CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.
Use-after-free in Windows Ancillary Function Driver for WinSock. An authorized attacker can elevate privileges locally.
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall ASA and FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to insufficient error checking when processing HTTP requests. An attacker could exploit this by sending a crafted HTTP request to the VPN service.
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
An authentication issue was addressed with improved state management. This issue affects macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, and macOS Tahoe 26.6.1. A network attacker may be able to authenticate to Screen Sharing without valid credentials.
An incomplete patch for CVE-2026-18556 allows authentication bypass and account takeover in N-central versions up to 2026.3.1.
Authentication bypass using an alternate path or channel vulnerability in N-able N-central through version 2026.1 allows authentication bypass.
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
The web interface of Cisco Secure Firewall Management Center (FMC) contains static credentials for a low-privileged account, allowing an unauthenticated remote attacker to log in and access sensitive data. This vulnerability can be chained with other flaws for privilege escalation.
In JetBrains TeamCity before versions 2026.1.3 and 2025.11.7, unauthenticated remote code execution is possible via the agent polling protocol.
VeloCloud Orchestrator (VCO) on-prem has a vulnerability that allows a remote attacker to access privileged internal functionality, impacting the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and managed data. This issue is actively exploited.
Authentication bypass vulnerability in Check Point SmartConsole login. An unauthenticated remote attacker can obtain a login token and authenticate with full administrative privileges. The vulnerability is being actively exploited.
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with a SQL Injection in WP_Query (CVE-2026-60137), could allow SQL Injection and Remote Code Execution.
WordPress versions 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 fail to properly sanitize the author__not_in parameter of WP_Query. This could allow SQL Injection when a plugin or theme passes untrusted input to this parameter.
IBM Langflow OSS versions 1.0.0 through 1.10.0 allow unauthenticated attackers to chain the /api/v1/auto_login endpoint (generates SUPERUSER tokens) with /api/v1/validate/code (executes code via exec()), leading to remote code execution (RCE) on default installations.
An issue was discovered in DD-WRT before version 45724 in router/upnp/src/ssdp.c. An unsafe strcpy in UPnP handling allows an unauthenticated remote attacker to overflow an internal fixed buffer via an M-SEARCH request. Exploitation requires UPnP to be enabled (disabled by default, listening only on internal interfaces).
A post-authentication improper control of generation of code (Code Injection) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC). Under specific conditions, it could allow a remote authenticated attacker with administrator privileges to execute arbitrary OS commands.
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended locations.
A vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over the network due to weak authentication.
A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to execute code remotely over a network.