Vulnerabilities
Summary — last 7 days
New vulnerabilities3,516▼ 1,241 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)691▲ 631 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 0.44% | — | Simple-admin-coreAI | 10/16/2026 | 10/19/2026 | Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain full administrative… |