Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,055 alerts · page 33 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-114523 Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

    CriticalCVSS 9.8 EPSS 1.0%

    Exploit status: No public exploit known

    Affects: drupal/ffmpeg_image_toolkit

    Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-74912 GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB

    CriticalCVSS 9.8 EPSS 0.29%

    Exploit status: No public exploit known

    Affects: Imagination Technologies Graphics DDK

    On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, pro...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-119263 Chromium CVE-2026-119263: Memory corruption

    CriticalCVSS 9.6 EPSS 0.27%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-119261 Chromium CVE-2026-119261: Improper input validation

    CriticalCVSS 9.6 EPSS 0.32%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome and 5 more

    Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  5. Critical (CVSS 9+) Published · updated

    CVE-2025-49602 An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances, cache authentication f...

    CriticalCVSS 9.8 EPSS 0.43%

    Exploit status: No public exploit known

    An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances, cache authentication for longer than the configured maximum time (default: 30 seconds), which results...

  6. Critical (CVSS 9+) Published · updated

    CVE-2023-22793 A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System...

    CriticalCVSS 9.3 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: Veeam Management Pack for Microsoft System Center

    A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-115943 Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt

    CriticalCVSS 9.8 EPSS 0.61%

    Exploit status: No public exploit known

    Affects: cpan Spreadsheet-XLSX, debian/libspreadsheet-xlsx-perl, ubuntu/libspreadsheet-xlsx-perl

    Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as [>100], ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Bot...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-61707 SOCFortress CoPilot: Stored case-report template injection permits backend code execution

    CriticalCVSS 9.0 EPSS 0.24%

    Exploit status: No public exploit known

    Affects: socfortress CoPilot

    SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by customer_user, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engin...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API

    CriticalCVSS 9.1 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: docat-org docat

    Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or...

  10. New public exploit Published · updated

    CVE-2026-119193 PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

    MediumCVSS 5.4 EPSS 0.11% PoC

    Exploit status: Proof-of-concept only

    Affects: phpunit/phpunit, debian/phpunit, sebastianbergmann phpunit

    PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sys_get_temp_dir() and reuses that directory...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform

    CriticalCVSS 9.4 EPSS 0.43%

    Exploit status: No public exploit known

    Affects: ServiceNow AI Platform

    ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating...

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption

    CriticalCVSS 9.2 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: redhat/ansible-automation-platform-27/hub-rhel9, redhat/rust-podman-sequoia, redhat/rust-sequoia-sq and 5 more

    Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

    CriticalCVSS 9.3 EPSS 0.32%

    Exploit status: No public exploit known

    Affects: monkeytypegame monkeytype

    Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and in...

  14. Critical (CVSS 9+) Published

    CVE-2026-119145 Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload

    CriticalCVSS 9.4 EPSS 0.76%

    Exploit status: No public exploit known

    Affects: pypi frappe

    Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage di...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

    CriticalCVSS 9.1 EPSS 0.29%

    Exploit status: No public exploit known

    Affects: zitadel github.com/zitadel/zitadel

    ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-90868 OS Command Injection in Progress WS_FTP Server

    CriticalCVSS 9.9 EPSS 1.5%

    Exploit status: No public exploit known

    Affects: Progress Software WS_FTP Server

    An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-90866 Virtual Folder Path Confinement Bypass in Progress WS_FTP Server

    CriticalCVSS 9.1 EPSS 0.73%

    Exploit status: No public exploit known

    Affects: Progress Software WS_FTP Server

    A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-90865 Command Injection via FTP Notification Variables in Progress WS_FTP Server

    CriticalCVSS 9.0 EPSS 1.1%

    Exploit status: No public exploit known

    Affects: Progress Software WS_FTP Server

    An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-90864 Host Administrator Path Containment Bypass in Progress WS_FTP Server

    CriticalCVSS 9.1 EPSS 0.48%

    Exploit status: No public exploit known

    Affects: Progress Software WS_FTP Server

    A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager

    CriticalCVSS 9.1 EPSS 0.66%

    Exploit status: No public exploit known

    Affects: Progress Software WS_FTP Server

    Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).