RSS feeds

Get new CVEs and blog posts in a feed reader such as Feedly, Inoreader or NetNewsWire. Copy a feed address below and paste it into your reader.

Latest CVEs

The 50 most recently changed CVEs, with severity and CVSS.

https://patchthecev.com/feed.xml

Open feed

Watchlist CVEs

Only CVEs for the vendors and products on the watchlist.

https://patchthecev.com/feed-watchlist.xml

Open feed

Security blog

A new post every 2 hours, a daily digest and a weekly roundup.

https://patchthecev.com/blog/feed.xml

Open feed

Latest CVEs right now

CVE-2026-115975 Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit (High 7.1)
CVE-2026-115803 A flaw has been found in Scada-LTS 2.8.0 (Medium 4.3)
CVE-2026-115802 A weakness has been identified in InternScience InternAgent 1.5.0 (Medium 4.3)
CVE-2026-108013 BigFix Platform uses Mozilla CA certificate bundle (PEM) (Medium 6.8)
CVE-2026-97353 The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership chec (High n/a)
CVE-2026-97352 The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of (High n/a)
CVE-2026-87835 The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may s (High n/a)
CVE-2026-114429 The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content (High n/a)
CVE-2026-113674 The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by (High n/a)
CVE-2026-113673 The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before w (High n/a)
CVE-2026-113493 The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attri (High n/a)
CVE-2026-113492 The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when l (High n/a)
CVE-2026-113491 The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it (High n/a)
CVE-2026-113490 The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when renderin (High n/a)
CVE-2026-113489 The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the (High n/a)

How to use RSS

RSS is a plain-text list of new items that a feed reader checks for you. There is no account and no tracking. Paste the address into your reader, and new CVEs show up as they are published.