Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-116247 | High CVSS 7.1 |
- Operating systems & software |
When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one… | 30 Oct 2026 |
| CVE-2026-116246 | High CVSS 7.0 |
- Operating systems & software |
To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager… | 30 Oct 2026 |
| CVE-2026-116245 | High CVSS 7.1 |
- Operating systems & software |
libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an… | 30 Oct 2026 |
| CVE-2026-116243 | High CVSS 7.7 |
- Operating systems & software |
pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In… | 30 Oct 2026 |
| CVE-2026-116241 | Critical CVSS 9.4 |
- Operating systems & software |
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the… | 30 Oct 2026 |
| CVE-2026-116240 | High CVSS 7.1 |
- Operating systems & software |
In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which… | 30 Oct 2026 |
| CVE-2026-115829 | High CVSS 8.7 |
- Operating systems & software |
In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by… | 30 Oct 2026 |
| CVE-2026-115828 | Medium CVSS 5.1 |
- Operating systems & software |
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when… | 30 Oct 2026 |
| CVE-2026-97229 Exploited |
Not yet scored | GitLab Community Edition and Enterprise Edition Operating systems & software |
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 29 Oct 2026 |
| CVE-2026-41709 Exploited |
Not yet scored | Broadcom VMware ESX Operating systems & software |
Broadcom VMWare ESX Insufficient Logging Vulnerability | 28 Oct 2026 |
| CVE-2026-111497 Exploited |
Not yet scored | Google Brotli Operating systems & software |
Google Brotli Unchecked Return Value Vulnerability | 27 Oct 2026 |
| CVE-2026-48356 Exploited |
Not yet scored | Adobe Commerce and Magento Operating systems & software |
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 27 Oct 2026 |
| CVE-2026-110447 Exploited |
Not yet scored | Collabora Collabora Online – Built-in CODE Server Operating systems & software |
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability | 23 Oct 2026 |
| CVE-2026-96655 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2026 |
| CVE-2026-106931 Exploited |
Not yet scored | EG Secure Solutions SiteGuard Server Edition Operating systems & software |
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 20 Oct 2026 |
| CVE-2026-96656 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server External Control of File Name or Path Vulnerability | 20 Oct 2026 |
| CVE-2026-96652 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2026 |
| CVE-2026-102764 Exploited |
Not yet scored | BeyondTrust Remote Support Operating systems & software |
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 16 Oct 2026 |
| CVE-2026-96951 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Command Injection Vulnerability | 13 Oct 2026 |
| CVE-2023-22894 Exploited |
Not yet scored | Strapi Strapi Operating systems & software |
Strapi Cleartext Storage of Sensitive Information Vulnerability | 8 Oct 2026 |
| CVE-2015-5477 Exploited |
Not yet scored | ISC BIND Operating systems & software |
ISC BIND Data Processing Errors Vulnerability | 8 Oct 2026 |
| CVE-2016-3081 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Command Injection Vulnerability | 8 Oct 2026 |
| CVE-2015-3306 Exploited |
Not yet scored | ProFTPD ProFTPD Operating systems & software |
ProFTPD Improper Access Control Vulnerability | 8 Oct 2026 |
| CVE-2021-3199 Exploited |
Not yet scored | ONLYOFFICE Docs Operating systems & software |
ONLYOFFICE Docs Server Path Traversal Vulnerability | 8 Oct 2026 |
| CVE-2026-102490 Exploited |
Not yet scored | Zammad GmbH Zammad Operating systems & software |
Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.