Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-90618 — GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command in…

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file runtime/runtime.py of the comp…

pentestagent | Remote | Injection
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
7.5 HIGH
CVE-2026-90617 — GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interface/main.py of the component …

pentestagent | Remote | Injection
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
2.9 LOW
CVE-2026-38924 — Oraios AI Serena Improper Network Configuration Vulnerability

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation…

| Misconfiguration
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
3.5 LOW
CVE-2026-33970 — Samsung Exynos Baseband NULL Pointer Dereference

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, an…

exynos_850_firmware exynos_850_firmware | Remote | Denial of Service
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33968 — Samsung Exynos Camera Driver Time-of-Check Time-of-Use Out-of-Bounds Access Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition lead…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33967 — Samsung Exynos Camera Driver Out-of-Bounds Memory Corruption

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33966 — Samsung Exynos Camera Driver Information Disclosure

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive …

exynos_1330_firmware exynos_1330_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
5.0 MEDIUM
CVE-2026-90615 — SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject l…

class_and_exam_timetabling_system | Remote | Cross-Site Scripting
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.5 MEDIUM
CVE-2026-90614 — FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deser…

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the …

fedml | Remote | Injection
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90613 — GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4Box. The manipulati…

Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
3.3 LOW
CVE-2026-90612 — GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component MP4Box. The manipulation leads to reach…

gpac | Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90611 — GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executing a manipulation can lead to…

gpac | Denial of Service
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
3.3 LOW
CVE-2026-90610 — GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results i…

gpac | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.4 MEDIUM
CVE-2026-33964 — Samsung Exynos Camera Driver Untrusted Pointer Dereference Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited info…

exynos_1580_firmware exynos_1580_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
7.5 HIGH
CVE-2026-33963 — Samsung Exynos Mobile Processor Camera Stack-Based Buffer Overflow

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the c…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33962 — Samsung Exynos Wi-Fi Out-of-Bounds Read Vulnerability

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leadi…

exynos_850_firmware exynos_850_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33960 — Samsung Exynos Processor Wi-Fi Interface Out-of-Bounds Write Vulnerability

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can le…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-33957 — Samsung Exynos CustOS Driver Out-of-Bounds Memory Access

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leadi…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33956 — Samsung Exynos Camera Out-of-Bounds Write Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, lea…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
7.7 HIGH
CVE-2026-31278 — Suprema BioStar Active Directory Credential Disclosure Vulnerability

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in c…

biostar_2 | Remote | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
Showing 20 of 16399 Results