Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-63201 | High CVSS 7.1 |
- Operating systems & software |
Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected… | 30 Oct 2026 |
| CVE-2026-63115 | Medium CVSS 5.3 |
- Operating systems & software |
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo`… | 30 Oct 2026 |
| CVE-2026-62347 | Medium CVSS 5.9 |
- Operating systems & software |
Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call… | 30 Oct 2026 |
| CVE-2026-55614 | Medium CVSS 6.9 |
- Operating systems & software |
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases… | 30 Oct 2026 |
| CVE-2026-55613 | Medium CVSS 6.9 |
- Operating systems & software |
uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize… | 30 Oct 2026 |
| CVE-2026-55612 | Low CVSS 3.7 |
- Operating systems & software |
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an… | 30 Oct 2026 |
| CVE-2026-118938 | High CVSS 8.8 |
- Operating systems & software |
In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example… | 30 Oct 2026 |
| CVE-2026-62968 | High CVSS 8.7 |
- Operating systems & software |
Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled… | 30 Oct 2026 |
| CVE-2026-62958 | High CVSS 7.9 |
- Operating systems & software |
libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the… | 30 Oct 2026 |
| CVE-2026-40573 | High CVSS 8.6 |
- Operating systems & software |
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova`… | 30 Oct 2026 |
| CVE-2026-117645 | Medium CVSS 5.3 |
- Operating systems & software |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework… | 30 Oct 2026 |
| CVE-2026-78403 | Critical CVSS 9.3 |
- Operating systems & software |
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows… | 30 Oct 2026 |
| CVE-2026-78402 | High CVSS 7.3 |
- Operating systems & software |
Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows… | 30 Oct 2026 |
| CVE-2026-62335 | Medium CVSS 6.9 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-62334 | High CVSS 8.7 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-62333 | High CVSS 8.7 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-61694 | Low CVSS 3.7 |
- Operating systems & software |
go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified… | 30 Oct 2026 |
| CVE-2026-61618 | Medium CVSS 6.9 |
- Operating systems & software |
SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded… | 30 Oct 2026 |
| CVE-2026-119333 | High CVSS 7.8 |
- Operating systems & software |
draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched… | 30 Oct 2026 |
| CVE-2026-119332 | High CVSS 8.8 |
- Operating systems & software |
Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964,… | 30 Oct 2026 |
| CVE-2026-119331 | High CVSS 7.1 |
- Operating systems & software |
Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit,… | 30 Oct 2026 |
| CVE-2026-119328 | Medium CVSS 6.5 |
- Operating systems & software |
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated… | 30 Oct 2026 |
| CVE-2026-116252 | High CVSS 7.1 |
- Operating systems & software |
pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq… | 30 Oct 2026 |
| CVE-2026-116251 | Low CVSS 2.3 |
- Operating systems & software |
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own… | 30 Oct 2026 |
| CVE-2026-116250 | High CVSS 7.3 |
- Operating systems & software |
In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.