Security alerts

2,031 alerts · page 6 of 102

1. Critical (CVSS 9+) Published 2026-11-10 02:17

   CVE-2026-76965 OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform

   Critical·CVSS 9.9

   Exploit status: No public exploit known

   Affects: SAP_SE SAP NetWeaver and ABAP Platform

   SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. S...

2. Critical (CVSS 9+) Published 2026-11-10 02:17

   CVE-2026-76964 Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager)

   Critical·CVSS 10.0

   Exploit status: No public exploit known

   Affects: SAP_SE SAP NetWeaver AS ABAP (Internet Communication Manager)

   SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successf...

3. Critical (CVSS 9+) Published 2026-11-10 01:27

   CVE-2026-125383 INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass

   Critical·CVSS 9.3

   Exploit status: No public exploit known

   Affects: go2ismail Asp.Net-Core-Inventory-Order-Management-System

   INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID a...

4. Critical (CVSS 9+) Published 2026-11-10 01:27 · updated 2026-11-10 18:31

   CVE-2026-125384 INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder

   Critical·CVSS 9.3

   Exploit status: No public exploit known

   Affects: go2ismail Asp.Net-Core-Inventory-Order-Management-System

   INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates admin@root.com with password 123456. Attackers can log in with these credentials, which carry every a...

5. Critical (CVSS 9+) Published 2026-11-10 01:27

   CVE-2026-125370 Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secret

   Critical·CVSS 9.3

   Exploit status: No public exploit known

   Affects: kubero-dev kubero

   Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset. Attackers can sign tokens with arbitrary role, userGroups an...

6. Critical (CVSS 9+) Published 2026-11-10 00:57

   CVE-2026-115934 SQL injection leading to privilege escalation

   Critical·CVSS 9.3

   Exploit status: No public exploit known

   Affects: craftcms cms

   An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search, allowing stacked query execution and enabling escalation to an administrator. Note that this only affects MySQL/MariaDB. Impact * SQL injection — The attribute para...

7. Critical (CVSS 9+) Published 2026-11-10 00:36

   CVE-2026-125120 Mongoose: sanitizeFilter not applied on countDocuments

   Critical·CVSS 9.8

   Exploit status: No public exploit known

   Affects: automattic mongoose

   Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments() does not apply the configured sanitizeFilter query selector injection defense. An application that enables sanitizeFi...

8. Critical (CVSS 9+) Published 2026-11-09 23:13

   CVE-2026-123815 pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

   Critical·CVSS 9.4

   Exploit status: No public exploit known

   Affects: pyload, pypi pyload-ng

   pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, UnTar._safe_extractall in src/pyload/plugins/extractors/UnTar.py validates archive member paths and link targets but does not call TarInfo.isdev to reject special tar member types before...

9. Critical (CVSS 9+) Published 2026-11-09 22:39 · updated 2026-11-10 18:10

   CVE-2026-123807 Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution

   Critical·CVSS 9.8

   Exploit status: No public exploit known

   Affects: signalk-server, SignalK resources-provider

   Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resour...

10. Critical (CVSS 9+) Published 2026-11-09 20:45

    CVE-2026-124001 ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR

    Critical·CVSS 9.2

    Exploit status: No public exploit known

    Affects: nasa-jpl/ion-dtn

    NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR) convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size cal...

11. Critical (CVSS 9+) Published 2026-11-09 20:16

    CVE-2026-123800 SuperTokens Core: App-scoped API key can overwrite the parent connection URI domain's credentials and take over sibling applications

    Critical·CVSS 9.9

    Exploit status: No public exploit known

    Affects: supertokens-core

    SuperTokens Core is an open source authentication server. From 6.0.0 until 6.0.24, 7.0.23, 8.0.7, 9.0.6, 9.1.6, 9.2.7, 9.3.5, 10.0.8, 10.1.9, 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, Multitenancy.checkPermissionsForCreateOrUpdate in src/main/ja...

12. Critical (CVSS 9+) Published 2026-11-09 19:41

    CVE-2026-123270 CVE-2026-123270

    Critical·CVSS 9.8

    Exploit status: No public exploit known

    Affects: Redpanda Data Connect

    Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution (RCE). In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authenti...

13. Critical (CVSS 9+) Published 2026-11-09 19:28

    CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP

    Critical·CVSS 9.3

    Exploit status: No public exploit known

    Affects: arendst/tasmota

    Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 tha...

14. Critical (CVSS 9+) Published 2026-11-09 19:01

    CVE-2026-104989 Pre-authentication remote code execution in Chaos V-Ray Swarm

    Critical·CVSS 9.3 EPSS 0.60%

    Exploit status: No public exploit known

    Affects: Chaos Software V-Ray Swarm

    Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries

15. Critical (CVSS 9+) Published 2026-11-09 14:47

    CVE-2026-110469 Remote Code Execution via Unrestricted File Upload in WidzialniCMS

    Critical·CVSS 10.0

    Exploit status: No public exploit known

    Affects: Fundacja Widzialni WidzialniCMS

    WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the...

16. Critical (CVSS 9+) Published 2026-11-09 14:46

    CVE-2026-110468 Remote Code Execution via Unrestricted File Upload in WidzialniCMS

    Critical·CVSS 10.0

    Exploit status: No public exploit known

    Affects: Fundacja Widzialni WidzialniCMS

    WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload arbitrary files to any...

17. Critical (CVSS 9+) Published 2026-11-09 14:22

    CVE-2026-124079 rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning

    Critical·CVSS 9.3

    Exploit status: No public exploit known

    Affects: rconfig/rconfig, rConfig Pro

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Redis-backed Laravel Horizon queue, which r...

18. Critical (CVSS 9+) Published 2026-11-09 13:51

    CVE-2026-118462 AIS update mechanism executes unverified code

    Critical·CVSS 9.2

    Exploit status: No public exploit known

    Affects: CompuGroup Medical Infantia, CompuGroup Medical Profim, CompuGroup Medical Venere and 1 more

    Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.

19. Critical (CVSS 9+) Published 2026-11-09 12:24

    CVE-2026-115252 Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

    Critical·CVSS 10.0

    Exploit status: No public exploit known

    The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary...

20. Critical (CVSS 9+) Published 2026-11-09 11:00

    CVE-2026-124585 Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injection

    Critical·CVSS 9.4

    Exploit status: No public exploit known

    Affects: chengdu feiyuxing technology vw2100, chengdu feiyuxing technology vec10gp

    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This issue affects the function add_expmac of the file var/html/webserver of the component Web Administration Interface. The manipulation of the argument mac results in os co...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).