Vulnerabilities

Summary — last 7 days

New vulnerabilities5,239▲ 2,494 vs. last week
Critical / high2,939▲ 1,613 vs. last week
New active exploitation (KEV)11▲ 7 vs. last week
Unscored (no CVSS)219▲ 45 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisCritical (9.3)0.30%—Gvisor-tap-vsock GvproxyAI10/9/202610/12/2026
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.
Orbitaley — Vulnerabilities