🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-119755 HIGH Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass R... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123368 LOW compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.22.0 until 0.31.0, compose-lint... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123482 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuild... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-122664 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Broadcast Live Video ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121689 HIGH FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stor... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121688 CRITICAL FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller f... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121690 MEDIUM FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121686 CRITICAL FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method ... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121685 CRITICAL FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide credent... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121687 CRITICAL FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without authentication.
1. HTTP ... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121612 MEDIUM Weak Authentication vulnerability in WPZOOM WPBruiser {no- Captcha anti-Spam} goodbye-captcha allows Authentication Abuse.This issue affects WPBruiser... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121576 HIGH Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.Th... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115338 HIGH Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive i... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115341 HIGH Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115340 HIGH Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115339 HIGH Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker t... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115337 MEDIUM Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissi... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115336 MEDIUM Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123364 LOW ## Impact
OctoPrint versions 2.0.0rc1 up until version 2.0.0rc6 are susceptible to cross-site scripting via a specially crafted default `port` or `ba... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-104989 CRITICAL Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to ... | CRITICAL | ????? | ????? | NVD | 4 days ago |