CVE-2026 list

CVE-2026 records published in October 2026

Page 12 of 14: records 11,001 to 12,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 11,001 to 12,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-106442Hydra instantiate target blacklist bypasses permit code execution7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-106441Hydra logging configuration permits unsafe callable resolution7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-106440Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method7.8CNA v3.10.3%2026-10-06Fix
CVE-2026-106439Hydra: Mutable instantiate policy sets allow target blocklist bypass8.5CNA v4.00.5%2026-10-06Fix
CVE-2026-106427Google Chrome Mobile confused deputy5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106426Google Chrome Fonts race condition8.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106425Google Chrome BrowserTag missing authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106424Google Chrome Audio information disclosure4.0CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106423Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106422Google Chrome API incorrect authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106421Google Chrome PDF use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106420Google Chrome API incorrect calculation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106419Google Android ANGLE in Google Chrome on use-after-free9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106418Google Chrome Network missing authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106417Google Chrome Media integer overflow9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106416Google Chrome extensions code injection5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106415Google Chrome Enterprise information disclosure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106414Google Chrome Mobile improper input validation9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106413Google Chrome Browser race condition4.2CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106412Google Chrome Core race condition8.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106411Google Chrome parser use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106410Google Chrome Permissions missing authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106409Google Chrome incorrectly resolved name or reference8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106408Google Chrome Mobile protection mechanism failure6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106407Google Chrome GetUserMedia incorrect authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106406Google Chrome Mobile missing authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106405Google Android CustomTabs in Google Chrome on race condition6.0CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106404Google Chrome FontAccess incorrect authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106403Google Chrome Accessibility incorrect authorization8.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106402Google Chrome extensions incorrect authorization4.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106401Google Chrome Media out-of-bounds write9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106400Google Android messages in Google Chrome on clickjacking5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106399Google Chrome Skia out-of-bounds read3.3CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106398Google Chrome Media incorrect authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106397Google Chrome Mobile incorrect authorization6.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106396Google Chrome Omnibox improper input validation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106395Google Android Dawn in Google Chrome on uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106394Google Chrome Glic incomplete cleanup4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106393Google Chrome Storage use-after-free8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106392Google Chrome WebAudio information disclosure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106391Google Android WebShare in Google Chrome on incorrect authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106390Google Chrome SanitizerAPI incorrect behavior4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106389Google Chrome USB incorrect authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106388Google Chrome DataTransfer missing authorization5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106387Google Chrome Mobile missing authorization8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106386Google Chrome WebAudio uninitialized resource use6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106385Google Chrome Chromoting race condition5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106384Google Chrome SiteIsolation missing authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106383Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106382Google Chrome Chromecast use-after-free9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106381Google Chrome Passwords incorrect authorization6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106380Google Chrome UI UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106379Google Chrome Skia uninitialized resource use4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106378Google Chrome execution with unnecessary privileges8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106377Google Chrome Fonts race condition8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106376Google Chrome ANGLE uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106375Google Chrome Dawn incomplete cleanup9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106374Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106373Google Chrome Fonts use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106372Google Chrome UI incorrect authorization9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106371Google Android Transactions Platform in Google Chrome on incorrect authorization8.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106370Google Chrome GPU uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106369Google Chrome Translate missing authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106368Google Chrome UI UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106367Google Chrome Mobile missing authorization8.4CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106366Google Chrome CustomTabs incomplete cleanup5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106365Google Chrome Animation missing authorization6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106364Google Chrome Omnibox incorrect authorization5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106363Google Chrome FullScreen missing authorization8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106362Google Chrome DevTools missing authorization6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106361Google Chrome Mobile incorrect behavior6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106360Google Chrome Payments information disclosure4.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106359Google Chrome DeviceBoundSessionCredentials confused deputy4.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106358Google Chrome Navigation use-after-free9.6CISA ADP v3.10.5%2026-10-06Fix
CVE-2026-106357Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-10-06Fix
CVE-2026-106356Google Chrome EVP clickjacking5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106355Google Chrome Media missing authorization5.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106354Google Chrome extensions resource exposure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106353Google Chrome Mobile improper input validation6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106352Google Chrome WebProtect incorrect authorization8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106351Google Chrome Safebrowsing observable discrepancy5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106350Google Chrome Browser incorrect authorization8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106349Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106348Google Chrome Animation information disclosure6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106347Google Chrome Track use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106346Google Chrome improper check for exceptional conditions8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106345Google Chrome operation on a released resource4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106344Google Chrome Permissions missing authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106343Google Chrome improper check for exceptional conditions5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106342Google Chrome Autofill information disclosure8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106341Google Chrome V8 type confusion8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106340Google Chrome CredentialProvider missing authorization4.6CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106339Google Chrome operation on a released resource3.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106338Google Android PictureInPicture in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106337Google Android UI in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106336Google Chrome Paint observable discrepancy4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106335Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106334Google Chrome Payments information disclosure8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106333Google Chrome Input incorrect authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106332Google Chrome Compositing integer overflow4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106331Google Chrome extensions improper input validation6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106330Google Chrome Paint information disclosure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106329Google Chrome FileSystem incorrect authorization9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106328Google Android PDF in Google Chrome on incorrect authorization5.9CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106327Google Chrome Core incorrect authorization6.1NVD v3.10.2%2026-10-06Fix
CVE-2026-106326Google Android UI in Google Chrome on confused deputy4.4NVD v3.10.1%2026-10-06Fix
CVE-2026-106325Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106324Google Android WebAppInstalls in Google Chrome on incorrect authorization6.1NVD v3.10.2%2026-10-06Fix
CVE-2026-106323Google Chrome missing authorization9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106322Google Chrome AppManifest open redirect6.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106321Google Chrome Editing information disclosure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106320Google Chrome operation on a released resource4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106318Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106317Google Android FullScreen in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106316Google Chrome Chromoting UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106315Google Chrome Modularization use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106314Google Chrome Bluetooth incorrect authorization8.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106313Google Android Browser in Google Chrome on incorrect authorization5.1CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106312Google Chrome SignIn missing authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106311Google Chrome PermissionElement clickjacking5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106310Google Chrome operation on a released resource6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106309Google Chrome Selection incorrect authorization8.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106308Google Chrome incorrectly resolved name or reference8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106307Google Chrome Network incorrect authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106306Google Chrome DevTools incorrect authorization5.4CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106305Google Android Mobile in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106304Google Chrome ANGLE out-of-bounds read4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106303Google Chrome Autofill AI observable discrepancy5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106302Google Chrome PermissionElement UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106301Google Chrome Contextual Tasks confused deputy8.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106300Google Chrome CacheStorage race condition4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106299Google Chrome WebAudio improper input validation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106298Google Chrome use-after-free9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106297Google Chrome Scheduling incorrect authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106296Google Chrome UI improper privilege management5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106295Google Chrome Unbounded Element incorrect authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106294Google Chrome Chromoting incomplete cleanup9.