Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-7255 — Zyxel WRE6505 Authentication Brute-Force Bypass

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could a…

wre6505_firmware wre6505 | Authentication
May 12, 2026 May 13, 2026
May 12, 2026
May 13, 2026
7.1 HIGH
CVE-2026-45430 — Salesforce Backdrop CMS CSRF Authorization Bypass

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.

Remote | Cross-Site Request Forgery
May 12, 2026 May 13, 2026
May 12, 2026
May 13, 2026
Showing 20 of 7402 Results