🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-105699 Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project id... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-102262 Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alo... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-101893 Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses ... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-84900 Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-77226 Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where Se... | CRITICAL | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105768 apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and G... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-95265 Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint. The private-IP validation does not blo... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-95264 Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable b... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-95263 Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the p... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-97257 Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Si... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-93617 Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Suns... | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-78862 An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB) | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-78861 An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-78860 An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext | HIGH | ????? | ????? | NVD | 1 day ago |
| CVE-2026-71297 A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. T... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-71299 A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to p... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-71298 A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` query parameter of its REST API list endpo... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105696 Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read a... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105695 Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, whil... | MEDIUM | ????? | ????? | NVD | 1 day ago |
| CVE-2026-105694 Penpot is an open-source design and prototyping platform. Prior to 2.18.0, authenticated users with file-edit permission can upload SVG media whose sc... | MEDIUM | ????? | ????? | NVD | 1 day ago |