Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

2,031 alerts · page 16 of 102

  1. Critical (CVSS 9+) Published

    CVE-2026-73099 Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: org.apache.juneau/juneau-rest-server.

    Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method, including GET. A cross-site link can therefore deliver an attacker-chosen req...

  2. Critical (CVSS 9+) Published

    CVE-2026-73098 Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: org.apache.juneau/juneau-marshall

    Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache Juneau parses a value into a property of type java.lang.Class (including parameterized forms), the default class swap loaded the named class with initialization enabled, so input naming a clas...

  3. Critical (CVSS 9+) Published

    CVE-2026-100109 Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new account's role, allowing unauthenticated attackers to create admi...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-123025 An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gclou...

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: OPNsense os-acme-client

    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and...

  5. Critical (CVSS 9+) Published · updated

    CVE-2026-100144 IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, allowing unauthenticated attackers to read arbitrary data from...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-19256 All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own brute-force protection...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-48174 In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

    CriticalCVSS 9.8 EPSS 0.17%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1280, Samsung Semiconductor Exynos 2200, Samsung Semiconductor Exynos 1330 and 6 more

    In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-48183 Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

    CriticalCVSS 9.1 EPSS 0.13%

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400, Samsung Semiconductor Exynos 1580 and 3 more

    Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-68991 In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400

    In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-69043 In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 2200, Samsung Semiconductor Exynos 1480, Samsung Semiconductor Exynos 2400 and 4 more

    In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-33971 In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: Samsung Semiconductor Exynos 850, Samsung Semiconductor Exynos 2100, Samsung Semiconductor Exynos 1280 and 12 more

    In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-122311 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: kyverno

    Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. segments to read and wri...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).