Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120242 | Low CVSS 1.9 |
- Cloud & SaaS |
A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-74759 | Not yet scored | - Cloud & SaaS |
Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS… | 1 Nov 2026 |
| CVE-2026-120307 | Critical CVSS 9.9 |
- Cloud & SaaS |
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the… | 1 Nov 2026 |
| CVE-2026-120306 | Critical CVSS 9.9 |
- Cloud & SaaS |
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on… | 1 Nov 2026 |
| CVE-2026-117685 | Not yet scored | - Cloud & SaaS |
The OCI registry's cross-repository blob mount checked the target package against the token's `public-only`… | 1 Nov 2026 |
| CVE-2026-120203 | High CVSS 8.7 |
- Cloud & SaaS |
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated… | 31 Oct 2026 |
| CVE-2026-120070 | High CVSS 8.8 |
- Cloud & SaaS |
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend… | 31 Oct 2026 |
| CVE-2026-63121 | Medium CVSS 6.3 |
- Cloud & SaaS |
Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For… | 30 Oct 2026 |
| CVE-2026-62979 | High CVSS 8.4 |
- Cloud & SaaS |
jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0,… | 30 Oct 2026 |
| CVE-2026-119343 | Medium CVSS 6.8 |
- Cloud & SaaS |
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0,… | 30 Oct 2026 |
| CVE-2026-62302 | High CVSS 8.7 |
- Cloud & SaaS |
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls… | 30 Oct 2026 |
| CVE-2026-62284 | High CVSS 8.6 |
- Cloud & SaaS |
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy`… | 30 Oct 2026 |
| CVE-2026-115830 | High CVSS 8.7 |
- Cloud & SaaS |
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and… | 30 Oct 2026 |
| CVE-2026-20079 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cloud & SaaS |
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 |
| CVE-2026-66384 Exploited |
Not yet scored | JFrog Artifactory Cloud & SaaS |
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 27 Aug 2026 |
| CVE-2026-64849 Exploited |
Not yet scored | MLflow MLflow Cloud & SaaS |
MLflow Server-Side Request Forgery Vulnerability | 19 Aug 2026 |
| CVE-2026-25089 Exploited |
Not yet scored | Fortinet FortiSandbox Cloud & SaaS |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-54420 Exploited |
Not yet scored | LiteSpeed cPanel Plugin Cloud & SaaS |
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 15 Jun 2026 |
| CVE-2026-33634 Exploited |
Not yet scored | Aquasecurity Trivy Cloud & SaaS |
Aquasecurity Trivy Embedded Malicious Code Vulnerability | 26 Mar 2026 |
| CVE-2026-20131 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Cloud & SaaS |
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerabili… | 19 Mar 2026 |
| CVE-2025-62221 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Use After Free Vulnerability | 9 Dec 2025 |
| CVE-2025-53690 Exploited |
Not yet scored | Sitecore Multiple Products Cloud & SaaS |
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 4 Sep 2025 |
| CVE-2025-30154 Exploited |
Not yet scored | reviewdog action-setup GitHub Action Cloud & SaaS |
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 24 Mar 2025 |
| CVE-2025-30066 Exploited |
Not yet scored | tj-actions changed-files GitHub Action Cloud & SaaS |
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 18 Mar 2025 |
| CVE-2024-50603 Exploited |
Not yet scored | Aviatrix Controllers Cloud & SaaS |
Aviatrix Controllers OS Command Injection Vulnerability | 16 Jan 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.