Dashboard

Latest CVEs Security news

Published CVEs

402,129

New today

Actively exploited (KEV)

1,769

Vendors

27,248

Latest vulnerabilities

View all

ID	Severity	Description	EPSS	Published
CVE-2026-124500	5.3Medium	Fengoffice Feng Office Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgery	—	2026-11-09 49 min ago
CVE-2026-124499	5.1Medium	Fengoffice Feng Office Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injection	—	2026-11-09 1 h ago
CVE-2026-124498	5.1Medium	Convene Azeus Convene Board Management Portal Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scripting	—	2026-11-09 1 h ago
CVE-2026-118904	8.1High	IBM webMethods Integration Server IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.	—	2026-11-08 4 h ago
CVE-2026-96146	7.5High	IBM SevOne Network Performance Management Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management	—	2026-11-08 4 h ago
CVE-2026-95867	6.7Medium	IBM SevOne Network Performance Management Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management	—	2026-11-08 4 h ago
CVE-2026-17427	6.5Medium	IBM OPENBMCIBM Power Hardware Management Console This Power System update is being released to address	—	2026-11-08 5 h ago
CVE-2026-17426	6.5Medium	IBM OPENBMC This Power System update is being released to address	—	2026-11-08 5 h ago
CVE-2026-16697	6.5Medium	IBM OPENBMCIBM Power Hardware Management Console This Power System update is being released to address	—	2026-11-08 5 h ago
CVE-2026-16682	6.5Medium	IBM Hardware Management ConsoleIBM OPENBMC This Power System update is being released to address	—	2026-11-08 5 h ago

Severity mix — last 30 days

16,923 CVE

Critical 1,559

High 6,774

Medium 6,922

Low 710

Not scored 954

Most severe this week

CVE-2026-123551 OpenIdentityPlatform OpenAM OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification… 10.0Critical
CVE-2026-123966 Tenda AC19 Tenda AC19 saveParentControlInfo heap-based overflow 10.0Critical
CVE-2026-109469 Microsoft Entra Device Registration Entra Device Registration Elevation of Privilege Vulnerability 10.0Critical
CVE-2026-71495 open-wanderer wanderer Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated … 10.0Critical
CVE-2026-118423 WP Libre Form WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload 10.0Critical
CVE-2026-121489 Apache Software Foundation Apache Juneau Apache Juneau: Path traversal in DirectoryResource allows reading fil… 10.0Critical

New in the KEV catalog

All