Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120308 | Critical CVSS 9.9 |
- Network & security devices |
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host… | 1 Nov 2026 |
| CVE-2026-111070 | Medium CVSS 5.4 |
- Network & security devices |
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site… | 31 Oct 2026 |
| CVE-2026-94361 | Medium CVSS 5.3 |
- Network & security devices |
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an… | 31 Oct 2026 |
| CVE-2026-110042 | Medium CVSS 4.9 |
- Network & security devices |
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays… | 31 Oct 2026 |
| CVE-2026-119336 | High CVSS 7.8 |
- Network & security devices |
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.… | 30 Oct 2026 |
| CVE-2026-119335 | High CVSS 7.8 |
- Network & security devices |
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.… | 30 Oct 2026 |
| CVE-2026-119334 | Low CVSS 2.2 |
- Network & security devices |
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.… | 30 Oct 2026 |
| CVE-2026-116248 | Medium CVSS 6.0 |
- Network & security devices |
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the… | 30 Oct 2026 |
| CVE-2026-111357 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | 30 Oct 2026 |
| CVE-2026-118527 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | 30 Oct 2026 |
| CVE-2026-76418 Exploited |
Not yet scored | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Network & security devices |
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 29 Oct 2026 |
| CVE-2025-61624 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Path Traversal Vulnerability | 16 Oct 2026 |
| CVE-2026-76519 Exploited |
Not yet scored | Cisco Secure Email Gateway Network & security devices |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 14 Oct 2026 |
| CVE-2026-0322 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Code Injection Vulnerability | 14 Oct 2026 |
| CVE-2026-104935 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 13 Oct 2026 |
| CVE-2026-88779 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 4 Oct 2026 |
| CVE-2026-104286 Exploited |
Not yet scored | Fortinet FortiMail Network & security devices |
Fortinet FortiMail Path Traversal Vulnerability | 1 Oct 2026 |
| CVE-2026-76504 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 30 Sep 2026 |
| CVE-2026-88771 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Input Validation Vulnerability | 27 Sep 2026 |
| CVE-2026-88772 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 27 Sep 2026 |
| CVE-2026-67279 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 25 Sep 2026 |
| CVE-2026-5430 Exploited |
Not yet scored | WSO2 Multiple Products Network & security devices |
WSO2 Multiple Products Path Traversal Vulnerability | 24 Sep 2026 |
| CVE-2026-93616 Exploited |
Not yet scored | Check Point Multiple Products Network & security devices |
Check Point Multiple Products Path Traversal Vulnerability | 22 Sep 2026 |
| CVE-2026-85102 Exploited |
Not yet scored | Check Point Multiple Products Network & security devices |
Check Point Multiple Products Improper Certificate Validation Vulnerability | 22 Sep 2026 |
| CVE-2026-7273 Exploited |
Not yet scored | Zyxel GS1900 Series Switches Network & security devices |
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 21 Sep 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.