Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Siemens Software Center Uncontrolled Search Path Element Vulnerability CVE-2026-110936 | HighExploited | 1.0% | 14 days ago | |
Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-0322 | HighExploited | 1.7% | 15 days ago | |
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability CVE-2026-106931 | HighExploited | 2.5% | 15 days ago | |
Microsoft Windows Command Injection Vulnerability CVE-2026-96951 | HighExploited | 9.8% | 16 days ago | |
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CVE-2026-104935 | HighExploited | 86.8% | 16 days ago | |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88779 | HighExploited | 11.4% | 25 days ago | |
Apple Multiple Products Out-of-Bounds Write Vulnerability CVE-2026-86950 | HighExploited | 26.2% | 28 Sep, 2026 | |
Plex Media Server External Control of File Name or Path Vulnerability CVE-2026-96656 | HighExploited | 1.8% | 23 Sep, 2026 | |
WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 | HighExploited | 95.8% | 22 Sep, 2026 | |
Acronis Backup Incorrect Default Permissions Vulnerability CVE-2026-87886 | HighExploited | 0.2% | 17 Sep, 2026 | |
Google Pixel Improper Authorization Vulnerability CVE-2026-58704 | HighExploited | 0.6% | 15 Sep, 2026 | |
Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-87491 | HighExploited | 3.5% | 09 Sep, 2026 | |
Microsoft Windows Heap-Based Buffer Overflow Vulnerability CVE-2026-85880 | HighExploited | 0.4% | 08 Sep, 2026 | |
Microsoft Windows Link Following Vulnerability CVE-2026-81963 | HighExploited | 0.4% | 08 Sep, 2026 | |
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-67277 | HighExploited | 1.6% | 05 Sep, 2026 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2026-85046 | HighExploited | 1.8% | 03 Sep, 2026 | |
SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 | HighExploited | 9.9% | 01 Sep, 2026 | |
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-81578 | HighExploited | 83.7% | 28 Aug, 2026 | |
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability CVE-2026-73570 | HighExploited | 71.7% | 13 Aug, 2026 | |
JFrog Artifactory Improper Authentication Vulnerability CVE-2026-42018 | HighExploited | 9.8% | 12 Aug, 2026 | |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability CVE-2026-68820 | HighExploited | 0.3% | 11 Aug, 2026 | |
Microsoft SharePoint Code Injection Vulnerability CVE-2026-65660 | HighExploited | 8.2% | 11 Aug, 2026 | |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability CVE-2026-20349 | HighExploited | 1.0% | 11 Aug, 2026 | |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-18577 | HighExploited | 14.6% | 02 Aug, 2026 | |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-18556 | HighExploited | 7.9% | 01 Aug, 2026 | |
JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42016 | HighExploited | 8.6% | 27 Jul, 2026 | |
DD-WRT Stack-Based Buffer Overflow Vulnerability CVE-2021-27137 | HighExploited | 4.0% | 16 Jul, 2026 | |
SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 | HighExploited | 11.8% | 14 Jul, 2026 | |
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability CVE-2026-56155 | HighExploited | 0.3% | 14 Jul, 2026 | |
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback CVE-2026-59822, GHSA-7488-6r32-c95q, PYSEC-2026-3479 | HighExploited | 0.8% | 08 Jul, 2026 | PyPI litellm |
Linux Kernel Unspecified Vulnerability CVE-2026-53362 | HighExploited | 0.7% | 04 Jul, 2026 | |
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-8452 | HighExploited | 1.0% | 30 Jun, 2026 | |
Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 | HighExploited | 0.9% | 25 Jun, 2026 | |
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow CVE-2026-55255, GHSA-qrpv-q767-xqq2, PYSEC-2026-221 | HighExploited | 0.9% | 19 Jun, 2026 | PyPI langflow |
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 | HighExploited | 2.8% | 16 Jun, 2026 | |
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability CVE-2026-54420 | HighExploited | 1.4% | 14 Jun, 2026 | |
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 | HighExploited | 2.4% | 09 Jun, 2026 | |
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability CVE-2026-20245 | HighExploited | 25.3% | 04 Jun, 2026 | |
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability CVE-2026-28318 | HighExploited | 43.7% | 04 Jun, 2026 | |
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-20230 | HighExploited | 88.2% | 03 Jun, 2026 | |
Android Framework Integer Overflow Vulnerability CVE-2025-48595 | HighExploited | 1.9% | 01 Jun, 2026 | |
Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 | HighExploited | 10.2% | 23 May, 2026 | |
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability CVE-2026-45659 | HighExploited | 80.2% | 22 May, 2026 | |
Microsoft Defender Denial of Service Vulnerability CVE-2026-45498 | HighExploited | 63.1% | 20 May, 2026 | |
Microsoft Defender Link Following Vulnerability CVE-2026-41091 | HighExploited | 8.2% | 20 May, 2026 | |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2026-0257 | HighExploited | 95.0% | 13 May, 2026 | |
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability CVE-2026-6973 | HighExploited | 34.5% | 07 May, 2026 | |
LiteLLM: Authenticated command execution via MCP stdio test endpoints CVE-2026-42271, GHSA-v4p8-mg3p-g94g, PYSEC-2026-2599 | HighExploited | 91.4% | 25 Apr, 2026 | PyPI litellm |
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability CVE-2026-31431 | HighExploited | 98.1% | 22 Apr, 2026 | |
Microsoft Defender Insufficient Granularity of Access Control Vulnerability CVE-2026-33825 | HighExploited | 6.7% | 14 Apr, 2026 |