Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 CVE-2026-38715

CVE-2026-38715_CVE-2026-38715

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerabili...

n/a n/a n/a CVE
CRITICAL 9.8 CVE-2026-38714

CVE-2026-38714_CVE-2026-38714

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerabili...

n/a n/a n/a CVE
MEDIUM 5.1 CVE-2026-11982

Stored XSS via missing XSS safety check in Admin2 Pages API partial validation_CVE-2026-11982

Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.

Grav grav-plugin-api 1.7.52 CVE
HIGH 7.5 CVE-2025-53114

CometD has acknowledgement extension out of memory_CVE-2025-53114

CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0....

cometd cometd >= 5.0.0, < 5.0.23 CVE
HIGH 8.7 CVE-2025-32437

AutoGPT has a DoS vulnerability in MediaDurationBlock_CVE-2025-32437

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `MediaD...

Significant-Gravitas AutoGPT < 0.6.63 CVE
HIGH 7.1 CVE-2025-32436

AutoGPT has a DoS vulnerability in AddAudioToVideoBlock_CVE-2025-32436

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `AddAud...

Significant-Gravitas AutoGPT < 0.6.63 CVE
HIGH 8.7 CVE-2025-32424

AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock_CVE-2025-32424

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, Screens...

Significant-Gravitas AutoGPT < 0.6.63 CVE
HIGH 8.7 CVE-2025-32422

AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock_CVE-2025-32422

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `StepTh...

Significant-Gravitas AutoGPT < 0.6.63 CVE
HIGH 8.7 CVE-2025-32392

AutoGPT has a DoS vulnerability in LoopVideoBlock_CVE-2025-32392

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT...

Significant-Gravitas AutoGPT < 0.6.63 CVE
CRITICAL 9.3 CVE-2026-54390

JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer_CVE-2026-54390

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malic...

JTL Software JTL Shop 5.0.0 CVE