Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-90601 — getzep graphiti REST API main.py improper authentication

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper aut…

graphiti graphiti | Remote | Authentication
Sep 13, 2026 Sep 15, 2026
Sep 13, 2026
Sep 15, 2026
6.5 MEDIUM
CVE-2026-90600 — itsourcecode Sales and Inventory System inv_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql inje…

sales_and_inventory_system | Remote | Injection
Sep 13, 2026 Sep 15, 2026
Sep 13, 2026
Sep 15, 2026
5.3 MEDIUM
CVE-2026-15892 — Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to…

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_na…

zephyr zephyr | Denial of Service
Sep 13, 2026 Sep 14, 2026
Sep 13, 2026
Sep 14, 2026
7.5 HIGH
CVE-2026-15891 — NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway

The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS_SLIST_PEEK_HEAD_CONTAINER(&clien…

zephyr zephyr | Denial of Service
Sep 13, 2026 Sep 14, 2026
Sep 13, 2026
Sep 14, 2026
Showing 20 of 16404 Results