Vulnerabilities
Summary — last 7 days
New vulnerabilities4,804▲ 1,790 vs. last week
Critical / high2,654▲ 1,132 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)209▲ 39 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (10) | 0.23% | — | Netboard CRMAI | 10/8/2026 | 10/8/2026 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract… |