CVE tracker

New vulnerabilities – clearly explained

Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.

447published today

3251in the last 7 days

227of them critical

10newly exploited (7 days)

1 vulnerability · Vendor: givanz

CVE-2026-110799Critical 9.830 Oct 2026, 16:16

Vvveb: Authentication bypass in password reset allows account takeover

Vvveb is a CMS with a page builder for websites, blogs and web shops. Versions before 1.0.8.7 do not properly validate the user and token GET parameters in the password reset function. According to the GitHub advisory, an attacker can supply PHP array parameters instead of strings to bypass the check, reset the password of arbitrary users and take over their accounts, including administrator accounts. No login or user interaction is required.

givanz · Vvveb

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed

Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.