Vulnerabilities
Summary — last 7 days
New vulnerabilities3,516▼ 1,241 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)691▲ 631 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (8.7) | 0.22% | — | Google Cloud ShellAI | 10/20/2026 | 10/20/2026 | A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was patched on 22 July 2026, and… | |
| Analyzed | Critical (9.6) | 0.86% | — | Microsoft Azure Cloud Shell | 5/7/2026 | 6/17/2026 | Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network. | |
| Analyzed | Critical (9.8) | 0.94% | — | Microsoft Azure Cloud Shell | 3/19/2026 | 6/17/2026 | Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network. |