Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-108385 — dataclasses-avroschema enum symbols can inject statements through generated member names

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerato…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108384 — dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bar…

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerato…

Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108383 — dataclasses-avroschema enum field defaults can inject statements into generated modules

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldReprese…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.0 CRITICAL
CVE-2026-92892 — Potential command execution on the host running JFrog CLI.

Potential arbitrary code execution, under specific configurations.

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108382 — dataclasses-avroschema allows code injection through generated enum-symbol string literals

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresen…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108381 — dataclasses-avroschema pydantic-class metadata allows code injection in generated annotat…

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108380 — dataclasses-avroschema field documentation allows code injection in generated Pydantic de…

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFiel…

Remote | Supply Chain
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-108379 — dataclasses-avroschema fixed namespaces allow code injection in generated annotations

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerato…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
2.1 LOW
CVE-2026-106175 — Fortinet FortiOS, FortiProxy, and FortiSwitch Double Free Vulnerability

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all ver…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.9 MEDIUM
CVE-2026-106172 — Fortinet FortiSandbox Hard-Coded Cryptographic Key Vulnerability

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-23707 — Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.9 MEDIUM
CVE-2026-23706 — Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-23705 — Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.9 HIGH
CVE-2025-46773 — Fortinet FortiAnalyzer SQL Injection Vulnerability

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.7 HIGH
CVE-2025-57739 — Fortinet FortiMail SQL Injection Vulnerability

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, …

fortimail | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.8 MEDIUM
CVE-2026-106170 — Fortinet FortiSandbox Uncaught Exception Denial of Service Vulnerability

An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attac…

fortisandbox fortisandbox | Remote | Denial of Service
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.4 CRITICAL
CVE-2026-106173 — Fortinet FortiSIEM Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cr…

fortisiem | Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
3.4 LOW
CVE-2026-106176 — Fortinet FortiSIEM Improper Authorization Vulnerability

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

fortisiem | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-106171 — Fortinet FortiManager OS Command Injection Vulnerability

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 t…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.4 CRITICAL
CVE-2026-105445 — Docker Hub account conversion could reassign an active personal access token to another u…

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled …

Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 14690 Results