Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,054 alerts · page 19 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-100109 Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user

    CriticalCVSS 9.8 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: wordpress ultimate-security-for-woocommerce

    The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new account's role, allowing unauthenticated attackers to create admi...

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-123025 An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gclou...

    CriticalCVSS 9.4 EPSS 0.63%

    Exploit status: No public exploit known

    Affects: OPNsense os-acme-client

    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-100144 IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter

    CriticalCVSS 9.3 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: wordpress ivendpay-payments

    The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, allowing unauthenticated attackers to read arbitrary data from...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-19256 All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force

    CriticalCVSS 9.8 EPSS 0.28%

    Exploit status: No public exploit known

    Affects: wordpress change-wp-admin-login

    The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own brute-force protection...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-48174 In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

    CriticalCVSS 9.8 EPSS 0.33%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1280, Samsung Semiconductor Exynos 2200, Samsung Semiconductor Exynos 1330 and 6 more

    In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-48183 Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

    CriticalCVSS 9.1 EPSS 0.24%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400, Samsung Semiconductor Exynos 1580 and 3 more

    Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-69006 Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

    CriticalCVSS 9.1 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 850, Samsung Semiconductor Exynos 2100, Samsung Semiconductor Exynos 1280 and 12 more

    Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-68991 In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

    CriticalCVSS 9.8 EPSS 0.29%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400

    In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-69043 In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

    CriticalCVSS 9.1 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 2200, Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400 and 4 more

    In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-33971 In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

    CriticalCVSS 9.8 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 850, Samsung Semiconductor Exynos 2100, Samsung Semiconductor Exynos 1280 and 12 more

    In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-122992 In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.

    CriticalCVSS 9.2 EPSS 0.32%

    Exploit status: No public exploit known

    Affects: G4KLX DStarGateway

    In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

    CriticalCVSS 9.4 EPSS 0.32%

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit...

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-122311 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument

    CriticalCVSS 9.4 EPSS 0.46%

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. segments to read and wri...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-122310 Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath

    CriticalCVSS 9.4 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. A namespace-scoped user who can create a Policy can hide ../ segments behind # or ? to reach cluster...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-122304 Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader

    CriticalCVSS 9.4 EPSS 0.39%

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy. Attackers can create a namespaced CleanupPolicy with apiCall o...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).