Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.5 HIGH
CVE-2026-113345 — Electronic delivery item Inspection Support System Improper File Access Control Vulnerabi…

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the …

| Path Traversal
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
0.0 NA
CVE-2026-116118 — Z.ai Zcode Sed Command Filter os command injection

A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command inject…

| Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
8.4 HIGH
CVE-2026-116116 — Yoosee GM8135S Camera Secure Boot signature verification

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptogr…

gm8135s_camera | Cryptography
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
3.1 LOW
CVE-2026-116115 — Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulati…

gm8135s_camera | Misconfiguration
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
3.7 LOW
CVE-2026-116114 — Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission

A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation caus…

gm8135s_camera | Remote | Information Disclosure
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
6.5 MEDIUM
CVE-2026-116113 — GouGuOA Api.php chunkUpload unrestricted upload

A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument file_extension r…

gouguoa | Remote | Misconfiguration
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
0.0 NA
CVE-2026-116117 — halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal

A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the file application/…

halo | Path Traversal
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116112 — HashenUdara edoc-doctor-appointment-system add-new.php sql injection

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php.…

edoc-doctor-appointment-system | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116111 — 2K Games Civilization V Lua Sandbox loadstring type confusion

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack …

civilization_v | Remote | Memory Corruption
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116110 — GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication

A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a …

livewallpaper | Remote | Authentication
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116109 — continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnect…

A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP …

continue continue | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
5.0 MEDIUM
CVE-2026-116108 — openbq-org OpenBB Local API Server api_settings.py access control

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/model/api_settings.py of the component Local API Server. Th…

openbb | Remote | Authorization
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
5.5 MEDIUM
CVE-2026-116107 — Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search autho…

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the co…

product_sets_plugin | Remote | Authorization
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116106 — HeyCyan App FileProvider access control

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to impro…

heycyan_app | Remote | Authorization
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
6.3 MEDIUM
CVE-2026-116105 — HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipula…

heycyan_app | Remote | Misconfiguration
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116104 — Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate cod…

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of…

neural_network_libraries | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116103 — Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code …

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the compone…

neural_network_libraries | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116102 — QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument pr…

docker-mcp | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
6.5 MEDIUM
CVE-2026-116101 — itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in s…

online_cake_ordering_system | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
3.3 LOW
CVE-2026-116100 — gougucms User Level Level.php add cross site scripting

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument…

gougucms | Remote | Cross-Site Scripting
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
Showing 20 of 15657 Results