Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-12745 — Ivanti Neurons for ITSM Deserialization of Untrusted Data Vulnerability

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Injection
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
9.8 CRITICAL
CVE-2026-12744 — Ivanti Neurons for ITSM Deserialization of Untrusted Data Remote Code Execution

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Injection
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
8.8 HIGH
CVE-2026-12651 — Ivanti Neurons for ITSM Deserialization of Untrusted Data Remote Code Execution

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Injection
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
9.9 CRITICAL
CVE-2026-12650 — Ivanti Neurons for ITSM Deserialization of Untrusted Data Vulnerability

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Injection
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
8.8 HIGH
CVE-2026-12648 — Ivanti Neurons for ITSM Deserialization of Untrusted Data Vulnerability

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Misconfiguration
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
9.9 CRITICAL
CVE-2026-12647 — Ivanti Neurons for ITSM Missing Authorization Remote Code Execution

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Authorization
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
9.9 CRITICAL
CVE-2026-12646 — Ivanti Neurons for ITSM Missing Authorization Remote Code Execution

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Authorization
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
9.9 CRITICAL
CVE-2026-12645 — Ivanti Neurons for ITSM Missing Authorization Remote Code Execution

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

neurons_for_itsm | Remote | Authorization
Sep 08, 2026 Sep 18, 2026
Sep 08, 2026
Sep 18, 2026
5.1 MEDIUM
CVE-2026-12387 — Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to …

Sep 08, 2026 Sep 10, 2026
Sep 08, 2026
Sep 10, 2026
4.0 MEDIUM
CVE-2026-12285 — Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to …

Sep 08, 2026 Sep 10, 2026
Sep 08, 2026
Sep 10, 2026
5.1 MEDIUM
CVE-2026-11891 — Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operat…

Sep 08, 2026 Sep 10, 2026
Sep 08, 2026
Sep 10, 2026
7.5 HIGH
CVE-2026-0860 — Mali GPU Kernel Driver allows access to sensitive kernel information

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user pr…

Sep 08, 2026 Sep 10, 2026
Sep 08, 2026
Sep 10, 2026
4.4 MEDIUM
CVE-2026-0001 — Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to …

Sep 08, 2026 Sep 08, 2026
Sep 08, 2026
Sep 08, 2026
4.0 MEDIUM
CVE-2026-86644 — star7th showdoc API Page Save Endpoint editormd.js cross site scripting

A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/public/editor.md/editormd.js of the component API Page Save Endpoint. Execut…

showdoc | Remote | Cross-Site Scripting
Sep 08, 2026 Sep 08, 2026
Sep 08, 2026
Sep 08, 2026
6.5 MEDIUM
CVE-2026-79379 — Bestechnic BES2300 Buffer Overflow

A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS…

| Memory Corruption
Sep 08, 2026 Sep 14, 2026
Sep 08, 2026
Sep 14, 2026
7.5 HIGH
CVE-2026-79378 — Bestechnic BES2300 Bluetooth Audio SoC L2CAP Denial of Service

An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP …

Remote | Denial of Service
Sep 08, 2026 Sep 09, 2026
Sep 08, 2026
Sep 09, 2026
7.5 HIGH
CVE-2026-79377 — Bestechnic BES2300 Heap Overflow

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a cr…

Remote | Memory Corruption
Sep 08, 2026 Sep 09, 2026
Sep 08, 2026
Sep 09, 2026
8.8 HIGH
CVE-2026-79376 — Bestechnic BES2300 L2CAP Denial of Service Vulnerability

An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2C…

| Denial of Service
Sep 08, 2026 Sep 09, 2026
Sep 08, 2026
Sep 09, 2026
6.5 MEDIUM
CVE-2026-78838 — AppNitro MachForm Reflected Cross-Site Scripting

A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's brow…

Remote | Cross-Site Scripting
Sep 08, 2026 Sep 09, 2026
Sep 08, 2026
Sep 09, 2026
Showing 20 of 15599 Results