Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,056 alerts · page 46 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-108015 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

    CriticalCVSS 9.1 EPSS 0.13%

    Exploit status: No public exploit known

    Affects: HCLSoftware Notes Client

    Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificate...

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-114595 Integer overflow or wraparound in EPICS Base

    CriticalCVSS 9.3 EPSS 0.50%

    Exploit status: No public exploit known

    Affects: The EPICS Community EPICS Base, ubuntu/epics-base

    In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-48360 Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    CriticalCVSS 9.6 EPSS 0.45%

    Exploit status: No public exploit known

    Affects: Adobe Connect Desktop App, Adobe Connect Android Mobile App

    Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this i...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-108014 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

    CriticalCVSS 9.1 EPSS 0.13%

    Exploit status: No public exploit known

    Affects: HCLSoftware Domino Server

    Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificat...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-106076 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and...

    CriticalCVSS 9.0 EPSS 0.37%

    Exploit status: No public exploit known

    Affects: Veeam Backup for Microsoft 365

    A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service...

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-116863 WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability

    CriticalCVSS 9.6 EPSS 0.18%

    Exploit status: No public exploit known

    Affects: Tribulant Software Newsletters, wordpress newsletters-lite

    Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-112710 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

    CriticalCVSS 9.2 EPSS 0.42%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning...

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-112709 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

    CriticalCVSS 9.2 EPSS 0.42%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a speci...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-103593 Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution

    CriticalCVSS 9.1 EPSS 0.10%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate.

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-93857 Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution

    CriticalCVSS 9.2 EPSS 0.56%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy.

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-93866 Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write

    CriticalCVSS 9.2 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is en...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-93865 Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection

    CriticalCVSS 9.2 EPSS 0.46%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the cluster...

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-103594 Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

    CriticalCVSS 9.5 EPSS 0.43%

    Exploit status: No public exploit known

    Affects: WatchGuard Fireware OS

    A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitr...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-118027 Frame poisoning in the Layout component

    CriticalCVSS 9.1 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: redhat/firefox, redhat/rhel10/firefox-flatpak, mozilla Firefox and 6 more

    Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-117997 Sandbox escape due to use-after-free in the Widget component

    CriticalCVSS 9.6 EPSS 0.38%

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird, redhat/firefox and 10 more

    Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-117990 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

    CriticalCVSS 9.6 EPSS 0.39%

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird, debian/firefox-esr and 6 more

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-117988 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    CriticalCVSS 9.6 EPSS 0.39%

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird, redhat/firefox and 10 more

    Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-117985 Sandbox escape due to use-after-free in the Graphics component

    CriticalCVSS 9.6 EPSS 0.38%

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird, redhat/firefox and 10 more

    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-117982 Invalid pointer in the JavaScript Engine: JIT component

    CriticalCVSS 9.8 EPSS 0.51%

    Exploit status: No public exploit known

    Affects: mozilla Firefox, mozilla Thunderbird, debian/firefox-esr and 6 more

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).