Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,055 alerts · page 25 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-121246 chromium-browser: Use after free in WebGL

    CriticalCVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Google Chrome, debian/chromium

    Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-121229 chromium-browser: angle: Memory corruption in ANGLE

    CriticalCVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Google Chrome, redhat/firefox, redhat/thunderbird and 6 more

    Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-115731 Report Deserialization Code Execution

    CriticalCVSS 9.4 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: redhat/openvox-server, redhat/python-pyyaml, redhat/openvox-agent and 5 more

    Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report cont...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-115732 Certificate Name Authorization Bypass

    CriticalCVSS 9.0 EPSS 0.75%

    Exploit status: No public exploit known

    Affects: redhat/openvox-server, redhat/python-pyyaml, redhat/openvox-agent and 4 more

    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. Thi...

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

    CriticalCVSS 9.1 EPSS 0.60%

    Exploit status: No public exploit known

    Affects: node-opcua, npm node-opcua, npm node-opcua-address-space and 1 more

    node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions. SessionCon...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-95733 Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

    CriticalCVSS 9.6 EPSS 0.22%

    Exploit status: No public exploit known

    Affects: Hewlett Packard Enterprise (HPE) Fabric Composer

    A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-95732 Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

    CriticalCVSS 9.6 EPSS 0.29%

    Exploit status: No public exploit known

    Affects: Hewlett Packard Enterprise (HPE) Fabric Composer

    An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-95731 Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

    CriticalCVSS 9.8 EPSS 0.48%

    Exploit status: No public exploit known

    Affects: Hewlett Packard Enterprise (HPE) Fabric Composer

    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized admini...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-63471 fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

    CriticalCVSS 9.3 EPSS 0.31%

    Exploit status: No public exploit known

    Affects: pypi fastapi-code-generator, koxudaxi fastapi-code-generator

    fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI path into a generated @app.get(...) route decorator as a single-quoted generated route string without escaping embedded quotes. An attacker-controlled or attac...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-63469 fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

    CriticalCVSS 9.3 EPSS 0.31%

    Exploit status: No public exploit known

    Affects: pypi fastapi-code-generator, koxudaxi fastapi-code-generator

    fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additional response status-code key into the generated responses={...} route-decorator dictionary as a single-quoted Python string without escaping embedded quotes. A...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-63470 fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

    CriticalCVSS 9.3 EPSS 0.47%

    Exploit status: No public exploit known

    Affects: pypi fastapi-code-generator, koxudaxi fastapi-code-generator

    fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string without escaping embedded triple quotes. An attacker-controlled or attacker-in...

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-112917 Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

    CriticalCVSS 9.2 EPSS 0.18%

    Exploit status: No public exploit known

    Affects: Docker Desktop

    In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-44267 Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter

    CriticalCVSS 9.8 EPSS 0.83%

    Exploit status: No public exploit known

    Affects: enspirit elo

    Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied to defaultFormats.elo.parse(), bin/elo, or elo-lang.org/try can use .constructor.constructor to reach JavaScript Function because the member_access handler in src/transfor...

  14. Critical (CVSS 9+) Published

    CVE-2026-44266 Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

    CriticalCVSS 9.8 EPSS 1.00%

    Exploit status: No public exploit known

    Affects: enspirit elo

    Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping #, so Ruby interpolation forms in the string-literal emitter or the labelled...

  15. Critical (CVSS 9+) Published

    CVE-2026-109593 An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

    CriticalCVSS 9.1 EPSS 0.52%

    Exploit status: No public exploit known

    Affects: SonicWall Global Management System (GMS)

    An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-28336 SolarWinds Dameware Command Injection Vulnerability

    CriticalCVSS 9.9 EPSS 1.6%

    Exploit status: No public exploit known

    Affects: solarwinds Dameware

    SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

  17. Critical (CVSS 9+) Published

    CVE-2026-121260 Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection

    CriticalCVSS 9.4 EPSS 0.86%

    Exploit status: No public exploit known

    Affects: ziroom zhome a0101

    A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadstring of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component Lua Handler. This manipulation causes code injection. Remote exploitation of the attack is pos...

  18. CISA KEV addition Published

    CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location....

    MediumCVSS 4.3 EPSS 0.82% CISA KEV added 2026-10-30 · due 2026-11-13 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: Ivanti Connect Secure

    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-121392 FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

    CriticalCVSS 9.1 EPSS 0.17%

    Exploit status: No public exploit known

    Affects: FreeRDP, redhat/freerdp, debian/freerdp2 and 3 more

    FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Common Name fallback despite non-matching SAN entries and matches IP literals against DNS strings. Man-in-the-middle attackers holding a certificate from a cli...

  20. Critical (CVSS 9+) Published

    CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures

    CriticalCVSS 9.2 EPSS 0.45%

    Exploit status: No public exploit known

    Affects: Eclipse Foundation Eclipse Mnestix

    In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).