Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 03:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

151-75% vs 7-day avg of 598

2 critical, 41 high, 61 medium, 27 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Low	2.2	CVE-2026-21812	HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP HCL Software, HCLHCL Software AppScan Integration with Azure Boards for ASoC & A360, HCL AppScan Azure Boards Plugin	NVD	Oct 22 09:17 UTC
CVE-2026-21812HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP Executive summary HCL AppScan Azure Boards Plugin has a flaw where it can send sensitive data in cleartext when configured to talk to the AppScan server over HTTP. An attacker who can observe that traffic could capture credentials or authentication tokens. The advisory says the plugin now shows a warning when HTTP is used and recommends HTTPS instead. Technical summary The weakness is classified as cleartext transmission of sensitive information (CWE class not stated). Exploitation requires the plugin to be configured to communicate with the AppScan server over HTTP, and an attacker able to intercept that network traffic could obtain credentials or authentication tokens. Affected versions are not stated, and no fixed version is stated. The advisory says the plugin was updated to display a warning when HTTP is used and to recommend HTTPS; it does not describe a complete fix that forces encryption. Workarounds beyond switching to HTTPS are not stated, and no detection guidance is given. CVSS score and exploitation status are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL HCL Software AppScan Integration with Azure Boards for ASoC & A360 HCL AppScan Azure Boards Plugin NIST National Vulnerability DatabasePublished Oct 22, 2026 09:17 UTC Read the advisory
	Low	3.8	CVE-2026-21811	HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution HCL Software, HCLHCL Software AppScan Integration with Azure Boards for ASoC & A360, HCL AppScan Azure Boards Plugin	NVD	Oct 22 09:17 UTC
CVE-2026-21811HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution Executive summary HCL AppScan Azure Boards Plugin is affected by an information disclosure flaw in which secrets can be readable in plaintext during pipeline runs. The advisory does not state a severity rating, and it does not describe a fix or vendor recommendation. Technical summary The weakness is an information disclosure issue where secrets are accessible in plaintext during pipeline execution, even though they are masked in the user interface. Depending on pipeline configuration, the advisory says secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts. The advisory describes the issue as potential ('potentially affected'), and it does not state the attack vector, required privileges, or CVSS score. Affected and fixed version numbers are not stated. Workarounds and detection guidance are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Affects HCL Software HCL HCL Software AppScan Integration with Azure Boards for ASoC & A360 HCL AppScan Azure Boards Plugin NIST National Vulnerability DatabasePublished Oct 22, 2026 09:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee