Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-83525 — Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticate…

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTIO…

kafka | Denial of Service
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
6.5 MEDIUM
CVE-2026-82962 — Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarde…

ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of allocating a separate …

zephyr zephyr | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-82961 — Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from us…

The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_config() and z_vrfy_gpio_p…

zephyr zephyr | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
8.8 HIGH
CVE-2026-118619 — Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. Us…

| Path Traversal
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118618 — Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interac…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118617 — Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Executi…

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118616 — Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interac…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118615 — Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User …

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118614 — Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User i…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118613 — Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerabil…

Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultraly…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
6.8 MEDIUM
CVE-2026-118611 — Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Exe…

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affe…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
8.8 HIGH
CVE-2026-118610 — Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vu…

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected instal…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
6.8 MEDIUM
CVE-2026-118609 — Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code E…

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on af…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
3.5 LOW
CVE-2026-118608 — Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Informatio…

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive informa…

| Information Disclosure
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
6.8 MEDIUM
CVE-2026-118607 — Alpine iLX-F511 diagapp Command Injection Vulnerability

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authent…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
8.8 HIGH
CVE-2026-118606 — Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulner…

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installati…

| Injection
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
8.0 HIGH
CVE-2026-118605 — Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Exe…

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affect…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
6.8 MEDIUM
CVE-2026-118604 — Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulne…

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected install…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
8.0 HIGH
CVE-2026-118603 — Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabi…

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F5…

| Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
7.8 HIGH
CVE-2026-118602 — Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerabil…

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-…

| Authorization
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
Showing 20 of 17024 Results