Exploited: 178
LatestCVE-2026-107622 — BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
VulnFeed.org
AREN

JetBrains Datalore vulnerabilities and fixes

Exploited and high-severity JetBrains Datalore vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.4CVE-2026-123282In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated sessionFix availableJetBrains Datalore
    1 min read
  2. 8.1CVE-2026-123280In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reportsFix availableJetBrains Datalore
    1 min read
  3. 7.5CVE-2026-123281In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount brokerFix availableJetBrains Datalore
    1 min read
  4. 9.0CVE-2026-123279In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaboratorsFix availableJetBrains Datalore
    1 min read
Esc