Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120237 | Low CVSS 2.1 |
- Applications & supply chain |
A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired… | 1 Nov 2026 |
| CVE-2026-120235 | Low CVSS 2.1 |
- Applications & supply chain |
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function… | 1 Nov 2026 |
| CVE-2026-120218 | Low CVSS 2.0 |
- Applications & supply chain |
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of… | 1 Nov 2026 |
| CVE-2026-118437 | Low CVSS 3.7 |
- Applications & supply chain |
The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded… | 31 Oct 2026 |
| CVE-2026-63400 | Low CVSS 2.3 |
- Applications & supply chain |
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the… | 30 Oct 2026 |
| CVE-2026-54610 | Low CVSS 3.3 |
- Applications & supply chain |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write… | 30 Oct 2026 |
| CVE-2026-119330 | Low CVSS 3.5 |
- Applications & supply chain |
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.