Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-29962 — HSC MailInspector PHP Remote File Disclosure Vulnerability

HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controll…

mailinspector | Remote | Path Traversal
May 18, 2026 May 19, 2026
May 18, 2026
May 19, 2026
9.1 CRITICAL
CVE-2023-24215 — NOVUS AirGate 4G Unauthenticated Administrator Credential Disclosure

Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a crafted POST request.

Remote | Authorization
May 18, 2026 May 19, 2026
May 18, 2026
May 19, 2026
Showing 20 of 7602 Results