Vulnerabilities
Summary — last 7 days
New vulnerabilities5,127▲ 1,600 vs. last week
Critical / high2,552▲ 861 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)711▲ 643 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 0.91% | — | Sentence-transformersAI | 7/31/2026 | 10/8/2026 | sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition includes an 'or os.path.exists(model_name_or_path)' clause… | |
| Analyzed | Critical (9.8) | 0.53% | — | Blackmagicdesign WEB Presenter HD Firmware | 9/22/2025 | 6/17/2026 | The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream… | |
| Analyzed | Critical (9.8) | 0.64% | — | Blackmagicdesign WEB Presenter HD FirmwareBlackmagicdesign WEB Presenter 4K Firmware | 9/22/2025 | 6/17/2026 | Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to… | |
| Modified | Critical (9.8) | 3.5% | — | Atomisystems Activepresenter | 2/15/2021 | 6/17/2026 | ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code execution. |