Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120203 | High CVSS 8.7 |
- Cloud & SaaS |
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated… | 31 Oct 2026 |
| CVE-2026-120070 | High CVSS 8.8 |
- Cloud & SaaS |
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend… | 31 Oct 2026 |
| CVE-2026-62979 | High CVSS 8.4 |
- Cloud & SaaS |
jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0,… | 30 Oct 2026 |
| CVE-2026-62302 | High CVSS 8.7 |
- Cloud & SaaS |
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls… | 30 Oct 2026 |
| CVE-2026-62284 | High CVSS 8.6 |
- Cloud & SaaS |
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy`… | 30 Oct 2026 |
| CVE-2026-115830 | High CVSS 8.7 |
- Cloud & SaaS |
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.