Vulnerabilities
Summary — last 7 days
New vulnerabilities3,516▼ 1,241 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)691▲ 631 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.9) | 0.35% | — | Flarum Extension ManagerAI | 10/19/2026 | 10/19/2026 | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem paths, installed… | |
| Deferred | High (8.8) | 0.20% | — | JoomlaAIRegularlabs Extension ManagerAI | 7/22/2026 | 7/27/2026 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could… | |
| Modified | High (9.3) | 11% | Exploit | Adobe Extension Manager CS5 | 8/27/2010 | 6/16/2026 | Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file. |