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106293Google Chrome ANGLE type confusion8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106292Google Chrome Fonts buffer overflow8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106291Google Chrome GarbageCollection use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106290Google Android GPU in Google Chrome on uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106289Google Chrome FedCM missing authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106288Google Chrome Browser missing authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106287Google Chrome CORS vulnerability4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106286Google Chrome Omnibox confused deputy6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106285Google Chrome WebAppInstalls UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106284Google Chrome Printing out-of-bounds read4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106283Google Chrome Streaming use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106282Google Chrome WebOTP UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106281Google Chrome Tint use-after-free9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106280Google Chrome PermissionElement incorrect authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106279Google Chrome incorrectly resolved name or reference7.4CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106278Google Chrome Select use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106277Google Chrome Animation information disclosure4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106276Google Chrome Payments UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106275Google Android GPU in Google Chrome on uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106274Google Chrome incorrectly resolved name or reference8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106273Google Chrome Video uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106272Google Chrome Chromoting UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106271Google Chrome Workers missing authorization8.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106270Google Chrome WebAppInstalls incorrect authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106269Google Chrome CSS use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106268Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106267Google Chrome Network missing authorization6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106266Google Chrome Contextual Tasks confused deputy6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106265Google Chrome file UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106264Google Chrome Web Authentication missing authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106263Google Chrome SignIn improper input validation6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106262Google Chrome GetUserMedia incomplete cleanup4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106261Google Chrome Video uninitialized resource use6.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106260Google Chrome DevTools incorrect authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106259Google Chrome PermissionElement incorrect authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106258Google Chrome ANGLE uninitialized resource use4.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106257Google Chrome HTML use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106256Google Android Passwords in Google Chrome on information disclosure8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106255Google Chrome V8 race condition8.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106254Google Android Mobile in Google Chrome on information disclosure5.1CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106253Google Chrome extensions incorrect authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106252Google Chrome Fonts incorrect comparison8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106251Google Chrome Chromoting UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106250Google Chrome Actor missing authorization5.4NVD v3.10.2%2026-10-06Fix
CVE-2026-106249Google Android Autofill in Google Chrome on incorrect authorization8.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106248Google Chrome Bindings use-after-free8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106247Google Chrome ANGLE buffer overflow8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106246Google Chrome Browser incorrect authorization5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106245Google Chrome ANGLE uninitialized resource use4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106244Google Chrome Permissions incorrect authorization6.5NVD v3.10.2%2026-10-06Fix
CVE-2026-106243Google Chrome Proxy Auth incomplete cleanup5.3CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106242Google Android Omnibox in Google Chrome on information disclosure6.5NVD v3.10.2%2026-10-06Fix
CVE-2026-106241Google Android Search in Google Chrome on incorrect authorization9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106240Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106239Google Android WebGL in Google Chrome on integer overflow9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106238Google Chrome Fonts race condition8.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106237Google Chrome Permissions information disclosure9.6NVD v3.10.2%2026-10-06Fix
CVE-2026-106236Google Chrome Chromoting UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106235Google Chrome WebAudio use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106234Google Chrome Network use-after-free9.6CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106233Google Chrome Metrics use-after-free8.3CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106232Google Chrome Browser UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106231Google Chrome Dawn uninitialized resource use4.7CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106230Google Chrome incorrectly resolved name or reference5.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106229Google Chrome FileSystem UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106228Google Chrome Google Lens confused deputy8.3CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106227Google Chrome Core use-after-free9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106226Google Chrome Compositing improper input validation4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106225Google Chrome Autofill missing authorization8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106224Google Chrome Google Lens missing authorization3.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106223Google Android GPU in Google Chrome on uninitialized resource use4.7CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106222Google Chrome Sync incorrect authorization5.9CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106221Google Android WebAPKs in Google Chrome on confused deputy8.3NVD v3.10.3%2026-10-06Fix
CVE-2026-106220Google Chrome Passwords information disclosure8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106219JetBrains TeamCity external control of a file path6.5CNA v3.10.6%2026-10-06Fix
CVE-2026-106218JetBrains TeamCity incomplete denylist8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-106217Google Chrome Google Lens missing authorization4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106216Google Android ReadingList in Google Chrome on cross-site request forgery5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106215Google Chrome ANGLE uninitialized resource use4.7CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106214Google Chrome Proxy information disclosure5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106213Google Chrome WebAudio race condition4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106212Google Chrome Autofill incorrect authorization8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106211Google Chrome TabStrip use-after-free9.6CISA ADP v3.10.5%2026-10-06Fix
CVE-2026-106210Google Chrome Scroll observable discrepancy3.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106209Google Chrome Mobile UI misrepresentation5.4CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106208Google Chrome API missing authorization6.1NVD v3.10.2%2026-10-06Fix
CVE-2026-106207Google Chrome V8 race condition8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106206Google Chrome Mobile improper input validation5.9CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106205Google Android Passwords in Google Chrome on missing authorization8.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106204Google Chrome PDF use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106203Google Chrome Autofill incomplete cleanup8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106202Google Chrome ANGLE uninitialized resource use4.7CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106201Google Chrome V8 race condition8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106200Google Chrome Track use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106199Google Android Actor in Google Chrome on incorrect authorization8.2NVD v3.10.2%2026-10-06Fix
CVE-2026-106198Google Chrome FileSystem missing authorization8.2NVD v3.10.3%2026-10-06Fix
CVE-2026-106197Google Chrome Browser use-after-free9.6CISA ADP v3.10.5%2026-10-06Fix
CVE-2026-106196Google Chrome Navigation missing authorization7.6NVD v3.10.3%2026-10-06Fix
CVE-2026-106195Google Chrome Chromoting incorrect authorization9.1NVD v3.10.3%2026-10-06Fix
CVE-2026-106194Google Chrome WebAppInstalls missing authorization8.3CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106193Google Chrome parser use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106192Google Chrome Mobile information disclosure4.6CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-106191Google Chrome Actor missing authorization8.3CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106190Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-106189Google Chrome ReaderMode code injection7.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106188Google Android SignIn in Google Chrome on confused deputy7.1NVD v3.10.2%2026-10-06Fix
CVE-2026-106187Google Chrome Permissions missing authorization4.2CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106186Google Chrome CredentialProvider uncontrolled search path8.6CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106185Google Chrome Viz improper input validation6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106184Google Chrome Media uninitialized resource use4.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106183Google Chrome Chromoting missing authorization5.9CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106182Google Chrome Paint UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106181Google Chrome incorrectly resolved name or reference5.3CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-106180Google Chrome Animation observable discrepancy3.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106179Google Chrome WebAppInstalls UI misrepresentation5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-106123VMware rabbitmq-java-client ConnectionFactoryConfigurator.load information disclosure5.7CNA v4.00.2%2026-10-06Fix
CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers6.0CNA v4.00.5%2026-10-06Fix
CVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS4.9CNA v3.10.5%2026-10-06Fix
CVE-2026-106120harttle LiquidJS information disclosure6.0CNA v4.00.4%2026-10-06Fix
CVE-2026-106119LangChain: MongoDBChatMessageHistory query injection can allow cross-session access6.0CNA v4.00.5%2026-10-06Fix
CVE-2026-106118SixLabors ImageSharp tiled TIFF decoding out-of-bounds write7.5CNA v3.10.6%2026-10-06Fix
CVE-2026-106117SixLabors ImageSharp CCITT fax decompression out-of-bounds write7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-106116ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop5.3CNA v3.10.4%2026-10-06Fix
CVE-2026-106115ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-106114ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions5.3CNA v3.10.4%2026-10-06Fix
CVE-2026-106113ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-106112ImageSharp: ICC LUT16 output channel count can write beyond Vector47.5CNA v3.10.4%2026-10-06Fix
CVE-2026-106111ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate5.9CNA v3.10.4%2026-10-06Fix
CVE-2026-106110ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-106109Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories4.1CNA v4.00.1%2026-10-06Fix
CVE-2026-106107Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained8.3CNA v4.00.3%2026-10-06Fix
CVE-2026-106106Quasar Framework renderSSRError information disclosure7.1CNA v4.00.3%2026-10-06Fix
CVE-2026-106105Quasar Framework @quasar/ssl-certificate utility incorrect permission assignment8.4CNA v4.00.1%2026-10-06Fix
CVE-2026-106104Quasar Framework Platform.parseSSR denial of service8.7CNA v4.00.3%2026-10-06Fix
CVE-2026-106103Quasar Framework: Path traversal / arbitrary file write via crafted Icon Genie profile7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-106102Quasar Framework: Stored/reflected XSS via unescaped SSR meta tag rendering in getHead10.0CNA v3.10.3%2026-10-06Fix
CVE-2026-106101Quasar Framework openURL utility denial of service3.1CNA v3.10.3%2026-10-06Fix
CVE-2026-106100Payload: Field-level write access bypass in Payload on MongoDB7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-106063Red Hat Enterprise Linux 10 GIMP’s DICOM export plug-in heap-based buffer overflow6.3CNA v3.10.1%2026-10-06Fix
CVE-2026-106062Red Hat Enterprise Linux 10 GIMP’s DirectDraw Surface heap-based buffer overflow7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-106041Mooncake Store missing authorization via NotifyOffloadSuccess RPC6.9CNA v4.00.3%2026-10-06
CVE-2026-106040Mooncake Store missing authorization via EvictDiskReplica RPC8.8CNA v4.00.4%2026-10-06
CVE-2026-106039Mooncake Store missing authorization in Replication Task RPC6.9CNA v4.00.3%2026-10-06
CVE-2026-106038Mooncake Store Unauthenticated Object Deletion via Remove RPCs8.8CNA v4.00.5%2026-10-06
