Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120240 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the… | 1 Nov 2026 |
| CVE-2026-120239 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of… | 1 Nov 2026 |
| CVE-2026-120238 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file… | 1 Nov 2026 |
| CVE-2026-120236 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown… | 1 Nov 2026 |
| CVE-2026-120234 | Low CVSS 2.1 |
- Operating systems & software |
A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component… | 1 Nov 2026 |
| CVE-2026-119480 | Medium CVSS 6.5 |
- Operating systems & software |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock… | 1 Nov 2026 |
| CVE-2026-120231 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of… | 1 Nov 2026 |
| CVE-2026-120230 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web… | 1 Nov 2026 |
| CVE-2026-120229 | High CVSS 8.5 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the… | 1 Nov 2026 |
| CVE-2026-120228 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the… | 1 Nov 2026 |
| CVE-2026-117680 | Low CVSS 2.1 |
- Operating systems & software |
Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in… | 1 Nov 2026 |
| CVE-2026-120227 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file… | 1 Nov 2026 |
| CVE-2026-120226 | Low CVSS 1.9 |
- Operating systems & software |
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by… | 1 Nov 2026 |
| CVE-2026-13575 | Not yet scored | - Operating systems & software |
HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in… | 1 Nov 2026 |
| CVE-2026-120225 | High CVSS 8.5 |
- Operating systems & software |
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function… | 1 Nov 2026 |
| CVE-2026-120223 | Low CVSS 1.3 |
- Operating systems & software |
A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the… | 1 Nov 2026 |
| CVE-2026-119625 | Not yet scored | - Operating systems & software |
The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their… | 1 Nov 2026 |
| CVE-2026-119533 | Not yet scored | - Operating systems & software |
Repository and organization project boards listed the pull requests that reference each issue on the board without… | 1 Nov 2026 |
| CVE-2026-118386 | Not yet scored | - Operating systems & software |
Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the… | 1 Nov 2026 |
| CVE-2026-116289 | Not yet scored | - Operating systems & software |
Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions… | 1 Nov 2026 |
| CVE-2026-113429 | Not yet scored | - Operating systems & software |
Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that… | 1 Nov 2026 |
| CVE-2026-120217 | Low CVSS 2.1 |
- Operating systems & software |
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file… | 1 Nov 2026 |
| CVE-2026-120198 | Critical CVSS 9.3 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the… | 1 Nov 2026 |
| CVE-2026-120197 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120196 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file… | 1 Nov 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.