Exploited: 178
LatestCVE-2026-107622 — BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
VulnFeed.org
AREN

JetBrains Hub vulnerabilities and fixes

Exploited and high-severity JetBrains Hub vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-123295In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpointFix availableJetBrains Hub
    1 min read
  2. 7.5CVE-2026-123296In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possibleFix availableJetBrains Hub
    1 min read
  3. 9.6CVE-2026-123294In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flowFix availableJetBrains Hub
    1 min read
Esc