Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.newCreate a CVE report

Your agent Now with CVE context

Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.

MoxsoSponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tab
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV

Find vulnerabilities that affect you.

Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.

Recent security developments
Severity
Clear filters
2 matching advisories · 2 shown
Explore packages Subscribe to these results
Follow substantive record changes →
SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
medium6.0
CVE-2026-112168

Multiple embedded secrets and weak algorithms in Magistra

The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

GALENO SISTEMI · MAGISTRA
high7.7
CVE-2026-110971

Weak password encoding in Płatnik

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

Zakład Ubezpieczeń Społecznych · Płatnik