Vulnerabilities
Summary — last 7 days
New vulnerabilities4,629▼ 554 vs. last week
Critical / high1,828▼ 1,122 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.5) | 0.32% | — | Tsi-coop TSI Dpdp CMSAI | 10/12/2026 | 10/14/2026 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be… | |
| Deferred | Medium (5.5) | 0.54% | — | Tsi-coop Tsi-dpdp-cmsAI | 9/2/2026 | 9/5/2026 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to… | |
| Deferred | Medium (5.5) | 0.80% | — | Tsi-coop Tsi-dpdp-cmsAI | 9/2/2026 | 9/3/2026 | A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.… | |
| Deferred | Medium (5.5) | 0.77% | — | Tsi-coop Tsi-dpdp-cmsAI | 9/2/2026 | 9/3/2026 | A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Compliance Console. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has… |