Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-79861 — Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79860 — Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79859 — Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79858 — Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79857 — Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79856 — Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79855 — Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79854 — Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79853 — Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
9.8 CRITICAL
CVE-2026-79852 — Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management In…

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79851 — Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79850 — Authentication Bypass Leading to Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79849 — Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79848 — Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79847 — Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79846 — Unauthenticated Command Injection Vulnerabilities in AOS-8

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
10.0 CRITICAL
CVE-2026-79844 — Authentication Bypass Leading to Remote Code Execution in AOS-10

No description provided

Remote
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
2.1 LOW
CVE-2026-115519 — Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cr…

business_hub | Remote | Authentication
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
6.4 MEDIUM
CVE-2026-115517 — Unrestricted network access between execution contexts in KNIME Business Hub

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution…

business_hub | Remote | Server-Side Request Forgery
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
8.4 HIGH
CVE-2026-115414 — OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary comma…

aws-sam-cli | Injection
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Showing 20 of 16724 Results