHAttackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge5 days agoNVD·Coverage
CVE-2015-330610.0CRITICALFlax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies5 days agoNVD·Coverage
CVE-2026-107406—Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments5 days agoNVD·Coverage
CVE-2026-474838.2HIGHHigh-severity Nvidia bug could crash GPU monitoring on exposed servers6 days agoNVD·Coverage
CVE-2026-21589—Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication6 days agoNVD·Coverage
CVE-2026-4637—SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-46388 days agoNVD·Coverage
CVE-2026-887797.5HIGHCitrix NetScaler security snafus get even worse amid more 0-day reports8 days agoNVD·Coverage
CVE-2026-615009.8CRITICALRejetto HFS servers now actively scanned for critical RCE flaw8 days agoNVD·Coverage
CVE-2026-969408.8HIGHMicrosoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes9 days agoNVD·Coverage
CVE-2026-63688—Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes12 days agoNVD·Coverage
CVE-2026-1024899.8CRITICALCISA Adds Two Known Exploited Vulnerabilities to Catalog12 days agoNVD·Coverage
CVE-2026-1042869.8CRITICALExploited Fortinet FortiMail Zero-Day Calls for Urgent Action12 days agoNVD·Coverage
CVE-2026-735708.9HIGHZimbra Vulnerability Exploited in the Wild Prior to Public Disclosure13 days agoNVD·Coverage
CVE-2026-765049.8CRITICALCISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV13 days agoNVD·Coverage
CVE-2026-00197.8HIGH[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read13 days agoNVD·Coverage
CVE-2026-00185.5MEDIUM[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read13 days agoNVD·Coverage
CVE-2026-00177.7HIGH[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service13 days agoNVD·Coverage
CVE-2026-00163.3LOW[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service13 days agoNVD·Coverage
CVE-2026-869508.8HIGHApple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path13 days agoNVD·Coverage
CVE-2026-503756.3MEDIUMZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability13 days agoNVD·Coverage
CVE-2026-887719.8CRITICALGovernment, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks14 days agoNVD·Coverage
CVE-2026-887728.1HIGHCitrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution14 days agoNVD·Coverage
CVE-2026-13046—ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability14 days agoNVD·Coverage
CVE-2026-18145—ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability14 days agoNVD·Coverage
CVE-2026-352739.8CRITICALGoogle Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign16 days agoNVD·Coverage
CVE-2026-656608.8HIGHMicrosoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks17 days agoNVD·Coverage
CVE-2026-13742—SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-1374217 days agoNVD·Coverage
CVE-2026-00156.2MEDIUM[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM17 days agoNVD·Coverage
CVE-2026-00146.2MEDIUM[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory17 days agoNVD·Coverage
CVE-2026-543010.0CRITICALCISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks19 days agoNVD·Coverage
CVE-2026-879028.1HIGHCISA Adds One Known Exploited Vulnerability to Catalog19 days agoNVD·Coverage
CVE-2026-488428.1HIGHRoundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild19 days agoNVD·Coverage
CVE-2026-759077.5HIGHVU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability20 days agoNVD·Coverage
CVE-2026-283249.8CRITICALSolarWinds Patches Critical RCE Flaws in Observability Self-Hosted20 days agoNVD·Coverage
CVE-2026-941279.8CRITICALIs This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)20 days agoNVD·Coverage
CVE-2026-851029.8CRITICALCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw20 days agoNVD·Coverage
CVE-2026-823567.5HIGHVU#273940: Enterprise Access Management EAM does not rotate RSA keys21 days agoNVD·Coverage
CVE-2026-67279—MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key21 days agoNVD·Coverage
CVE-2026-805217.8HIGHExploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape21 days agoNVD·Coverage
CVE-2026-850468.8HIGHChinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware21 days agoNVD·Coverage
CVE-2026-917957.8HIGHZDI-26-731: Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-964175.5MEDIUMZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-917966.1MEDIUMZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-917977.8HIGHZDI-26-733: Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-917917.8HIGHZDI-26-722: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918127.9HIGHZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability21 days agoNVD·Coverage
CVE-2026-917927.8HIGHZDI-26-724: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-92202—ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-131287.8HIGHZDI-26-727: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918067.8HIGHZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-917907.8HIGHZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-917937.8HIGHZDI-26-729: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-918167.8HIGHZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918187.8HIGHZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918176.1MEDIUMZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-917947.8HIGHZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918157.8HIGHZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-917884.7MEDIUMZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-918097.8HIGHZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-131297.8HIGHZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-918106.1MEDIUMZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-918117.8HIGHZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918017.8HIGHZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-918138.8HIGHZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability21 days agoNVD·Coverage
CVE-2026-918086.1MEDIUMZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-918076.1MEDIUMZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-572387.8HIGHZDI-26-728: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-572567.8HIGHZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability21 days agoNVD·Coverage
CVE-2026-917897.8HIGHZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability21 days agoNVD·Coverage
CVE-2026-89082—HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)22 days agoNVD·Coverage
CVE-2026-176137.5HIGHCVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)22 days agoNVD·Coverage
CVE-2026-4475610.0CRITICALCVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)22 days agoNVD·Coverage
CVE-2026-936169.8CRITICALCheck Point Warns of Management Server Zero-Day Exploited in Targeted Attacks22 days agoNVD·Coverage
CVE-2026-908989.8CRITICALCritical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials22 days agoNVD·Coverage
