Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
8.2 HIGH
CVE-2026-102555 — Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decodi…

A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-deco…

enterprise_linux libsoup enterprise_linux | Remote | Memory Corruption
Sep 29, 2026 Oct 15, 2026
Sep 29, 2026
Oct 15, 2026
8.6 HIGH
CVE-2026-102242 — Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases

Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool e…

mcp_toolbox_for_databases | Remote | Path Traversal
Sep 29, 2026 Sep 29, 2026
Sep 29, 2026
Sep 29, 2026
Showing 20 of 17182 Results