Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-79856 — Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79855 — Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79854 — Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79853 — Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79852 — Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management In…

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79851 — Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79850 — Authentication Bypass Leading to Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79849 — Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79848 — Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79847 — Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79846 — Unauthenticated Command Injection Vulnerabilities in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79844 — Authentication Bypass Leading to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
2.1 LOW
CVE-2026-115519 — Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cr…

business_hub | Remote | Authentication
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.4 MEDIUM
CVE-2026-115517 — Unrestricted network access between execution contexts in KNIME Business Hub

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution…

business_hub | Remote | Server-Side Request Forgery
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
8.4 HIGH
CVE-2026-115414 — OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary comma…

aws-sam-cli | Injection
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.8 MEDIUM
CVE-2026-115397 — Ghidra before 12.2 Denial of Service via Extension Archive Install

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attac…

ghidra | Denial of Service
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.8 MEDIUM
CVE-2026-115396 — Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers ca…

ghidra | Denial of Service
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.8 MEDIUM
CVE-2026-115395 — Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can pers…

ghidra | Denial of Service
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.8 MEDIUM
CVE-2026-115394 — Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can per…

ghidra | Memory Corruption
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
3.8 LOW
CVE-2026-115393 — Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 4…

Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate that objects belong …

wasmtime | Memory Corruption
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Showing 20 of 16738 Results