Vulnerabilities
Summary — last 7 days
New vulnerabilities4,842▲ 1,829 vs. last week
Critical / high2,652▲ 1,130 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)250▲ 80 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Medium (5.1) | 0.15% | — | CocktailbarserviceAI | 10/12/2026 | 10/12/2026 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. | |
| Deferred | Low (1.9) | 0.13% | — | BSC Peru CocktailsAI | 7/28/2025 | 6/17/2026 | A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component bsc.devy.peru_cocktails. The manipulation leads to improper export of android application components. It… | |
| Modified | High (7.2) | 0.34% | — | Kristofer Szymanski Cocktail | 5/3/2005 | 6/16/2026 | Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes. |