Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,056 alerts · page 43 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-111108 Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers

    CriticalCVSS 9.1 EPSS 0.59%

    Exploit status: No public exploit known

    Affects: redhat/openshift-serverless-1/kn-ekb-dispatcher-rhel9, redhat/openshift-serverless-1/kn-ekb-receiver-rhel9, redhat/kafka-clients and 1 more

    Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sender. That count is checked only against the bytes remaining in the request buffer, which assumes about one byte per element; because most elements need several...

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-110985 Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured

    CriticalCVSS 9.1 EPSS 0.18%

    Exploit status: No public exploit known

    Affects: org.apache.kafka/kafka, redhat/openshift-serverless-1/kn-ekb-dispatcher-rhel9, redhat/openshift-serverless-1/kn-ekb-receiver-rhel9 and 1 more

    A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidator) selects its implementation from configuration. When sasl.oauthbearer.jwks.endpoint.url is set, the validator verifies the JWT signature. When that URL is un...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-103409 Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed

    CriticalCVSS 9.8 EPSS 0.35%

    Exploit status: No public exploit known

    Affects: juniper Session Smart Router

    A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root. Note that this vul...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-103406 Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

    CriticalCVSS 9.8 EPSS 0.52%

    Exploit status: No public exploit known

    Affects: juniper Session Smart Conductor

    An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code

    CriticalCVSS 9.9 EPSS 0.69%

    Exploit status: No public exploit known

    Affects: com.xwiki.pro/xwiki-pro-macros, xwikisas xwiki-pro-macros

    XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handlin...

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-105420 Path Traversal in Wing WFTP Server leading to Remote Code Execution

    CriticalCVSS 9.4 EPSS 0.52%

    Exploit status: No public exploit known

    Affects: Wing Soft Technology Wing FTP Server

    Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with p...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-111411 WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

    CriticalCVSS 9.3 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: Aman FunnelKit Automations, wordpress wp-marketing-automations

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-115607 WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

    CriticalCVSS 9.3 EPSS 0.24%

    Exploit status: No public exploit known

    Affects: Crowd Favorite DXP ToolKit, wordpress dxp-toolkit

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-115904 Topluyo Desktop for Linux has an OS Command Injection issue

    CriticalCVSS 9.6 EPSS 0.74%

    Exploit status: No public exploit known

    Affects: topluyo App

    Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the openExternalLinks() routine in utils.js. An attacker who controls a...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-67074 HCL BigFix AEX is affected by multiple security vulnerabilities.

    CriticalCVSS 9.1 EPSS 0.46%

    Exploit status: No public exploit known

    Affects: HCL Software BigFix AEX

    HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-114278 Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

    CriticalCVSS 9.8 EPSS 0.90%

    Exploit status: No public exploit known

    Affects: Eclipse Foundation Eclipse Che, redhat/devspaces/code-rhel9, redhat/devspaces/jetbrains-ide-rhel9

    The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a double-quoted sh -c "echo "..." > ..." invocation without any escaping. When che-machine-e...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-99154 scsi: libiscsi: Reject a negative task index from parse_pdu_itt

    CriticalCVSS 9.8 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: azure linux kernel, redhat/kernel, redhat/kernel-rt and 8 more

    In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parse_pdu_itt A transport that implements parse_pdu_itt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if (i >= session->c...

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-99153 scsi: libiscsi: Validate the ITT reflected in a Reject PDU

    CriticalCVSS 9.8 EPSS 0.55%

    Exploit status: No public exploit known

    Affects: azure linux kernel, redhat/kernel-rt, redhat/kernel and 8 more

    In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rejects, and iscsi_handle_reject() takes the ITT out of that copy to find the task to clean up: memcpy(&reje...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-103792 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, L...

    CriticalCVSS 9.6 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: Dell PowerProtect Data Domain Management Center

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutraliza...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-103799 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, L...

    CriticalCVSS 9.6 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: Dell PowerProtect Data Domain Management Center

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorizatio...

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-112197 Missing Authentication for Critical Function in Tactis' NoviGest Desktop App

    CriticalCVSS 9.4 EPSS 0.38%

    Exploit status: No public exploit known

    Affects: Tactis NoviGest Desktop App

    Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on...

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-103780 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ver...

    CriticalCVSS 9.8 EPSS 0.83%

    Exploit status: No public exploit known

    Affects: Dell PowerProtect Data Domain

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerabil...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-86384 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ver...

    CriticalCVSS 9.8 EPSS 0.47%

    Exploit status: No public exploit known

    Affects: Dell PowerProtect Data Domain

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key v...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-14571 SQL injection (SQLi) in the user authentication module of Futurum Software

    CriticalCVSS 9.1 EPSS 0.25%

    Exploit status: No public exploit known

    Affects: Futurum Software User Authentication Module

    A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the protec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).