Vulnerabilities
Summary — last 7 days
New vulnerabilities4,609▼ 730 vs. last week
Critical / high1,815▼ 1,263 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)741▲ 640 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.6) | 1.7% | — | Openspug SpugAI | 10/11/2026 | 10/14/2026 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted… | |
| Deferred | High (8.7) | 1.3% | — | SpugAI | 9/13/2026 | 9/23/2026 | Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/run_test/ endpoint to execute… |