Automated cyber signal feeds.
CVE ID :CVE-2026-55230 Published : Oct. 1, 2026, 6:42 p.m. | 38 minutes ago Description :Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb’s HTML sanitizer…
CVE ID :CVE-2026-104059 Published : Oct. 1, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending…
CVE ID :CVE-2026-97662 Published : Oct. 1, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate…
CVE ID :CVE-2026-104018 Published : Oct. 1, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 all versions up to 26.09. when configured to enforce…
CVE ID :CVE-2026-103922 Published : Oct. 1, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard…
CVE ID :CVE-2023-54403 Published : Sept. 30, 2026, 8:25 p.m. | 49 minutes ago Description :Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter…
CVE ID :CVE-2024-58387 Published : Sept. 30, 2026, 8:24 p.m. | 50 minutes ago Description :Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated…
CVE ID :CVE-2026-102115 Published : Sept. 30, 2026, 8:19 p.m. | 55 minutes ago Description :Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with…
CVE ID :CVE-2026-102120 Published : Sept. 30, 2026, 8:17 p.m. | 57 minutes ago Description :A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to…
CVE ID :CVE-2026-102121 Published : Sept. 30, 2026, 8:17 p.m. | 57 minutes ago Description :A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more…