October 7, 2026

CVE Watchtower

🔍 Filter Threats
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-41562
Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.
HIGH??????????NVD1 day ago
CVE-2026-41561
Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.
HIGH??????????NVD1 day ago
CVE-2026-41560
Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.
HIGH??????????NVD1 day ago
CVE-2026-41559
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions.
HIGH??????????NVD1 day ago
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
CRITICAL??????????NVD1 day ago
CVE-2026-40807
Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
HIGH??????????NVD1 day ago
CVE-2026-40806
Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
HIGH??????????NVD1 day ago
CVE-2026-39798
Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.
MEDIUM??????????NVD1 day ago
CVE-2026-39797
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
CRITICAL??????????NVD1 day ago
CVE-2026-39796
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.
HIGH??????????NVD1 day ago
CVE-2026-39795
Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
CRITICAL??????????NVD1 day ago
CVE-2026-39794
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.
HIGH??????????NVD1 day ago
CVE-2026-39793
Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
HIGH??????????NVD1 day ago
CVE-2026-39792
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
HIGH??????????NVD1 day ago
CVE-2026-39791
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.
MEDIUM??????????NVD1 day ago
CVE-2026-39790
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.
HIGH??????????NVD1 day ago
CVE-2026-39788
Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.
MEDIUM??????????NVD1 day ago
CVE-2026-39787
Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
MEDIUM??????????NVD1 day ago
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
CRITICAL??????????NVD1 day ago
CVE-2026-39784
Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.
HIGH??????????NVD1 day ago
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.