CVE-2026 list

CVE-2026 records published in October 2026

Page two of 14: records 1,001 to 2,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 1,001 to 2,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-114475Missing authorization in hMailServer6.5CNA v3.10.2%2026-10-21
CVE-2026-114474Progressive Robot hMailServer external-account download use of a less trusted source5.9CNA v3.10.2%2026-10-21
CVE-2026-114473Incorrect authorization in hMailServer5.0CNA v3.10.2%2026-10-21
CVE-2026-114472Insufficient Resource Pool in hMailServer3.7CNA v3.10.2%2026-10-21
CVE-2026-114471Insertion of sensitive information into log file in hMailServer4.7CNA v3.10.1%2026-10-21
CVE-2026-114470Cross-site request forgery (CSRF) in hMailServer5.3CNA v3.10.2%2026-10-21
CVE-2026-114463NousResearch hermes-agent webhook platform gateway privilege escalation–0.4%2026-10-21
CVE-2026-114462Arbitrary file read via Symlink in Velneo vServer HTTP Server6.0CNA v4.00.3%2026-10-21Fix
CVE-2026-114441oretnom23 php-travel-agency-system update.php SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114440oretnom23 php-travel-agency-system delete.php SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114439oretnom23 php-travel-agency-system Session session.php missing authentication6.9CNA v4.00.5%2026-10-21
CVE-2026-114438Red Hat Keycloak keycloak-services improper authentication4.2CNA v3.10.2%2026-10-21
CVE-2026-114437Chi Client IP spoofing in ClientIPFromXFF via X-Forwarded-For6.3CNA v4.00.1%2026-10-21Fix
CVE-2026-114407e107 CMS reflected XSS via search.php author parameter5.1CNA v4.00.3%2026-10-21Fix
CVE-2026-114406Ca-certificates: Distrust emudhra intermediate ca certificates due to security concerns6.8CNA v3.10.3%2026-10-21Fix
CVE-2026-114405Denial of service via Malformed VATP Packet in Velneo vServer8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114404PHPPresentation XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions5.3CNA v4.00.3%2026-10-21
CVE-2026-114403PHPOffice PHPPresentation deserialization via Reader\Serialized::load9.2CNA v4.00.5%2026-10-21
CVE-2026-114402Trudesk path traversal and authorization bypass via Profile Image upload5.3CNA v4.00.3%2026-10-21
CVE-2026-114401Trudesk Username Enumeration via Regex injection in /API/v1/login6.9CNA v4.00.4%2026-10-21
CVE-2026-114400polonel trudesk /uploads directory missing authentication8.2CNA v4.00.5%2026-10-21
CVE-2026-114399Trudesk path traversal via Backup Delete and Restore API7.0CNA v4.00.5%2026-10-21
CVE-2026-114398Trudesk unrestricted file upload via /settings/general/uploadlogo5.1CNA v4.00.2%2026-10-21
CVE-2026-114397Trudesk missing authentication on Debug Routes8.3CNA v4.00.4%2026-10-21
CVE-2026-114396Trudesk MongoDB $where injection via tickets search API7.1CNA v4.00.5%2026-10-21
CVE-2026-114395Trudesk authorization bypass via /API/v1/messages/send5.3CNA v4.00.3%2026-10-21
CVE-2026-114394polonel trudesk Ticket Comment and Create APIs authorization bypass5.3CNA v4.00.3%2026-10-21
CVE-2026-114393polonel trudesk Ticket Update API endpoints authorization bypass5.3CNA v4.00.2%2026-10-21
CVE-2026-114392Trudesk authorization bypass via GET /API/v1/tickets/:uid6.9CNA v4.00.2%2026-10-21
CVE-2026-114391easysoft zentaopms ZenTao PMS authorization bypass via Ajax Controller Methods7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-114390Chamilo LMS missing authorization in AJAX Handlers6.9CNA v4.00.2%2026-10-21Fix
CVE-2026-114389Chamilo LMS missing authorization via openAnswerGrade5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114388Chamilo LMS missing authorization via GradebookController6.9CNA v4.00.2%2026-10-21Fix
