Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

Type

Severity

Period

1,052 alerts · page 48 of 53

Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB

CriticalCVSS 9.8 EPSS 0.61%

Exploit status: No public exploit known

Affects: Hitachi HiRDB Server Version 10, Hitachi HiRDB Server Version 9, Hitachi HiRDB Server with Additional Function Version 9 and 2 more

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Ser...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-82118 Stack-based Buffer Overflow Vulnerability in HiRDB

CriticalCVSS 9.8 EPSS 0.52%

Exploit status: No public exploit known

Affects: Hitachi HiRDB Server Version 10, Hitachi HiRDB Server Version 9, Hitachi HiRDB Server with Additional Function Version 9 and 2 more

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32)...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-82120 Heap-based Buffer Overflow Vulnerability in HiRDB

CriticalCVSS 9.8 EPSS 0.36%

Exploit status: No public exploit known

Affects: Hitachi HiRDB Server Version 10, Hitachi HiRDB Server Version 9, Hitachi HiRDB Server with Additional Function Version 9 and 2 more

Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32):...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-82119 OS Command Injection Vulnerability in HiRDB

CriticalCVSS 9.8 EPSS 1.0%

Exploit status: No public exploit known

Affects: Hitachi HiRDB Server Version 10, Hitachi HiRDB Server Version 9, Hitachi HiRDB Server with Additional Function Version 9 and 2 more

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-82122 Stack-based Buffer Overflow Vulnerability in HiRDB

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi HiRDB Server Version 10, Hitachi HiRDB Server Version 9, Hitachi HiRDB Server with Additional Function Version 9 and 2 more

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32)...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-76939 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.8 EPSS 0.52%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-76936 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 19:17

CVE-2026-76937 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 19:17

CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.8 EPSS 0.64%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 19:17

CVE-2026-76935 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.4 EPSS 0.33%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 19:17

CVE-2026-76934 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.8 EPSS 0.52%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent, Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-76933 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent, Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-76932 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent, Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-86577 Out-of-bounds Write Vulnerability in JP1 Products

CriticalCVSS 9.4 EPSS 0.46%

Exploit status: No public exploit known

Affects: Hitachi JP1/Integrated Management 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent and 2 more

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 1...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-86576 Heap-based Buffer Overflow Vulnerability in JP1 Products

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Integrated Management 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent and 2 more

Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 b...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-86575 Stack-based Buffer Overflow Vulnerability in JP1 Products

CriticalCVSS 9.4 EPSS 0.45%

Exploit status: No public exploit known

Affects: Hitachi JP1/Integrated Management 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Manager, Hitachi JP1/Automatic Job Management System 3 - Agent and 2 more

Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00...
Critical (CVSS 9+) Published 2026-10-27 11:37 · updated 2026-11-04 17:17

CVE-2026-86574 Heap-based Buffer Overflow Vulnerability in JP1/Base

CriticalCVSS 9.8 EPSS 0.52%

Exploit status: No public exploit known

Affects: Hitachi JP1/Base

Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.
Critical (CVSS 9+) Published 2026-10-27 11:30 · updated 2026-11-05 19:57

CVE-2026-102788 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2

CriticalCVSS 9.3 EPSS 0.39%

Exploit status: No public exploit known

Affects: balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts(). When the parameter does not match kn...
Critical (CVSS 9+) Published 2026-10-27 11:23 · updated 2026-11-05 19:51

CVE-2026-102789 Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2

CriticalCVSS 9.3 EPSS 0.32%

Exploit status: No public exploit known

Affects: balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller, it omits the GridboxHelper::checkUserEditL...
Critical (CVSS 9+) Published 2026-10-27 10:28

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

CriticalCVSS 9.8 EPSS 0.37%

Exploit status: No public exploit known

Affects: Qode Themes Qode Membership, wordpress qode-membership

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the Facebook OAuth token verifi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).