Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-116663 — Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Enforce.

enforce | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116661 — Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Enforce.

enforce | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-116654 — Tanium addressed an improper input validation vulnerability in Threat Response.

Tanium addressed an improper input validation vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116653 — Tanium addressed an improper input validation vulnerability in Threat Response.

Tanium addressed an improper input validation vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116652 — Tanium addressed a business logic error in Threat Response.

Tanium addressed a business logic error in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.5 HIGH
CVE-2026-116651 — Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.5 HIGH
CVE-2026-116650 — Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

threat_response | Remote
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.1 MEDIUM
CVE-2026-116648 — Tanium addressed an improper output sanitization vulnerability in Discover.

Tanium addressed an improper output sanitization vulnerability in Discover.

discover | Remote | Information Disclosure
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
4.3 MEDIUM
CVE-2026-116646 — Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.

threat_response | Remote | Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
5.3 MEDIUM
CVE-2026-110288 — Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of …

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and pro…

enterprise_server | Remote | Cross-Site Request Forgery
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
8.4 HIGH
CVE-2026-109836 — ALCPU Core Temp Kernel Driver Arbitrary Memory Access Vulnerability

The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.

| Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
5.0 MEDIUM
CVE-2026-108327 — Tanium addressed a path traversal vulnerability in Tanium Data Service.

Tanium addressed a path traversal vulnerability in Tanium Data Service.

interact | Remote | Path Traversal
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.5 MEDIUM
CVE-2026-108324 — Tanium addressed a denial of service vulnerability in Tanium Client.

Tanium addressed a denial of service vulnerability in Tanium Client.

client | Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.7 HIGH
CVE-2026-104608 — Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in…

A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, wher…

enterprise_server | Remote | Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
8.7 HIGH
CVE-2022-30267 — Emerson Ovation Insufficient Verification of Data Authenticity

Emerson Ovation  was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a deni…

Remote | Authentication
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
9.8 CRITICAL
CVE-2022-29966 — Emerson Ovation Missing Authentication for Critical Functionality

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.

Remote | Authentication
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
6.9 MEDIUM
CVE-2026-22060 — CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID W…

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the g…

storagegrid storagegrid | Remote | Authentication
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
9.1 CRITICAL
CVE-2026-22058 — CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID W…

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make un…

storagegrid storagegrid | Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
7.1 HIGH
CVE-2026-121614 — Docker Sandboxes host Git executes repository-controlled programs

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Gi…

sandboxes docker_sandboxes | Misconfiguration
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
1.8 LOW
CVE-2026-121542 — Bake filesystem path entitlements approval can be skipped for path using basename prefix

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths…

| Path Traversal
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
Showing 20 of 17475 Results