CVE Find is a real-time vulnerability database indexing 409 825 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 5496 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-111998 |
2026-10-18 12h17 +00:00 |
Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated r... |
9.8 |
Critical |
|
CVE-2026-110895 |
2026-10-18 11h16 +00:00 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i... SQL Injection |
8.5 |
High |
|
CVE-2026-110886 |
2026-10-18 11h16 +00:00 |
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot con... |
9.8 |
Critical |
|
CVE-2026-110372 |
2026-10-18 11h16 +00:00 |
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privile... Improper Privilege Management |
9.8 |
Critical |
|
CVE-2026-109894 |
2026-10-18 11h16 +00:00 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i... SQL Injection |
9.3 |
Critical |
|
CVE-2026-107436 |
2026-10-18 11h16 +00:00 |
Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials ... |
8.8 |
High |
|
CVE-2026-111911 |
2026-10-17 19h16 +00:00 |
phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registrat... Authorization problems |
9.8 |
Critical |
|
CVE-2026-111908 |
2026-10-17 19h16 +00:00 |
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authori... Authorization problems |
8.3 |
High |
|
CVE-2026-111884 |
2026-10-17 19h16 +00:00 |
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when c... |
8.3 |
High |
|
CVE-2026-104736 |
2026-10-17 04h16 +00:00 |
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inc... |
9.8 |
Critical |