Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
8.7 HIGH
CVE-2026-121727 — Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()

Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Att…

Remote | Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-121582 — Umami Record API Endpoint route.ts authorization

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument We…

Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-121581 — ArcReel Provider Test-Connection Endpoint test server-side request forgery

A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{id}/test of the component Provider Test-Connection Endpoint.…

Remote | Server-Side Request Forgery
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.4 HIGH
CVE-2026-121565 — Tanium addressed an improper certificate validation vulnerability in multiple products

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private…

tanos tanos performance comply threat_response connect +3 more | Remote | Misconfiguration
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-121539 — miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. P…

Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
3.7 LOW
CVE-2026-121535 — miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The m…

Remote | Authentication
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.5 MEDIUM
CVE-2026-121520 — Malicious client could set xattr value outside of BuildKit state directory

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state dire…

| Misconfiguration
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.2 HIGH
CVE-2026-120775 — Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

deploy | Remote | Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
5.3 MEDIUM
CVE-2026-118237 — Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of proces…

An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation sized the session identi…

enterprise_server | Remote | Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116669 — Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.

discover | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116668 — Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

discover | Remote | Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.2 MEDIUM
CVE-2026-116667 — Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.

discover | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116666 — Tanium addressed an information disclosure vulnerability in Discover.

Tanium addressed an information disclosure vulnerability in Discover.

discover | Remote | Information Disclosure
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116665 — Tanium addressed an information disclosure vulnerability in Discover.

Tanium addressed an information disclosure vulnerability in Discover.

discover | Remote | Information Disclosure
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
3.1 LOW
CVE-2026-116664 — Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.

discover | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116663 — Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Enforce.

enforce | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116661 — Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Enforce.

enforce | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116654 — Tanium addressed an improper input validation vulnerability in Threat Response.

Tanium addressed an improper input validation vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116653 — Tanium addressed an improper input validation vulnerability in Threat Response.

Tanium addressed an improper input validation vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116652 — Tanium addressed a business logic error in Threat Response.

Tanium addressed a business logic error in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
Showing 20 of 17477 Results