Vulnerabilities

Summary — last 7 days

New vulnerabilities5,350▲ 2,489 vs. last week

Critical / high2,982▲ 1,615 vs. last week

New active exploitation (KEV)9▲ 3 vs. last week

Unscored (no CVSS)180▼ 26 vs. last week

409,235 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2026-105827	Rejected	Unscored	0.30%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105826	Rejected	Unscored	0.33%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105825	Rejected	Unscored	0.30%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105824	Rejected	Unscored	0.25%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105823	Rejected	Unscored	0.11%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105405	Rejected	Unscored	0.25%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105404	Rejected	Unscored	0.25%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105403	Rejected	Unscored	0.13%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105402	Rejected	Unscored	0.30%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105401	Rejected	Unscored	0.19%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105400	Rejected	Unscored	0.30%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105399	Rejected	Unscored	0.30%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105398	Rejected	Unscored	0.12%	—	Imagemagick^AI	10/8/2026	10/9/2026	Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105331	Deferred	Medium (5.2)	0.08%	—	Checkmk^AI	10/8/2026	10/9/2026	Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.
CVE-2026-91844	Deferred	High (7.3)	0.20%	—	Izometri IT Services Eimzamip^AI	10/8/2026	10/8/2026	Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6.
CVE-2026-89290	Deferred	Low (3.5)	0.16%	—	Izometri IT Services Eimzamip^AI	10/8/2026	10/8/2026	Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.
CVE-2026-88257	Deferred	Medium (5.3)	0.27%	—	Scriptkit Beam MCP^AI	10/8/2026	10/8/2026	Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the…
CVE-2026-42698	Deferred	Medium (5.3)	0.17%	—	Themeum Tutor LMS^AI	10/8/2026	10/8/2026	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1.
CVE-2026-27420	Deferred	Medium (6.5)	0.13%	—	Katieseaborn Zotpress^AI	10/8/2026	10/8/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.4.4.
CVE-2026-16167	Analyzed	High (7.5)	0.33%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.
CVE-2026-16165	Analyzed	High (7.5)	0.31%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.
CVE-2026-16164	Analyzed	High (7.5)	0.33%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.
CVE-2026-16163	Analyzed	High (8.6)	0.27%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.
CVE-2026-16161	Analyzed	High (7.5)	0.31%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16159	Analyzed	High (8.6)	0.27%	—	IBM Datapower Gateway	10/8/2026	10/14/2026	IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.