Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.3 HIGH
CVE-2026-24181 — NVIDIA DALI Improper Index Validation Vulnerability

NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering…

| Memory Corruption
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
7.3 HIGH
CVE-2026-24180 — NVIDIA DALI Heap-based Buffer Overflow

NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering…

| Memory Corruption
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
7.8 HIGH
CVE-2026-22926 — Omnissa Workspace ONE Assist for macOS Local Privilege Escalation

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.

| Authorization
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
4.6 MEDIUM
CVE-2026-0420 — Missing TLS certificate validation in ReadyCloud client app

An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting prod…

rax40 rax35 rax38 rax120v1 rax120v2 | Remote | Misconfiguration
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.4 MEDIUM
CVE-2026-0419 — Insufficient input validation vulnerability in NETGEAR JR6150

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands.…

jr6150 | Injection
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0418 — Certain NETGEAR devices allow administrators to tamper with system

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0417 — Insufficient input validation in certain NETGEAR routers

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0416 — RAXE450 and RAXE500 routers allow administrators to modify router functionality beyond in…

Authenticated administrators connected to the local network can modify router functionality beyond what is intended through the standard management interface.

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0415 — Insufficient input validation vulnerability in certain Orbi routers

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu…

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0414 — Arbitrary Code Execution vulnerability exists in RBE970

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu…

rbe970_firmware rbe970 | Authentication
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0413 — Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router soft…

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.3 MEDIUM
CVE-2026-0412 — Insufficient input validation vulnerability in NETGEAR JR6150 Web UI

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized…

jr6150 | Misconfiguration
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.2 MEDIUM
CVE-2026-0411 — A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affe…

rbr350 rbs350 rbr760 rbe970_firmware rbe970 | Information Disclosure
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
1.9 LOW
CVE-2026-0410 — Insufficient input validation in certain NETGEAR routers

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
4.8 MEDIUM
CVE-2026-0409 — Netgear Orbi 370 Series Remote Code Execution vulnerability

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrato…

Remote | Authentication
Jun 09, 2026 Jun 10, 2026
Jun 09, 2026
Jun 10, 2026
7.1 HIGH
CVE-2026-8045 — Schneider Electric Data Center Expert XXE Information Disclosure

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user…

Remote | XML External Entity
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
9.8 CRITICAL
CVE-2026-8025 — SQLi in MOSK Informatics' CBS Platform

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection. This issue affects CBS Pla…

Remote | Injection
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
8.6 HIGH
CVE-2026-49948 — Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider…

Remote | Authorization
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
6.5 MEDIUM
CVE-2026-49938 — Fortinet FortiPortal Improper Access Control

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <i…

fortiportal | Remote | Authorization
Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
9.8 CRITICAL
CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox…

Jun 09, 2026 Jun 09, 2026
Jun 09, 2026
Jun 09, 2026
Showing 20 of 7429 Results