Vulnerabilities
Summary — last 7 days
New vulnerabilities5,004▲ 140 vs. last week
Critical / high2,117▼ 662 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)818▲ 755 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.3) | 0.26% | — | Sigma File ManagerAI | 10/19/2026 | 10/19/2026 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud metadata addresses to… |