Latest CVE Feed
CVE Intelligence
Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.
Score
Vulnerability
Published
7.5
HIGH
CVE-2026-2753
— Navtor NavBox Absolute Path Traversal Vulnerability
An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path input. Unauthenticated remote attackers ca…
Remote
|
Path Traversal
Mar 06, 2026
Mar 10, 2026
Mar 06, 2026
Mar 10, 2026
5.3
MEDIUM
CVE-2026-2752
— Navtor NavBox .NET Information Disclosure
Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to retur…
Remote
|
Information Disclosure
Mar 06, 2026
Mar 10, 2026
Mar 06, 2026
Mar 10, 2026
9.4
CRITICAL
CVE-2026-26051
— Mobiliti e-mobi.hu Missing Authentication for Critical Function
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can co…
Remote
|
Authentication
Mar 06, 2026
Mar 09, 2026
Mar 06, 2026
Mar 09, 2026