Vulnerabilities
Summary — last 7 days
New vulnerabilities3,517▼ 1,240 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)692▲ 632 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Critical (9.1) | 0.30% | PoC | Apache-airflow-providers-sshAIApache-airflow-providers-sftpAI | 10/15/2026 | 10/16/2026 | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the… |