CVE-2026-106037Mooncake missing authentication in Store REST service9.3CNA v4.00.7%2026-10-06
CVE-2026-106033Ansible: Ansible-ui: Ansible UI dom XSS in /redirect next parameter5.4CNA v3.10.2%2026-10-06
CVE-2026-106032AWS bedrock-agentcore-starter-toolkit server-side request forgery and local file read5.7CNA v4.00.2%2026-10-06Fix
CVE-2026-106026tftp-hpa out-of-bounds read via tftpd Remap Jump Rule6.3CNA v4.00.4%2026-10-06Fix
CVE-2026-106016Mozilla Firefox Mitigation bypass in the File Handling component9.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-105985craftcms cms authenticated RCE via render-components Entry Type overrides8.7CNA v4.00.7%2026-10-06Fix
CVE-2026-105957SourceCodester Performance Indicator System view_product.php SQL injection5.3CNA v4.00.2%2026-10-06
CVE-2026-105950getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross-site scripting5.1CNA v4.00.2%2026-10-06Fix
CVE-2026-105922Vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service5.3CNA v4.00.3%2026-10-06Fix
CVE-2026-105921Kusalkasilva Learning-Management-System search_class.php SQL injection5.3CNA v4.00.2%2026-10-06
CVE-2026-105920Kusalkasilva Learning-Management-System SQL injection6.9CNA v4.00.3%2026-10-06
CVE-2026-105919Kusalkasilva Learning-Management-System Administrator Login Endpoint SQL injection6.9CNA v4.00.3%2026-10-06
CVE-2026-105918Kusalkasilva Learning-Management-System Login endpoint login.php mysql_error SQL injection6.9CNA v4.00.3%2026-10-06
CVE-2026-105879JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-06Fix
CVE-2026-105868Payload: Uploaded XML files could execute same-origin JavaScript8.6CNA v4.00.2%2026-10-06Fix
CVE-2026-105867Payload: Client uploads could overwrite S3 objects7.1CNA v4.00.2%2026-10-06Fix
CVE-2026-105866Payload: Unauthenticated account-lockout denial of service6.9CNA v4.00.4%2026-10-06Fix
CVE-2026-105865Payload: Incomplete validation during the upload file lifecycle8.1CNA v3.10.4%2026-10-06Fix
CVE-2026-105864payloadcms plugin-multi-tenant incorrect authorization5.3CNA v4.00.2%2026-10-06Fix
CVE-2026-105863Payload authentication token field handling issue9.2CNA v4.00.4%2026-10-06Fix
CVE-2026-105862Payload: Bypassed sanitization of user uploaded SVGs8.7CNA v3.10.3%2026-10-06Fix
CVE-2026-105861Payload external upload trust validation issue7.2CNA v4.00.1%2026-10-06Fix
CVE-2026-105860Payload: Tenant authorization bypass in Multi-Tenant plugin7.1CNA v4.00.2%2026-10-06Fix
CVE-2026-105859Payload: Unauthorized update to collection documents9.8CNA v3.10.4%2026-10-06Fix
CVE-2026-105858Payload: Remote code execution through first-register8.1CNA v3.10.5%2026-10-06Fix
CVE-2026-105857Payload: RCE in Payload Form Builder10.0CNA v3.10.4%2026-10-06Fix
CVE-2026-105856Payload: SQL injection in SQLite/Postgres8.6CNA v4.00.3%2026-10-06Fix
CVE-2026-105855Payload: Field-level password update restrictions were not enforced7.6CNA v4.00.2%2026-10-06Fix
CVE-2026-105854Payload: ReDoS in Multipart Content-Type Validation8.7CNA v4.00.4%2026-10-06Fix
CVE-2026-105853Payload: Token refresh and password reset responses may expose restricted user fields7.1CNA v4.00.3%2026-10-06Fix
CVE-2026-105852Payload relationship-query authorization bypass6.9CNA v4.00.3%2026-10-06Fix
CVE-2026-105851Payload: Field access control bypass on auth collections9.3CNA v4.00.2%2026-10-06Fix
CVE-2026-105850Payload: Order confirmation validation issue in Payload Ecommerce8.8CNA v4.00.3%2026-10-06Fix
CVE-2026-105849Payload: API key disclosure through ordinary document reads7.7CNA v4.00.3%2026-10-06Fix
CVE-2026-105848Payload: Insufficient access control in Stripe REST Proxy6.4CNA v4.00.2%2026-10-06Fix
CVE-2026-105847Payload: Polymorphic join queries could disclose hidden fields7.1CNA v4.00.2%2026-10-06Fix
CVE-2026-105846Payload: Untrusted redirect URL parameter exploit6.1CNA v3.10.2%2026-10-06Fix
CVE-2026-105845Payload: SQL injection in SQLite and Postgres9.8CNA v3.10.4%2026-10-06Fix
CVE-2026-105844Payload: Prototype pollution in Payload Import Export plugin9.3CNA v4.00.5%2026-10-06Exploit codeFix
CVE-2026-105842lrzsz heap buffer overflow via lrz procheader Pathname6.1CNA v4.00.2%2026-10-06Fix
CVE-2026-105841lrzsz OS command injection via lrz Pipe Mode7.7CNA v4.00.9%2026-10-06Fix
CVE-2026-105840lrzsz path traversal via lrz Restricted Mode checkpath7.7CNA v4.00.3%2026-10-06Fix
CVE-2026-105839libmikmod heap buffer overflow via OKT Loader OKT_doPBOD8.5CNA v4.00.1%2026-10-06Fix
CVE-2026-105838libmikmod heap out-of-bounds read via IT Module Loader6.8CNA v4.00.1%2026-10-06Fix
CVE-2026-105837libmikmod heap buffer overflow via DSM Loader integer overflow8.5CNA v4.00.1%2026-10-06Fix
CVE-2026-105836QloApps authorization bypass via ajaxProcessBulkUpdateRooms5.3CNA v4.00.2%2026-10-06
CVE-2026-105835PLANKA TOTP brute force via verify-totp endpoint9.1CNA v4.00.3%2026-10-06
CVE-2026-105834Rundeck arbitrary file read via File Resource Model Source7.1CNA v4.00.4%2026-10-06Fix
CVE-2026-105812AWS bedrock-agentcore-starter-toolkit code injection8.8CNA v4.00.3%2026-10-06Fix
CVE-2026-105811QnABot on AWS Amazon Q Business Lambda hook sample authorization bypass7.1CNA v4.00.3%2026-10-06Fix
CVE-2026-105809SourceCodester Simple Student Information System Profile field register.php cross-site scripting5.3CNA v4.00.3%2026-10-06
CVE-2026-105808SourceCodester Simple Student Information System searchresults.php clean cross-site scripting5.1CNA v4.00.3%2026-10-06
CVE-2026-105807SourceCodester Simple Student Information System searchquery.php SQL injection6.9CNA v4.00.3%2026-10-06
CVE-2026-105806Payload: Improper access control for MCP API keys8.6CNA v4.00.3%2026-10-06Fix
CVE-2026-105805Payload: Sort queries could expose protected field information6.9CNA v4.00.3%2026-10-06Fix
CVE-2026-105804Payload: Password hashes use insufficient PBKDF2 iterations5.7CNA v4.00.1%2026-10-06Fix
CVE-2026-105801openapi-generators openapi-python-client code injection8.4CNA v4.00.1%2026-10-06Fix
CVE-2026-105800i18next-http-backend incomplete URL validation permits SSRF3.7CNA v3.10.3%2026-10-06Fix
CVE-2026-105799LangChain: RediSearch Filter injection via Unescaped Tag/Text Values2.3CNA v4.00.3%2026-10-06Fix
CVE-2026-105798Microsoft SimpleChat: Stored XSS via group document filename in inline onclick handler8.7CNA v3.10.5%2026-10-06Fix
CVE-2026-105797Microsoft SimpleChat: Command injection8.8CNA v3.10.6%2026-10-06Fix
CVE-2026-105796Microsoft Kiota: Code injection8.8CNA v3.10.9%2026-10-06Fix
CVE-2026-105795Microsoft Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests3.1CNA v3.11.2%2026-10-06Fix
CVE-2026-105794Microsoft MsQuic: Improper certificate validation in Microsoft.Native.Quic.MsQuic.OpenSSL9.1CNA v4.01.0%2026-10-06Fix
CVE-2026-105793Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`9.1CNA v3.10.9%2026-10-06Fix
CVE-2026-105792Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager6.5CNA v3.10.7%2026-10-06Fix
CVE-2026-105791Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injection7.5CNA v3.10.6%2026-10-06Fix
CVE-2026-105790Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning6.4CNA v3.10.5%2026-10-06Fix
CVE-2026-105789Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool5.4CNA v3.10.7%2026-10-06Fix
CVE-2026-105788Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app8.8CNA v3.11.1%2026-10-06Fix
CVE-2026-105778Tenda AC5 Wifi setWifi stack-based overflow9.4CNA v4.00.5%2026-10-06
CVE-2026-105776bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL SQL injection6.9CNA v4.00.3%2026-10-06
CVE-2026-105775Vllm-project vLLM Completions request mamba_mixer2.py conv_ssm_forward out-of-bounds5.3CNA v4.00.3%2026-10-06Fix
CVE-2026-105708imgproxy SVG svg.go sanitizeElement cross-site scripting5.3CNA v4.00.3%2026-10-06
CVE-2026-105707uptrace user_handler.go login information exposure6.9CNA v4.00.3%2026-10-06
CVE-2026-105706SourceCodester Drug Recommendation System cross-site request forgery5.3CNA v4.00.2%2026-10-06
CVE-2026-105705SourceCodester Drug Recommendation System add_drug.php cross-site scripting5.3CNA v4.00.3%2026-10-06
CVE-2026-105704SourceCodester Drug Recommendation System Auth Guard improper authentication6.9CNA v4.00.4%2026-10-06
CVE-2026-105703PHPGurukul User Registration and Login and User Management System incorrect authorization5.1CNA v4.00.2%2026-10-06
CVE-2026-105701ACPT (Premium) WordPress plugin remote code execution8.8CNA v3.10.6%2026-10-06Fix
CVE-2026-105621jishenghua jshERP Financial Receipt Update Handler improper authorization5.3CNA v4.00.2%2026-10-06
CVE-2026-105611chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization5.1CNA v4.00.2%2026-10-06
CVE-2026-105610chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization5.1CNA v4.00.2%2026-10-06
CVE-2026-105573newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error5.3CNA v4.00.2%2026-10-06
CVE-2026-105572PickMall Lilishop Buyer Invoice List receipt authorization5.3CNA v4.00.2%2026-10-06
CVE-2026-105571PickMall Lilishop Mobile Binding bindMobile improper authorization6.9CNA v4.00.3%2026-10-06
CVE-2026-105488Devolutions Server global vault missing authorization7.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-105487yogeshojha reNgine listTargets endpoint tasks.py subdomain_discovery os command injection5.3CNA v4.01.1%2026-10-06
CVE-2026-105486OSSRS srs System API api.go systemAPI.Run missing authentication6.9CNA v4.00.5%2026-10-06Fix
CVE-2026-105485Devolutions Server authentication bypass by replay6.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-105484TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection10.0CNA v4.02.1%2026-10-06
CVE-2026-105472girishsaraf Online-Appointment-Booking-System Booking book.php SQL injection5.3CNA v4.00.2%2026-10-06
CVE-2026-105317Paid Member Subscriptions WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-06Fix
CVE-2026-105305Red Hat Keycloak Device Authorization Grant flow improper authentication5.4CNA v3.10.2%2026-10-06
CVE-2026-105268Gitea issue attachment API allows changing comment attachments4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-105267Gitea tag delete route deletes releases without release permission8.1CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-105244Apache LOG4NET: RemoteSyslogAppender silently deletes non-ASCII content5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105243Apache LOG4NET: Oversize EventLogAppender record silently discarded5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105242Apache LOG4NET: Request validation failure drops the event in the aspnet-request converter5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105241Apache LOG4NET: Unencodable content discards a whole SmtpPickupDirAppender batch5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105240Apache LOG4NET: NUL character truncates OutputDebugStringAppender records5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105239Apache LOG4NET: NUL character truncates EventLogAppender records5.3CNA v3.10.8%2026-10-06Fix
CVE-2026-105111Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS2.3CNA v4.00.3%2026-10-06Fix
CVE-2026-105072FluentBooking Pro WordPress plugin broken access control7.5CNA v3.10.2%2026-10-06Fix
CVE-2026-105071SiteVault Backup, Restore, Migration and Cloning WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-105070Salon booking system WordPress plugin privilege escalation8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-105061WP Mailster WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-105059Delete All Comments of wordpress plugin broken access control6.5CNA v3.10.4%2026-10-06Fix
CVE-2026-105058WP User Profiles WordPress plugin privilege escalation8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-105057Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.5.3CNA v3.10.3%2026-10-06Fix
CVE-2026-104945Authenticated ONVIF PTZ Out-of-bounds stack write denial of service in TP-Link Tapo C5006.8CNA v4.00.2%2026-10-06Fix
CVE-2026-104944Unauthenticated TDP Function Pointer Dispatch denial of service in TP-Link Tapo C5007.1CNA v4.00.3%2026-10-06Fix
CVE-2026-104850Model Context Protocol typescript-sdk OAuth client insufficient verification of data authenticity7.5CNA v3.10.2%2026-10-06Fix
CVE-2026-104814Form Block WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-104757Import and export users and customers WordPress plugin privilege escalation7.2CNA v3.10.3%2026-10-06Fix
CVE-2026-104747Haaken WordPress theme PHP object injection8.1CNA v3.10.3%2026-10-06Fix
CVE-2026-104672GiveWP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-104670LearnPress WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-104636Gitea SSRF through Git HTTP redirects in mirrors and fetches7.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-104633Gitea migration memory exhaustion from zero page size6.5CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-104632Gitea fork workflow approval bypass through cancel and rerun8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-104626Gitea fork workflow job revival through later approval8.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-104406picu WordPress plugin broken access control7.3CNA v3.10.3%2026-10-06Fix
CVE-2026-104405GiveWP WordPress plugin privilege escalation8.1CNA v3.10.3%2026-10-06Fix
CVE-2026-104399Motors WordPress plugin sensitive data exposure6.9CNA v4.00.4%2026-10-06Fix
CVE-2026-104395picu WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-104394Charitable WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-104387PowerPress Podcasting WordPress plugin broken access control7.2CNA v3.10.3%2026-10-06Fix
CVE-2026-104385Groundhogg WordPress plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-104380Perl Punk ps_serve_one missing WebSocket origin validation5.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-104335IBM Langflow OSS improper access control8.8CNA v3.10.6%2026-10-06Fix
CVE-2026-104334IBM Langflow OSS code injection9.8CNA v3.10.6%2026-10-06Fix
CVE-2026-104073NetBox session hijacking via Custom Links6.9CNA v4.00.3%2026-10-06Fix
CVE-2026-104070SPIP Crayons Plugin authorization bypass RCE9.3CNA v4.00.6%2026-10-06Fix