CVE-2026-114387Shopper privilege escalation via Unguarded Livewire components8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114386Pydantic AI Harness CodeMode Tool Call Limit Bypass via run_code6.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114384itsourcecode Online Cake Ordering System transactionsave.php SQL injection5.3CNA v4.00.3%2026-10-21
CVE-2026-114383TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow10.0CNA v4.00.7%2026-10-21
CVE-2026-114382TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow10.0CNA v4.00.7%2026-10-21
CVE-2026-114381itsourcecode Online Cake Ordering System orderdetail.php SQL injection5.3CNA v4.00.3%2026-10-21
CVE-2026-114380itsourcecode Online Cake Ordering System inserttrans.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114379EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion5.3CNA v4.00.3%2026-10-21
CVE-2026-114378itsourcecode Online Cake Ordering System deleteproduct.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114377leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal5.1CNA v4.00.4%2026-10-21Fix
CVE-2026-114376leomoon-studios wiki-go API editor.go SourceHandler path traversal5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114375leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114374leomoon-studios wiki-go fetch-metadata endpoint metadata_api.go server-side request forgery5.3CNA v4.00.2%2026-10-21Fix
CVE-2026-114370Red Hat build of Apache Camel for Spring Boot 4 path traversal3.7CNA v3.10.3%2026-10-21
CVE-2026-114362HarnessRouter Targets Test endpoint app.py server-side request forgery5.3CNA v4.00.2%2026-10-21Fix
CVE-2026-114361HarnessRouter Identity Mode app.py improper authorization6.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114268Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow9.4CNA v4.00.5%2026-10-21
CVE-2026-114267SourceCodester Food Order Management System Admin endpoint authorization6.9CNA v4.00.3%2026-10-21
CVE-2026-114266ProjectWorlds Advanced Library Management System profile.php mysqli_query SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114265ProjectWorlds Advanced Library Management System Search Form returned_book_search.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114264ProjectWorlds Advanced Library Management System edit_member.php SQL injection5.1CNA v4.00.2%2026-10-21
CVE-2026-114263ProjectWorlds Advanced Library Management System individual_report_search.php SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114262file-management-system FileController.php store unrestricted upload6.9CNA v4.00.4%2026-10-21
CVE-2026-114261MomoTommy file-management-system Files API FileController.php destroy missing authentication6.9CNA v4.00.5%2026-10-21
CVE-2026-114260oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication6.9CNA v4.00.5%2026-10-21
CVE-2026-114259oretnom23 file-management-system-php admin_class.php save_files unrestricted upload6.9CNA v4.00.3%2026-10-21
CVE-2026-114258oretnom23 file-management-system-php File Management files.php SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114257oretnom23 file-management-system-php File Download download.php readfile SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114256oretnom23 file-management-system-php Folder Management admin_class.php save_files SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114255oretnom23 file-management-system-php User Account Management admin_class.php save_user SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114254oretnom23 file-management-system-php admin_class.php login SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114253oretnom23 file-management-system-php index.php include file inclusion5.3CNA v4.00.3%2026-10-21
CVE-2026-114252itsourcecode Sales-and-Inventory-System cust_searchfrm.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114251itsourcecode Sales-and-Inventory-System cust_del.php SQL injection5.3CNA v4.00.3%2026-10-21
