Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical authentication bypass vulnerability, tracked as CVE-2026-33413, has been identified in etcd, a key-value store essential for many cloud-native systems and Kubernetes clusters. This flaw, which has a CVSS score of 8.8, allows unauthorized access to sensitive cluster APIs, enabling attacker...
On September 20, 2026, multiple critical vulnerabilities were disclosed in SxDevOps versions 1.0 and 1.1, including CVE-2026-93970, CVE-2026-93969, and CVE-2026-93971. These vulnerabilities allow for remote code execution (RCE) and the exploitation of hardcoded credentials, posing significant risks...
NivoCart versions up to 2.4.0 are affected by two vulnerabilities, CVE-2026-94105 and CVE-2026-94107, both published on 2026-09-20. CVE-2026-94105 is a medium-severity vulnerability allowing unauthenticated attackers to disable password recovery by manipulating the admin password reset controller. C...
Two vulnerabilities have been identified in the Meow Gallery WordPress plugin, affecting versions prior to 5.5.5. CVE-2026-92422, rated 6.5/10 on the CVSS scale, allows unauthenticated users to execute arbitrary shortcodes, potentially disclosing non-public gallery content. CVE-2026-92423, rated 2.7...
