CVE Watchtower

🔔 Premium Features
🔍 Filter Threats
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside ...
UNKNOWN??????????NVD3 days ago
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML pag...
UNKNOWN??????????NVD3 days ago
CVE-2026-93382
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted ...
UNKNOWN??????????NVD3 days ago
CVE-2026-77281
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the ha...
MEDIUM??????????NVD3 days ago
CVE-2026-49137
No description available
UNKNOWN??????????NVD3 days ago
CVE-2026-10594
No description available
UNKNOWN??????????NVD3 days ago
CVE-2026-57847
No description available
UNKNOWN??????????NVD3 days ago
CVE-2026-11314
No description available
UNKNOWN??????????NVD3 days ago
CVE-2025-62167
No description available
UNKNOWN??????????NVD3 days ago
CVE-2026-77615
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2)...
HIGH??????????NVD3 days ago
CVE-2026-15815
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative ...
HIGH??????????NVD3 days ago
CVE-2026-93395
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-l...
MEDIUM??????????NVD3 days ago
CVE-2026-54597
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated use...
HIGH??????????NVD3 days ago
CVE-2026-54596
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Tec...
HIGH??????????NVD3 days ago
CVE-2026-54907
Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enables email a...
MEDIUM??????????NVD3 days ago
CVE-2026-93394
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proo...
LOW??????????NVD3 days ago
CVE-2026-54604
OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in...
MEDIUM??????????NVD3 days ago
CVE-2026-86049
Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the ...
HIGH??????????NVD3 days ago
CVE-2026-76846
## Summary `system/config/security.yaml`'s default `twig_sandbox.config_denied_paths` list (`plugins`, `streams`, `security`, `backups`, `schedu...
HIGH??????????NVD3 days ago
CVE-2026-93393
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endp...
HIGH??????????NVD3 days ago
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.