Trending vulnerabilities
The CVEs mentioned most in the forums and Telegram channels we monitored over the last 14 days.
DescriptionA pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.Affected versionsNo range specifiedCVSS7.5PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram3
DescriptionA pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application…Affected versionsNo range specifiedCVSS5.9PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram3
DescriptionA pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an applicatio…Affected versionsNo range specifiedCVSS5.9PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram3
DescriptionWordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.Product
WordPress CoreAffected versionsNo range specifiedCVSS5.9Exploit probability5.3%PublishedJul 17, 2026First seenJul 17, 2026Added to KEVJul 21, 2026Forum3Telegram0
DescriptionPHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing…ProductPHP Group PHPAffected versionsNo range specifiedCVSS9.2Exploit probability100%PublishedOct 21, 2026Forum3Telegram0
DescriptionIn the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period
tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the
child socket (newinet->inet_opt) without c…Affected versionsNo range specifiedCVSS9.8Exploit probability0.8%PublishedOct 15, 2026First seenOct 15, 2026Forum0Telegram2
DescriptionIn the Linux kernel, the following vulnerability has been resolved:
exec: Cleanup POSIX timers right after de_thread()
A per-thread CPU timer holds a reference to the PID of the thread it is
attached to and, while it is armed, its node i…Affected versionsNo range specifiedCVSS7.8Exploit probability0.2%PublishedOct 6, 2026First seenOct 6, 2026Forum0Telegram2
DescriptionQuest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authenticat…Affected versionsNo range specifiedCVSS8.8Exploit probability0.5%PublishedNov 4, 2026First seenNov 4, 2026Forum0Telegram2
DescriptionA vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuin…Affected versionsNo range specifiedPublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
DescriptionAuthentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated H…Affected versionsNo range specifiedPublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
DescriptionWanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled JSON url f…Affected versionsNo range specifiedCVSS10.0PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
DescriptionWanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into an innerHTM…Affected versionsNo range specifiedCVSS7.6PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
DescriptionA weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provide…Affected versionsNo range specifiedCVSS5.1PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
Descriptionsshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configuratio…Affected versionsNo range specifiedCVSS8.1Exploit probability1%PublishedNov 5, 2026First seenNov 5, 2026Forum0Telegram2
DescriptionThe WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote c…Affected versionsNo range specifiedCVSS10.0Exploit probability0.6%PublishedNov 6, 2026First seenNov 6, 2026Forum0Telegram2
DescriptionPHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it…ProductPHP Group PHPAffected versionsNo range specifiedCVSS9.2Exploit probability100%PublishedOct 21, 2026Forum2Telegram0
Showing 25 of 25 results
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.