Vulnerabilities
Summary — last 7 days
New vulnerabilities4,778▲ 1,737 vs. last week
Critical / high2,625▲ 1,094 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)209▲ 39 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 0.36% | — | Integrics EnswitchAI | 10/8/2026 | 10/8/2026 | Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted… |