Vulnerabilities
Summary — last 7 days
New vulnerabilities4,825▼ 206 vs. last week
Critical / high2,040▼ 808 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)769▲ 661 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 1.3% | — | Ikuai8AI | 10/13/2026 | 10/16/2026 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: <= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code. | |
| Modified | Critical (9.8) | 2.9% | — | Ikuai8 Ikuaios | 6/29/2023 | 6/17/2026 | An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1. | |
| Modified | High (8.8) | 3.1% | — | Ikuai8 Ikuaios | 10/12/2022 | 6/17/2026 | iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability. | |
| Modified | High (7.5) | 1.0% | — | Ikuai8 Ikuaios | 4/6/2021 | 6/17/2026 | iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information. |