Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-62300 | Medium CVSS 6.5 |
- Hardware & firmware |
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments… | 30 Oct 2026 |
| CVE-2026-62297 | High CVSS 7.5 |
- Applications & supply chain |
ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit… | 30 Oct 2026 |
| CVE-2026-62254 | Medium CVSS 5.5 |
- Applications & supply chain |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger… | 30 Oct 2026 |
| CVE-2026-62250 | Medium CVSS 5.5 |
- Hardware & firmware |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make… | 30 Oct 2026 |
| CVE-2026-59993 | Medium CVSS 6.5 |
- Applications & supply chain |
Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In… | 30 Oct 2026 |
| CVE-2026-58412 | High CVSS 8.2 |
- Applications & supply chain |
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the… | 30 Oct 2026 |
| CVE-2026-54610 | Low CVSS 3.3 |
- Applications & supply chain |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write… | 30 Oct 2026 |
| CVE-2026-40573 | High CVSS 8.6 |
- Operating systems & software |
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova`… | 30 Oct 2026 |
| CVE-2026-119343 | Medium CVSS 6.8 |
- Cloud & SaaS |
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0,… | 30 Oct 2026 |
| CVE-2026-119342 | Medium CVSS 5.3 |
- Applications & supply chain |
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until… | 30 Oct 2026 |
| CVE-2026-119341 | Not yet scored | - Applications & supply chain |
Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an… | 30 Oct 2026 |
| CVE-2026-119340 | Medium CVSS 5.5 |
- Applications & supply chain |
Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h… | 30 Oct 2026 |
| CVE-2026-119339 | Medium CVSS 5.5 |
- Applications & supply chain |
Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a… | 30 Oct 2026 |
| CVE-2026-119338 | Medium CVSS 6.9 |
- Applications & supply chain |
Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys… | 30 Oct 2026 |
| CVE-2026-117666 | Critical CVSS 9.1 |
- Applications & supply chain |
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an… | 30 Oct 2026 |
| CVE-2026-117645 | Medium CVSS 5.3 |
- Operating systems & software |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework… | 30 Oct 2026 |
| CVE-2026-78403 | Critical CVSS 9.3 |
- Operating systems & software |
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows… | 30 Oct 2026 |
| CVE-2026-78402 | High CVSS 7.3 |
- Operating systems & software |
Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows… | 30 Oct 2026 |
| CVE-2026-62337 | Medium CVSS 6.9 |
- Identity & access |
SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof… | 30 Oct 2026 |
| CVE-2026-62335 | Medium CVSS 6.9 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-62334 | High CVSS 8.7 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-62333 | High CVSS 8.7 |
- Operating systems & software |
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x… | 30 Oct 2026 |
| CVE-2026-62302 | High CVSS 8.7 |
- Cloud & SaaS |
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls… | 30 Oct 2026 |
| CVE-2026-62301 | High CVSS 7.1 |
- Applications & supply chain |
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video… | 30 Oct 2026 |
| CVE-2026-62284 | High CVSS 8.6 |
- Cloud & SaaS |
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy`… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.