THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,973 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-103820 — CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction in that a victim must extract a maliciously crafted file.
CVE-2026-103820Read original ↗ (opens in a new tab) - NVD
CVE-2026-103297 — CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result i…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-103297Read original ↗ (opens in a new tab) - NVD
CVE-2026-103296 — CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result i…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-103296Read original ↗ (opens in a new tab) - NVD
CVE-2026-103294 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
Medium · CVSS 3.1 5.9 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-103294Read original ↗ (opens in a new tab) - NVD
CVE-2026-102502 — CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result i…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
CVE-2026-102502Read original ↗ (opens in a new tab) - NVD
CVE-2026-102501 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
CVE-2026-102501Read original ↗ (opens in a new tab) - NVD
CVE-2026-100139 — CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application den…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100139Read original ↗ (opens in a new tab) - NVD
CVE-2026-100138 — CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application den…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100138Read original ↗ (opens in a new tab) - NVD
CVE-2026-100137 — CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application den…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100137Read original ↗ (opens in a new tab) - NVD
CVE-2026-100136 — CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application d…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100136Read original ↗ (opens in a new tab) - NVD
CVE-2026-100135 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100135Read original ↗ (opens in a new tab) - NVD
CVE-2026-100125 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
Medium · CVSS 3.1 5.9 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-100125Read original ↗ (opens in a new tab) - NVD
CVE-2026-100124 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100124Read original ↗ (opens in a new tab) - NVD
CVE-2026-100123 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100123Read original ↗ (opens in a new tab) - NVD
CVE-2026-100122 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100122Read original ↗ (opens in a new tab) - NVD
CVE-2026-100121 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100121Read original ↗ (opens in a new tab) - NVD
CVE-2026-100120 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100120Read original ↗ (opens in a new tab) - NVD
CVE-2026-100119 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100119Read original ↗ (opens in a new tab) - NVD
CVE-2026-100118 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100118Read original ↗ (opens in a new tab) - NVD
CVE-2026-100117 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100117Read original ↗ (opens in a new tab) - NVD
CVE-2026-100116 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
Medium · CVSS 3.1 5.9 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-100116Read original ↗ (opens in a new tab) - NVD
CVE-2026-100115 — CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypa…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100115Read original ↗ (opens in a new tab) - NVD
CVE-2026-100114 — CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypa…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100114Read original ↗ (opens in a new tab) - NVD
CVE-2026-100113 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100113Read original ↗ (opens in a new tab) - NVD
CVE-2026-97312 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-97312Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.