Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
7.8 HIGH
CVE-2026-4153 — GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User inte…

gimp | Memory Corruption
Apr 11, 2026 Apr 14, 2026
Apr 11, 2026
Apr 14, 2026
7.8 HIGH
CVE-2026-4152 — GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User inte…

gimp | Memory Corruption
Apr 11, 2026 Apr 14, 2026
Apr 11, 2026
Apr 14, 2026
7.8 HIGH
CVE-2026-4151 — GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is…

gimp | Memory Corruption
Apr 11, 2026 Apr 14, 2026
Apr 11, 2026
Apr 14, 2026
7.8 HIGH
CVE-2026-4150 — GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is…

gimp | Memory Corruption
Apr 11, 2026 Apr 14, 2026
Apr 11, 2026
Apr 14, 2026
10.0 CRITICAL
CVE-2026-4149 — Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability

Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. A…

era_300_firmware era_300 | Memory Corruption
Apr 11, 2026 Apr 15, 2026
Apr 11, 2026
Apr 15, 2026
6.3 MEDIUM
CVE-2026-40354 — Flatpak xdg-desktop-portal Privilege Escalation Vulnerability

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

xdg-desktop-portal | Path Traversal
Apr 11, 2026 Apr 27, 2026
Apr 11, 2026
Apr 27, 2026
5.3 MEDIUM
CVE-2026-3691 — OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction i…

openclaw | Information Disclosure
Apr 11, 2026 Apr 27, 2026
Apr 11, 2026
Apr 27, 2026
7.4 HIGH
CVE-2026-3690 — OpenClaw Canvas Authentication Bypass Vulnerability

OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to explo…

openclaw | Authentication
Apr 11, 2026 Apr 27, 2026
Apr 11, 2026
Apr 27, 2026
6.5 MEDIUM
CVE-2026-3689 — OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication…

openclaw | Path Traversal
Apr 11, 2026 Apr 27, 2026
Apr 11, 2026
Apr 27, 2026
Showing 20 of 5469 Results