Critical Alert 1 Active Exploit Detected Today

CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 18, 2026

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

🔔 Premium Features
🔍 Filter Threats
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-64859
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and ...
CRITICAL??????????NVD15 hours ago
CVE-2026-59829
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.1, on sites with category group moderation enabled,...
MEDIUM??????????NVD15 hours ago
CVE-2026-55704
Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activi...
MEDIUM??????????NVD15 hours ago
CVE-2026-55674
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an unauthenticated attacker could send a single ...
CRITICAL??????????NVD15 hours ago
CVE-2026-53960
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post conten...
MEDIUM??????????NVD15 hours ago
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to versio...
UNKNOWN??????????NVD15 hours ago
CVE-2025-27772
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerab...
UNKNOWN??????????NVD15 hours ago
CVE-2025-27771
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vuln...
UNKNOWN??????????NVD15 hours ago
CVE-2025-27770
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is v...
UNKNOWN??????????NVD15 hours ago
CVE-2025-27621
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new d...
UNKNOWN??????????NVD15 hours ago
CVE-2026-71566
FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to va...
CRITICAL??????????NVD16 hours ago
CVE-2026-71567
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into ...
HIGH??????????NVD16 hours ago
CVE-2026-16048
Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped...
MEDIUM??????????NVD16 hours ago
CVE-2026-16047
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate that users have read access to a channel before ...
MEDIUM??????????NVD16 hours ago
CVE-2026-16049
Mattermost Plugins versions <=11.8 10.20.11 11.5.7.0 _The Mattermost GitLab plugin fails to verify channel permissions when processing API requests...
MEDIUM??????????NVD16 hours ago
CVE-2026-16045
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token manageme...
MEDIUM??????????NVD16 hours ago
CVE-2026-16044
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive...
MEDIUM??????????NVD16 hours ago
CVE-2026-15754
Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel...
MEDIUM??????????NVD16 hours ago
CVE-2026-10527
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current r...
MEDIUM??????????NVD16 hours ago
CVE-2026-74858
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/sec...
MEDIUM??????????NVD16 hours ago