Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-19550 8.2 (v3.1) Freeipa: ipa: freeipa: trust-fetch-domains uses trust-… Red Hat
Red Hat Enterprise Linux 10
2026-08-11T20:46:42.019Z 2026-08-20T16:35:40.198Z
cve-2026-14863 8.7 (v4.0) 8.8 (v3.1) FileRun 2026.2.0 RCE via Thumbnail Generation Command … FileRun
FileRun
2026-08-11T20:41:35.927Z 2026-08-14T16:49:38.322Z
cve-2026-48762 TypeBot Vulnerable to Server-Side Request Forgery (SSR… baptisteArno
typebot.io
2026-08-11T20:40:31.980Z 2026-08-13T15:10:11.880Z
cve-2026-48765 TypeBot vulnerable to cross-workspace OAuth credential… baptisteArno
typebot.io
2026-08-11T20:37:48.115Z 2026-08-12T12:53:42.764Z
cve-2026-71290 Apache HttpComponents Client: TLS hostname verificatio… Apache Software Foundation
Apache HttpComponents Client
2026-08-11T20:33:56.947Z 2026-08-13T16:18:22.325Z
cve-2026-63177 Malcolm Vulnerable to Authorization Bypass via URI Nor… cisagov
Malcolm
2026-08-11T20:30:57.901Z 2026-08-12T22:12:55.745Z
cve-2026-63134 Malcolm's Path Traversal in Archive Extraction Allows … cisagov
Malcolm
2026-08-11T20:29:38.642Z 2026-08-13T15:00:33.192Z
cve-2026-15606 Frontend Admin by DynamiApps <= 3.29.9 - Authenticated… shabti
Frontend Admin by DynamiApps
2026-08-11T20:26:10.797Z 2026-08-12T13:00:40.573Z
cve-2026-63133 Malcolm has Uncontrolled Resource Consumption in Archi… cisagov
Malcolm
2026-08-11T20:26:06.123Z 2026-08-12T13:01:32.140Z
cve-2026-19579 5.3 (v4.0) 5.4 (v3.1) Snipe-IT Checkout Request Cancellation IDOR Grokability
Snipe-IT
2026-08-11T20:25:02.420Z 2026-08-11T21:05:08.782Z
cve-2026-55676 Malcolm vulnerable to RCE via unrestricted .php upload… cisagov
Malcolm
2026-08-11T20:24:50.803Z 2026-08-12T22:13:05.815Z
cve-2026-66150 N/A Improper Control of Generation of Code ('Code Inj… SonicWall
Email Security
2026-08-11T20:19:34.050Z 2026-08-12T04:00:40.772Z
cve-2026-66149 N/A Improper Control of Generation of Code ('Code Inj… SonicWall
Email Security
2026-08-11T20:18:25.260Z 2026-08-12T04:00:41.899Z
cve-2026-18634 N/A An insecure handling of serialized objects vulner… SonicWall
GMS
2026-08-11T20:14:19.016Z 2026-08-12T17:28:11.678Z
cve-2026-29035 8.3 (v4.0) 6.5 (v3.1) CivetWeb Heap/Stack Buffer Overflow via WebSocket perm… civetweb
civetweb
2026-08-11T20:14:00.402Z 2026-08-14T16:49:40.759Z
cve-2026-66154 N/A An insufficient certificate validation in a privi… SonicWall
GMS
2026-08-11T20:12:25.413Z 2026-08-12T14:47:58.659Z
cve-2026-66148 N/A An authenticated command injection vulnerability … SonicWall
GMS
2026-08-11T20:10:39.663Z 2026-08-11T21:11:09.052Z
cve-2026-66147 N/A An unauthenticated command injection vulnerabilit… SonicWall
GMS
2026-08-11T20:08:56.193Z 2026-08-12T14:46:43.933Z
cve-2026-73244 kkFileView: Unauthenticated path traversal in POST /li… kekingcn
kkFileView
2026-08-11T20:08:25.054Z 2026-08-13T13:55:43.147Z
cve-2026-66146 N/A Multiple Cross-Site Scripting (XSS) vulnerabiliti… SonicWall
GMS
2026-08-11T20:07:05.184Z 2026-08-11T20:13:29.530Z
cve-2026-66145 N/A An unauthenticated remote code execution vulnerab… SonicWall
GMS
2026-08-11T20:05:18.939Z 2026-08-12T14:46:28.752Z
cve-2026-73243 kkFileView: Unauthenticated SSRF via /addTask with ful… kekingcn
kkFileView
2026-08-11T20:04:38.710Z 2026-08-11T20:14:46.519Z
cve-2026-18844 7.2 (v4.0) 8.1 (v3.1) Pulsetto Vagus Nerve Stimulator Hidden Functionality Pulsetto
Vagus Nerve Stimulator
2026-08-11T20:03:24.225Z 2026-08-11T20:13:58.827Z
cve-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbound… FreeRDP
FreeRDP
2026-08-11T19:49:46.974Z 2026-08-12T12:57:18.410Z
cve-2026-73241 FreeRDP: RDSTLS server authentication bypass: a creden… FreeRDP
FreeRDP
2026-08-11T19:47:27.859Z 2026-08-13T14:51:02.290Z
cve-2026-73235 FreeCAD: XXE file read and SSRF via external entity in… FreeCAD
FreeCAD
2026-08-11T19:43:49.042Z 2026-08-12T22:13:11.399Z
cve-2026-73234 FreeCAD: FCStd path traversal allows arbitrary file wr… FreeCAD
FreeCAD
2026-08-11T19:41:13.453Z 2026-08-13T14:43:03.531Z
cve-2026-73233 FreeCAD: FEM formula incomplete escape FreeCAD
FreeCAD
2026-08-11T19:39:18.878Z 2026-08-11T20:09:44.616Z
cve-2026-13457 InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptogra… instawp
InstaWP Connect – 1-click WP Staging & Migration
2026-08-11T19:37:28.661Z 2026-08-12T12:57:54.689Z
cve-2026-19091 GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) … paoltaia
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
2026-08-11T19:37:28.304Z 2026-08-13T14:47:54.942Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description