Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120242 | Low CVSS 1.9 |
- Cloud & SaaS |
A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-120237 | Low CVSS 2.1 |
- Applications & supply chain |
A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired… | 1 Nov 2026 |
| CVE-2026-120236 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-120235 | Low CVSS 2.1 |
- Applications & supply chain |
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function… | 1 Nov 2026 |
| CVE-2026-120234 | Low CVSS 2.1 |
- Operating systems & software |
A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component… | 1 Nov 2026 |
| CVE-2026-117680 | Low CVSS 2.1 |
- Operating systems & software |
Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in… | 1 Nov 2026 |
| CVE-2026-120226 | Low CVSS 1.9 |
- Operating systems & software |
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by… | 1 Nov 2026 |
| CVE-2026-120223 | Low CVSS 1.3 |
- Operating systems & software |
A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the… | 1 Nov 2026 |
| CVE-2026-120218 | Low CVSS 2.0 |
- Applications & supply chain |
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of… | 1 Nov 2026 |
| CVE-2026-120217 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file… | 1 Nov 2026 |
| CVE-2026-120190 | Low CVSS 2.0 |
- Operating systems & software |
A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-118437 | Low CVSS 3.7 |
- Applications & supply chain |
The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded… | 31 Oct 2026 |
| CVE-2026-63400 | Low CVSS 2.3 |
- Applications & supply chain |
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the… | 30 Oct 2026 |
| CVE-2026-55612 | Low CVSS 3.7 |
- Operating systems & software |
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an… | 30 Oct 2026 |
| CVE-2026-54610 | Low CVSS 3.3 |
- Applications & supply chain |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write… | 30 Oct 2026 |
| CVE-2026-61694 | Low CVSS 3.7 |
- Operating systems & software |
go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified… | 30 Oct 2026 |
| CVE-2026-119334 | Low CVSS 2.2 |
- Network & security devices |
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.… | 30 Oct 2026 |
| CVE-2026-119330 | Low CVSS 3.5 |
- Applications & supply chain |
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation… | 30 Oct 2026 |
| CVE-2026-116251 | Low CVSS 2.3 |
- Operating systems & software |
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.