CVE-2026-114250itsourcecode Sales-and-Inventory-System cust_edit.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-114249dhikshitha29 Insurance-Management-System Policy Holder Update Form improper authorization6.9CNA v4.00.3%2026-10-21
CVE-2026-114248dhikshitha29 Insurance-Management-System missing authentication6.9CNA v4.00.6%2026-10-21
CVE-2026-114245dhikshitha29 Insurance-Management-System Add New Admin Form improper authorization6.9CNA v4.00.4%2026-10-21
CVE-2026-114243dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114242dhikshitha29 Insurance-Management-System editPlan.php mysqli_query SQL injection6.9CNA v4.00.3%2026-10-21
CVE-2026-114236Red Hat Podman storage archive vulnerability3.3CNA v3.10.1%2026-10-21
CVE-2026-114198Deserialization of untrusted data in floss8.7CNA v4.00.1%2026-10-21Fix
CVE-2026-114197Deserialization of untrusted data in capa8.7CNA v4.00.1%2026-10-21Fix
CVE-2026-114176eRoom WordPress plugin broken access control4.3CNA v3.10.2%2026-10-21Fix
CVE-2026-114145GitPython validates a submodule's .git path only after cloning into it (RCE)7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-114144BinaryMuse toml-node toml.parse denial of service7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-114143BinaryMuse toml-node toml.parse denial of service8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114142BinaryMuse toml-node lib/compiler.js prototype pollution8.8CNA v4.00.3%2026-10-21Fix
CVE-2026-114141BinaryMuse toml-node toml.parse compiler denial of service8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114140Jupyter nbconvert ExtractOutputPreprocessor path traversal8.8CNA v4.00.3%2026-10-21Fix
CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel route9.1CNA v4.00.4%2026-10-21Fix
CVE-2026-114138encode django-rest-framework content negotiation denial of service7.5CNA v3.10.4%2026-10-21Fix
CVE-2026-114137encode django-rest-framework TokenProxy.delete insufficient session expiration7.4CNA v3.10.4%2026-10-21Fix
CVE-2026-114136encode django-rest-framework JSONParser resource exhaustion7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-114135jupyter_server jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization8.8CNA v3.10.4%2026-10-21Fix
CVE-2026-114133Nuxt server islands render `useHeadSafe` input without sanitisation5.4CNA v3.10.2%2026-10-21Fix
CVE-2026-114132Nuxt: Server-side route rules are skipped for case-variant paths when routing is case-insensitive6.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114131nuxt appMiddleware incorrect authorization6.5CNA v3.10.3%2026-10-21Fix
CVE-2026-114130nuxt NuxtLink cross-site scripting2.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114129uhop stream-json FlexAssembler denial of service6.2CNA v3.10.1%2026-10-21Fix
CVE-2026-114128withastro Astro JSX and MDX rendering pipeline cross-site scripting6.5CNA v3.10.3%2026-10-21Fix
CVE-2026-114127Astro: Arbitrary CSS injection in Astro View Transitions2.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114126storybookjs Storybook development server code injection8.7CNA v4.00.5%2026-10-21Fix
CVE-2026-114125storybookjs Storybook preview code injection8.6CNA v4.00.4%2026-10-21Fix
CVE-2026-114124Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry3.9CNA v3.10.2%2026-10-21Fix
CVE-2026-114123dynamics365ninja d365fo-mcp-server missing authentication7.5CNA v3.10.4%2026-10-21Fix
CVE-2026-114122Electron: Frame subscription trusts GPU-supplied frame geometry3.9CNA v3.10.1%2026-10-21Fix
CVE-2026-114121Electron: OpenExternal permission requests can be attributed to the wrong origin5.4CNA v3.10.2%2026-10-21Fix