CVE-2026-104069danielbrendel hortusfox-web HortusFox remote code execution via Theme Import8.6CNA v4.00.5%2026-10-06Fix
CVE-2026-104048Sssd: Sssd: Authorization bypass via cross-domain username collision in hbac evaluation6.8CNA v3.10.3%2026-10-06
CVE-2026-104047Sssd: Sssd: Information disclosure via query injection in entra id lookups5.3CNA v3.10.1%2026-10-06
CVE-2026-104046Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service6.2CNA v3.10.1%2026-10-06
CVE-2026-104045Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via race condition in autofs responder4.7CNA v3.10.1%2026-10-06
CVE-2026-104044Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service6.2CNA v3.10.1%2026-10-06
CVE-2026-104043Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service5.5CNA v3.10.1%2026-10-06
CVE-2026-104042Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via out-of-bounds read in pam responder5.5CNA v3.10.1%2026-10-06
CVE-2026-104041Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via unbounded negative cache growth5.5CNA v3.10.1%2026-10-06
CVE-2026-104040Red Hat Enterprise Linux 10 sssd: Sssd: Information disclosure4.4CNA v3.10.1%2026-10-06
CVE-2026-104039Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service4.7CNA v3.10.1%2026-10-06
CVE-2026-104038Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service5.9CNA v3.10.2%2026-10-06
CVE-2026-104037Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service5.5CNA v3.10.1%2026-10-06
CVE-2026-104036Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service5.8CNA v3.10.1%2026-10-06
CVE-2026-104035Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via memory exhaustion in kcm responder5.5CNA v3.10.1%2026-10-06
CVE-2026-104034Red Hat SSSD Kerberos Credential Manager responder use-after-free4.7CNA v3.10.1%2026-10-06
CVE-2026-104033Red Hat SSSD LDAP shadow expiration check vulnerability5.4CNA v3.10.2%2026-10-06
CVE-2026-104032Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via unprivileged autofs cache invalidation5.5CNA v3.10.1%2026-10-06
CVE-2026-104031Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service via memory exhaustion in autofs responder5.5CNA v3.10.1%2026-10-06
CVE-2026-103831Insecure deserialization in the TrueLayer Magento 2 plugin7.5CNA v4.00.2%2026-10-06
CVE-2026-103778Dell Command hard-coded cryptographic key6.2CNA v3.10.2%2026-10-06Fix
CVE-2026-103670Gitea trusted workflow cancellation by unapproved fork runs7.5CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-103667Gitea container registry stored XSS through blob media type5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-103620GitHub Enterprise Server GraphQL API missing authorization6.0CNA v4.00.4%2026-10-06Fix
CVE-2026-103504Gitea API team demotion not applied to unit permissions8.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-103360IBM Langflow OSS path traversal8.1CNA v3.10.5%2026-10-06Fix
CVE-2026-103346Payflex Payment Gateway WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-06Fix
CVE-2026-103059Gitea built-in SSH server authentication bypass through key case folding9.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-103009Authorization bypass through user-controlled key in Elasticsearch leading to information disclosure7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-103008Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-103007Incorrect authorization in Elasticsearch leading to privilege escalation7.2CNA v3.10.3%2026-10-06Fix
CVE-2026-103006Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-10-06Fix
CVE-2026-103005Memory allocation with excessive size value in Elasticsearch leading to denial of service6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102915WPO365 WordPress plugin broken access control8.5CNA v3.10.2%2026-10-06Fix
CVE-2026-102413Uncaught exception in Elastic endpoint leading to denial of service6.2CNA v3.10.1%2026-10-06
CVE-2026-102412Incorrect authorization in Kibana leading to sensitive information disclosure6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102411Allocation of resources without limits or throttling in Elasticsearch leading to denial of service6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102410Missing authorization in Kibana leading to information disclosure4.3CNA v3.10.2%2026-10-06Fix
CVE-2026-102409Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102408Inefficient regular expression complexity in Elasticsearch leading to denial of service4.3CNA v3.10.3%2026-10-06Fix
CVE-2026-102407Incorrect authorization in Elasticsearch leading to Unauthorized Data Stream Modification5.4CNA v3.10.2%2026-10-06Fix
CVE-2026-102406Authorization bypass through user-controlled key in Kibana leading to Cross-Tenant Data Interception8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-102404Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102387Xserver Migrator WordPress plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-102322Google Chrome SiteIsolation incorrect authorization9.6CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-102169Arista Networks Wi-Fi Access Points security Advisory 01947.1CNA v4.00.3%2026-10-06Fix
CVE-2026-102168Arista Networks Wi-Fi Access Points security Advisory 01947.1CNA v4.00.3%2026-10-06Fix
CVE-2026-102167Arista Networks Wi-Fi Access Points security Advisory 01979.0CNA v4.00.2%2026-10-06Fix
CVE-2026-102165Arista Networks Wi-Fi Access Points security Advisory 01987.7CNA v4.00.2%2026-10-06Fix
CVE-2026-102164Arista Networks Wi-Fi Access Points security Advisory 01962.3CNA v4.00.2%2026-10-06Fix
CVE-2026-102163Arista Networks Wi-Fi Access Points security Advisory 01958.7CNA v4.00.3%2026-10-06Fix
CVE-2026-102162Arista Networks Wi-Fi Access Points security Advisory 01939.4CNA v4.00.2%2026-10-06Fix
CVE-2026-102161Arista Networks CloudVision CUE security Advisory 01908.7CNA v4.00.2%2026-10-06Fix
CVE-2026-102160Arista Networks CloudVision CUE security Advisory 01908.6CNA v4.01.4%2026-10-06Fix
CVE-2026-102159Arista Networks CloudVision CUE security Advisory 01909.3CNA v4.00.4%2026-10-06Fix
CVE-2026-102158Arista Networks CloudVision CUE security Advisory 01907.1CNA v4.00.3%2026-10-06Fix
CVE-2026-102157Arista Networks CloudVision CUE security Advisory 01906.8CNA v4.00.2%2026-10-06Fix
CVE-2026-102156Arista Networks CloudVision CUE security Advisory 01916.9CNA v4.00.3%2026-10-06Fix
CVE-2026-102155Arista Networks CloudVision CUE security Advisory 01907.1CNA v4.00.3%2026-10-06Fix
CVE-2026-101331IBM Langflow OSS insufficiently protected credentials7.7CNA v3.10.3%2026-10-06Fix
CVE-2026-101329IBM Langflow OSS improper access control6.5CNA v3.10.3%2026-10-06Fix
CVE-2026-101258Red Hat Enterprise Linux 10 ghostscript: Ghostscript: -dsafer sandbox bypass7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-101207Dell OpenManage Integration OS command injection8.8CNA v3.11.7%2026-10-06Fix
CVE-2026-101158Arista Networks CloudVision Portal security Advisory 01859.3CNA v4.00.3%2026-10-06Fix
CVE-2026-101157Arista Networks CloudVision CUE security Advisory 01929.3CNA v4.00.2%2026-10-06Fix
CVE-2026-101156Arista Networks CloudVision CUE security Advisory 01926.2CNA v4.00.3%2026-10-06Fix
CVE-2026-101155Arista Networks CloudVision Portal security Advisory 01898.6CNA v4.00.6%2026-10-06Fix
CVE-2026-101154Arista Networks CloudVision Portal security Advisory 01898.6CNA v4.00.6%2026-10-06Fix
CVE-2026-101153Arista Networks CloudVision Portal security Advisory 01887.2CNA v4.00.3%2026-10-06Fix
CVE-2026-101152Arista Networks CloudVision Portal security Advisory 01877.6CNA v4.00.4%2026-10-06Fix
CVE-2026-101151Arista Networks CloudVision Portal security Advisory 01875.3CNA v4.00.3%2026-10-06Fix
CVE-2026-101150Arista Networks CloudVision Portal security Advisory 01865.1CNA v4.00.2%2026-10-06Fix
CVE-2026-101149Arista Networks CloudVision Portal security Advisory 01865.1CNA v4.00.2%2026-10-06Fix
CVE-2026-101029Gitea migration and pull mirror SSRF through multi-answer DNS4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-101027Gitea migration SSRF through ALLOWED_DOMAINS address check bypass7.7CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-101023Gitea OAuth2 refresh token grant accepts access tokens9.1CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-100518Advanced Google reCAPTCHA WordPress plugin broken authentication5.3CNA v3.10.3%2026-10-06Fix
CVE-2026-98372Linux kernel iptfs out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98371Linux kernel iptfs kernel panic–0.2%2026-10-06Fix
CVE-2026-98370Linux kernel xfrm use-after-free–0.2%2026-10-06Fix
CVE-2026-98369In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() syzbot reported a suspicious RCU usage warning in ip6_pkt_drop(): WARNING: suspicious RCU usage in ip6_pkt_drop include/net/addrconf.7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98368In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path (esp->inplace == false) ESP rewrites the skb frag array: esp_output_head() appends a trailer frag and esp_output_tail() replaces the f7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98367Linux kernel RDMA/siw use-after-free7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98366In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_user_mr() reassigns mr->ibmr.pd first and only then validates the IB_MR_REREG_ACCESS argument: if (flags & IB_MR_REREG_PD) { rxe_put(old_pd); rxe_get(pd);7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98365Linux kernel RDMA/rxe integer overflow9.8CNA v3.10.4%2026-10-06Fix
CVE-2026-98364Linux kernel xfrm use-after-free7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98363In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS scpi_dvfs_get_info() already rejected a zero opp_count, but still trusted any larger value from the SCP firmware. The shared-memory reply only holds MAX_DVFS_OPPS entri–0.2%2026-10-06Fix
CVE-2026-98362In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate dvfs_get_idx() may return an out-of-range index if the SCP firmware is buggy or returns a stale value. Only negative indexes were rejected, so a large index walked past in–0.2%2026-10-06Fix
CVE-2026-98361In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d7c1cd3 ("RDMA/rxe: Break endless pagefault loop for RO pages") dropped the access permission test from rxe_check_pagefault() and left only HMM_PFN_VALID. A page7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98360In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds rxe_get_mcg() publishes a newly allocated multicast group in rxe->mcg_tree before programming the backing Ethernet multicast address with rxe_mcast_add(), whic7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98359In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a referenced net_device even when it is unregistering, so matching and cleanup callers can still find the association. The re7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98358In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered. iser_reg_mem_fastreg() takes the DMA key path and leaves rdma_reg[ISER_DIR_OUT].de–0.2%2026-10-06Fix
CVE-2026-98357In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert_send_done() hands ISTATE_SEND_TASKMGTRSP, ISTATE_SEND_REJECT and ISTATE_SEND_TEXTRSP completions off to isert_comp_wq and returns. The work8.1CNA v3.10.4%2026-10-06Fix
CVE-2026-98356Linux kernel RDMA/bnxt_re null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98355Linux kernel RDMA/rtrs null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98354In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib_mad_complete_recv() initializes mad_recv_wc->rmpp_list and then runs ib_mad_enforce_security() before linking recv_buf onto that list. On failure it calls ib_free_r–0.2%2026-10-06Fix
CVE-2026-98353Linux kernel RDMA/erdma deadlock–0.2%2026-10-06Fix
CVE-2026-98352In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted The client borrows shared CQ credits in the ADDR_RESOLVED handler via ib_cq_pool_get(), before the peer is connected. create_cm() can return -ERESTARTSYS from wait_event_–0.2%2026-10-06Fix
CVE-2026-98351In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet–0.2%2026-10-06Fix
CVE-2026-98350In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out auth_status on initialization. Otherwise, garbage will leak from the stack to the firmware (when ssid is less than 32 bytes and/or when params->pmkid is set). Then, p–0.2%2026-10-06Fix
CVE-2026-98349In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libipw_network_init() call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-98348In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, status and aid fields of the 30-byte association response prefix and then computes the information element length as stats->le7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-98347In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER_UP after multicast flush ipoib_ib_dev_flush_light() temporarily clears IPOIB_FLAG_OPER_UP to prevent multicast joins while ipoib_mcast_dev_flush() is running, and restores the flag afterwards if it w–0.2%2026-10-06Fix
CVE-2026-98346Linux kernel cfg80211 crash–0.2%2026-10-06Fix
CVE-2026-98345In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211_classify8021d() A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211_classify8021d+0x99d/0x1–0.2%2026-10-06Fix
CVE-2026-98344In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref underflow in dma_chan_put() dma_chan_get() takes chan->device->ref only on the slow path: /* no kref on fast path */ if (chan->client_count) { __module_get(owner); chan->client_count++; return 0–0.2%2026-10-06Fix
CVE-2026-98343Linux kernel dmaengine use-after-free–0.2%2026-10-06Fix
CVE-2026-98342In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers before releasing dma_device dma_issue_pending_all() walks the dma_device_list with list_for_each_entry_rcu() under rcu_read_lock(). dma_device_release() unlinks the device with list_del_rcu() and th–0.2%2026-10-06Fix
