Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-62048 | Critical CVSS 9.3 |
- Applications & supply chain |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /… | 1 Nov 2026 |
| CVE-2026-120338 | Critical CVSS 10.0 |
- Applications & supply chain |
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a… | 1 Nov 2026 |
| CVE-2026-118235 | Critical CVSS 9.8 |
- Applications & supply chain |
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is… | 31 Oct 2026 |
| CVE-2026-103882 | Critical CVSS 9.1 |
- Applications & supply chain |
The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to… | 31 Oct 2026 |
| CVE-2026-119096 | Critical CVSS 9.8 |
- Applications & supply chain |
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and… | 31 Oct 2026 |
| CVE-2026-116512 | Critical CVSS 9.8 |
- Applications & supply chain |
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress… | 31 Oct 2026 |
| CVE-2026-89270 | Critical CVSS 9.1 |
- Applications & supply chain |
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to… | 31 Oct 2026 |
| CVE-2026-116557 | Critical CVSS 9.1 |
- Applications & supply chain |
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due… | 31 Oct 2026 |
| CVE-2026-109220 | Critical CVSS 9.8 |
- Applications & supply chain |
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object… | 31 Oct 2026 |
| CVE-2026-62863 | Critical CVSS 9.6 |
- Applications & supply chain |
MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`,… | 30 Oct 2026 |
| CVE-2026-117666 | Critical CVSS 9.1 |
- Applications & supply chain |
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an… | 30 Oct 2026 |
| CVE-2026-61620 | Critical CVSS 9.8 |
- Applications & supply chain |
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.