This page offers a live ATOM feed of the latest CVEs and Vulnerabilities from cvefeed.io. HIGH or CRITICAL
- CVE-2026-59109 - Zalktis: SQL injection via partner-controlled fields in imported e-invoices
- CVE-2026-73670 - CMS Admin SQL Injection via db_data.php table_name Parameter
- CVE-2026-73570 - Zimbra Collaboration Remote Code Execution Vulnerability
- CVE-2026-73514 - PostGIS address_standardizer Out-of-Bounds Write via standardize_address()
- CVE-2026-55402 - Secure Access Out-of-Bounds Read Vulnerability
- CVE-2026-70463 - rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
- CVE-2026-70461 - rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
- CVE-2026-70454 - rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
- CVE-2026-70452 - rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
- CVE-2026-63423 - Lenovo Accessories and Display Manager for Enterprise Local Privilege Escalation
- CVE-2026-53803 - rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
- CVE-2026-53801 - rsync < 3.5.0 Symlink Race Condition Directory Traversal
- CVE-2026-53795 - rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest