Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-09-28 00:21Z
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-64812 — JetBrains: In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64812

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session CVSSv3.1 10.0 (CRITICAL)

CWECWE 306VNDJetbrainsTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-64809 — JetBrains: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64809

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter CVSSv3.1 8.4 (HIGH)

CWECWE 829VNDJetbrainsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-64808 — JetBrains: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling CVSSv3.1 8.4 (HIGH)

CWECWE 829VNDJetbrainsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-64806 — JetBrains: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64806

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter CVSSv3.1 8.4 (HIGH)

CWECWE 829VNDJetbrainsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-64805 — JetBrains: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64805

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling CVSSv3.1 8.4 (HIGH)

CWECWE 829VNDJetbrainsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-64804 — JetBrains: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64804

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling CVSSv3.1 8.4 (HIGH)

CWECWE 829VNDJetbrainsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-61951 — Privilege: Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61951

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-61950 — SQL: Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61950

Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-61949 — SQL: Unauthenticated SQL Injection in Bookly <= 27.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61949

Unauthenticated SQL Injection in Bookly <= 27.7 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-61948 — SQL: Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61948

Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59555 — Arbitrary: Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59555

Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions. CVSSv3.1 10.0 (CRITICAL)

CWECWE 22VNDArbitraryTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-59545 — Broken: Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59545

Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 288VNDBrokenTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59544 — PHP: Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59544

Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59543 — Subscriber: Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59543

Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 94VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-59541 — Subscriber: Privilege Escalation in WP BASE Booking <= 6.3.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59541

Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 266VNDSubscriberTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59540 — Privilege: Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59540

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59526 — SQL: Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59526

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59525 — SQL: Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59525

Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-59514 — SQL: Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59514

Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-23
2026-07-23 12:18Z
HIGH

CVE-2026-57785 — Site: Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-57785

Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-07-23
2026-07-23 12:18Z
CRIT

CVE-2026-57784 — Site: Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-57784

Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions. CVSSv3.1 9.6 (CRITICAL)

CWECWE 352TYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-07-23
2026-07-23 12:17Z
CRIT

CVE-2026-27064 — Editor: Arbitrary File Upload in Mailster <= 4.1.17 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27064

Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. CVSSv3.1 9.1 (CRITICAL)

CWECWE 434VNDEditorTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-07-23
2026-07-23 12:17Z
HIGH

CVE-2026-25405 — Contributor: SQL Injection in eRoom <= 1.7.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25405

Contributor SQL Injection in eRoom <= 1.7.1 versions. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDContributorTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-07-23
2026-07-23 12:17Z
HIGH

CVE-2026-24552 — Contributor: SQL Injection in Create by Mediavine <= 2.5.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24552

Contributor SQL Injection in Create by Mediavine <= 2.5.3 versions. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDContributorTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-07-23
2026-07-23 11:57Z
CRIT

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Rapid7 Research·rapid7.comCVE-2026-16232CVE-2026-62144CVE-2026-62145in the wild0day

Check Point released emergency patches for CVE-2026-16232, a critical authentication bypass in SmartConsole (CVSS 9.1) that allows unauthenticated remote attackers to obtain admin tokens and full management server access. The vulnerability is actively exploited in the wild and was added to CISA's KEV list with a 3-day remediation deadline. Two additional critical/high-severity vulnerabilities (CVE-2026-62144, CVE-2026-62145) were patched simultaneously.

SRFApplicationTACTA0001SRFNetworkSWSmartconsoleVNDCheckpointTYPVulnerabilityTYPAdvisorySTGInitial Access
92
Edit Score