Vulnerabilities
Summary — last 7 days
New vulnerabilities4,634▼ 858 vs. last week
Critical / high1,741▼ 1,381 vs. last week
New active exploitation (KEV)7▼ 2 vs. last week
Unscored (no CVSS)953▲ 853 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Critical (9.1) | 0.67% | — | Microsoft Azure PipelinesAI | 10/22/2026 | 10/22/2026 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network. | |
| Modified | High (8.8) | 2.0% | — | Microsoft Azure Pipelines Agent | 11/14/2023 | 6/17/2026 | Azure DevOps Server Remote Code Execution Vulnerability | |
| Modified | Medium (4.3) | 0.38% | — | Chocolatey Azure-pipelines-agent | 11/29/2022 | 6/17/2026 | Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder. |