Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-92546 — Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.4 HIGH

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and in…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
10.0 CRITICAL

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tamperi…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.1 HIGH

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.4 HIGH

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A suc…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.8 HIGH

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, …

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.1 HIGH

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tamp…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.3 MEDIUM
CVE-2026-15586 — OTP Brute-Force Account Takeover in Idvlabs Software's Ontime

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27.  NO…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
0.0 NA

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.7 MEDIUM
CVE-2026-114409 — Docker Desktop logs can expose stored third-party credentials

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction.…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
1.9 LOW
CVE-2026-107590 — Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text …

qt
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
7.5 HIGH
CVE-2026-100164 — User Enumeration in Rolantis Information Technologies' Agentis

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8.

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
4.9 MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 relea…

powerprotect_data_domain | Remote | Memory Corruption
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
4.9 MEDIUM
CVE-2026-90731 — Dell PowerProtect Data Domain Stack-based Buffer Overflow Vulnerability

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

powerprotect_data_domain | Remote | Memory Corruption
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
6.5 MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

powerprotect_data_domain | Remote | Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
6.7 MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

powerprotect_data_domain | Remote | Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
6.3 MEDIUM
CVE-2026-90728 — Dell PowerProtect Data Domain Improper Privilege Management Vulnerability

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

powerprotect_data_domain | Authorization
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.8 MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ve…

Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
8.8 HIGH
CVE-2026-4337 — Unrestricted Upload of File in PuMuKIT application

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server u…

Remote
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
5.9 MEDIUM

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially interce…

easysoft | Remote | Misconfiguration
Oct 27, 2026 Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Showing 20 of 16317 Results