Vulnerabilities
Summary — last 7 days
New vulnerabilities2,856▲ 220 vs. last week
Critical / high1,330▼ 101 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)237▲ 223 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.1% | — | NI Compactrio Firmware | 12/11/2020 | 6/17/2026 | Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely. | |
| Modified | Medium (6.1) | 0.71% | — | Huawei ATH FirmwareHuawei ATHHuawei RIO FirmwareHuawei PLK Firmware+2 | 5/25/2016 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus… |