Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,055 alerts · page 28 of 53

  1. Critical (CVSS 9+) Published

    CVE-2026-120283 Linksys E8450 portal.cgi strcpy stack-based overflow

    CriticalCVSS 10.0 EPSS 0.58%

    Exploit status: No public exploit known

    Affects: linksys e8450 firmware

    A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacte...

  2. Critical (CVSS 9+) Published

    CVE-2026-120282 WAVLINK WN536AX6-A protocol.csp host_black os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-120281 WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow

    CriticalCVSS 10.0 EPSS 0.58%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The explo...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-120280 WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection

    CriticalCVSS 10.0 EPSS 2.0%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may...

  5. Critical (CVSS 9+) Published

    CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

    CriticalCVSS 10.0 EPSS 2.0%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely....

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-106803 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY message, process_contact() copies an atta...

    CriticalCVSS 9.8 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: ubuntu/kamailio

    A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY message, process_contact() copies an attacker-controlled port value from the alias parameter into a fixed 5-byte stack bu...

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-120277 WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection

    CriticalCVSS 10.0 EPSS 2.5%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possibl...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-120276 WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection

    CriticalCVSS 10.0 EPSS 3.2%

    Exploit status: No public exploit known

    Affects: wavlink wn536ax6-a

    A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to init...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-120240 WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The att...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-120239 WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. The attack is possible...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-120238 WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can be executed remotely. The explo...

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-74759 Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials

    CriticalCVSS 9.8 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: cpan Google-Auth

    Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials. An external_account configuration with the AWS subject token type selects Google::Auth::ExternalAccountCredentials::Aws. Its retrieve_...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-62048 WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability

    CriticalCVSS 9.3 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: Liquid Web / StellarWP BookIt, wordpress bookit

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE

    CriticalCVSS 9.9 EPSS 0.77%

    Exploit status: No public exploit known

    Affects: pypi prefab-ui

    Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno w...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-120232 Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption

    CriticalCVSS 9.3 EPSS 0.23%

    Exploit status: No public exploit known

    Affects: horizon datasys reboot restore standard

    A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a loc...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-120231 WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. It is possible to initiate the att...

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-120230 WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection

    CriticalCVSS 9.4 EPSS 2.2%

    Exploit status: No public exploit known

    Affects: wavlink wn701ae firmware

    A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. The exploit has been made public an...

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection

    CriticalCVSS 9.4 EPSS 2.8%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disc...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-120228 WAVLINK WN553X1-B ioos Service sub_416D88 os command injection

    CriticalCVSS 9.4 EPSS 1.7%

    Exploit status: No public exploit known

    Affects: wavlink wn553x1-b

    A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be execu...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-120308 Beta9 host filesystem exposure via volume path traversal

    CriticalCVSS 9.9 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: beam-cloud Beta9 gateway, beam-cloud Beta9 worker

    A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).