Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

2,031 alerts · page 7 of 102

  1. Critical (CVSS 9+) Published

    CVE-2026-123870 [Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when GITHUB_WEBHOOK_SECRET is unset

    CriticalCVSS 9.5

    Exploit status: No public exploit known

    Affects: pypi otterdog

    The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (the code default is None), the HMAC signature check is skipped entirely, allowing an unauthe...

  2. Critical (CVSS 9+) Published

    CVE-2026-124580 Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injection

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: chengdu feiyuxing technology vw2100, chengdu feiyuxing technology vec10gp

    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os co...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-124577 Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: intelbras sg 2404 poe l2

    A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched rem...

  5. Critical (CVSS 9+) Published

    CVE-2026-115213 EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authentication Bypass

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API WordPress plugin through 2.0 does not prevent the administrator credentials it stores from being disclosed to unauthenticated users and does not correctly verify authentication, allowing unauthenticated attackers to obtai...

  6. Critical (CVSS 9+) Published · updated

    CVE-2026-115237 Grand Job <= 1.2.1 - Unauthenticated Account Takeover via Empty Password Reset Code

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: wordpress grand-job

    The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's password, allowing unauthenticated attackers to set the password of arbitrary accounts, including administrators, and fully take over the site.

  7. Critical (CVSS 9+) Published · updated

    CVE-2026-113364 Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to exe...

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: nec WebSAM WinShare

    Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed...

  8. Critical (CVSS 9+) Published · updated

    CVE-2026-113363 Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthent...

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: nec WebSAM WinShare

    Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a craft...

  9. Critical (CVSS 9+) Published

    CVE-2026-124560 D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: d-link dir-878

    A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be initiated remotely. The...

  11. Critical (CVSS 9+) Published · updated

    CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: ibm concert

    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating...

  13. Critical (CVSS 9+) Published · updated

    CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: ibm concert

    IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.

  15. Critical (CVSS 9+) Published

    CVE-2026-107331 DataStage on Cloud Pak for Data has several vulnerabilities

    CriticalCVSS 9.9

    Exploit status: No public exploit known

    Affects: ibm datastage on cloud pak for data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

  18. Critical (CVSS 9+) Published

    CVE-2026-124493 SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: JiHong88 suneditor

    SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using d...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-124494 SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: npm suneditor

    SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeURL() function decodes named entities like : to an empty string. Attackers can inject href values such as javascript: that pass the _isSafeURL() check but ar...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-124490 OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: openemr

    OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the file_path parameter. Attackers can use action=download to read cr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).