Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.6 MEDIUM
CVE-2026-101178 — Autofill Service Module Improper Authorization

Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-120349 — dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Director…

xunruicms | Remote | Injection
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-101186 — Window Module Denial of Service Vulnerability

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101185 — Peripheral Module Out-of-Bounds Read Vulnerability

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

harmonyos | Information Disclosure
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101183 — Location Service Use-After-Free Vulnerability

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101182 — Location Service Race Condition Vulnerability

Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Race Condition
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.5 MEDIUM
CVE-2026-101181 — WLAN Module Improper Authorization Vulnerability

Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.3 MEDIUM
CVE-2026-101180 — File Parsing Module Denial of Service Vulnerability

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.7 MEDIUM
CVE-2026-101179 — File Preview Module Buffer Overflow

Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
3.7 LOW
CVE-2026-101177 — Optimizer Module Information Disclosure Vulnerability

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Remote | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.1 HIGH
CVE-2026-101176 — Event Notification Management Module Improper Authorization

Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Remote | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.3 MEDIUM
CVE-2026-101175 — ArkWeb Null Pointer Dereference

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.7 MEDIUM
CVE-2026-101174 — DSoftBus Denial of Service Vulnerability

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
6.5 MEDIUM
CVE-2026-101173 — DSoftBus Denial of Service Vulnerability

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
6.2 MEDIUM
CVE-2026-101172 — Graphics Module Improper Access Control

Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
3.6 LOW
CVE-2026-101171 — Background Task Management Module Authorization Bypass

Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.0 MEDIUM
CVE-2026-101170 — Product File Parsing Module Denial of Service Vulnerability

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-120348 — dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Templ…

xunruicms | Remote | Injection
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-120347 — dayrui XunRuiCMS Member View.php View sql injection

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the arg…

xunruicms | Remote | Injection
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
10.0 CRITICAL
CVE-2026-120345 — WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection

A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation …

wn551x3-a | Remote | Injection
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
Showing 20 of 16443 Results