Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
2.9 LOW
CVE-2026-40354 — Flatpak xdg-desktop-portal Privilege Escalation Vulnerability

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

| Path Traversal
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
5.3 MEDIUM
CVE-2026-3691 — OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction i…

| Information Disclosure
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.4 HIGH
CVE-2026-3690 — OpenClaw Canvas Authentication Bypass Vulnerability

OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to explo…

| Authentication
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
6.5 MEDIUM
CVE-2026-3689 — OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication…

| Path Traversal
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.3 HIGH
CVE-2026-4158 — KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalati…

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations o…

| Misconfiguration
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.5 HIGH
CVE-2026-4157 — ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability

ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…

| Injection
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.5 HIGH
CVE-2026-4156 — ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vuln…

ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installa…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.5 HIGH
CVE-2026-4155 — ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Discl…

ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected …

| Information Disclosure
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-4154 — GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-4153 — GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User inte…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-4152 — GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User inte…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-4151 — GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-4150 — GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
9.8 CRITICAL
CVE-2026-5059 — aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authent…

| Injection
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
9.8 CRITICAL
CVE-2026-5058 — aws-mcp-server Command Injection Remote Code Execution Vulnerability

aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication …

| Injection
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-5055 — NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attac…

| Misconfiguration
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-5054 — NoMachine External Control of File Path Local Privilege Escalation Vulnerability

NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker …

| Path Traversal
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.1 HIGH
CVE-2026-5053 — NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker …

| Path Traversal
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-5495 — Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Executi…

Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
7.8 HIGH
CVE-2026-5494 — Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Executi…

Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio…

| Memory Corruption
Apr 11, 2026 Apr 11, 2026
Apr 11, 2026
Apr 11, 2026
Showing 20 of 6371 Results