Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-110073 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-110037 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109415 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-107682 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-107305 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.7 HIGH
CVE-2026-106634 — Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('…

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privile…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-106633 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-106632 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-106631 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.3 CRITICAL
CVE-2026-106630 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaSc…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.3 CRITICAL
CVE-2026-106629 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaSc…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-106628 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.1 CRITICAL
CVE-2026-106626 — Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges c…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.9 CRITICAL
CVE-2026-105895 — Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated acces…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.8 CRITICAL
CVE-2026-63146 — Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php

Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation t…

Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.9 CRITICAL
CVE-2026-103848 — Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Comm…

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in th…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-110005 — Moghtech Komodo contains an OS command injection vulnerability

The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus …

| Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.8 CRITICAL
CVE-2026-104252 — Vitess vttablet /twopcz reflected XSS

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from …

vitess | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-97843 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 16224 Results