Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-62297 | High CVSS 7.5 |
- Applications & supply chain |
ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit… | 30 Oct 2026 |
| CVE-2026-58412 | High CVSS 8.2 |
- Applications & supply chain |
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the… | 30 Oct 2026 |
| CVE-2026-62301 | High CVSS 7.1 |
- Applications & supply chain |
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video… | 30 Oct 2026 |
| CVE-2026-119337 | High CVSS 7.1 |
- Applications & supply chain |
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.