Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-48431 — Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

substance_3d_designer | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48430 — Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

substance_3d_designer | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
5.5 MEDIUM
CVE-2026-48429 — Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the applica…

substance_3d_designer | Denial of Service
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48428 — Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

substance_3d_designer | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48427 — Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…

substance_3d_designer | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48426 — Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i…

substance_3d_designer | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48425 — Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48424 — Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48423 — Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48422 — Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48421 — Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48420 — Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48419 — Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48418 — Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
7.8 HIGH
CVE-2026-48417 — Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

substance_3d_sampler | Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
4.8 MEDIUM
CVE-2026-26211 — Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content att…

ekushey_project_manager_crm | Remote | Cross-Site Scripting
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
0.0 NA
CVE-2026-59985 — OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 …

| Memory Corruption
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
0.0 NA
CVE-2026-55663 — mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized as…

mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP stack authenticates st…

| Authentication
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
6.5 MEDIUM
CVE-2026-78468 — FluentCRM Pro <= 3.1.12 - Authenticated (Author+) SQL Injection

The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and incl…

Remote | Injection
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
8.6 HIGH
CVE-2026-75498 — Webkul QloApps SQL injection

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'bo_query' parameter…

qloapps | Remote | Injection
Aug 25, 2026 Aug 25, 2026
Aug 25, 2026
Aug 25, 2026
Showing 20 of 11799 Results