CVE-2026-114120SchedulePress missing authorization via wpsp_el_editor_form AJAX action5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114117Vyper Optimizer Miscompilation of msg.value K in Ternary Branches8.2CNA v4.00.2%2026-10-21
CVE-2026-114115Vyper Memory Misread via Ternary Nested Array Selection6.3CNA v4.00.2%2026-10-21Fix
CVE-2026-114112Sharp RCE via bundled libheif AVIF decoding8.9CNA v4.00.2%2026-10-21Fix
CVE-2026-114110Astral uv arbitrary file deletion via Wheel RECORD Entries8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114107HKUDS Vibe-Trading Indirect prompt injection RCE via BashTool and BackgroundRunTool8.7CNA v4.00.5%2026-10-21Fix
CVE-2026-114105Adm-zip privilege escalation via keepOriginalPermission Setuid Bits6.9CNA v4.00.1%2026-10-21Fix
CVE-2026-114102adm-zip denial of service via inflateAsync unhandled error Event8.7CNA v4.00.3%2026-10-21Exploit code
CVE-2026-114100Coraza from Request Body Inspection Bypass via Content-Type6.9CNA v4.00.2%2026-10-21Fix
CVE-2026-114097Dulwich Symlink path traversal via filter_branch Index Filter7.3CNA v4.00.2%2026-10-21Fix
CVE-2026-114095Dulwich infinite loop DoS via Pack.resolve_object7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-114092Trigger.dev missing authentication in Dashboard Run Replay action8.3CNA v4.00.4%2026-10-21
CVE-2026-114090Trigger.dev CLI missing authentication in MCP Server7.6CNA v4.00.2%2026-10-21Fix
CVE-2026-114087Trigger.dev authentication bypass via Hard-coded Default Secrets9.2CNA v4.00.3%2026-10-21
CVE-2026-114085Trigger.dev missing authentication in Supervisor Workload API8.8CNA v4.00.2%2026-10-21Fix
CVE-2026-114082Trigger.dev Overly Broad Realtime Session Stream Credentials7.2CNA v4.00.3%2026-10-21Fix
CVE-2026-114080Trigger.dev blind SSRF via Alert-Channel Webhook URL5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114077Trigger.dev Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV46.1CNA v4.00.2%2026-10-21
CVE-2026-114075Trigger.dev authorization bypass via Alert Channels API5.3CNA v4.00.3%2026-10-21Fix
CVE-2026-114072Trigger.dev CSRF via Slack OAuth Callback State5.3CNA v4.00.1%2026-10-21Fix
CVE-2026-114070Trigger.dev Dashboard Agent User token disclosure via Session Records5.1CNA v4.00.2%2026-10-21Fix
CVE-2026-114067Trigger.dev improper authorization via snapshot-url Session route7.1CNA v4.00.2%2026-10-21
CVE-2026-114065Trigger.dev Tenant Filtering Bypass via Query Table Placeholders7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-114062sveltejs kit SvelteKit SSRF via Redirects in Server-Side Self-Fetch Fallbacks6.9CNA v4.00.3%2026-10-21Fix
CVE-2026-114060sveltejs kit SvelteKit open redirect via Enhanced Form Actions2.1CNA v4.00.2%2026-10-21Fix
CVE-2026-114057ArcadeDB Bolt SHOW DATABASES information disclosure5.3CNA v4.00.2%2026-10-21
CVE-2026-114055vLLM DoS via Unvalidated mm_processor_kwargs8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-114052vLLM MOSS-Audio memory exhaustion via /tokenize mm_processor_kwargs8.7CNA v4.00.4%2026-10-21Fix
CVE-2026-114050vLLM Remote Engine crash via Forged Multimodal UUID7.1CNA v4.00.2%2026-10-21Fix
CVE-2026-114047FreeRDP Proxy Improper TLS Certificate Validation7.6CNA v4.00.2%2026-10-21Fix
CVE-2026-114045FreeRDP heap buffer overflow via rdpsnd_server_select_format8.7CNA v4.00.5%2026-10-21Fix
CVE-2026-114042FreeRDP use-after-free via drdynvc Virtual Channel PDU7.1CNA v4.00.3%2026-10-21
CVE-2026-114040DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal5.1CNA v4.00.3%2026-10-21
CVE-2026-114039Projectworlds Advanced Library Management System report_search.php mysqli_query SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-113870Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing8.6CNA v4.00.2%2026-10-21Fix
CVE-2026-113811Algorithm::UrataniTakeda versions from for Perl allow memory exhaustion–0.2%2026-10-21Fix
