Vulnerabilities
Summary — last 7 days
New vulnerabilities4,653▼ 633 vs. last week
Critical / high1,807▼ 1,271 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)780▲ 682 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Low (3.7) | 0.27% | — | IBM Cyber FraudAI | 10/20/2026 | 10/21/2026 | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks. | |
| Awaiting Analysis | Medium (6.8) | 0.49% | — | IBM Cyber FraudAI | 10/20/2026 | 10/21/2026 | IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type. |