CVE-2026-98341Linux kernel cfg80211 use-after-free7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98340In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, __cfg80211_bss_update() looks for an existing entry with the same BSSID and a hidden (zero-length or NUL-filled) SSID,–0.2%2026-10-06Fix
CVE-2026-98339In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel that already has a BSS entry, cfg80211_update_assoc_bss_entry() removes that entry before rehashing the real one, since th8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-98338In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with NL80211_SCAN_FLAG–0.2%2026-10-06Fix
CVE-2026-98337In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't start a ROC while scanning The ROC work can be pending when a scan starts (which requires ROC list to be empty, but that's possible), and then a new ROC can be added to the list and the work will pick it up.–0.2%2026-10-06Fix
CVE-2026-98336In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces AP_VLAN interfaces are purely virtual, so don't try to offload TC setup to drivers. We can't really use the AP interface either since we may not know it all the time, an–0.2%2026-10-06Fix
CVE-2026-98335Linux kernel mac80211 crash–0.2%2026-10-06Fix
CVE-2026-98334In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211_start_ap() can set enable_beacon (and beacon_int) and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to–0.2%2026-10-06Fix
CVE-2026-98333In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the LED state when ifup fails When the first interface comes up, the radio LED is turned on. This can start the TPT trigger timer, which continues running. But if bringing up the interface fails then the tim–0.2%2026-10-06Fix
CVE-2026-98332In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station, which then yields various warnings when the AP station is removed then or at a later point in time after being confus–0.2%2026-10-06Fix
CVE-2026-98331In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local->interfaces list when an interface is removed via ieee80211_if_remove(), before it unregisters the netdev. However, it's possi7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98330In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211_pernet_exit() moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98329In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual op–0.2%2026-10-06Fix
CVE-2026-98328In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scan_ies_len. Otherwise, building probe request e–0.2%2026-10-06Fix
CVE-2026-98327Linux kernel mesh memory leak–0.2%2026-10-06Fix
CVE-2026-98326In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and then calls ieee80211_start_mesh(), which can fail. In that case, the chanctx isn't released then interface removal will–0.2%2026-10-06Fix
CVE-2026-98325In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set up the TX info early to fix failure paths The previous commit 2c51457d930f ("wifi: mac80211: free ack status frame on TX header build failure") cleaned up the leak, but still left the code a bit messy and the f–0.2%2026-10-06Fix
CVE-2026-98324In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double counting of the hw descriptors pxad_alloc_desc() was converted from kzalloc(struct_size(sw_desc, hw_desc, nb_hw_desc), GFP_NOWAIT) to kzalloc_flex(), which sets the __counted_by() counter sw_de7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98323Linux kernel RDMA/siw out-of-bounds write9.8CNA v3.10.6%2026-10-06Fix
CVE-2026-98322In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_nat: fully initialise new_addr in netmap setup nft_nat_setup_netmap() builds the mapped address in an on-stack union nf_inet_addr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single–0.2%2026-10-06Fix
CVE-2026-98321Linux kernel nf_nat memory leak–0.2%2026-10-06Fix
CVE-2026-98320In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put() releases the ct->ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98319In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr When an out_fence_ptr is provided but DRM_MODE_PAGE_FLIP_EVENT is not set, a drm_pending_vblank_event will be allocated. If later, there is an allocation failu–0.2%2026-10-06Fix
CVE-2026-98318In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying th7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98317In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. NDTPA_INTERVAL_PROBE_TIME_MS sets .type and .min but misses .validation_type, so no validation is applied: # ynl --family rt-neigh --do setneightbl \ --json '{"name"–0.2%2026-10-06Fix
CVE-2026-98316Linux kernel bcd2000 use-after-free–0.2%2026-10-06Fix
CVE-2026-98315In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfs_non_resident_attr_shrink() calls runlist helpers that require the runlist write lock, but did not hold it while freeing clusters and truncating the runlist. Serialize those7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98314In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer->private_data before registering the PCM timer snd_pcm_timer_init() calls snd_device_register() to link the new struct snd_timer into the global timer list while it still carries hw.c_resolution = snd_pcm_time–0.2%2026-10-06Fix
CVE-2026-98313In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when the link was never enabled msm_dp_display_atomic_enable() returns early when link training fails, leaving ->power_on false and the main link down. msm_dp_display_atomic_disable() nevertheless writes–0.2%2026-10-06Fix
CVE-2026-98312Linux kernel 6fire out-of-bounds write–0.2%2026-10-06Fix
CVE-2026-98311In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_transfer_operstate() before register_netdevice(). If the lower device is dormant, that queues the new netdev on lweventlist while it7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98310In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory __xe_shrinker_walk() walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which–0.2%2026-10-06Fix
CVE-2026-98309Linux kernel drm/vc4 use-after-free–0.2%2026-10-06Fix
CVE-2026-98308In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by st–0.2%2026-10-06Fix
CVE-2026-98307Linux kernel ath11k crash–0.2%2026-10-06Fix
CVE-2026-98306In the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation When an SRv6 packet arrives on an interface enslaved to a VRF, vrf_ip6_rcv() sets IP6SKB_L3SLAVE in IP6CB, but decap_and_validate() has never set IPSKB_L3SLAVE in I–0.2%2026-10-06Fix
CVE-2026-98305In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx_setup() arms the stats poll before mxl862xx_setup_mdio(), and nothing stops it until dsa_register_switch() has returned an error to mxl862xx_probe(). DSA frees the ds7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98304In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is s–0.2%2026-10-06Fix
CVE-2026-98303In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup When the forward output route cannot be used in icmp_route_lookup(), it enters the "reverse path" and calls ip_route_input() on fl4_dec.daddr, the original packe–0.2%2026-10-06Fix
CVE-2026-98302In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfp_ctl_set_mac_address() calls ResetAdapter() unconditionally, without checking netif_running(). ResetAdapter() first calls card_stop(), which sets smc->hw.–0.2%2026-10-06Fix
CVE-2026-98301In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. br_mst_set_state() calls switchdev_port_attr_set() for nonzero MSTIs while holding rcu_read_lock() which invokes t–0.2%2026-10-06Fix
CVE-2026-98300In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). tcp_v6_do_rcv() no longer calls skb_clone_and_charge_r() for TCP_LISTEN since commit 073d89808c06 ("net: fix data-races around sk->sk_forward_alloc–0.2%2026-10-06Fix
CVE-2026-98299Linux kernel tcp divide by zero–0.2%2026-10-06Fix
CVE-2026-98298In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() In mmp_pdma_prep_slave_sg(), for_each_sg() iterates the scatterlist putting each entry into 'sg', but the entry length is read from 'sgl' (the list head) instead–0.2%2026-10-06Fix
CVE-2026-98297In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained hci_send_acl(), hci_send_sco() and hci_send_iso() queue hdev->tx_work unconditionally. They can run from the L2CAP/SCO/ISO socket send path while hci_dev_close_sy–0.2%2026-10-06Fix
CVE-2026-98296In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate TX skb length in send_sync btintel_pcie_prepare_tx() copies skb->len bytes into a fixed BTINTEL_PCIE_BUFFER_SIZE (4096) DMA slot via an unchecked memcpy. Oversized packets are currently rejected o–0.2%2026-10-06Fix
CVE-2026-98295In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci_devcd_handle_pkt_init() arms dump_timeout and coredump producers queue dump_rx without holding an hdev reference. Unregister leaves both works live, so disconnecting during–0.2%2026-10-06Fix
CVE-2026-98294In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Do not write to the serial port after it is closed hci_uart_close() closes the serdev port if HCI_QUIRK_NON_PERSISTENT_SETUP is set (for example, for the WCN399x family). A failed hci_dev_open_sync() following–0.2%2026-10-06Fix
CVE-2026-98293In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_al–0.2%2026-10-06Fix
CVE-2026-98292In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtk_hci_wmt_evt and read its op/flag fields without checking the event is l–0.2%2026-10-06Fix
CVE-2026-98291Linux kernel btintel_pcie off-by-one error–0.2%2026-10-06Fix
CVE-2026-98290Linux kernel RFCOMM deadlock7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-98289In the Linux kernel, the following vulnerability has been resolved: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Commit bfdb01283ee8 ("af_unix: Assign a unique index to SCC.") changed Tarjan's algorithm to update lowlink with lowlink, which is called lowpoint (unix_vertex.scc–0.2%2026-10-06Fix
CVE-2026-98288In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO header length truncation stmmac_tso_xmit() stores the protocol header length returned by stmmac_tso_header_size() in a u8. stmmac_tso_valid_packet() admits headers up to 1023 bytes, so a header longer than 255–0.2%2026-10-06Fix
CVE-2026-98287In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatm_send(), LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmi–0.2%2026-10-06Fix
CVE-2026-98286In the Linux kernel, the following vulnerability has been resolved: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown In drop_monitor teardown paths (net_dm_trace_off_set(), net_dm_hw_monitor_stop(), and error unwind paths in net_dm_trace_on_set() and net_dm_hw_moni–0.2%2026-10-06Fix
CVE-2026-98285Linux kernel vlan null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98284In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk->groups while lockless readers can use it netlink_realloc_groups() uses krealloc() under netlink_table_grab(). Whenever NLGRPSZ(groups) lands in a different kmalloc bucket, the old bitmap is freed immediat–0.2%2026-10-06Fix
CVE-2026-98283Linux kernel PPC use-after-free8.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98282In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba The commit b1af23d836f8 ("KVM: PPC: iommu: Unify TCE checking") unified IOBA parameter checking across KVM and VFIO into iommu_tce_check_ioba(). While doing so, th8.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98281In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98280Linux kernel drm/xe/i2c use-after-free–0.2%2026-10-06Fix
CVE-2026-98279In the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning up verity items When enable_verity() hits the qgroup limit, rollback_verity() needs its own metadata reservation. When the qgroup limit or lack of space refuses the rollback, the whole fil–0.2%2026-10-06Fix
CVE-2026-98278In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check ipip_fill_forward_path() and ip6_tnl_fill_forward_path() look up the route to the tunnel's remote endpoint and set ctx->dev to its device, which is the tunnel–0.2%2026-10-06Fix
CVE-2026-98277In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst ends in a drop fbnic_tx_map() skips the doorbell write, and the completion request, for every packet handed to it with xmit_more set, counting on the packet which ends the burst to publish–0.2%2026-10-06Fix
CVE-2026-98276In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sock_gettstamp() sk->sk_flags must only be changed while holding the socket lock, because sock_set_flag() and sock_reset_flag() use non atomic operations (__set_bit() and __clear_bit()). sock_gettstamp() i7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98275In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 thi–0.2%2026-10-06Fix
CVE-2026-98274In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() PSP conflicts with TLS ULP in its usage of both skb->decrypted and sk->sk_validate_xmit_skb(). Make PSP mutually exclusive with TLS ULP, the only other user–0.2%2026-10-06Fix
CVE-2026-98273Linux kernel x86/kprobes crash–0.2%2026-10-06Fix
CVE-2026-98272Linux kernel mvpp2 buffer overflow–0.2%2026-10-06Fix
CVE-2026-98271In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve() pskb_carve_inside_header() and pskb_carve_inside_nonlinear() remove the first bytes of a packet and reallocate skb->head. All the headers that were present before–0.2%2026-10-06Fix
CVE-2026-98270Linux kernel drm/amdgpu crash–0.2%2026-10-06Fix
CVE-2026-98269In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failure–0.2%2026-10-06Fix
CVE-2026-98268Linux kernel perf null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98267In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_cli–0.2%2026-10-06Fix
CVE-2026-98266Linux kernel ALSA core use-after-free–0.2%2026-10-06Fix
CVE-2026-98265In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data_ep_set_params() allocates each data URB for exactly u->packets isochronous frames, so urb->iso_frame_desc[] has u->packets slots and ctx->packets is the dr–0.2%2026-10-06Fix
