BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 07:54 UTC

54,471 CVEs published in the 120 days to Nov 5, 2026 · page 16 of 2,179

  1. PublishedNov 5, 2026
    CVE-2026-1166178.1 HIGH
    The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_options_update`, writes the attacker-controlled `stm_dealer_logo_path` parameter directly to user meta without an ownership check binding the submitted path to the submitting user — unlike the `stm_payment_status` and `stm_lost_password_hash` fields, this field is not gated by a `manage_options` or `edit_users` capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete image files belonging to other users under `wp-content/uploads` — including other users' avatars, dealer logos, and uploaded media — by storing a crafted path via their own profile and then triggering `unlink()` through the become-dealer form on their author page. Note that the two path guards (`stm_mvl_is_path_within_uploads` and `stm_mvl_is_allowed_image_file`) do restrict the attack surface to files with an image extension that resolve within the uploads basedir; files outside that directory, such as `wp-config.php` or plugin PHP files, cannot be reached.
    ScoreSeverityVersionVector String
    8.1HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
  2. PublishedNov 5, 2026
    CVE-2026-1048126.4 MEDIUM
    The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi_media' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The wp_kses_post sanitization applied at save time operates only on array leaf values, leaving array keys entirely unsanitized; the injected key is then rendered directly into an id="filelist-<KEY>" HTML attribute without esc_attr() in Redux_Multi_Media::render(), allowing attribute breakout.
    ScoreSeverityVersionVector String
    6.4MEDIUM3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
  3. PublishedNov 5, 2026
    CVE-2026-1222362.1 LOW
    A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 1.25.0 will fix this issue. The name of the patch is c5efa3ae415def0a903c82d2b17b748e663b1995. Upgrading the affected component is recommended.
    ScoreSeverityVersionVector String
    2.1LOW4.0CNACVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    6.3MEDIUM3.1CNACVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
    5.8MEDIUM2.0CNAAV:A/AC:L/Au:N/C:P/I:P/A:P
  4. PublishedNov 5, 2026
    CVE-2026-1221912.1 LOW
    A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
    ScoreSeverityVersionVector String
    2.1LOW4.0CNACVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    6.3MEDIUM3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    6.5MEDIUM2.0CNAAV:N/AC:L/Au:S/C:P/I:P/A:P
  5. PublishedNov 5, 2026
    CVE-2026-1221901.9 LOW
    A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
    ScoreSeverityVersionVector String
    1.9LOW4.0CNACVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
    2.4LOW3.1CNACVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
    3.3LOW2.0CNAAV:N/AC:L/Au:M/C:N/I:P/A:N
  6. PublishedNov 5, 2026
    CVE-2026-69068
    Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
  7. PublishedNov 5, 2026
    CVE-2026-69066
    Memory corruption in GPU driver due to improper validation of VMID reservation.
  8. PublishedNov 5, 2026
    CVE-2026-69050
    Out-of-bounds memory access in a device driver due to improper resource state tracking.
  9. PublishedNov 5, 2026
    CVE-2026-69044
    In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
  10. PublishedNov 5, 2026
    CVE-2026-69043
    In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
  11. PublishedNov 5, 2026
    CVE-2026-69025
    In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
  12. PublishedNov 5, 2026
    CVE-2026-69006
    Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
  13. PublishedNov 5, 2026
    CVE-2026-69005
    Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
  14. PublishedNov 5, 2026
    CVE-2026-69002
    Incorrect authorization in Samsung framework services due to missing permission checks
  15. PublishedNov 5, 2026
    CVE-2026-68994
    A double free vulnerability in NPU driver due to improper pointer management (941)
  16. PublishedNov 5, 2026
    CVE-2026-68993
    A double free vulnerability in NPU driver due to improper pointer management (940)
  17. PublishedNov 5, 2026
    CVE-2026-68991
    In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
  18. PublishedNov 5, 2026
    CVE-2026-68990
    In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
  19. PublishedNov 5, 2026
    CVE-2026-68985
    In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
  20. PublishedNov 5, 2026
    CVE-2026-68984
    In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
  21. PublishedNov 5, 2026
    CVE-2026-48186
    Improper handling of messages before AS security activation can cause unexpected behavior
  22. PublishedNov 5, 2026
    CVE-2026-48183
    Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
  23. PublishedNov 5, 2026
    CVE-2026-48179
    In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
  24. PublishedNov 5, 2026
    CVE-2026-48178
    Out of bound access in PPC due to race condition in global variable access
  25. PublishedNov 5, 2026
    CVE-2026-48176
    A memory corruption vulnerability caused by improper validation of messages

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:46 UTC.