Vulnerabilities
Summary — last 7 days
New vulnerabilities5,107▲ 1,957 vs. last week
Critical / high2,827▲ 1,283 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)184▼ 23 vs. last week
409,303 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.15% | — | Wpeverest Everest FormsAI | 10/7/2026 | 10/8/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1. | |
| Deferred | High (7.1) | 0.15% | — | Unlimited-elements Unlimited Elements FOR ElementorAI | 10/7/2026 | 10/8/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19. | |
| Awaiting Analysis | High (7.6) | 0.09% | — | Docker EngineAI | 10/7/2026 | 10/8/2026 | Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport… | |
| Awaiting Analysis | Medium (6.9) | 0.07% | — | — | 10/7/2026 | 10/8/2026 | The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec parameters which meets… | |
| Awaiting Analysis | Critical (9.8) | 0.51% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+4 | 10/7/2026 | 10/8/2026 | A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. This… | |
| Awaiting Analysis | Critical (9.8) | 0.33% | — | Cisco Application Policy Infrastructure ControllerAI | 10/7/2026 | 10/8/2026 | The vulnerabilities tracked by CVE-2026-76500 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664. | |
| Awaiting Analysis | Critical (9.8) | 0.31% | — | Cisco Application Policy Infrastructure ControllerAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered… | |
| Awaiting Analysis | Critical (9.8) | 0.30% | — | Cisco Application Policy Infrastructure ControllerAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered… | |
| Awaiting Analysis | Medium (6.5) | 0.29% | — | Cisco Application Policy Infrastructure ControllerAI | 10/7/2026 | 10/8/2026 | A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is… | |
| Awaiting Analysis | Critical (9.8) | 0.51% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) on an affected device. This vulnerability is due to improper… | |
| Awaiting Analysis | Critical (9.8) | 0.51% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) on an affected device. This vulnerability is due to improper… | |
| Awaiting Analysis | High (8.8) | 0.28% | — | Cisco License ON PremAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… | |
| Awaiting Analysis | Critical (9.1) | 0.22% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522. | |
| Awaiting Analysis | Critical (10) | 0.20% | — | Cisco License On-premAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… | |
| Awaiting Analysis | Critical (9.8) | 0.33% | — | Cisco License On-premAICisco Smart Software Manager On-premAI | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… | |
| Awaiting Analysis | High (8.8) | 0.13% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by… | |
| Awaiting Analysis | Critical (9.8) | 0.52% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+4 | 10/7/2026 | 10/8/2026 | The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause… | |
| Awaiting Analysis | High (8.8) | 0.18% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (7.4) | 0.15% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (8.2) | 0.23% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (7.5) | 0.25% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | Critical (9.8) | 0.45% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/8/2026 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS)… | |
| Awaiting Analysis | Critical (9.6) | 0.19% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | High (8.8) | 0.14% | — | Cisco Meraki Campus GatewaysAICisco Meraki MG Cellular GatewaysAICisco Meraki MR Wireless Access PointsAICisco Meraki MS Series SwitchesAI+3 | 10/7/2026 | 10/8/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked… | |
| Awaiting Analysis | Critical (9.8) | 0.31% | — | Cisco NX OSAICisco Nexus 3000AICisco Nexus 9000AICisco Application Policy Infrastructure ControllerAI+3 | 10/7/2026 | 10/9/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |