Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.5

MEDIUM

CVE-2026-20937

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 +3 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
0.0

NA

CVE-2025-71020

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Denial of Service
4.3

MEDIUM

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 +8 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
6.2

MEDIUM

CVE-2026-20935

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally....

Affected Products : windows_11_23h2 windows_11_24h2 windows_11_25h2
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
7.5

HIGH

CVE-2026-20934

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +5 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
4.8

MEDIUM

CVE-2026-21625

User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Misconfiguration
9.4

CRITICAL

CVE-2026-21624

Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Cross-Site Scripting
9.4

CRITICAL

CVE-2026-21623

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Cross-Site Scripting
8.4

HIGH

CVE-2026-0861

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the a...

Affected Products : glibc
Published: Jan. 14, 2026

Modified: Jan. 16, 2026

Vuln Type: Memory Corruption
7.3

HIGH

CVE-2026-0615

The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026
0.0

NA

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal....

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Path Traversal
8.8

HIGH

CVE-2025-68707

An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated network-adjacent attackers to perform arbitrary configuration changes without providing credentials, as long as a valid admin session is ...

Affected Products :
Published: Jan. 13, 2026

Modified: Jan. 16, 2026

Vuln Type: Authentication
8.2

HIGH

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation...

Affected Products :
Published: Jan. 15, 2026

Modified: Jan. 16, 2026

Vuln Type: Cross-Site Scripting
9.4

CRITICAL

CVE-2025-67822

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A suc...

Affected Products :
Published: Jan. 15, 2026

Modified: Jan. 16, 2026

Vuln Type: Authentication
6.9

MEDIUM

CVE-2025-15104

Nu Html Checker (validator.nu) contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protectio...

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Server-Side Request Forgery
0.0

NA

CVE-2025-14894

Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that can then be executed via the /storag...

Affected Products :
Published: Jan. 16, 2026

Modified: Jan. 16, 2026

Vuln Type: Misconfiguration
5.5

MEDIUM

CVE-2026-20932

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 +3 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
8.0

HIGH

CVE-2026-20931

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 +8 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
7.5

HIGH

CVE-2026-20929

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 +5 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026
5.3

MEDIUM

CVE-2026-20927

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 +8 more products
Published: Jan. 13, 2026

Modified: Jan. 16, 2026

Showing 20 of 4505 Results

Browse by Apps

Latest CVE Feed

5.5

0.0

4.3

6.2

7.5

4.8

9.4

9.4

8.4

7.3

0.0

8.8

8.2

9.4

6.9

0.0

5.5

8.0

7.5

5.3

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable