Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120198 | Critical CVSS 9.3 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the… | 1 Nov 2026 |
| CVE-2026-120195 | Critical CVSS 9.3 |
- Operating systems & software |
A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the… | 1 Nov 2026 |
| CVE-2026-120189 | Critical CVSS 9.3 |
- Operating systems & software |
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of… | 1 Nov 2026 |
| CVE-2026-118636 | Critical CVSS 9.8 |
- Operating systems & software |
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls… | 31 Oct 2026 |
| CVE-2026-120209 | Critical CVSS 9.3 |
- Operating systems & software |
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid… | 31 Oct 2026 |
| CVE-2026-120201 | Critical CVSS 9.3 |
- Operating systems & software |
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to… | 31 Oct 2026 |
| CVE-2026-117656 | Critical CVSS 9.3 |
- Operating systems & software |
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth… | 31 Oct 2026 |
| CVE-2026-78403 | Critical CVSS 9.3 |
- Operating systems & software |
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows… | 30 Oct 2026 |
| CVE-2026-116241 | Critical CVSS 9.4 |
- Operating systems & software |
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.