CVE-2026-98264In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsnd_remove() and virtsnd_freeze() delete the virtqueues before resetting the device. del_vqs() frees the vring backing, but does not provide a generic device quiesce operat–0.2%2026-10-06Fix
CVE-2026-98263In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_co–0.2%2026-10-06Fix
CVE-2026-98262In the Linux kernel, the following vulnerability has been resolved: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY A user reported that commit 105c42566a55 ("ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585") made the JMicron JMB585 unusable on his board. The failure is seen–0.2%2026-10-06Fix
CVE-2026-98261Linux kernel cifs use-after-free8.1CNA v3.10.4%2026-10-06Fix
CVE-2026-98260In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked7.8CNA v3.10.1%2026-10-06Exploit codeFix
CVE-2026-98259Linux kernel fs/dax kernel panic–0.2%2026-10-06Fix
CVE-2026-98258In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cpu_timer::firing from a tristate value to a boolean. This lost th7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98257In the Linux kernel, the following vulnerability has been resolved: rds: ib: use rds_conn_drop() on protocol version mismatch rds_ib_cm_connect_complete() runs from the RDMA-CM event handler with conn->c_cm_lock held. When the peer negotiates a protocol version older than RDS_PROTOCOL_COMPAT_VERS7.5CNA v3.10.5%2026-10-06Fix
CVE-2026-98256Linux kernel signal use-after-free7.8CNA v3.10.1%2026-10-06Exploit codeFix
CVE-2026-98255In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcp_ack() performs the appropriate validation and–0.2%2026-10-06Fix
CVE-2026-98254In the Linux kernel, the following vulnerability has been resolved: swiotlb: use the adjusted address for the highmem page lookup swiotlb_bounce() reads the page frame number from the slot's recorded orig_addr, then advances orig_addr by tlb_offset to reach the address the caller asked about. The7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98253In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy_to_user failure rdma_join_multicast() queues RoCE work that later reads the ucma_multicast through event->param.ud.private_data, then list_add()s the CMA multicast at the head of id_priv7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98252In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() iwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail() making it accessible to global list where another CPU can kref_get() on nlmsg_request causing a refcount7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98251In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovs_ct_get_conn_labels() adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reall7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98250In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP_PNFS out of nfsd4_setup_layout_type() and into the callers. That patch didn't account for the new ca–0.2%2026-10-06Fix
CVE-2026-98249In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc swsusp_arch_suspend_exit() reinstalls the restored kernel's hyp stub vectors with an hvc, but never passes the arguments. x0 is not set to HVC_SET_VECTORS and x1 is not–0.2%2026-10-06Fix
CVE-2026-98248In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W reg–0.2%2026-10-06Fix
CVE-2026-98247In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include–0.2%2026-10-06Fix
CVE-2026-98246Linux kernel hci_sync use-after-free–0.2%2026-10-06Fix
CVE-2026-98245Linux kernel btrfs use-after-free–0.2%2026-10-06Fix
CVE-2026-98244In the Linux kernel, the following vulnerability has been resolved: btrfs: clear free space tree creation state on rebuild failure btrfs_rebuild_free_space_tree() sets BTRFS_FS_CREATING_FREE_SPACE_TREE before rebuilding the free space tree. Several error paths return without clearing this flag.–0.2%2026-10-06Fix
CVE-2026-98243Linux kernel dma-buf/dma-fence null pointer dereference7.1CNA v3.10.1%2026-10-06Fix
CVE-2026-98242In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA (which is greater than 4G) to mapped_len.–0.2%2026-10-06Fix
CVE-2026-98241In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm: use full sockets in local error paths xfrm6_local_rxpmtu() and xfrm6_local_error() dereference skb->sk as if it always pointed at a full IPv6 socket. That is not guaranteed. TCP SYN-ACK skbs can be owned by a TCP_NEW_7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98240Linux kernel ip_tunnel kernel panic–0.2%2026-10-06Fix
CVE-2026-98239Linux kernel lan743x use-after-free8.1CNA v3.10.5%2026-10-06Fix
CVE-2026-98238In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() The netif index carried in the DPMAIF PIT header is five bits wide, but ccmni_inst[] only has room for NIC_DEV_MAX (21) entries. t7xx_ccmni_recv_skb() indexes the–0.2%2026-10-06Fix
CVE-2026-98237In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain The NDP traversal in mhi_mbim_rx() only stops when wNextNdpIndex is zero. Nothing requires the offsets to advance, so a modem that points an NDP at itself, or at an earli–0.2%2026-10-06Fix
CVE-2026-98236In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value mhi_mbim_rx() ignores the return value of skb_copy_bits() when it copies each datagram out of the NTB. The datagram offset and length come from the DPE, which is only c–0.2%2026-10-06Fix
CVE-2026-98235In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A batched RTM_DELACTION request takes a temporary reference on each action before attempting any deletion. tcf_action_delete() clears each processed slot and drops i–0.2%2026-10-06Fix
CVE-2026-98234Linux kernel net/sched hhf vulnerability–0.2%2026-10-06Fix
CVE-2026-98233Linux kernel net packet race condition–0.2%2026-10-06Fix
CVE-2026-98232Linux kernel SCSI core information disclosure–0.2%2026-10-06Fix
CVE-2026-98231Linux kernel xfrm race condition–0.2%2026-10-06Fix
CVE-2026-98230Linux kernel xfrm vulnerability7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98229Linux kernel xfrm vulnerability7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-98228Linux kernel MIPS architecture vulnerability7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-98227Linux kernel memstick ms_block driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98226In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count SWAP_USAGE_OFFLIST_BIT is embedded in the si->inuse_pages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from–0.2%2026-10-06Fix
CVE-2026-98225Linux kernel memory shrinker vulnerability–0.2%2026-10-06Fix
CVE-2026-98224Linux kernel memory management vulnerability–0.2%2026-10-06Fix
CVE-2026-98223Linux kernel filemap vulnerability–0.2%2026-10-06Fix
CVE-2026-98222Linux kernel encrypted keys subsystem integer overflow–0.2%2026-10-06Fix
CVE-2026-98221Linux kernel trusted keys vulnerability–0.2%2026-10-06Fix
CVE-2026-98220Linux kernel sched_ext vulnerability–0.2%2026-10-06Fix
CVE-2026-98219Linux kernel sched_ext use-after-free–0.2%2026-10-06Fix
CVE-2026-98218Linux kernel i2c atr driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98217Linux kernel IB/mlx4 use-after-free–0.2%2026-10-06Fix
CVE-2026-98216Linux kernel hfi1 driver vulnerability7.1CNA v3.10.1%2026-10-06Fix
CVE-2026-98215Linux kernel SELinux vulnerability–0.2%2026-10-06Fix
CVE-2026-98214Linux kernel SELinux security feature bypass–0.2%2026-10-06Fix
CVE-2026-98213Linux kernel MMC core vulnerability–0.2%2026-10-06Fix
CVE-2026-98212Linux kernel mmc hsq use-after-free–0.2%2026-10-06Fix
CVE-2026-98211Linux kernel mmci MMC driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98210Linux kernel mxcmmc MMC driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98209Linux kernel sdhci-of-aspeed MMC driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98208Linux kernel sdio_uart driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98207Linux kernel MMC SPI driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98206Linux kernel cyttsp5 driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98205Linux kernel evdev vulnerability–0.2%2026-10-06Fix
CVE-2026-98204Linux kernel rmi_smbus driver out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98203Linux kernel soc_button_array vulnerability–0.2%2026-10-06Fix
CVE-2026-98202Linux kernel synaptics-rmi4 driver null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98201Linux kernel input subsystem vulnerability–0.2%2026-10-06Fix
CVE-2026-98200Linux kernel hp-wmi-sensors driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98199Linux kernel pmbus core hwmon vulnerability–0.2%2026-10-06Fix
CVE-2026-98198Linux kernel pwm-fan driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98197Linux kernel w83791d driver vulnerability7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-98196Linux kernel brcmsmac Wi-Fi driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98195Linux kernel iwlegacy Wi-Fi driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98194Linux kernel libertas_tf Wi-Fi driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98193Linux kernel libipw Wi-Fi subsystem vulnerability–0.2%2026-10-06Fix
CVE-2026-98192Linux kernel wcn36xx Wi-Fi driver use-after-free–0.2%2026-10-06Fix
CVE-2026-98191Linux kernel wlcore Wi-Fi driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98190Linux kernel wilc1000 Wi-Fi driver out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98189Linux kernel wilc1000 Wi-Fi driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98188Linux kernel p54 Wi-Fi driver out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98187Linux kernel p54 Wi-Fi driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98186Linux kernel mwifiex out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98185Linux kernel mwifiex Wi-Fi driver integer underflow–0.2%2026-10-06Fix
CVE-2026-98184Linux kernel mwifiex Wi-Fi driver heap buffer overflow–0.2%2026-10-06Fix
CVE-2026-98183Linux kernel mac80211 Wi-Fi subsystem out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98182Linux kernel mac80211 Wi-Fi subsystem null pointer dereference–0.2%2026-10-06Fix
CVE-2026-98181Linux kernel gud DRM driver out-of-bounds write–0.2%2026-10-06Fix
CVE-2026-98180Linux kernel msm DRM driver vulnerability7.1CNA v3.10.1%2026-10-06Exploit codeFix
CVE-2026-98179Linux kernel amdgpu driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98178Linux kernel amdgpu driver vulnerability–0.2%2026-10-06Fix
CVE-2026-98177Linux kernel amdkfd DRM driver integer underflow–0.2%2026-10-06Fix
CVE-2026-98176Linux kernel amdkfd DRM driver integer underflow–0.2%2026-10-06Fix
CVE-2026-98175Linux kernel SMB client use-after-free7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-98174Linux kernel SMB client race condition7.5CNA v3.10.4%2026-10-06Fix
CVE-2026-98173Linux kernel SMB client use-after-free7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-98172Linux kernel SMB client vulnerability–0.2%2026-10-06Fix
CVE-2026-98171Linux kernel SMB client use-after-free8.8CNA v3.10.5%2026-10-06Fix
CVE-2026-98170Linux kernel SMB client vulnerability–0.2%2026-10-06Fix
CVE-2026-98169Linux kernel SMB client out-of-bounds read7.1CNA v3.10.4%2026-10-06Fix
CVE-2026-98168Linux kernel SMB client vulnerability–0.2%2026-10-06Fix
CVE-2026-98167Linux kernel SMB client out-of-bounds read–0.2%2026-10-06Fix
CVE-2026-98166Linux kernel DRM TTM vulnerability7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-98165In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only SR-I–0.2%2026-10-06Fix
CVE-2026-97680IBM Langflow OSS improper access control8.3CNA v3.10.3%2026-10-06Fix
CVE-2026-97679IBM Langflow OSS code injection8.8CNA v3.10.4%2026-10-06Fix
CVE-2026-97678IBM Langflow OSS improper input validation8.8CNA v3.10.4%2026-10-06Fix
CVE-2026-97676IBM Langflow OSS code injection8.8CNA v3.10.5%2026-10-06Fix
CVE-2026-97674IBM Langflow OSS code injection8.1CNA v3.10.3%2026-10-06Fix
CVE-2026-97655IBM Langflow OSS code injection8.8CNA v3.10.5%2026-10-06Fix
CVE-2026-97626Gitea profile feed disclosure bypassing user visibility4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-97308Login Lockdown WordPress plugin bypass vulnerability vulnerability4.8CNA v3.10.2%2026-10-06Fix
CVE-2026-97300WP Event Solution WordPress plugin broken access control6.5CNA v3.10.2%2026-10-06Fix
CVE-2026-97208Gitea push mirror API bypass of DISABLE_NEW_PUSH policy4.9CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-96890GitHub Enterprise Server server-side request forgery8.7CNA v4.00.5%2026-10-06Fix
CVE-2026-96594Gitea repository media API stored XSS6.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-96589Gitea private repository access retained after rejected transfer4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-96580Gitea Actions memory exhaustion through large static matrices7.5CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-96404Gitea installer authentication bypass for existing accounts8.1CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-96400Gitea server-side request forgery4.3CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-96399Gitea denial of service through external issue tracker patterns7.5CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-95594SMS Alert Order Notifications WordPress plugin privilege escalation8.1CNA v3.10.2%2026-10-06Fix
CVE-2026-95526BEAR WordPress plugin broken access control7.3CNA v3.10.2%2026-10-06Fix
CVE-2026-95153An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints4.9CISA ADP v3.10.4%2026-10-06
CVE-2026-95140kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create arbitr7.5CISA ADP v3.10.6%2026-10-06
CVE-2026-95112Gitea issue reference parsing CPU exhaustion6.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-95106Gitea review and execution mismatch through duplicate tree entries9.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-95105danielberkompas cloak AES-CTR cipher vulnerability8.2CNA v4.00.1%2026-10-06
CVE-2026-94675Fluent Forms Pro Add On Pack WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-94299elegro Crypto Payment WordPress plugin incorrect authorization6.5CISA ADP v3.10.2%2026-10-06
