IT SBIT Services
Schneeberger
DEEN
CVE tracker

New vulnerabilities – clearly explained

Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA, the probability of exploitation (EPSS) and public exploits – each one researched individually: what is affected, what helps, what to do.

98published today
3,428in the last 7 days
16,374in the last 30 days
254critical (7 days)
9newly exploited (7 days)
300with a public exploit (30 days)

New CVEs in the last 30 days by severity

  • Critical
  • High
  • Medium
  • Low
  • Not rated
01,0002,0003,000Sat, 3 Oct 2026: 115 CVE (Critical 5, High 45, Medium 57, Low 8)3 OctSun, 4 Oct 2026: 68 CVE (Critical 13, High 16, Medium 28, Low 11)Mon, 5 Oct 2026: 405 CVE (Critical 31, High 119, Medium 210, Low 45)Tue, 6 Oct 2026: 1,014 CVE (Critical 105, High 371, Medium 345, Low 38, Not rated 155)Wed, 7 Oct 2026: 340 CVE (Critical 53, High 131, Medium 145, Low 9, Not rated 2)Thu, 8 Oct 2026: 497 CVE (Critical 62, High 194, Medium 220, Low 21)8 OctFri, 9 Oct 2026: 315 CVE (Critical 42, High 152, Medium 105, Low 11, Not rated 5)Sat, 10 Oct 2026: 412 CVE (Critical 78, High 143, Medium 178, Low 13)Sun, 11 Oct 2026: 229 CVE (Critical 16, High 73, Medium 101, Low 39)Mon, 12 Oct 2026: 674 CVE (Critical 48, High 264, Medium 282, Low 80)Tue, 13 Oct 2026: 2,303 CVE (Critical 170, High 1,361, Medium 729, Low 43)13 OctWed, 14 Oct 2026: 824 CVE (Critical 92, High 374, Medium 285, Low 30, Not rated 43)Thu, 15 Oct 2026: 546 CVE (Critical 51, High 232, Medium 244, Low 19)Fri, 16 Oct 2026: 465 CVE (Critical 53, High 179, Medium 219, Low 14)Sat, 17 Oct 2026: 100 CVE (Critical 4, High 42, Medium 50, Low 4)Sun, 18 Oct 2026: 549 CVE (Critical 10, High 55, Medium 65, Low 19, Not rated 400)18 OctMon, 19 Oct 2026: 437 CVE (Critical 29, High 128, Medium 204, Low 66, Not rated 10)Tue, 20 Oct 2026: 1,923 CVE (Critical 169, High 813, Medium 812, Low 127, Not rated 2)Wed, 21 Oct 2026: 542 CVE (Critical 50, High 218, Medium 225, Low 47, Not rated 2)Thu, 22 Oct 2026: 492 CVE (Critical 69, High 160, Medium 206, Low 55, Not rated 2)Fri, 23 Oct 2026: 492 CVE (Critical 40, High 169, Medium 90, Low 27, Not rated 166)23 OctSat, 24 Oct 2026: 73 CVE (Critical 12, High 19, Medium 35, Low 6, Not rated 1)Sun, 25 Oct 2026: 131 CVE (Critical 3, High 31, Medium 66, Low 26, Not rated 5)Mon, 26 Oct 2026: 738 CVE (Critical 21, High 130, Medium 245, Low 55, Not rated 287)Tue, 27 Oct 2026: 648 CVE (Critical 69, High 188, Medium 177, Low 33, Not rated 181)Wed, 28 Oct 2026: 626 CVE (Critical 35, High 215, Medium 209, Low 31, Not rated 136)28 OctThu, 29 Oct 2026: 537 CVE (Critical 66, High 191, Medium 218, Low 22, Not rated 40)Fri, 30 Oct 2026: 669 CVE (Critical 44, High 216, Medium 259, Low 30, Not rated 120)Sat, 31 Oct 2026: 112 CVE (Critical 11, High 44, Medium 51, Low 1, Not rated 5)Sun, 1 Nov 2026: 98 CVE (Critical 8, High 24, Medium 27, Low 15, Not rated 24)1 Nov

Per day (UTC); hover over a bar for the figures.

Show as table
DayCriticalHighMediumLowNot ratedTotal
Sun, 1 Nov 202682427152498
Sat, 31 Oct 202611445115112
Fri, 30 Oct 20264421625930120669
Thu, 29 Oct 2026661912182240537
Wed, 28 Oct 20263521520931136626
Tue, 27 Oct 20266918817733181648
Mon, 26 Oct 20262113024555287738
Sun, 25 Oct 202633166265131
Sat, 24 Oct 20261219356173
Fri, 23 Oct 2026401699027166492
Thu, 22 Oct 202669160206552492
Wed, 21 Oct 202650218225472542
Tue, 20 Oct 202616981381212721,923
Mon, 19 Oct 2026291282046610437
Sun, 18 Oct 202610556519400549
Sat, 17 Oct 20264425040100
Fri, 16 Oct 202653179219140465
Thu, 15 Oct 202651232244190546
Wed, 14 Oct 2026923742853043824
Tue, 13 Oct 20261701,3617294302,303
Mon, 12 Oct 202648264282800674
Sun, 11 Oct 20261673101390229
Sat, 10 Oct 202678143178130412
Fri, 9 Oct 202642152105115315
Thu, 8 Oct 202662194220210497
Wed, 7 Oct 20265313114592340
Tue, 6 Oct 2026105371345381551,014
Mon, 5 Oct 202631119210450405
Sun, 4 Oct 202613162811068
Sat, 3 Oct 20265455780115