CVE-2026-113800Electron: HID and USB permission checks can be attributed to the wrong origin5.4CNA v3.10.2%2026-10-21Fix
CVE-2026-113799abdolence slack-morphism-rust slack Morphism verifier errors disclose valid HMACs in the logs5.3CNA v3.10.4%2026-10-21Fix
CVE-2026-113798Electron: Pointer lock permission requests can be attributed to the wrong frame5.4CNA v3.10.2%2026-10-21Fix
CVE-2026-113797Electron: Extension tabs.query returns tab URLs and titles without the tabs permission3.1CNA v3.10.5%2026-10-21Fix
CVE-2026-113796Electron: SameSite cookie restrictions are not applied to windows opened from links4.2CNA v3.10.2%2026-10-21Fix
CVE-2026-113795pypdf resource exhaustion6.0CNA v4.00.5%2026-10-21Fix
CVE-2026-113794pypdf xref table infinite loop6.0CNA v4.00.5%2026-10-21Fix
CVE-2026-113793pypdf infinite loop6.0CNA v4.00.5%2026-10-21Fix
CVE-2026-113792pypdf PdfWriter.find_outline_item infinite loop6.0CNA v4.00.5%2026-10-21Fix
CVE-2026-113791pypdf content stream parser vulnerability6.0CNA v4.00.3%2026-10-21Fix
CVE-2026-113790pypdf resource exhaustion6.0CNA v4.00.3%2026-10-21Fix
CVE-2026-113789pypdf resource exhaustion6.0CNA v4.00.3%2026-10-21Fix
CVE-2026-113788Lagoon core SSH service vulnerable to remote code execution9.4CNA v4.00.3%2026-10-21Fix
CVE-2026-113787GitHubNewbie0 odf-kit odtToHtml function cross-site scripting6.1CNA v3.10.2%2026-10-21Fix
CVE-2026-113786pypdf improper input validation2.3CNA v4.00.4%2026-10-21Fix
CVE-2026-113779pfrest pfSense-pkg-RESTAPI pfSense REST API package vulnerable to privilege escalation8.8CNA v3.10.4%2026-10-21Fix
CVE-2026-113744Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow10.0CNA v4.00.6%2026-10-21
CVE-2026-113743Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal5.3CNA v4.00.4%2026-10-21Fix
CVE-2026-113741itsourcecode Online Cake Ordering System 404.php cross-site scripting5.3CNA v4.00.3%2026-10-21
CVE-2026-113740itsourcecode Online Cake Ordering System deletecustomer.php SQL injection5.3CNA v4.00.2%2026-10-21
CVE-2026-113461Checkmk mk-oracle: Local privilege escalation via insecure Oracle Home library loading5.2CNA v4.00.1%2026-10-21Fix
CVE-2026-112921Perl Robots::Validate User-Agent matcher session data exposure–0.2%2026-10-21Fix
CVE-2026-112868H5P WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.2%2026-10-21Fix
CVE-2026-112408Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket9.4CNA v4.00.7%2026-10-21Fix
CVE-2026-112381Apache Traffic Server net_write_io null pointer dereference8.2CNA v4.00.3%2026-10-21Fix
CVE-2026-112378GitLab EE billing eligibility checks vulnerability4.3CNA v3.10.1%2026-10-21Fix
CVE-2026-112326Improper Cleanup on Thrown Exception in GitLab3.1CNA v3.10.2%2026-10-21Fix
CVE-2026-112221SureCart WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-21Fix
CVE-2026-112212Inconsistent interpretation of HTTP requests (HTTP Request/Response Smuggling) in GitLab7.5CNA v3.10.2%2026-10-21Fix
CVE-2026-111957SUMIT Payment Gateway for WooCommerce redirect callback vulnerability5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111956WholesaleX for WordPress unauthenticated Imported user CSV disclosure5.9CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111955WholesaleX for WordPress unauthenticated account activation and Administrator Approval bypass6.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111949miniOrange 2FA - 2FA Bypass via Passkey Second-Factor Rebinding7.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111948Profile Builder for WordPress reflected XSS via Unconfirmed Emails Row actions7.1CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111947Easy Pricing Tables for WordPress arbitrary post Clone and Publish via Legacy Table Duplication5.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111943Distrust compromised intermediate certificates in crypto/x509–0.1%2026-10-21Fix