CVE-2026-8629610.0CRITICALD-Link warns of max severity zero-day bug in DIR-822A routers22 days agoNVD·Coverage
CVE-2026-9395210.0CRITICALNew CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups22 days agoNVD·Coverage
CVE-2026-897759.3CRITICALNew Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory22 days agoNVD·Coverage
CVE-2026-934857.1HIGHWordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session22 days agoNVD·Coverage
CVE-2026-72738.8HIGHZyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access22 days agoNVD·Coverage
CVE-2026-203504.7MEDIUMZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability22 days agoNVD·Coverage
CVE-2026-668047.8HIGHWindows Exploitation Techniques: Dangling COM Object Registrations23 days agoNVD·Coverage
CVE-2026-283268.8HIGHSolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE25 days agoNVD·Coverage
CVE-2026-581389.8CRITICALCritical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild25 days agoNVD·Coverage
CVE-2025-396829.8CRITICALCISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild25 days agoNVD·Coverage
CVE-2026-8588910.0CRITICALMicrosoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation26 days agoNVD·Coverage
CVE-2025-399647.8HIGHCISA Adds Two Known Exploited Vulnerabilities to Catalog26 days agoNVD·Coverage
CVE-2026-201769.1CRITICALZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability26 days agoNVD·Coverage
CVE-2026-202119.1CRITICALZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability26 days agoNVD·Coverage
CVE-2026-19772—ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability26 days agoNVD·Coverage
CVE-2026-202354.9MEDIUMZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability26 days agoNVD·Coverage
CVE-2026-77179—Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files27 days agoNVD·Coverage
CVE-2026-81642—Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone27 days agoNVD·Coverage
CVE-2026-7646010.0CRITICALCisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks27 days agoNVD·Coverage
CVE-2026-918264.4MEDIUMZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability27 days agoNVD·Coverage
CVE-2026-890269.8CRITICALAttackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution28 days agoNVD·Coverage
CVE-2026-909999.8CRITICALVU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment28 days agoNVD·Coverage
CVE-2026-587048.0HIGHPixel Modem Zero-Day Exploited in Targeted Attacks28 days agoNVD·Coverage
CVE-2026-87886—Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks28 days agoNVD·Coverage
CVE-2026-92209—ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability28 days agoNVD·Coverage
CVE-2026-92210—ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability28 days agoNVD·Coverage
CVE-2026-92208—ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability28 days agoNVD·Coverage
CVE-2026-92205—ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability28 days agoNVD·Coverage
CVE-2026-92204—ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability28 days agoNVD·Coverage
CVE-2026-92206—ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability28 days agoNVD·Coverage
CVE-2026-92207—ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability28 days agoNVD·Coverage
CVE-2026-92203—ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability28 days agoNVD·Coverage
CVE-2026-202429.8CRITICALZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability28 days agoNVD·Coverage
CVE-2026-92183—ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability28 days agoNVD·Coverage
CVE-2026-764619.8CRITICALCisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution29 days agoNVD·Coverage
CVE-2026-809947.8HIGHZDI-26-687: Linux Kernel Open vSwitch Flow Delete Use-After-Free Information Disclosure Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-531827.8HIGHZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2025-220504.7MEDIUMZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-462277.8HIGHZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-459305.5MEDIUMZDI-26-690: Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-430407.1HIGHZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-642657.8HIGHZDI-26-681: Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-745657.8HIGHZDI-26-686: Linux Kernel nftables Race Condition Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-896889.8CRITICALZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-640469.8CRITICALZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-643979.8CRITICALZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-317197.5HIGHZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-315837.8HIGHZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-724639.8CRITICALZDI-26-683: Linux Kernel IPv6 VTI Subsystem Use-After-Free Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-721968.4HIGHZDI-26-696: Linux Kernel NTFS3 Journal Heap-based Buffer Overflow Code Execution Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-234137.8HIGHZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-229997.8HIGHZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-744657.8HIGHZDI-26-688: Linux Kernel OpenvSwitch Race Condition Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2025-384167.8HIGHZDI-26-685: Linux Kernel NFC NCI UART Driver Race Condition Local Privilege Escalation Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-51990—Hackers exploit Tencent app flaw to deploy GrayRabbit malwareabout 1 month agoNVD·Coverage
CVE-2026-420168.1HIGHCISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVabout 1 month agoNVD·Coverage
CVE-2026-84286—VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch indexabout 1 month agoNVD·Coverage
CVE-2026-8570610.0CRITICALGitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosureabout 1 month agoNVD·Coverage
CVE-2023-282510.0CRITICALGitLab urges users to patch max severity path traversal flawabout 1 month agoNVD·Coverage
CVE-2026-2007910.0CRITICALCisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomwareabout 1 month agoNVD·Coverage
CVE-2026-804289.8CRITICAL[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCEabout 1 month agoNVD·Coverage
CVE-2026-19490—Critical NetScaler Vulnerability Exploited in Attacksabout 1 month agoNVD·Coverage
CVE-2026-672778.2HIGHCISA Adds Two Known Exploited Vulnerabilities to Catalogabout 1 month agoNVD·Coverage
CVE-2025-252498.1HIGHFortinet Code Execution Flaw Exploited in PivotC2 RAT Attacksabout 1 month agoNVD·Coverage
CVE-2026-819907.8HIGHZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerabilityabout 1 month agoNVD·Coverage
CVE-2026-819817.8HIGHZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerabilityabout 1 month agoNVD·Coverage

CVSS scores and severity ratings are sourced from the U.S. National Vulnerability Database (NVD) and may lag or differ from a vendor's own assessment. Always verify against primary sources before acting.