Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120242 | Low CVSS 1.9 |
- Cloud & SaaS |
A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-120241 | High CVSS 7.7 |
- Hardware & firmware |
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-120240 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the… | 1 Nov 2026 |
| CVE-2026-120239 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of… | 1 Nov 2026 |
| CVE-2026-120238 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file… | 1 Nov 2026 |
| CVE-2026-120237 | Low CVSS 2.1 |
- Applications & supply chain |
A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired… | 1 Nov 2026 |
| CVE-2026-74760 | Not yet scored | - Identity & access |
Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the… | 1 Nov 2026 |
| CVE-2026-74759 | Not yet scored | - Cloud & SaaS |
Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS… | 1 Nov 2026 |
| CVE-2026-120236 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-66570 | High CVSS 7.1 |
- Applications & supply chain |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss… | 1 Nov 2026 |
| CVE-2026-62048 | Critical CVSS 9.3 |
- Applications & supply chain |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /… | 1 Nov 2026 |
| CVE-2026-120338 | Critical CVSS 10.0 |
- Applications & supply chain |
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a… | 1 Nov 2026 |
| CVE-2026-120235 | Low CVSS 2.1 |
- Applications & supply chain |
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function… | 1 Nov 2026 |
| CVE-2026-120234 | Low CVSS 2.1 |
- Operating systems & software |
A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component… | 1 Nov 2026 |
| CVE-2026-120233 | Medium CVSS 5.5 |
- Applications & supply chain |
A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file… | 1 Nov 2026 |
| CVE-2026-119480 | Medium CVSS 6.5 |
- Operating systems & software |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock… | 1 Nov 2026 |
| CVE-2026-120232 | High CVSS 8.5 |
- Applications & supply chain |
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the… | 1 Nov 2026 |
| CVE-2026-120231 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of… | 1 Nov 2026 |
| CVE-2026-120230 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web… | 1 Nov 2026 |
| CVE-2026-120229 | High CVSS 8.5 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the… | 1 Nov 2026 |
| CVE-2026-120228 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the… | 1 Nov 2026 |
| CVE-2026-117680 | Low CVSS 2.1 |
- Operating systems & software |
Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in… | 1 Nov 2026 |
| CVE-2026-120308 | Critical CVSS 9.9 |
- Network & security devices |
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host… | 1 Nov 2026 |
| CVE-2026-120307 | Critical CVSS 9.9 |
- Cloud & SaaS |
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the… | 1 Nov 2026 |
| CVE-2026-120306 | Critical CVSS 9.9 |
- Cloud & SaaS |
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on… | 1 Nov 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.