Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-43992 — JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_transfer, etc.) accept…

Remote | Information Disclosure
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.4 HIGH
CVE-2026-43991 — JunoClaw: plugin-shell shell-injection bypass via substring blocklist

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constru…

| Injection
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.4 HIGH
CVE-2026-43990 — JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument…

| Injection
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.5 HIGH
CVE-2026-43989 — JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved t…

| Path Traversal
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.0 MEDIUM
CVE-2026-40300 — Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/…

Zulip is an open-source team collaboration tool. Prior to 12.0, With message_edit_history_visibility_policy set to "moves", /api/v1/messages/{id}/history still returns historical content values, allo…

zulip | Remote | Authorization
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
5.3 MEDIUM
CVE-2026-25431 — WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: through 7.8.10.1.

Remote | Authorization
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.8 MEDIUM
CVE-2026-20914 — Intel QAT Denial of Service Vulnerability

Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with a…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.9 MEDIUM
CVE-2026-20905 — Intel QAT Denial of Service Vulnerability

Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an…

| Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.8 HIGH
CVE-2026-20887 — "Intel Vision Denial of Service and Remote Code Execution Vulnerability"

Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user co…

Remote | Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.8 MEDIUM
CVE-2026-20881 — Intel QAT Denial of Service Vulnerability

Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authentic…

| Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.3 HIGH
CVE-2026-20879 — Intel Data Center Graphics Driver for VMware ESXi Out-of-bounds Write Denial of Service a…

Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary w…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
9.3 CRITICAL
CVE-2026-20794 — VMware ESXi Intel Data Center Graphics Driver Ring 1 Privilege Escalation Buffer Overflow…

Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow an escalation of privilege. System software adversar…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
4.8 MEDIUM
CVE-2026-20793 — Intel QAT Denial of Service Vulnerability

Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an a…

| Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.9 MEDIUM
CVE-2026-20782 — Intel QAT Software Driver Denial of Service Vulnerability

Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenti…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
5.4 MEDIUM
CVE-2026-20772 — "Intel Connectivity Performance Suite Uncontrolled Search Path Privilege Escalation Vulne…

Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation of privilege. Unpr…

| Path Traversal
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.9 MEDIUM
CVE-2026-20771 — Intel QAT Software Driver NULL Pointer Denial of Service Vulnerability

Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
6.9 MEDIUM
CVE-2026-20754 — Intel(R) NPU Drivers Denial of Service Vulnerability

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combin…

| Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.7 HIGH
CVE-2026-20753 — "Slim Bootloader UEFI Firmware Integer Overflow Privilege Escalation Vulnerability"

Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable l…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.3 HIGH
CVE-2026-20751 — VMware ESXi Intel Data Center Graphics Driver Out-of-Bounds Read Denial of Service

Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary wi…

| Denial of Service
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
8.5 HIGH
CVE-2026-20738 — Intel QuickAssist Adapter 8960 Untrusted Pointer Dereference Privilege Escalation Vulnera…

Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adve…

| Memory Corruption
May 12, 2026 May 12, 2026
May 12, 2026
May 12, 2026
Showing 20 of 6283 Results