Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,055 alerts · page 31 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-115829 Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force

    CriticalCVSS 9.9 EPSS 0.50%

    Exploit status: No public exploit known

    Affects: Delinea Secret Server (On-Prem)

    In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication, then bypass the initial login step and authenticate using the second factor alone.

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-115828 Secret Server device validation error

    CriticalCVSS 9.4 EPSS 0.31%

    Exploit status: No public exploit known

    Affects: Delinea Secret Server (On-Prem)

    In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-61850 Kargo: Privilege escalation via Project RBAC management in the Kargo API

    CriticalCVSS 9.3 EPSS 0.36%

    Exploit status: No public exploit known

    Affects: akuity kargo

    Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permission...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

    CriticalCVSS 9.1 EPSS 0.33%

    Exploit status: No public exploit known

    Affects: madeofpendletonwool PinePods

    PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/add_podcast in rust-api/src/handlers/podcasts.rs. get_podcast_values and add_episodes in ru...

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

    CriticalCVSS 9.3 EPSS 0.58%

    Exploit status: No public exploit known

    Affects: Thalesgroup Sentinel Keys Server

    Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Senti...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability

    CriticalCVSS 9.8 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: wordpress wp-marketing-automations, Aman FunnelKit Automations

    Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-118697 In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before....

    CriticalCVSS 9.0 EPSS 0.29%

    Exploit status: No public exploit known

    Affects: JetBrains Toolbox App, JetBrains IntelliJ IDEA, JetBrains PyCharm and 8 more

    In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daem...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-119978 Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

    CriticalCVSS 9.0 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: FlowiseAI Flowise

    Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a fil...

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-61826 Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery

    CriticalCVSS 10.0 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: morpheus65535 bazarr

    Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the api_ns_plex namespace in bazarr/api/plex/oauth.py omits @authenticate on its Resource handlers, while normal APIs require an API key and no global authentication hook compensates. Anonymous caller...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD

    CriticalCVSS 10.0 EPSS 0.30%

    Exploit status: No public exploit known

    Affects: Canonical LXD, debian/lxd

    Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-119716 pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments

    CriticalCVSS 9.3 EPSS 0.46%

    Exploit status: No public exploit known

    Affects: pypi pybars3, pypi pybars4

    pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or b...

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-119706 LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization

    CriticalCVSS 9.3 EPSS 1.0%

    Exploit status: No public exploit known

    Affects: pypi lmdeploy

    InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named...

  18. Critical (CVSS 9+) Published

    CVE-2026-93327 Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution

    CriticalCVSS 9.4 EPSS 0.39%

    Exploit status: No public exploit known

    Affects: Google Cloud Application Integration

    A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This v...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-61738 SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)

    CriticalCVSS 10.0 EPSS 0.56%

    Exploit status: No public exploit known

    Affects: socfortress CoPilot

    SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, POST /api/scoutsuite/generate-gcp-report in backend/app/integrations/scoutsuite/routes/scoutsuite.py admits admin and analyst users and validates the uploaded...

  20. Critical (CVSS 9+) Published

    CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

    CriticalCVSS 9.8 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: huajian123 ng-antd-admin

    ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, im...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).