Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-111070 | Medium CVSS 5.4 |
- Network & security devices |
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site… | 31 Oct 2026 |
| CVE-2026-94361 | Medium CVSS 5.3 |
- Network & security devices |
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an… | 31 Oct 2026 |
| CVE-2026-110042 | Medium CVSS 4.9 |
- Network & security devices |
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays… | 31 Oct 2026 |
| CVE-2026-116248 | Medium CVSS 6.0 |
- Network & security devices |
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.