Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

1,052 alerts · page 51 of 53

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-116231 Oray Pugongying X5 Pro Ser2net crlf injection

    CriticalCVSS 9.4 EPSS 0.44%

    Exploit status: No public exploit known

    Affects: oray pugongying x5 pro

    A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown function of the component Ser2net. Performing a manipulation of the argument regmsg results in crlf injection. It is possible to initiate the attack remotely. The exploit has b...

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-116116 Yoosee GM8135S Camera Secure Boot signature verification

    CriticalCVSS 9.3 EPSS 0.09%

    Exploit status: No public exploit known

    Affects: yoosee gm8135s camera

    A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now pu...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-31158 SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page

    CriticalCVSS 9.8 EPSS 0.69%

    Exploit status: No public exploit known

    SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections

    CriticalCVSS 9.1 EPSS 0.35%

    Exploit status: No public exploit known

    Affects: cpan Starman, debian/starman, ubuntu/starman

    Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response pa...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-116199 Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback

    CriticalCVSS 9.2 EPSS 0.32%

    Exploit status: No public exploit known

    Affects: grokability snipe-it, snipeitapp snipe-it

    Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames and still-live Google...

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-116163 Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses

    CriticalCVSS 9.1 EPSS 0.28%

    Exploit status: No public exploit known

    Affects: npm parse-server

    Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, validateLogin, and validateUpdate methods of custom adapters subclassing AuthAdapter are never called, and an inherited default that accepts any authData is us...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-115214 Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers

    CriticalCVSS 9.8 EPSS 0.28%

    Exploit status: No public exploit known

    Affects: wordpress reverse-proxy-auth-widget

    The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.

  9. Critical (CVSS 9+) Published · updated

    CVE-2026-115995 Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

    CriticalCVSS 9.4 EPSS 1.4%

    Exploit status: No public exploit known

    Affects: Unitree Robotics unitree go2

    A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-114820 OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

    CriticalCVSS 9.1 EPSS 0.25%

    Exploit status: No public exploit known

    Affects: Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition and 19 more

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0....

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations

    CriticalCVSS 9.9 EPSS 0.25%

    Exploit status: No public exploit known

    Affects: gitroomhq postiz-app

    Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the req...

  12. Critical (CVSS 9+) Published · updated

    CVE-2026-115557 Distrust compromised intermediate certificates in ssl module

    CriticalCVSS 9.4 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: azure linux python3, redhat/python3.12, redhat/python3.14 and 29 more

    Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

  13. CISA KEV addition Published · updated

    CVE-2026-114625 Security Advisory 0199

    CriticalCVSS 9.4 EPSS 1.0% CISA KEV added 2026-10-23 · due 2026-10-26 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: Arista Networks VeloCloud Orchestrator, arista velocloud orchestrator

    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator...

  14. CISA KEV addition New public exploit Published · updated

    CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

    CriticalCVSS 9.2 EPSS 82.6% CISA KEV added 2026-10-27 · due 2026-11-10 Exploited in the wild PoC

    Exploit status: Exploited in the wild (confirmed)

    Affects: debian/brotli, debian/edk2, debian/nodejs and 242 more

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service,...

  15. New public exploit Published · updated

    CVE-2026-110264 Integer Overflow or Wraparound in GitLab

    CriticalCVSS 10.0 EPSS 1.3% PoC

    Exploit status: Proof-of-concept only

    Affects: gitlab, azure linux ruby, redhat/ruby4.0 and 15 more

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthen...

  16. CISA KEV addition New public exploit Published · updated

    CVE-2026-109619 RCE via stale global state

    CriticalCVSS 9.2 EPSS 100.0% CISA KEV added 2026-10-26 · due 2026-10-29 Exploited in the wild PoC

    Exploit status: Exploited in the wild (confirmed)

    Affects: debian/php8.2, debian/php8.4, redhat/php and 137 more

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may r...

  17. CISA KEV addition New public exploit Published · updated

    CVE-2026-109618 RCE via OOM corruption

    CriticalCVSS 9.2 EPSS 100.0% CISA KEV added 2026-10-26 · due 2026-10-29 Exploited in the wild Public exploit PoC

    Exploit status: Exploited in the wild (confirmed)

    Affects: debian/php8.2, debian/php8.4, redhat/php and 136 more

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cle...

  18. New public exploit Published · updated

    CVE-2026-53995 MLflow < 3.18.0 Path Traversal via Trace ID API

    HighCVSS 8.8 EPSS 0.63% PoC

    Exploit status: Proof-of-concept only

    Affects: pypi mlflow, redhat/rhoai/odh-mlflow-rhel9, redhat/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 and 21 more

    MLflow before 3.18.0 contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers...

  19. CISA KEV addition Published · updated

    CVE-2026-111793 Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert u...

    MediumCVSS 4.3 EPSS 0.64% CISA KEV added 2026-11-10 · due 2026-11-24 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: Openwave Messaging (Ireland) Limited Webtop Media Transcoder, openwave webtop media transcoder

    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

  20. CISA KEV addition Published · updated

    CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

    HighCVSS 7.0 EPSS 0.53% CISA KEV added 2026-10-30 · due 2026-11-02 Exploited in the wild

    Exploit status: Exploited in the wild (confirmed)

    Affects: Ivanti Connect Secure

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).