Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120236 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-120234 | Low CVSS 2.1 |
- Operating systems & software |
A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component… | 1 Nov 2026 |
| CVE-2026-117680 | Low CVSS 2.1 |
- Operating systems & software |
Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in… | 1 Nov 2026 |
| CVE-2026-120226 | Low CVSS 1.9 |
- Operating systems & software |
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by… | 1 Nov 2026 |
| CVE-2026-120223 | Low CVSS 1.3 |
- Operating systems & software |
A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the… | 1 Nov 2026 |
| CVE-2026-120217 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file… | 1 Nov 2026 |
| CVE-2026-120190 | Low CVSS 2.0 |
- Operating systems & software |
A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-55612 | Low CVSS 3.7 |
- Operating systems & software |
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an… | 30 Oct 2026 |
| CVE-2026-61694 | Low CVSS 3.7 |
- Operating systems & software |
go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified… | 30 Oct 2026 |
| CVE-2026-116251 | Low CVSS 2.3 |
- Operating systems & software |
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.