Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-95863 | High CVSS 7.6 |
- Cloud & SaaS |
Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScript that… | 1 Nov 2026 |
| CVE-2026-84231 | High CVSS 7.4 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-84170 | High CVSS 8.3 |
- Cloud & SaaS |
Allocation of resources without limits or throttling in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-83594 | High CVSS 8.3 |
- Applications & supply chain |
Memory allocation with an excessive size value in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-83559 | High CVSS 7.4 |
- Operating systems & software |
Improper encoding or escaping of output in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-83539 | High CVSS 7.4 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-82956 | High CVSS 7.6 |
- Operating systems & software |
Improper neutralization of input during web page generation in Apache Wicket.… | 1 Nov 2026 |
| CVE-2026-111089 | High CVSS 7.6 |
- Cloud & SaaS |
Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes… | 1 Nov 2026 |
| CVE-2026-82840 | High CVSS 7.2 |
- Cloud & SaaS |
Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the… | 1 Nov 2026 |
| CVE-2026-120241 | High CVSS 7.7 |
- Hardware & firmware |
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-120240 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the… | 1 Nov 2026 |
| CVE-2026-120239 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of… | 1 Nov 2026 |
| CVE-2026-120238 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file… | 1 Nov 2026 |
| CVE-2026-66570 | High CVSS 7.1 |
- Applications & supply chain |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss… | 1 Nov 2026 |
| CVE-2026-120232 | High CVSS 8.5 |
- Applications & supply chain |
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the… | 1 Nov 2026 |
| CVE-2026-120231 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of… | 1 Nov 2026 |
| CVE-2026-120230 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web… | 1 Nov 2026 |
| CVE-2026-120229 | High CVSS 8.5 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the… | 1 Nov 2026 |
| CVE-2026-120228 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the… | 1 Nov 2026 |
| CVE-2026-120227 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file… | 1 Nov 2026 |
| CVE-2026-120225 | High CVSS 8.5 |
- Operating systems & software |
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function… | 1 Nov 2026 |
| CVE-2026-120224 | High CVSS 8.6 |
- Applications & supply chain |
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function… | 1 Nov 2026 |
| CVE-2026-120197 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120196 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120135 | High CVSS 8.2 |
- Applications & supply chain |
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0.… | 31 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.