Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-7220 — jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injection

A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the component fastly_cli Tool.…

Remote | Injection
Apr 28, 2026 Apr 29, 2026
Apr 28, 2026
Apr 29, 2026
8.3 HIGH
CVE-2026-7219 — Totolink N300RT formIpQoS buffer overflow

A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overfl…

n300rt_firmware | Remote | Memory Corruption
Apr 28, 2026 Apr 28, 2026
Apr 28, 2026
Apr 28, 2026
8.3 HIGH
CVE-2026-7218 — Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipu…

n300rt_firmware | Remote | Memory Corruption
Apr 28, 2026 Apr 28, 2026
Apr 28, 2026
Apr 28, 2026
5.5 MEDIUM
CVE-2026-7217 — Deepractice PromptX Document File index.ts read_pdf absolute path traversal

A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf of the file packages/mcp-of…

Remote | Path Traversal
Apr 28, 2026 Apr 28, 2026
Apr 28, 2026
Apr 28, 2026
7.5 HIGH
CVE-2026-7216 — donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traver…

A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processing_server.py of the compone…

Remote | Path Traversal
Apr 28, 2026 Apr 29, 2026
Apr 28, 2026
Apr 29, 2026
7.5 HIGH
CVE-2026-7215 — egtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection

A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_server.py of the component VMD Launch Handler. The manipulati…

Remote | Injection
Apr 28, 2026 Apr 29, 2026
Apr 28, 2026
Apr 29, 2026
7.2 HIGH
CVE-2026-1460 — Zyxel DHCP Command Injection Vulnerability

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could al…

dx3301-t0_firmware ex3301-t0_firmware | Remote | Injection
Apr 28, 2026 Apr 28, 2026
Apr 28, 2026
Apr 28, 2026
6.8 MEDIUM
CVE-2026-0711 — Zyxel DX3300-T0 Post-Authentication Command Injection Vulnerability

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with a…

dx3300-t0_firmware | Injection
Apr 28, 2026 Apr 28, 2026
Apr 28, 2026
Apr 28, 2026
Showing 20 of 6568 Results