Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120241 | High CVSS 7.7 |
- Hardware & firmware |
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-120240 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the… | 1 Nov 2026 |
| CVE-2026-120239 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of… | 1 Nov 2026 |
| CVE-2026-120238 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file… | 1 Nov 2026 |
| CVE-2026-66570 | High CVSS 7.1 |
- Applications & supply chain |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss… | 1 Nov 2026 |
| CVE-2026-120232 | High CVSS 8.5 |
- Applications & supply chain |
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the… | 1 Nov 2026 |
| CVE-2026-120231 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of… | 1 Nov 2026 |
| CVE-2026-120230 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web… | 1 Nov 2026 |
| CVE-2026-120229 | High CVSS 8.5 |
- Operating systems & software |
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the… | 1 Nov 2026 |
| CVE-2026-120228 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the… | 1 Nov 2026 |
| CVE-2026-120227 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file… | 1 Nov 2026 |
| CVE-2026-120225 | High CVSS 8.5 |
- Operating systems & software |
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function… | 1 Nov 2026 |
| CVE-2026-120224 | High CVSS 8.6 |
- Applications & supply chain |
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function… | 1 Nov 2026 |
| CVE-2026-120197 | High CVSS 8.6 |
- Operating systems & software |
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120196 | High CVSS 8.6 |
- Operating systems & software |
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file… | 1 Nov 2026 |
| CVE-2026-120135 | High CVSS 8.2 |
- Applications & supply chain |
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0.… | 31 Oct 2026 |
| CVE-2026-118147 | High CVSS 7.4 |
- Operating systems & software |
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | 31 Oct 2026 |
| CVE-2026-120208 | High CVSS 7.7 |
- Operating systems & software |
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in… | 31 Oct 2026 |
| CVE-2026-120207 | High CVSS 7.0 |
- Operating systems & software |
Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to… | 31 Oct 2026 |
| CVE-2026-120205 | High CVSS 7.4 |
- Operating systems & software |
Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows… | 31 Oct 2026 |
| CVE-2026-120203 | High CVSS 8.7 |
- Cloud & SaaS |
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated… | 31 Oct 2026 |
| CVE-2026-120202 | High CVSS 7.1 |
- Operating systems & software |
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide… | 31 Oct 2026 |
| CVE-2026-102212 | High CVSS 8.4 |
- Hardware & firmware |
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console… | 31 Oct 2026 |
| CVE-2026-76010 | High CVSS 8.8 |
- Applications & supply chain |
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code… | 31 Oct 2026 |
| CVE-2026-120194 | High CVSS 7.5 |
- Operating systems & software |
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when… | 31 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.