Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-24214 — NVIDIA Triton Inference Server DALI Integer Overflow Vulnerability

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution,…

triton_inference_server | Remote | Injection
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
9.8 CRITICAL
CVE-2026-24213 — NVIDIA Triton Inference Server Out-of-Bounds Read Vulnerability

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code executio…

triton_inference_server | Remote | Memory Corruption
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
7.5 HIGH
CVE-2026-24210 — NVIDIA Triton Inference Server Integer Overflow Denial of Service

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.

linux_kernel triton_inference_server | Remote | Denial of Service
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
7.5 HIGH
CVE-2026-24209 — NVIDIA Triton Inference Server Path Traversal Denial of Service Vulnerability

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

linux_kernel triton_inference_server | Remote | Path Traversal
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
7.5 HIGH
CVE-2026-24208 — NVIDIA Triton Inference Server Path Traversal Denial of Service

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

linux_kernel triton_inference_server | Remote | Path Traversal
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
9.8 CRITICAL
CVE-2026-24207 — NVIDIA Triton Inference Server Authentication Bypass

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of …

linux_kernel triton_inference_server | Remote | Authentication
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
9.8 CRITICAL
CVE-2026-24206 — NVIDIA Triton Inference Server Authentication Bypass Vulnerability

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, deni…

linux_kernel triton_inference_server | Remote | Authentication
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
9.8 CRITICAL
CVE-2026-24163 — NVIDIA TRT-LLM RPC Deserialization Vulnerability

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execut…

tensorrt_llm | Remote | Injection
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
7.5 HIGH
CVE-2026-24160 — NVIDIA TRT-LLM Null Pointer Dereference Denial of Service

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead …

tensorrt_llm | Remote | Denial of Service
May 20, 2026 May 21, 2026
May 20, 2026
May 21, 2026
9.8 CRITICAL
CVE-2026-24142 — NVIDIA TRT-LLM Deserialization RCE and Tampering Vulnerability

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and i…

tensorrt_llm | Remote | Injection
May 20, 2026 May 21, 2026
May 20, 2026
May 21, 2026
9.8 CRITICAL
CVE-2025-33255 — NVIDIA TRT-LLM MPI Server Deserialization Vulnerability

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code executio…

tensorrt_llm | Remote | Injection
May 20, 2026 May 21, 2026
May 20, 2026
May 21, 2026
5.3 MEDIUM
CVE-2025-15369 — Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthentica…

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_content_editor function in all versio…

xpro_addons_for_elementor | Remote | Authorization
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
6.5 MEDIUM
CVE-2026-8685 — Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Para…

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16. This is due to insufficient escaping on…

infility_global | Remote | Injection
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
6.1 MEDIUM
CVE-2026-8627 — Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to the correct_prices_pa…

Remote | Cross-Site Scripting
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
6.1 MEDIUM
CVE-2026-8626 — SponsorMe <= 0.5.2 - Reflected Cross-Site Scripting via PHP_SELF Parameter

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficient input sanitization and output…

Remote | Cross-Site Scripting
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
6.1 MEDIUM
CVE-2026-8624 — LJ comments import: reloaded <= 0.97.1 - Reflected Cross-Site Scripting via PHP_SELF Para…

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.97.1 due to insufficient input san…

Remote | Cross-Site Scripting
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
4.3 MEDIUM
CVE-2026-8610 — TypeSquare Webfonts for ConoHa <= 2.0.4 - Missing Authorization to Authenticated (Subscri…

The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4. This is due to the plugin not properly verifying that a user…

typesquare_webfonts_for_conoha | Remote | Authorization
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
4.3 MEDIUM
CVE-2026-8424 — Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybb_a…

Remote | Cross-Site Request Forgery
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
4.3 MEDIUM
CVE-2026-8423 — JaviBola Custom Theme Test <= 2.0.5 - Cross-Site Request Forgery

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on th…

Remote | Cross-Site Request Forgery
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
6.1 MEDIUM
CVE-2026-8420 — BLOGCHAT Chat System <= 1.3.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripti…

The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3. This is due to missing or incorrect nonce validation on a func…

Remote | Cross-Site Request Forgery
May 20, 2026 May 20, 2026
May 20, 2026
May 20, 2026
Showing 20 of 7094 Results