CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.
All High & Critical Critical High Exploited (KEV) Public exploit
-
CVE-2026-111314: cservit affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display (High, CVSS 7.2)
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atkp_product_producturl' parameter in all versions up to, and including, 3.9.2 due to…
-
CVE-2026-109999: nalam-1 AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot (High, CVSS 7.2)
The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via…
-
CVE-2014-125138: C97net qEngine CMS (High, CVSS 8.7)
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the…
-
CVE-2015-20129: CrushFTP (High, CVSS 8.6)
CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions because CSRF protection is disabled by default. Attackers can lure an authenticated administrator to a malicious…
-
CVE-2013-20007: Linksys WAG200G (High, CVSS 8.6)
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request…
-
CVE-2026-106013: artbees Jupiter X Core (Critical, CVSS 9.8)
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback…
-
CVE-2026-62765: Microsoft Edge (Chromium-based) (High, CVSS 7.5)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85898: Microsoft Edge (Chromium-based) (High, CVSS 8.8)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83831: Microsoft Edge (Chromium-based) (High, CVSS 8.8)
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112355: MembershipWorks (High, CVSS 8.7)
The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers to access member-only content through the WordPress REST API. Because the filter that strips protected content…
-
CVE-2026-112350: Sunhillo Corporation SureLine (High, CVSS 8.7)
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient…
-
CVE-2026-112351: Sunhillo Corporation SureLine (High, CVSS 8.7)
Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting…
-
CVE-2026-112352: Sunhillo Corporation SureLine (Critical, CVSS 9.1)
Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a…
-
CVE-2026-117515: oretnom23 php-travel-agency-system (Medium, CVSS 5.5)
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible…
-
CVE-2026-117516: oretnom23 php-travel-agency-system (Medium, CVSS 5.5)
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes…
-
CVE-2026-48360: Adobe Connect Desktop App (Critical, CVSS 9.6)
Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could…
-
CVE-2026-117514: oretnom23 php-travel-agency-system (Medium, CVSS 5.5)
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/ticket_id/emp_id/salary_id/page_id leads to sql…
-
CVE-2026-117512: oretnom23 php-travel-agency-system (Medium, CVSS 5.5)
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible…
-
CVE-2026-117513: oretnom23 php-travel-agency-system (Medium, CVSS 5.5)
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name can lead to…
-
CVE-2026-112353: GFI USA, LLC GFI KerioConnect (Medium, CVSS 6.2)
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session…
-
CVE-2026-105489: Adobe Campaign Classic (Critical, CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of…
-
CVE-2026-105779: Adobe Campaign Classic (Critical, CVSS 9.1)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker…
-
CVE-2026-105780: Adobe Campaign Classic (Critical, CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability…
-
CVE-2026-105781: Adobe Campaign Classic (Critical, CVSS 10)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of…
-
CVE-2026-104350: Adobe Campaign Classic (Critical, CVSS 9.3)
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or…
-
CVE-2026-104351: Adobe Campaign Classic (Critical, CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A…
-
CVE-2026-104353: Adobe Campaign Classic (Critical, CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context…
-
CVE-2026-104354: Adobe Campaign Classic (Critical, CVSS 9.1)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of…
-
CVE-2026-117511: desmondmorris node-tesseract (Medium, CVSS 5.5)
A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the…
-
CVE-2026-107672: Autodesk Fusion Post Processor Utility (High, CVSS 8.8)
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the…
-
CVE-2026-117604: getgrav grav (High, CVSS 8.7)
Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse proxy, remote requests…
-
CVE-2026-117601: spesmilo electrum (Critical, CVSS 9.3)
Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction…
-
CVE-2026-117564: buqiyuan nest-admin (Critical, CVSS 9.3)
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret…
-
CVE-2026-117553: Umbraco-CMS (High, CVSS 7.7)
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links…
-
CVE-2026-92546: Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally (High, CVSS 7.5)
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.
-
High CVSS 7.5 EPSS 0.3% Remote Attacker Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.
CVE-2026-100164: Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis (High, CVSS 7.5)
Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8.
-
CVE-2026-109995: wplakeorg Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode (High, CVSS 7.2)
The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due…
-
CVE-2026-117536: redaxo core (High, CVSS 8.6)
REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is set, while the update…
-
CVE-2026-117540: darylldoyle svg-sanitizer (High, CVSS 8.7)
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP…
-
CVE-2026-117532: redaxo core (Critical, CVSS 9.3)
REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a…