Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-1927 — GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authent…

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the greenshift_app_pass_validation() function…

greenshift_-_animation_and_page_builder_blocks | Remote | Authorization
Feb 05, 2026 Mar 03, 2026
Feb 05, 2026
Mar 03, 2026
8.7 HIGH
CVE-2026-1523 — Path Traversal in Digitek from Grupo Azkoyen

Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vulnerability allows an attacker to access arbitrary files in the server's file sys…

Remote | Path Traversal
Feb 05, 2026 Feb 05, 2026
Feb 05, 2026
Feb 05, 2026
6.5 MEDIUM
CVE-2025-14150 — IBM webMethods Integration Sever is affected by

IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose sensitive user information in server res…

webmethods_integration_on_prem___integration_server | Remote | Information Disclosure
Feb 05, 2026 Feb 05, 2026
Feb 05, 2026
Feb 05, 2026
5.1 MEDIUM
CVE-2025-13491 — IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mappin…

IBM App Connect Enterprise Certified Container up to 12.19.0 (Continuous Delivery) and 12.0 LTS (Long Term Support) could allow an attacker to access sensitive files or modify configurations due to a…

app_connect_operator app_connect_enterprisecertified_containers_operands | Path Traversal
Feb 05, 2026 Feb 05, 2026
Feb 05, 2026
Feb 05, 2026
8.6 HIGH
CVE-2025-13379 — A SQL Injection vulnerability has been addressed in IBM Aspera Console

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete in…

aspera_console | Remote | Injection
Feb 05, 2026 Feb 12, 2026
Feb 05, 2026
Feb 12, 2026
Showing 20 of 5125 Results