Skip to main content
sentrytex
Start free

Live alert feed

The 20 most recent verified advisories from our monitoring pipeline — the same records subscribers receive by email. Every one links to its upstream source so you can check it yourself.

Refreshed every 5 minutes. Public advisory data only — no subscriber information appears on this page.

  1. CRITICALCVE-2018-25254CVSS 9.8

    CVE-2018-25254 — NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to

    cve.org
  2. HIGHCVE-2026-116843CVSS 8.7

    CVE-2026-116843 — Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defini

    Affects: Mistralcve.org
  3. HIGHCVE-2026-116818CVSS 8.8

    CVE-2026-116818 — OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t

    Affects: Clickhousecve.org
  4. CRITICALCVE-2026-116508CVSS 9.3

    CVE-2026-116508 — A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function su

    cve.org
  5. HIGHCVE-2026-116506CVSS 8.6

    CVE-2026-116506 — A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file

    cve.org
  6. HIGHCVE-2026-116505CVSS 8.5

    CVE-2026-116505 — A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file

    cve.org
  7. HIGHCVE-2026-116504CVSS 8.6

    CVE-2026-116504 — A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of

    cve.org
  8. HIGHestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-109780

    CVE-2026-109780 — Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

    cve.org
  9. HIGHestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-109774

    CVE-2026-109774 — Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and

    cve.org
  10. HIGHestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-109772

    CVE-2026-109772 — Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

    cve.org
  11. CRITICALCVE-2026-10757CVSS 9.8

    CVE-2026-10757 — There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may all

    Affects: Linux, Microsoftcve.org
  12. CRITICALCVE-2026-107656CVSS 9.6

    CVE-2026-107656 — An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6,

    cve.org
  13. CRITICALCVE-2026-112346CVSS 9.3

    CVE-2026-112346 — OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the Doc

    cve.org
  14. HIGHestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-107092

    CVE-2026-107092 — NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.

    cve.org
  15. CRITICALCVE-2026-116485CVSS 9.3

    CVE-2026-116485 — danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify

    cve.org
  16. CRITICALCVE-2026-116214CVSS 9.3

    CVE-2026-116214 — MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers t

    cve.org
  17. MEDIUMestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-70054

    CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability

    Affects: Microsoftcve.org
  18. MEDIUMestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-69923

    CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability

    Affects: Microsoftcve.org
  19. MEDIUMestimated — Severity estimated — no CVSS published for this advisory.CVE-2026-96311

    CVE-2026-96311 Windows Network List Service Tampering Vulnerability

    Affects: Microsoftcve.org
  20. HIGHCVE-2026-116235CVSS 8.5

    CVE-2026-116235 — A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the

    cve.org

Want only the ones that hit your stack, in your inbox?

Start your free trial