Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-61850 | Critical CVSS 9.3 |
- Identity & access |
Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two… | 30 Oct 2026 |
| CVE-2026-61620 | Critical CVSS 9.8 |
- Applications & supply chain |
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other… | 30 Oct 2026 |
| CVE-2026-55598 | Critical CVSS 9.1 |
- Identity & access |
PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user… | 30 Oct 2026 |
| CVE-2026-116241 | Critical CVSS 9.4 |
- Operating systems & software |
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the… | 30 Oct 2026 |
| CVE-2026-116238 | Critical CVSS 9.2 |
- Identity & access |
In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit… | 30 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.