Vulnerabilities

Summary — last 7 days

New vulnerabilities4,625▼ 675 vs. last week
Critical / high1,853▼ 1,198 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)728▲ 619 vs. last week
More filters
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
DeferredCritical (9.8)0.31%—Themerex TantraAI10/10/202610/13/2026
Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0.
ModifiedHigh (7.5)1.0%ExploitInstantrankingseo Infocus Real Estate5/3/20106/16/2026
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) and (2) password parameters. NOTE: some of these details are obtained from third party information.
Orbitaley — Vulnerabilities