CVE-2026-112365High 7.2
Research and translation in progress – available shortly.
CVE tracker
New vulnerabilities – clearly explained
Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.
635published today
3402in the last 7 days
249of them critical
11newly exploited (7 days)
3402 vulnerabilities
CVE-2026-110533Medium 6.4
Research and translation in progress – available shortly.
CVE-2026-110305High 7.5
Research and translation in progress – available shortly.
CVE-2026-110001Medium 5.4
Research and translation in progress – available shortly.
CVE-2026-109984Medium 5.4
Research and translation in progress – available shortly.
CVE-2026-109592Medium 4.3
Research and translation in progress – available shortly.
CVE-2026-107630High 7.5
Research and translation in progress – available shortly.
CVE-2026-105894High 8.8
Research and translation in progress – available shortly.
CVE-2026-104744High 7.2
Research and translation in progress – available shortly.
CVE-2026-104739Medium 4.9
Research and translation in progress – available shortly.
CVE-2026-102918Medium 6.4
Research and translation in progress – available shortly.
CVE-2026-102905Medium 6.5
Research and translation in progress – available shortly.
CVE-2025-8574High 8.7
Research and translation in progress – available shortly.
CVE-2026-65566High 8.8
Research and translation in progress – available shortly.
CVE-2026-62055Medium 4.3
Research and translation in progress – available shortly.
CVE-2026-61826Critical 10.0
Bazarr: Missing authentication on Plex OAuth API allows config tampering and SSRF
Bazarr, a companion application to Sonarr and Radarr, did not require authentication on several Plex OAuth API endpoints. An unauthenticated attacker who can reach the web interface can clear the Plex credentials, set an attacker-chosen API key, or bind an attacker-controlled Plex account, and can change the Plex server URL. Attacker-controlled URLs then receive the configured API key in the X-Plex-Token header, which enables server-side request forgery and credential exposure. No user interaction is required.
morpheus65535 · Bazarr
CVE-2026-61806Medium 5.3
Research and translation in progress – available shortly.
CVE-2026-61805Medium 5.3
Research and translation in progress – available shortly.
CVE-2026-61804High 8.1
Research and translation in progress – available shortly.
CVE-2026-61803Medium 5.3
Research and translation in progress – available shortly.
CVE-2026-61789Medium 6.1
Research and translation in progress – available shortly.
CVE-2026-55551Medium 6.5
Research and translation in progress – available shortly.
CVE-2026-50000Medium 5.0
Research and translation in progress – available shortly.
CVE-2026-39375Medium 5.1
Research and translation in progress – available shortly.
CVE-2026-37468Not rated
Research and translation in progress – available shortly.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.
Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.