Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.1 HIGH
CVE-2025-58771 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memor…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-107460 — Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application a…

fesod | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-53418 — Zoom Workplace for Android Improper Authorization Vulnerability

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-109521 — girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Per…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.7 HIGH
CVE-2026-12656 — 1732E ArmorBlock® - Multiple Vulnerabilities

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause devic…

Remote | Denial of Service
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-4869 — Potential Privilege Escalation in InstallShield

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local adm…

installshield | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-12655 — 1732E ArmorBlock® - Multiple Vulnerabilities

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeov…

Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.4 MEDIUM
CVE-2026-67456 — NVIDIA Warp Heap-Based Buffer Overflow

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

| Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-65180 — NVIDIA Megatron-LM Arbitrary Code Execution Vulnerability

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerabilit…

megatron-lm | Supply Chain
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.1 CRITICAL
CVE-2026-65173 — NVIDIA AIStore Missing Authentication Vulnerability

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A success…

Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65172 — NVIDIA AIStore Missing Authorization Vulnerability

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existin…

Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65170 — NVIDIA AIStore Server-Side Request Forgery

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A …

Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-65164 — NVIDIA AIStore Path Traversal Vulnerability

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted direc…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
10.0 CRITICAL
CVE-2026-65162 — NVIDIA AIStore Improper Input Validation Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-65161 — NVIDIA AIStore Arbitrary File Read Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source pa…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65150 — NVIDIA DALI Out-of-Bounds Read Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65149 — NVIDIA DALI Out-of-Bounds Write Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclos…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65148 — NVIDIA DALI Stack-Based Buffer Overflow Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65147 — NVIDIA DALI Out-of-Bounds Read Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of se…

data_loading_library | Information Disclosure
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-65141 — NVIDIA Isaac Lab Eval Injection Vulnerability

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tamper…

isaac_lab | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 14545 Results