Vulnerabilities
Summary — last 7 days
New vulnerabilities4,778▲ 1,737 vs. last week
Critical / high2,625▲ 1,094 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)209▲ 39 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.8) | 0.25% | — | Akin Software OctocloudAI | 10/8/2026 | 10/8/2026 | Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07. | |
| Deferred | High (8.6) | 0.35% | — | Akinsoft OctocloudAI | 9/2/2025 | 6/17/2026 | Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01. | |
| Deferred | Medium (4.7) | 0.15% | — | Akinsoft OctocloudAI | 9/2/2025 | 6/17/2026 | Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01. | |
| Deferred | Medium (4.3) | 0.19% | — | Akinsoft OctocloudAI | 9/2/2025 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS). This issue affects OctoCloud: from s1.09.01 before v1.11.01. | |
| Deferred | Medium (4.7) | 0.24% | — | Akinsoft OctocloudAI | 9/2/2025 | 9/30/2026 | Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01. |