CVE-2026-94293Murrelektronik Software AAS Edge Client REST API missing authentication9.3CNA v4.00.3%2026-10-06
CVE-2026-94278File Media Renamer WordPress plugin Author+ arbitrary file Rename via save-attachment-compat5.5CISA ADP v3.10.2%2026-10-06
CVE-2026-94271Deema Payment Gateway WordPress plugin vulnerability5.3CISA ADP v3.10.2%2026-10-06
CVE-2026-94270Deema Payment Gateway webhook vulnerability5.3CISA ADP v3.10.2%2026-10-06
CVE-2026-94206Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds6.3CNA v4.00.3%2026-10-06Fix
CVE-2026-94205Gitea fork workflow approval bypass through maintainer-triggered events9.8CISA ADP v3.10.4%2026-10-06Fix
CVE-2026-94114Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: befo8.2CNA v4.00.3%2026-10-06Fix
CVE-2026-92821Red Hat SSSD LDAP access rule evaluation vulnerability6.8CNA v3.10.3%2026-10-06
CVE-2026-91140OS command injection in Progress Software Autonomous REST Connector GenAI Agents9.6CNA v3.11.9%2026-10-06Fix
CVE-2026-89430Gitea push mirror SSRF and forced writes to internal Git hosts8.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-89289Fast Courier order-status-update REST endpoint vulnerability5.3CISA ADP v3.10.2%2026-10-06
CVE-2026-89182Gitea push-to-create bypass of FORCE_PRIVATE policy5.4CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-88252Red Hat Enterprise Linux 10 sssd: Sssd: Denial of service4.7CNA v3.10.1%2026-10-06
CVE-2026-87975Django privilege abuse in model formsets with editable primary keys5.3CNA v4.00.2%2026-10-06Fix
CVE-2026-87890Django potential request forgery via spatial lookup byte values6.9CNA v4.00.3%2026-10-06Fix
CVE-2026-86786Slider Pro WordPress plugin unauthenticated sensitive data disclosure via sliderpro_multiple_images5.3CISA ADP v3.10.2%2026-10-06
CVE-2026-86684Gitea push mirror local path check uses the repository owner7.1CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-86362Dell System Update improper access control8.2CNA v3.10.1%2026-10-06Fix
CVE-2026-86361Dell System Update incorrect permission assignment8.2CNA v3.10.1%2026-10-06Fix
CVE-2026-86360Dell System Update path traversal9.6CNA v3.10.6%2026-10-06Fix
CVE-2026-85523OS command injection in Felisify Informatics' SambaBox8.8CNA v3.10.9%2026-10-06Fix
CVE-2026-85153Information disclosure vulnerability in Schmooze dating mobile Application9.3CNA v4.00.4%2026-10-06Fix
CVE-2026-84854Out of bound write on WibuKey for Windows7.0CNA v3.10.1%2026-10-06Fix
CVE-2026-84429Django potential denial of service vulnerability in HTTP header parsing6.9CNA v4.00.4%2026-10-06Fix
CVE-2026-83550Red Hat Multicluster Global Hub postgres-exporter: Net/HTTP/pprof exposed on metrics listener7.1CNA v3.10.2%2026-10-06
CVE-2026-82924PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail5.3CNA v3.10.2%2026-10-06
CVE-2026-82531Smarty and PHP code injection via extends: Inheritance Cache9.2CNA v4.00.8%2026-10-06Exploit codeFix
CVE-2026-82162Dell Command elevation of privilege7.4CNA v3.10.3%2026-10-06Fix
CVE-2026-80327Open redirect in PingGateway Fragment Filter5.1CNA v4.00.4%2026-10-06Fix
CVE-2026-80048Red Hat Enterprise Linux 10 sssd: Sssd-kcm: Local denial of service5.5CISA ADP v3.10.1%2026-10-06
CVE-2026-79960Gitea deploy key pushes acting as the repository owner7.1CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-79818HPE ClearPass Policy Manager API interface information disclosure5.3CNA v3.10.3%2026-10-06
CVE-2026-79817Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager client software5.5CNA v3.10.1%2026-10-06
CVE-2026-79816HPE ClearPass Policy Manager client interface cross-site scripting5.4CNA v3.10.2%2026-10-06
CVE-2026-79815Authenticated command injection vulnerability in the ClearPass Policy Manager OnGuard agent6.5CNA v3.10.6%2026-10-06
CVE-2026-79814HPE ClearPass Policy Manager (CPPM) ClearPass Policy Manager OnGuard agent arbitrary file write6.7CNA v3.10.1%2026-10-06
CVE-2026-79813Local privilege escalation in ClearPass client software6.7CNA v3.10.1%2026-10-06
CVE-2026-79812Authenticated local denial of service vulnerability in the OnGuard agent of ClearPass Policy Manager6.1CNA v3.10.1%2026-10-06
CVE-2026-79811Authenticated SQL injection allows remote code execution in ClearPass Policy Manager API7.2CNA v3.10.3%2026-10-06
CVE-2026-79810Authenticated remote code execution vulnerabilities in HPE Networking ClearPass Policy Manager7.2CNA v3.10.6%2026-10-06
CVE-2026-79809HPE ClearPass Policy Manager (CPPM) unauthenticated path traversal7.3CNA v3.10.3%2026-10-06
CVE-2026-79808Local authenticated buffer overflow vulnerability in the ClearPass Policy Manager OnGuard agent7.8CNA v3.10.1%2026-10-06
CVE-2026-79807HPE ClearPass Policy Manager Windows client software privilege escalation7.8CNA v3.10.1%2026-10-06
CVE-2026-79806Authenticated local privilege escalation in ClearPass Policy Manager OnGuard Linux agent7.8CNA v3.10.1%2026-10-06
CVE-2026-79805HPE ClearPass Policy Manager (CPPM) path traversal9.8CNA v3.10.4%2026-10-06
CVE-2026-79803Authenticated command injection leading to privilege escalation in ClearPass Policy Manager API8.8CNA v3.10.8%2026-10-06
CVE-2026-79802Command injection vulnerability in the ClearPass Policy Manager client software8.8CNA v3.11.2%2026-10-06
CVE-2026-79801HPE ClearPass Policy Manager client agent remote code execution9.8CNA v3.10.3%2026-10-06
CVE-2026-79800HPE ClearPass Policy Manager (CPPM) authenticated path traversal8.8CNA v3.10.6%2026-10-06
CVE-2026-79799HPE ClearPass Policy Manager web-based management interface stored cross-site scripting8.8CNA v3.10.3%2026-10-06
CVE-2026-79798HPE ClearPass Policy Manager (CPPM) SQL injection9.9CNA v3.10.3%2026-10-06
CVE-2026-79797Improper access control in HPE Networking ClearPass Android client application8.8CNA v3.10.3%2026-10-06
CVE-2026-79796Authentication bypass vulnerabilities in ClearPass Policy Manager9.8CNA v3.10.5%2026-10-06
CVE-2026-79794Authenticated SQL injection vulnerability in ClearPass Policy Manager Web-based Management interface9.1CNA v3.10.3%2026-10-06
CVE-2026-77178Oracle VM VirtualBox PCNet network device model out-of-bounds write9.1CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-77050Django potential denial of service vulnerability in get_supported_language_variant6.9CNA v4.00.4%2026-10-06Fix
CVE-2026-76754HPE ClearPass Policy Manager SQL injection9.8CNA v3.10.4%2026-10-06
CVE-2026-76753Unauthenticated format string vulnerability in HPE Networking ClearPass Policy Manager9.8CNA v3.10.5%2026-10-06
CVE-2026-76752HPE ClearPass Policy Manager (CPPM) web-based management and API interfaces authentication bypass9.8CNA v3.10.5%2026-10-06
CVE-2026-76751HPE ClearPass Policy Manager OnGuard agent remote code execution9.8CNA v3.10.3%2026-10-06
CVE-2026-76750HPE ClearPass Policy Manager (CPPM) web interface deserialization of untrusted data9.8CNA v3.10.5%2026-10-06
CVE-2026-76749Unauthenticated sensitive information disclosure in AOS-S6.5CNA v3.10.4%2026-10-06
CVE-2026-76748Authenticated privilege escalation vulnerability in the API of AOS-S8.8CNA v3.10.3%2026-10-06
CVE-2026-76747Unauthenticated buffer overflow vulnerabilities lead to information disclosure in AOS-S9.1CNA v3.10.4%2026-10-06
CVE-2026-76746Unauthenticated Adjacent buffer overflow vulnerability leading to information disclosure in AOS-S9.3CNA v3.10.2%2026-10-06
CVE-2026-76745Unauthenticated Adjacent memory corruption vulnerabilities leading to remote code execution in AOS-S9.6CNA v3.10.2%2026-10-06
CVE-2026-76744Unauthenticated buffer overflow vulnerabilities lead to remote code execution in AOS-S9.8CNA v3.10.5%2026-10-06
CVE-2026-76743Authentication bypass vulnerability in the Management interface of AOS-S9.8CNA v3.10.5%2026-10-06
CVE-2026-76742Authentication bypass in the Web Management interface of AOS-S9.8CNA v3.10.6%2026-10-06
CVE-2026-76741Authenticated buffer overflow vulnerabilities lead to denial of service in AOS-S6.5CNA v3.10.4%2026-10-06
CVE-2026-76105Dell Container Storage Modules insufficient randomness7.7CNA v3.10.2%2026-10-06Fix
CVE-2026-76061Red Hat CRI-O bind_mount_prefix privilege escalation5.5CNA v3.10.2%2026-10-06
CVE-2026-75962Post SMTP WordPress plugin unauthenticated stored DOM-based cross-site scripting7.2CNA v3.10.3%2026-10-06Fix
CVE-2026-75820Integer Truncation leading to Heap Corruption in GNU Aspell1.8CNA v4.00.1%2026-10-06Fix
CVE-2026-75819Out-of-bounds read in GNU Aspell1.8CNA v4.00.1%2026-10-06Fix
CVE-2026-75818Heap buffer overflow in GNU Aspell's prezip utility1.8CNA v4.00.1%2026-10-06Fix
CVE-2026-73278Gitea WebAuthn bypass during OAuth and OIDC sign-in9.8CISA ADP v3.10.5%2026-10-06Fix
CVE-2026-71168Dell System Update path traversal7.3CNA v3.10.2%2026-10-06Fix
CVE-2026-70414Dell Command plaintext password storage5.5CNA v3.10.1%2026-10-06Fix
CVE-2026-70411Dell Container Storage Modules (CSM) missing authentication7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-70357Gitea repository migration SSRF through DNS rebinding7.5CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-67273Dell Container Storage Modules server-side template injection9.6CNA v3.10.4%2026-10-06Fix
CVE-2026-67270Dell Container Storage Modules (CSM) improper certificate validation8.2CNA v3.10.1%2026-10-06Fix
CVE-2026-67269Dell Container Storage Modules (CSM) improper privilege management9.9CNA v3.10.5%2026-10-06Fix
CVE-2026-66666Automattic WordPress information disclosure6.9CNA v4.00.3%2026-10-06Fix
CVE-2026-65142NVIDIA Model-Optimizer deserialization of untrusted data7.8CNA v3.10.2%2026-10-06Fix
CVE-2026-65122NVIDIA TensorRT out-of-bounds read5.5CNA v3.10.1%2026-10-06Fix
CVE-2026-63697Dell System Update improper certificate validation7.6CNA v3.10.3%2026-10-06Fix
CVE-2026-63692Dell Container Storage Modules missing authentication10.0CNA v3.10.6%2026-10-06Fix
CVE-2026-63691Dell Container Storage Modules missing authorization6.1CNA v3.10.2%2026-10-06Fix
CVE-2026-63690Dell Container Storage Modules missing authentication5.4CNA v3.10.3%2026-10-06Fix
CVE-2026-63689Dell Container Storage Modules sensitive information in log files6.5CNA v3.10.2%2026-10-06Fix
CVE-2026-63688Dell Container Storage Modules (CSM) missing authentication10.0CNA v3.10.8%2026-10-06Fix
CVE-2026-62072Progress Planner WordPress plugin broken access control8.8CNA v3.10.3%2026-10-06Fix
CVE-2026-61421Dell Container Storage Modules hard-coded credentials9.8CNA v3.10.3%2026-10-06Fix
CVE-2026-61411Dell Container Storage Modules sensitive information in log files7.7CNA v3.10.4%2026-10-06Fix
CVE-2026-59358Cloud Foundry UAA OAuth token endpoint improper authentication7.6CNA v4.00.3%2026-10-06Exploit code
CVE-2026-59357Cloud Foundry UAA external OIDC login callback insufficient verification of data authenticity6.5CNA v4.00.2%2026-10-06
CVE-2026-57559Qualcomm Snapdragon use-after-free in DSP_Services7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-57555Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-57554Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-57546Qualcomm Snapdragon buffer over-read in WLAN HAL7.5CNA v3.10.2%2026-10-06Fix
CVE-2026-57545Qualcomm Snapdragon untrusted pointer dereference in Graphics7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-57537Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-56952Google Android default_msg_handlers.c insecure permissions6.7CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-56936Google Android wacom_sys.c out-of-bounds write6.8CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-56906Google Android eventpoll.c use-after-free7.0CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-56596HCL BigFix Service Management improper input validation3.5CNA v3.10.2%2026-10-06
CVE-2026-55330Google Android bluetooth_ccc.cc use-after-free9.8CISA ADP v3.10.3%2026-10-06Fix
CVE-2026-55307Google Android hwcrypto-kdn.c information disclosure4.4CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-54472Dell Container Storage Modules hard-coded credentials9.8CNA v3.10.5%2026-10-06Fix
CVE-2026-48199Sermon'e WordPress plugin broken access control7.5CNA v3.10.4%2026-10-06
CVE-2026-48197PublishPress Capabilities WordPress plugin privilege escalation7.2CNA v3.10.5%2026-10-06Fix
CVE-2026-43598AMD Instinct™ MI210 improper input validation7.7CNA v4.00.5%2026-10-06
CVE-2026-42638Easy Digital Downloads WordPress plugin broken access control7.5CNA v3.10.3%2026-10-06Fix
CVE-2026-42637PayPlug for WooCommerce (Official) WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-10-06
CVE-2026-42636WP Cookie Notice for GDPR, CCPA and ePrivacy Consent WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-42635WooCommerce Simple Auctions WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06
CVE-2026-42634Video Background Block Use video as background in the section. WordPress plugin cross-site scripting7.1CNA v3.10.3%2026-10-06
CVE-2026-42418Social Rocket WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-42417ARMember Premium WordPress plugin SQL injection9.3CNA v3.10.3%2026-10-06Fix
CVE-2026-42416UDesign Core WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-06
CVE-2026-42415Porto Theme WordPress plugin Unauthenticated SQL injection9.3CNA v3.10.2%2026-10-06
CVE-2026-42414ListingPro WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-06
CVE-2026-42413Snapshotify All-in-One Backup and Restore and Migrate WordPress plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06
CVE-2026-41563Sitemovr WordPress plugin sensitive data exposure7.5CNA v3.10.2%2026-10-06
CVE-2026-41562Norvis Backup WordPress plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06
CVE-2026-41561Museder RestoreOne WordPress plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06
CVE-2026-41560WXD Backup Lite WordPress plugin broken access control7.5CNA v3.10.3%2026-10-06
CVE-2026-41559SafeSnap Verified WordPress Backup and Restore plugin sensitive data exposure7.5CNA v3.10.3%2026-10-06
CVE-2026-41558WP Migration Plugin DB and Files WP Synchro WordPress plugin 2FA bypass vulnerability7.5CNA v3.10.3%2026-10-06
CVE-2026-41555Newsletter Subscription Form User Subscriptions Form, Capture Email WordPress plugin SQL injection9.3CNA v3.10.2%2026-10-06
