Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-104189 — 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public li…

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint perfor…

| Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.8 HIGH
CVE-2026-111585 — Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based …

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to …

Remote | Denial of Service
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.3 HIGH
CVE-2026-111584 — Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execut…

| Race Condition
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
0.0 NA
CVE-2026-78845 — Aidot Smart Home Devices Remote Code Execution Vulnerability

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root descrip…

| Information Disclosure
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.7 HIGH
CVE-2026-117604 — Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback F…

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback …

grav | Remote | Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.5 MEDIUM
CVE-2026-117507 — a2aproject a2a-java TaskManager.saveTaskEvent race condition

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be i…

a2a-java | Remote | Race Condition
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.3 MEDIUM
CVE-2026-117506 — a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore…

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-databa…

a2a-java | Remote | Denial of Service
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.3 MEDIUM
CVE-2026-117505 — a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resour…

a2a-java | Remote | Denial of Service
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.1 MEDIUM
CVE-2026-105987 — Stored XSS in KGS Software tia Viewer

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote an…

Remote | Cross-Site Scripting
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.3 HIGH
CVE-2026-111583 — Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Cl…

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local a…

| Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.3 HIGH
CVE-2026-111582 — Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrar…

| Misconfiguration
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.8 HIGH
CVE-2026-92377 — Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to sup…

| Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.8 HIGH
CVE-2026-92376 — Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management M…

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with l…

| Authentication
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.8 HIGH
CVE-2026-92375 — Local privilege escalation via improper IPC access control in TeamViewer Remote Managemen…

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1…

| Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.8 HIGH
CVE-2026-92374 — Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for…

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a…

| Race Condition
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.8 HIGH
CVE-2026-92372 — Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Exec…

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying c…

Remote | Memory Corruption
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.2 HIGH

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.2 HIGH

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
3.8 LOW

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
6.0 MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Showing 20 of 16531 Results