Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-5403 — Heap-based Buffer Overflow in Wireshark

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

wireshark | Denial of Service
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
5.0 MEDIUM
CVE-2026-22726 — Route Services Firewall Bypass

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure…

cf-deployment routing_release | Remote | Server-Side Request Forgery
May 01, 2026 May 04, 2026
May 01, 2026
May 04, 2026
6.5 MEDIUM
CVE-2026-7510 — OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization

A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Executing a manipulati…

Remote | Authorization
Apr 30, 2026 May 01, 2026
Apr 30, 2026
May 01, 2026
6.5 MEDIUM
CVE-2026-7508 — Bootstrap CMS Page Creation show.blade.php code injection

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulat…

Remote | Injection
Apr 30, 2026 May 01, 2026
Apr 30, 2026
May 01, 2026
7.5 HIGH
CVE-2026-7506 — SourceCodester Hotel Management System check sql injection

A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the argument room_type le…

hotel_management_system | Remote | Injection
Apr 30, 2026 May 01, 2026
Apr 30, 2026
May 01, 2026
7.5 HIGH
CVE-2026-7505 — nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attac…

Remote | Authorization
Apr 30, 2026 May 01, 2026
Apr 30, 2026
May 01, 2026
6.5 MEDIUM
CVE-2026-28909 — Apache Container Registry Unauthenticated Registry Credentials Exposure

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

macos container | Remote | Misconfiguration
Apr 30, 2026 May 04, 2026
Apr 30, 2026
May 04, 2026
Showing 20 of 6907 Results