3,428 vulnerabilities

CVE-2026-110186Critical 9.8

IBM Langflow OSS: Code injection via code generation enables remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw (CWE-94) in how code is generated. A remote attacker can use it to execute arbitrary code on the server, with a CVSS 3.1 base score of 9.8 from IBM. The official record does not state that authentication is required, but a secondary source describes it as reachable without login, so treat every instance as exposed until verified. VulDB scores the issue lower (7.3), and the CVE record was published only recently.

IBM · Langflow OSS

CVE-2026-109891Medium 6.4

Research and translation in progress – available shortly.

CVE-2026-108494High 7.1

Research and translation in progress – available shortly.

CVE-2026-107329High 8.8Public exploit

Langflow OSS: Code injection allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) that lets a remote attacker with a valid low-privilege account execute arbitrary code on the server. No user interaction is required. Code runs inside the Langflow process, which can expose workflow data, credentials and connected model, database or tool services. Sources list CVSS 8.8 or 9.9 depending on the scope assessment.

IBM · Langflow OSS

CVE-2026-107328High 8.8Public exploit

IBM Langflow OSS: Code injection via eval/exec allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) in the eval/exec code path. An authenticated remote attacker with low privileges can inject code that is executed on the server, which is rated with high impact on confidentiality, integrity and availability. No user interaction is required, but the attacker needs a valid account on the Langflow instance.

IBM · Langflow OSS

CVE-2026-107327High 8.8Public exploit

IBM Langflow OSS: Missing authorization allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). A remote attacker with a valid, low-privileged account can execute arbitrary code on the server. The IBM record does not name the vulnerable feature. Code execution would run with the privileges of the Langflow process, which typically holds LLM API keys and flow data.

IBM · Langflow OSS

CVE-2026-107326High 8.8Public exploit

Langflow OSS: OS command injection enables remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an OS command injection flaw (CWE-78). An authenticated remote attacker can inject operating system commands and execute arbitrary code on the server, with full impact on confidentiality, integrity and availability. Exploitation requires a valid user account on the Langflow instance.

IBM · Langflow OSS

CVE-2026-107042High 7.5

Research and translation in progress – available shortly.

CVE-2026-107041Not rated

Research and translation in progress – available shortly.

CVE-2026-107040Not rated

Research and translation in progress – available shortly.

CVE-2026-107039High 7.5

Research and translation in progress – available shortly.

CVE-2026-107038Not rated

Research and translation in progress – available shortly.

CVE-2026-107037High 7.5

Research and translation in progress – available shortly.

CVE-2026-107036Not rated

Research and translation in progress – available shortly.

CVE-2026-107035Not rated

Research and translation in progress – available shortly.

CVE-2026-107034Critical 9.1

Leafpad: Exported Android component allows writing notes without permission

Leafpad for Android, version 1.21, exports an activity that needs no permission. Any app installed on the same device can send text to it, and the text is saved as a new note in the app's database without user interaction. The reporter demonstrated this with a test app, and the injected notes persisted after a restart. The NVD score of 9.1 assumes a network attack, while another source rates the attack as local, so the actual exposure is still disputed.

Marcus Radisch · Leafpad

CVE-2026-107033Not rated

Research and translation in progress – available shortly.

CVE-2026-107032Critical 9.1

BulkShare Android app: Improper export of activity allows link queue injection

BulkShare 2.1.0 for Android exports the ShareActivity component without permission protection, so any app installed on the same device can invoke it without user interaction and insert arbitrary text into the app's link queue. The injected links can later be shared by the user through the app, which allows manipulated data flow. The NVD status is Deferred and the CVSS score is not confirmed; the product name and version mapping in the CVE conflict with the upstream listings and are unverified.

Alex Gherghisan · BulkShare

CVE-2026-107030Not rated

Research and translation in progress – available shortly.

CVE-2026-107029Not rated

Research and translation in progress – available shortly.

CVE-2026-107028Critical 9.1

ShoppingList: Exported Android activity allows unauthorized shopping list import

Version 11.0 (versionCode 11) of the ShoppingList Android app exports an import activity without permission protection. Any app installed on the same device can send a crafted shopping list to it, which is then written to the local database and shown to the user without confirmation. The attacker cannot read existing lists or run code, and the attack requires a locally installed app.

wbpxre150 · ShoppingList

CVE-2026-107027Not rated

Research and translation in progress – available shortly.

CVE-2026-107026High 7.5

Research and translation in progress – available shortly.

Sources

The tracker combines official, freely usable data sources – updated continuously:

This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touchRSS feed