Vulnerabilities
Summary — last 7 days
New vulnerabilities5,337▲ 2,481 vs. last week
Critical / high3,000▲ 1,638 vs. last week
New active exploitation (KEV)7▼ 1 vs. last week
Unscored (no CVSS)186▼ 4 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Undergoing Analysis | Critical (9.1) | 0.23% | — | Spring Projects Spring Security SamlAI | 10/9/2026 | 10/15/2026 | The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity. Any relying party using setMaxAgeOffset to enforce re-authentication would silently accept sessions of any age, bypassing step-up authentication… |