Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,054 alerts · page 2 of 53

  1. Critical (CVSS 9+) Published

    CVE-2026-126253 A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an....

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: fortinet fortios

    A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request

  2. Critical (CVSS 9+) Published

    CVE-2026-126251 A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: fortinet fortiauthenticator

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access.

  3. Critical (CVSS 9+) Published

    CVE-2026-126170 A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7...

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: fortinet fortimanager, fortinet fortianalyzer, fortinet fortimanagercloud and 2 more

    A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0....

  4. Critical (CVSS 9+) Published

    CVE-2026-126164 A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7...

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execut...

  5. Critical (CVSS 9+) Published

    CVE-2026-126147 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,....

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unau...

  6. Critical (CVSS 9+) Published

    CVE-2026-126156 A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipien...

  7. Critical (CVSS 9+) Published

    CVE-2026-126155 A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recip...

  8. Critical (CVSS 9+) Published

    CVE-2026-126157 A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP...

  9. Critical (CVSS 9+) Published

    CVE-2026-126150 A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may all...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to reset the password of an arbitrary IBE webmail...

  10. Critical (CVSS 9+) Published

    CVE-2026-126148 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow an unauthe...

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: fortinet fortimail

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HA join-r...

  11. Critical (CVSS 9+) Published

    CVE-2026-126812 blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: blueprintue/blueprintue-self-hosted-edition

    blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets MYSQL_ALLOW_EMPTY_PASSWORD=yes in database.env and publishes MariaDB on port 3306. Unauthenticated attackers reaching the Docker host on port 3306 can...

  12. Critical (CVSS 9+) Published

    CVE-2026-126806 WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source Tag

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: WWBN AVideo

    WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to inject scripts via the videoDownloadedLink value stored unescaped through objects/aVideoEncoder.json.php. Attackers can embed event-handler payloads in the URL host rende...

  13. Critical (CVSS 9+) Published

    CVE-2026-126800 Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: hydrooj @hydrooj/ui-default

    Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that execute...

  14. Critical (CVSS 9+) Published

    CVE-2026-126797 NextScan 1.1.0 through 1.2.0 Hardcoded JWT Key Authentication Bypass in ns-admin

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: lysec/ns-admin

    NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key. Attackers can sign an HS256 X-Access-Token carrying the public super administrator role...

  15. Critical (CVSS 9+) Published

    CVE-2026-126777 Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: traccar

    Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login() that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid use...

  16. Critical (CVSS 9+) Published

    CVE-2026-65840 Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKey

    CriticalCVSS 9.6

    Exploit status: No public exploit known

    Affects: getfider github.com/getfider/fider

    Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode (HOST_MODE=multi), an attacker can use an email verification key issued by Tenant A to authenticate as the same email address on Tenant B. This completely bypasses tenan...

  17. Critical (CVSS 9+) Published

    CVE-2026-126768 OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: OpsTree Solutions REMS

    OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled is_local_auth field. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid...

  18. Critical (CVSS 9+) Published

    CVE-2026-110697 Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

    CriticalCVSS 9.9

    Exploit status: No public exploit known

    Affects: redhat/openshift-update-service/openshift-update-service-rhel8, redhat/quay/quay-rhel8, redhat/quay/quay-rhel9 and 2 more

    A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accou...

  20. Critical (CVSS 9+) Published

    CVE-2026-123710 Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: redhat/quay/quay-rhel8, redhat/quay/quay-rhel9, redhat quay

    A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).