Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,056 alerts · page 41 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-103693 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.0 EPSS 0.47%

    Exploit status: No public exploit known

    Affects: wordpress profilegrid-user-profiles-groups-and-communities, wordpress frontend-dashboard

    The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that...

  2. Critical (CVSS 9+) Published

    CVE-2026-109516 Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

    CriticalCVSS 9.8 EPSS 0.58%

    Exploit status: No public exploit known

    Affects: wordpress bot-for-telegram-on-woocommerce, guruteam Bot for Telegram on WooCommerce

    The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The /wp-json/woo-telegram/v1/main/ REST endpoint is registered with permission_callback => '__return_true' and...

  3. Critical (CVSS 9+) Published

    CVE-2026-42922 A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can mak...

    CriticalCVSS 9.8 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: Frangoteam

    A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

  4. Critical (CVSS 9+) Published

    CVE-2026-66088 Unrestricted Command Execution via system.execute

    CriticalCVSS 9.4 EPSS 0.69%

    Exploit status: No public exploit known

    Affects: Apereo Foundation openEQUELLA

    In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with...

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-51863 DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation pat...

    CriticalCVSS 9.1 EPSS 0.81%

    Exploit status: No public exploit known

    DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-51912 OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

    CriticalCVSS 9.8 EPSS 0.75%

    Exploit status: No public exploit known

    OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-107027 Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-107017 Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-107028 Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

  10. Critical (CVSS 9+) Published

    CVE-2026-107032 Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

    CriticalCVSS 9.1 EPSS 0.50%

    Exploit status: No public exploit known

    Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-107048 An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

    CriticalCVSS 9.8 EPSS 0.54%

    Exploit status: No public exploit known

    An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-107043 Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.

    CriticalCVSS 9.1 EPSS 0.30%

    Exploit status: No public exploit known

    Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-107050 An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

    CriticalCVSS 9.8 EPSS 0.47%

    Exploit status: No public exploit known

    Affects: ubuntu/retroarch

    An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-107060 Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

    CriticalCVSS 9.1 EPSS 0.28%

    Exploit status: No public exploit known

    Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-107058 An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

    CriticalCVSS 9.8 EPSS 0.49%

    Exploit status: No public exploit known

    An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-107040 Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-107021 Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire me...

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-107045 Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

    CriticalCVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).