Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-84231 | High CVSS 7.4 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-83559 | High CVSS 7.4 |
- Operating systems & software |
Improper encoding or escaping of output in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-83539 | High CVSS 7.4 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-82956 | High CVSS 7.6 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-120240 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the… | 1 Nov 2026 |
| CVE-2026-120239 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of… | 1 Nov 2026 |
| CVE-2026-120238 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file… | 1 Nov 2026 |
| CVE-2026-120231 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of… | 1 Nov 2026 |
| CVE-2026-120230 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web… | 1 Nov 2026 |
| CVE-2026-120229 | High CVSS 8.5 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the… | 1 Nov 2026 |
| CVE-2026-120228 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the… | 1 Nov 2026 |
| CVE-2026-120227 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file… | 1 Nov 2026 |
| CVE-2026-120225 | High CVSS 8.5 |
- Operating systems & software |
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function… | 1 Nov 2026 |
| CVE-2026-120197 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120196 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-118147 | High CVSS 7.4 |
- Operating systems & software |
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | 31 Oct 2026 |
| CVE-2026-120208 | High CVSS 7.7 |
- Operating systems & software |
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in… | 31 Oct 2026 |
| CVE-2026-120207 | High CVSS 7.0 |
- Operating systems & software |
Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to… | 31 Oct 2026 |
| CVE-2026-120205 | High CVSS 7.4 |
- Operating systems & software |
Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows… | 31 Oct 2026 |
| CVE-2026-120202 | High CVSS 7.1 |
- Operating systems & software |
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide… | 31 Oct 2026 |
| CVE-2026-120194 | High CVSS 7.5 |
- Operating systems & software |
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when… | 31 Oct 2026 |
| CVE-2026-117681 | High CVSS 8.0 |
- Operating systems & software |
A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy… | 31 Oct 2026 |
| CVE-2026-116964 | High CVSS 8.4 |
- Operating systems & software |
A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within… | 31 Oct 2026 |
| CVE-2026-116755 | High CVSS 7.4 |
- Operating systems & software |
Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of… | 31 Oct 2026 |
| CVE-2026-110176 | High CVSS 8.7 |
- Operating systems & software |
The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a… | 31 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.