Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,056 alerts · page 42 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-107034 Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

    CriticalCVSS 9.1 EPSS 0.37%

    Exploit status: No public exploit known

    Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-107053 Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox.

    CriticalCVSS 9.1 EPSS 0.36%

    Exploit status: No public exploit known

    Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox.

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-107038 Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

    CriticalCVSS 9.1 EPSS 0.37%

    Exploit status: No public exploit known

    Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-107056 Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database v...

    CriticalCVSS 9.1 EPSS 0.27%

    Exploit status: No public exploit known

    Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-79589 The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure...

    CriticalCVSS 9.8 EPSS 0.35%

    Exploit status: No public exploit known

    The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-118579 D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

    CriticalCVSS 9.3 EPSS 0.79%

    Exploit status: No public exploit known

    Affects: d-link dir-505

    A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried o...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-61567 AVideo-Encoder: unauthenticated command execution through streamer login trust

    CriticalCVSS 10.0 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: WWBN AVideo-Encoder

    AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint view/videosListToLive.php accepts an attacker-named streamer in webSiteRootURL, calls Login::run in objects/Login.php, and trusts the returned JSON as session state. An unauthenticated remote attacker...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-61564 AVideo-Encoder: unauthenticated installer PHP code injection

    CriticalCVSS 10.0 EPSS 0.54%

    Exploit status: No public exploit known

    Affects: WWBN AVideo-Encoder

    AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint install/checkConfiguration.php assembles videos/configuration.php by interpolating request parameters, including webSiteRootURL, into single-quoted PHP string literals without escaping. An...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-118690 Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

    CriticalCVSS 9.3 EPSS 0.69%

    Exploit status: No public exploit known

    Affects: npm signalk-server

    Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator token...

  12. CISA KEV addition Published · updated

    CVE-2026-76418 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    HighCVSS 8.6 EPSS 0.82% CISA KEV added 2026-10-29 · due 2026-11-01 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: Cisco Secure Firewall Threat Defense (FTD) Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, cisco adaptive security appliance software and 1 more

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting i...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-117574 Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

    CriticalCVSS 9.1 EPSS 0.24%

    Exploit status: No public exploit known

    Affects: redhat openshift ai, redhat/rhoai/odh-ai-gateway-payload-processing-e2e-rhel9, redhat/rhoai/odh-ai-gateway-payload-processing-rhel9

    A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrievi...

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-63190 FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

    CriticalCVSS 9.4 EPSS 0.54%

    Exploit status: No public exploit known

    Affects: fearlessgeekmedia FearlessCMS

    FearlessCMS is a flat-file content management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under admin/ perform privileged operations without isLoggedIn() authentication checks, CSRF protection or adequate path validation. On...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-118264 Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

    CriticalCVSS 9.1 EPSS 0.43%

    Exploit status: No public exploit known

    Affects: redhat/ansible-automation-platform/automation-orchestrator-temporal-rhel9, redhat/costmanagement/costmanagement-ros-ocp-backend-rhel9, redhat/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 and 12 more

    Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client WebSocket upgrade request before verifying that the configured upstream accepted the upgrade. If the upstream rejects the upgrade with an ordinary keep-alive...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-118633 A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for...

    CriticalCVSS 9.2 EPSS 0.60%

    Exploit status: No public exploit known

    Affects: sophos SG UTM

    A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is...

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-116531 HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

    CriticalCVSS 9.1 EPSS 0.40%

    Exploit status: No public exploit known

    Affects: cpan HTTP-Body, debian/libhttp-body-perl, ubuntu/libhttp-body-perl

    HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add() treats a chunk as complete once the buffer is as long as the chunk's declared size, b...

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-116135 HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them

    CriticalCVSS 9.8 EPSS 0.60%

    Exploit status: No public exploit known

    Affects: cpan HTTP-Body, debian/libhttp-body-perl, ubuntu/libhttp-body-perl

    HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them. The decode table holds only the all-lowercase and all-uppercase spelling of each hex pair, while the escape pattern matches either case. An escape suc...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-111496 Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

    CriticalCVSS 9.1 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: redhat/kafka-streams, org.apache.kafka/kafka-streams

    Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuation time as timestamp + (intervalsMissed + 1) * interval with no overflow check. A record with a timestamp at or near Long.MAX_VALUE advances stream time to th...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-111115 Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing

    CriticalCVSS 9.1 EPSS 0.56%

    Exploit status: No public exploit known

    Affects: redhat/openshift-serverless-1/kn-ekb-dispatcher-rhel9, redhat/openshift-serverless-1/kn-ekb-receiver-rhel9, redhat/kafka-clients and 1 more

    Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender and retain a RawTaggedField object for each unknown field. That count was bounded only by the outer request frame size (socket.request.max.bytes); it was not chec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).