Vulnerabilities
Summary — last 7 days
New vulnerabilities5,029▲ 194 vs. last week
Critical / high2,139▼ 635 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)773▲ 710 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Low (2.3) | 0.21% | — | CloudbeaverAI | 10/11/2026 | 10/16/2026 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a shared folder. Attackers can guess table and column names and enumerate second-resolution timestamps to download victims' LOB values,… | |
| Deferred | Medium (5.3) | 0.20% | — | CloudbeaverAI | 10/11/2026 | 10/16/2026 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission. Attackers can set saveCredentials and sharedCredentials flags with chosen authProperties so other users… |