CVE-2026-40807CF7 Views Complete Entry Management for Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-40806Blog, Posts and Category Filter for Elementor WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39798TrueBooker WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-10-06
CVE-2026-39797GDPR Framework By Data443 WordPress plugin PHP object injection9.8CNA v3.10.3%2026-10-06
CVE-2026-39796Advanced Posts Listing Show Post List Easily WordPress plugin broken access control7.5CNA v3.10.3%2026-10-06
CVE-2026-39795SendPress Newsletters WordPress plugin SQL injection9.3CNA v3.10.3%2026-10-06
CVE-2026-39794WooCommerce Multivendor Marketplace REST API WordPress plugin broken access control7.5CNA v3.10.4%2026-10-06
CVE-2026-39793Simple JWT Login WordPress plugin broken authentication8.8CNA v3.10.4%2026-10-06
CVE-2026-39792Simple File List WordPress plugin arbitrary file deletion8.6CNA v3.10.4%2026-10-06
CVE-2026-39791Mailjet Email Marketing WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-10-06
CVE-2026-39790VikRentCar WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-39789Fluent Affiliate Pro WordPress plugin broken access control7.5CNA v3.10.2%2026-10-06Fix
CVE-2026-39788Front End PM WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-06Fix
CVE-2026-3978710Web Social Photo Feed WordPress plugin broken access control6.5CNA v3.10.3%2026-10-06
CVE-2026-39785Gmedia Photo Gallery WordPress plugin SQL injection9.3CNA v3.10.2%2026-10-06
CVE-2026-39784Hotel Booking WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39781Document Gallery WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Reported exploited
CVE-2026-39780Youzify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39778Ansar Import One Click Starter Sites for Elementor and Themes WordPress plugin cross-site scripting7.1CNA v3.10.2%2026-10-06
CVE-2026-39776Tabs WordPress plugin remote code execution (RCE)8.0CNA v3.10.4%2026-10-06
CVE-2026-39775JobZilla - Job Board WordPress theme privilege escalation8.8CNA v3.10.3%2026-10-06
CVE-2026-39774Tourfic Pro WordPress plugin privilege escalation8.8CNA v3.10.2%2026-10-06
CVE-2026-39773Doctreat Core WordPress plugin privilege escalation10.0CNA v3.10.3%2026-10-06
CVE-2026-39772Captcha by BestWebSoft WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.4%2026-10-06
CVE-2026-39771Buddyboss Platform WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-06
CVE-2026-39770Doctreat WordPress theme arbitrary file upload10.0CNA v3.10.4%2026-10-06
CVE-2026-39769Graphina WordPress plugin broken authentication7.5CNA v3.10.5%2026-10-06
CVE-2026-39767WPBase Cache WordPress plugin denial of service Attack6.5CNA v3.10.4%2026-10-06
CVE-2026-39766ARForms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06
CVE-2026-39765Challan WordPress plugin privilege escalation7.2CNA v3.10.5%2026-10-06
CVE-2026-39764Radius Booking Booking Calendar for Appointments and Services WordPress plugin SQL injection9.3CNA v3.10.3%2026-10-06
CVE-2026-39762Autoship Cloud for WooCommerce Subscription Products WordPress plugin broken access control6.5CNA v3.10.3%2026-10-06
CVE-2026-39761Meta Box AIO WordPress plugin privilege escalation9.8CNA v3.10.5%2026-10-06
CVE-2026-39760Real 3D FlipBook WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-06
CVE-2026-39759Workreap Core WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-10-06
CVE-2026-39758Midtrans-WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-06
CVE-2026-39757Taskbot WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-10-06
CVE-2026-39756Wappointment WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-10-06
CVE-2026-39755WP Duplicate WordPress plugin arbitrary file upload9.9CNA v3.10.4%2026-10-06
CVE-2026-39754Piotnet Addons For Elementor WordPress plugin arbitrary file download6.5CNA v3.10.3%2026-10-06
CVE-2026-39753Taskbot WordPress plugin privilege escalation9.8CNA v3.10.5%2026-10-06
CVE-2026-39752Jobs for WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2026-10-06
CVE-2026-39751PayPlug for WooCommerce (Official) WordPress plugin broken access control7.5CNA v3.10.3%2026-10-06
CVE-2026-39750StoreGrowth: Smart Sales Booster for WooCommerce WordPress plugin cross-site scripting7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-39749App for Cloudflare® WordPress plugin broken access control6.5CNA v3.10.3%2026-10-06
CVE-2026-39748EduMall WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39747Woffice WordPress theme SQL injection8.5CNA v3.10.3%2026-10-06
CVE-2026-39746Booknetic WordPress plugin SQL injection9.3CNA v3.10.4%2026-10-06
CVE-2026-39745Contact Form to DB by BestWebSoft WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39731Database for CF7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39730Wise Chat WordPress plugin broken access control7.1CNA v3.10.3%2026-10-06Fix
CVE-2026-39729Edwiser Bridge WordPress plugin sensitive data exposure7.2CNA v3.10.3%2026-10-06
CVE-2026-39728Instapage WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-10-06Fix
CVE-2026-39727WC Fields Factory WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-06
CVE-2026-39726Lumise Product Designer WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39724HTTP Requests Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39723Morning for WooCommerce WordPress plugin broken access control7.5CNA v3.10.2%2026-10-06Fix
CVE-2026-39722WPLMS WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-39720Mapster WP Maps WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-39719PDF Smart Viewer for Elementor WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-10-06
CVE-2026-39599WDS MCP Content Manager WordPress plugin broken access control4.3CNA v3.10.2%2026-10-06
CVE-2026-34498Johnson Controls Illustra Standard improper input validation5.1CNA v4.00.7%2026-10-06Fix
CVE-2026-32582IATO MCP WordPress plugin broken access control6.5CNA v3.10.2%2026-10-06Fix
CVE-2026-32581Mooberry Book Manager WordPress plugin SQL injection7.1CNA v3.10.3%2026-10-06
CVE-2026-32580WooCommerce Lottery WordPress plugin SQL injection7.5CNA v3.10.3%2026-10-06
CVE-2026-32579Kognetiks Chatbot for WordPress plugin arbitrary file upload10.0CNA v3.10.5%2026-10-06Fix
CVE-2026-32578ECPay Ecommerce for WooCommerce WordPress plugin broken access control7.1CNA v3.10.3%2026-10-06
CVE-2026-32577Frontend File Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32576Faktur Pro for WooCommerce WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.2%2026-10-06
CVE-2026-32575SUMO Affiliates Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32574Smart Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32572WP User Frontend Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32571Ohio Extra WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-06
CVE-2026-32570Progressify - Progressive Web App (PWA) WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32569WP Media folder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-06
CVE-2026-32568WooCommerce Designer Pro WordPress plugin remote code execution (RCE)9.9CNA v3.10.7%2026-10-06
CVE-2026-32557WooCommerce Appointments WordPress plugin SQL injection9.3CNA v3.10.4%2026-10-06
CVE-2026-26287External Secrets Operator webhook generator vulnerability7.1CNA v3.10.2%2026-10-06Fix
CVE-2026-25434WP2LEADS WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-06
CVE-2026-25433WP2LEADS WordPress plugin broken access control7.1CNA v3.10.3%2026-10-06
CVE-2026-25302Qualcomm Snapdragon improper verification of cryptographic signature in Boot7.1CNA v3.10.1%2026-10-06Fix
CVE-2026-25291Qualcomm Snapdragon use-after-free in Graphics7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-25274Qualcomm Snapdragon use-after-free in Windows WLAN host6.7CNA v3.10.1%2026-10-06Fix
CVE-2026-25273Qualcomm Snapdragon out-of-bounds write in Camera driver6.7CNA v3.10.1%2026-10-06Fix
CVE-2026-25272Qualcomm Snapdragon out-of-bounds write in Camera driver6.7CNA v3.10.1%2026-10-06Fix
CVE-2026-25270Qualcomm Snapdragon out-of-bounds write in Camera driver6.7CNA v3.10.1%2026-10-06Fix
CVE-2026-25269Qualcomm Snapdragon out-of-bounds write in Camera driver6.7CNA v3.10.1%2026-10-06Fix
CVE-2026-25267Qualcomm Snapdragon missing authorization in Core7.8CNA v3.10.1%2026-10-06Fix
CVE-2026-25263Qualcomm Snapdragon out-of-bounds write in Linux Camera6.6CNA v3.10.1%2026-10-06Fix
CVE-2026-19029HDF5 scale-offset filter heap buffer over-read via crafted chunk6.8CNA v4.00.1%2026-10-06Fix
CVE-2026-12380Reflected XSS in Akıllı Ticaret's E-Commerce Pack6.1CNA v3.10.1%2026-10-06
CVE-2026-9226Devolutions Server Azure AD external login flow authentication bypass6.8CISA ADP v3.10.2%2026-10-06Fix
CVE-2026-4889SQL injection (SQLi) in eLoanApp Platform by RDL Technologies7.8CNA v4.00.3%2026-10-06Fix
CVE-2026-0198Google Android gem_msg.c insecure permissions4.4CISA ADP v3.10.1%2026-10-06Fix
CVE-2026-105786Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier8.5CNA v4.00.3%2026-10-05Fix
CVE-2026-105785Joplin Server password reset accepts tokens issued for unrelated purposes4.8CNA v3.10.2%2026-10-05Fix
CVE-2026-105784Joplin whiteboard card rendering allows CSS injection into application chrome4.6CNA v3.10.2%2026-10-05Fix
CVE-2026-105783Joplin Web Clipper pairing allows cross-origin theft of a permanent API token8.0CNA v3.10.1%2026-10-05Fix
CVE-2026-105782Scrapy: Arbitrary Module Import via Referrer-Policy header in RefererMiddleware7.5CNA v3.10.4%2026-10-05Fix
CVE-2026-105773Canimaan Software ClamXAV local privilege escalation7.3CNA v4.00.1%2026-10-05Fix
CVE-2026-105768apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root6.3CNA v4.00.3%2026-10-05Fix
CVE-2026-105767Chainguard Academy integrate-platform-docs composite action interpolates inputs into shell commands2.1CNA v4.00.2%2026-10-05
CVE-2026-105766Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP2.3CNA v4.00.1%2026-10-05Fix
CVE-2026-105764Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE7.7CNA v4.00.3%2026-10-05Fix
CVE-2026-105763Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL9.6CNA v3.10.3%2026-10-05Fix
CVE-2026-105762Dify: Unauthenticated server-side request forgery in /console/API/remote-files/upload endpoint8.3CNA v3.10.3%2026-10-05Fix
CVE-2026-105761Dify: IDOR in AppMCPServer PUT endpoint allows Modification of other Apps' MCP Servers7.1CNA v3.10.2%2026-10-05Fix
CVE-2026-105760vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion5.3CNA v3.10.3%2026-10-05Fix
CVE-2026-105759vLLM Rust frontend metrics middleware denial of service5.9CNA v3.10.4%2026-10-05Fix
CVE-2026-105758vLLM Qwen2-VL and Qwen3-VL video samplers resource exhaustion5.3CNA v3.10.3%2026-10-05Fix
CVE-2026-105757vLLM EngineCore denial of service6.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105756vLLM EngineCore denial of service6.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105755vLLM flash late-interaction scoring insecure direct object reference4.2CNA v3.10.2%2026-10-05Fix
CVE-2026-105754vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features6.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105753vLLM mirrored multimodal IPC caches denial of service6.5CNA v3.10.4%2026-10-05Fix
CVE-2026-105752vLLM Harmony tool continuations information disclosure3.1CNA v3.10.2%2026-10-05Fix
CVE-2026-105751Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend6.9CNA v4.00.4%2026-10-05Fix
CVE-2026-105750Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode5.9CNA v3.10.3%2026-10-05Fix
CVE-2026-105749docling HTML, JATS, ODS and BoxNote backends resource exhaustion6.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105748Docling: Crafted DoclingDocument JSON embeds local image files into converted output4.3CNA v3.10.2%2026-10-05Fix
CVE-2026-105747docling METS-GBS backend denial of service4.3CNA v3.10.2%2026-10-05Fix
CVE-2026-105746Docling: KServe v2 OCR engine does not enforce enable_remote_services2.2CNA v3.10.2%2026-10-05Fix
CVE-2026-105745Docling: Plugin entry points are imported before the allow_external_plugins check6.7CNA v3.10.1%2026-10-05Fix
CVE-2026-105744Docling: Arbitrary file read/write when rendering untrusted TikZ with the opt-in Tectonic engine7.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105743Docling: SSRF guard bypass in remote resource fetching4.0CNA v3.10.2%2026-10-05Fix
CVE-2026-105742Docling: Configured HTTP headers sent to every remote image host named by a document3.7CNA v3.10.2%2026-10-05Fix
CVE-2026-105741Langflow: IP spoofing Bypass via `X-Forwarded-For` allowing Remote Configuration Write7.1CNA v3.10.2%2026-10-05Fix
CVE-2026-105740Langflow: Authenticated RCE9.9CNA v3.10.6%2026-10-05Reported exploitedFix
CVE-2026-105712GnuPG symlink following3.6CNA v3.10.1%2026-10-05Fix
CVE-2026-105699Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers7.1CNA v4.00.2%2026-10-05Fix
CVE-2026-105698langflow-ai langflow vertices endpoints insecure direct object reference5.4CNA v3.10.2%2026-10-05Fix
CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration9.9CNA v3.10.5%2026-10-05Fix
CVE-2026-105696penpot get-page RPC command missing authorization6.5CNA v3.10.3%2026-10-05Fix
CVE-2026-105695penpot chunked-upload assembly missing authorization5.9CNA v3.10.3%2026-10-05Fix
CVE-2026-105694Penpot: Stored XSS via Unsanitised SVG Uploads5.4CNA v3.10.2%2026-10-05Fix
CVE-2026-105693Penpot: Anonymous share-link token disclosure and page-scope bypass via get-view-only-bundle5.3CNA v3.10.2%2026-10-05Fix
CVE-2026-105692Penpot: IDOR in Share-Link Deletion allows any File Editor to Delete Share-Links They Did not Create5.4CNA v3.10.2%2026-10-05Fix
CVE-2026-105691Penpot: Authenticated OS command injection in Penpot SVG Exporter via Legacy fill-color9.9CNA v3.10.4%2026-10-05Fix
CVE-2026-105690penpot insufficient session expiration5.9CNA v3.10.2%2026-10-05Fix
CVE-2026-105689Penpot: SSRF guard bypass6.0CNA v4.00.3%2026-10-05Fix
CVE-2026-105688Penpot: Team admin can escalate to owner via team invitation6.7CNA v3.10.3%2026-10-05Fix
CVE-2026-105687Penpot: A team admin can remove the team owner via ::delete-team-member missing owner-protection4.9CNA v3.10.3%2026-10-05Fix