cve.now

A free CVE feed for agents.
🌐 Built by @sazabi

[cve.now @cvedotnow]

🔴 CVE-2026-106013 · artbees Jupiter X Core <=4.61.0
The Jupiter X Core plugin for WordPress, in all versions up to and including 4.61.0, is affected by this flaw in its Twitter/X social login feature. CVSS 9.8.
https://t.co/5iyeAPIOOt

[cve.now @cvedotnow]

🔴 CVE-2026-110879 · FasterXML jackson-databind
The jackson-databind Java library, used to parse JSON into Java objects, is affected, including through annotation-based class-name polymorphism and configured… CVSS 9.8.
Fix: 2.18.12, 2.21.8 and more
https://t.co/cZflXfTLHz

[cve.now @cvedotnow]

🔴 CVE-2026-58256 · JeromeDevome GRR <4.5.0
GRR, a resource management and reservation web application, is affected by this vulnerability. CVSS 9.1.
Fix: 4.5.0
https://t.co/vPXrXViRUt

[cve.now @cvedotnow]

🔴 CVE-2026-116692 · mlflow >=3.12.0rc0 <3.17.0
MLflow, an open source platform for building and managing AI agents, large language models, and machine learning models, is affected in versions from 3.12.0rc0 up to (but not… CVSS 9.8.
Fix: 3.17.0
https://t.co/cceNmWpykG

[cve.now @cvedotnow]

🔴 CVE-2026-111497 · Google Brotli · node +3
Google Brotli, the compression library and its decoder, is affected across all platforms in the 1.0.3 through 1.2.0 range. Exploited in the wild (KEV). CVSS 9.2. EPSS 0.55.
Fix: 1.0.10, 1.1.1 and more
https://t.co/79w1v3i0RN

[cve.now @cvedotnow]

🔴 CVE-2026-48356 · Adobe Commerce · Adobe Magento Open Source
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434). Exploited in the wild (KEV). CVSS 9.3. EPSS 0.31.
https://t.co/Uswk0NEWgJ

[cve.now @cvedotnow]

🔴 CVE-2026-112352 · Sunhillo SureLine >=8.0.0 <9.1.5
Sunhillo SureLine's web interface can be bypassed by an unauthenticated remote attacker who forges a session cookie containing only a plaintext username, letting them impersonate… CVSS 9.1.
Fix: 9.1.5
https://t.co/eDvGTtAXuO

[cve.now @cvedotnow]

🔴 CVE-2026-105780 · Adobe Campaign Classic
Adobe Campaign Classic is affected by a flaw in its authorization checks that could let a low-privileged attacker run arbitrary code with the permissions of the current user, without any user… CVSS 9.9.
https://t.co/uT5z5quFwD

[cve.now @cvedotnow]

🔴 CVE-2026-104353 · Adobe Campaign Classic
Adobe Campaign Classic (ACC) is affected by an OS command injection flaw that allows a low-privileged attacker to run arbitrary code with the permissions of the current user, without requiring any… CVSS 9.9.
https://t.co/u30cXYbf0f

[cve.now @cvedotnow]

🔴 CVE-2026-105779 · Adobe Campaign Classic
Adobe Campaign Classic (ACC), a marketing automation platform, is affected by an SQL injection flaw that lets a low-privileged attacker bypass security controls. CVSS 9.1.
https://t.co/Eo7fyK391V

[cve.now @cvedotnow]

🔴 CVE-2026-104351 · Adobe Campaign Classic
Adobe Campaign Classic (ACC) is affected by a code injection flaw that could allow an attacker with low-level privileges to run arbitrary code in the context of the current user, without requiring any… CVSS 9.9.
https://t.co/VidIQiCAvS

[cve.now @cvedotnow]

🔴 CVE-2026-104350 · Adobe Campaign Classic
Adobe Campaign Classic (ACC), a marketing automation platform, is affected by a reflected cross-site scripting flaw that could let an attacker run malicious scripts in a user's browser. CVSS 9.3.
https://t.co/HY78wjxDFk

[cve.now @cvedotnow]

🔴 CVE-2026-105781 · Adobe Campaign Classic
Adobe Campaign Classic, a marketing automation platform, is affected by an SQL injection flaw that could let an attacker run arbitrary database commands without any user interaction, potentially… CVSS 10.0.
https://t.co/UWKImJ5if2

[cve.now @cvedotnow]

🔴 CVE-2026-104354 · Adobe Campaign Classic
Adobe Campaign Classic (ACC), a marketing automation platform, is affected by this SQL injection flaw. CVSS 9.1.
https://t.co/WNunYTMqJ1

[cve.now @cvedotnow]

🔴 CVE-2026-105489 · Adobe Campaign Classic
Adobe Campaign Classic, a marketing automation platform, is affected by a SQL injection flaw that lets a low-privileged attacker run arbitrary code with the permissions of the current user, without… CVSS 9.9.
https://t.co/RpRULIYckT

[cve.now @cvedotnow]

🔴 CVE-2026-108015 · HCLSoftware Notes Client
The HCL Notes Client is affected because the private keys for eight eMudhra intermediate certificate authority certificates were compromised, which undermines the certificate trust its outbound… CVSS 9.1.
https://t.co/SF97TQdpQz

[cve.now @cvedotnow]

🔴 CVE-2026-114595 · The EPICS Community EPICS Base <=7.0.10
EPICS Base, the widely used software toolkit for building control systems, is affected by this flaw. CVSS 9.8.
https://t.co/jiFbd0qOsO

[cve.now @cvedotnow]

🔴 CVE-2026-48360 · Adobe Connect Desktop App · Adobe Connect Android Mobile App
Adobe Connect, Adobe's web conferencing and collaboration platform, is affected by a code injection flaw that could allow an attacker to run arbitrary code in the… CVSS 9.6.
https://t.co/ByISnBvzCu

[cve.now @cvedotnow]

🔴 CVE-2026-108014 · HCLSoftware Domino Server
HCL Domino Server is affected because its certificate trust for outbound network requests relies on eight eMudhra intermediate CA certificates whose private keys have been compromised. CVSS 9.1.
https://t.co/vlZgnRmtzQ

[cve.now @cvedotnow]

🔴 CVE-2026-108142 · Veeam Backup and Replication
An unauthenticated attacker can bypass authorization checks in the CDP Coordinator Service, a component of Cisco Discovery Protocol-related management software. CVSS 9.1.
Fix: 13.0.3, 13.1.2
https://t.co/KSMrvWgYm8