CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112848 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Inje… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112847 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112846 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object … |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-25784 | CRITICAL | 9.8 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (c… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-112862 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-112860 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-23 |
| CVE-2026-63244 | CRITICAL | 9.8 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) co… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-55981 | CRITICAL | 9.6 | A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to mo… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-94267 | CRITICAL | 9.0 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend… |
T1078
T1548
|
|
2026-10-23 |
| CVE-2026-54630 | CRITICAL | 9.6 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.… |
T1190
T1059
+1
|
|
2026-10-23 |
| CVE-2026-115547 | CRITICAL | 9.1 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of sp… |
T1190
T1203
|
|
2026-10-23 |
| CVE-2026-110243 | CRITICAL | 9.9 | The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the ne… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-107861 | CRITICAL | 9.9 | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostna… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-97785 | CRITICAL | 10.0 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-83938 | CRITICAL | 10.0 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an una… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110063 | CRITICAL | 10.0 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Mac… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-109122 | CRITICAL | 9.1 | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one fi… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-105014 | CRITICAL | 9.1 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelin… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114625 | CRITICAL | 9.9 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attack… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-79876 | CRITICAL | 9.3 | A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow… |
T1078
T1548
|
|
2026-10-22 |