CVE-2026-111852Ajax Search Lite WordPress plugin SQL injection9.3CNA v3.10.3%2026-10-21Fix
CVE-2026-111849WpTravelly WordPress plugin broken access control5.3CNA v3.10.3%2026-10-21Fix
CVE-2026-111848Geo Mashup WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-21Fix
CVE-2026-111840Paid Videochat Turnkey Site WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-21Fix
CVE-2026-111838ThemeHunk Customizer WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-21Fix
CVE-2026-111837Contest Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-21Fix
CVE-2026-111835BjornTech Swish for WooCommerce WordPress plugin broken access control6.5CNA v3.10.2%2026-10-21Fix
CVE-2026-111834Mang Board WP WordPress plugin arbitrary file upload9.9CNA v3.10.4%2026-10-21Fix
CVE-2026-111833weForms WordPress plugin arbitrary file deletion7.5CNA v3.10.5%2026-10-21Fix
CVE-2026-111832WP Mailster WordPress plugin arbitrary file upload10.0CNA v3.10.4%2026-10-21Fix
CVE-2026-111817Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout6.9CNA v4.00.3%2026-10-21Fix
CVE-2026-111816Apache Traffic Server HTTP request smuggling9.2CNA v4.00.2%2026-10-21Fix
CVE-2026-111815Apache Traffic Server TLS session ticket resumption improper certificate validation7.8CNA v4.00.2%2026-10-21Fix
CVE-2026-111814Apache Traffic Server outbound session-sharing policy improper certificate validation7.8CNA v4.00.2%2026-10-21Fix
CVE-2026-111813Apache Traffic Server magick plugin argument injection10.0CNA v4.00.3%2026-10-21Fix
CVE-2026-111812Apache Traffic Server origin_server_auth plugin incorrect authorization7.0CNA v4.00.3%2026-10-21Fix
CVE-2026-111811Apache Traffic Server tsmemcache plugin missing authentication9.4CNA v4.00.3%2026-10-21Fix
CVE-2026-111810Apache Traffic Server diagnostic logging denial of service8.7CNA v4.00.3%2026-10-21Fix
CVE-2026-111809Apache Traffic Server HTTP request smuggling6.9CNA v4.00.2%2026-10-21Fix
CVE-2026-111808Apache Traffic Server HTTP/2 DATA frame padding integer underflow7.7CNA v4.00.3%2026-10-21Fix
CVE-2026-111805Apache Traffic Server HTTP/2 resource exhaustion7.7CNA v4.00.3%2026-10-21Fix
CVE-2026-111804Apache Traffic Server: Wasm plugin has a use-after-free and forwards unvalidated guest metric IDs8.8CNA v4.00.2%2026-10-21Fix
CVE-2026-111596Kliken: Ads + Pixel for Meta for WordPress unauthenticated order data disclosure via IDOR5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111574Redirection for Contact Form 7 - unauthenticated stored XSS via lead Debug Metabox7.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-111401Tailored Tools WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2026-10-21Fix
CVE-2026-111184NoMachine Named Pipe incorrect permission assignment local privilege escalation7.8CNA v3.00.1%2026-10-21
CVE-2026-111183GStreamer rtpL16depay heap-based buffer overflow remote code execution9.8CNA v3.00.5%2026-10-21
CVE-2026-111075Eclipse OpenJ9 JITServer: Pre-authentication remote crash8.7CNA v4.00.4%2026-10-21Fix
CVE-2026-111074Eclipse OpenJ9 JITServer: Pre-authentication remote denial of service8.7CNA v4.00.4%2026-10-21Fix
CVE-2026-110982The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Editor role and above to modify arbitrary posts of any type, including content they cannot otherwise edit such as navigati4.9CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-110938Eclipse OpenJ9 JITServer: Multiple denial of service vulnerabilities8.7CNA v4.00.4%2026-10-21Fix
CVE-2026-110899Ninja Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-21Exploit codeFix
CVE-2026-110884Live Summary for Gravity Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-21Fix
CVE-2026-110803Session Lock leak on an Invalid UI Id allows denial of service in Vaadin Framework 88.7CNA v4.00.3%2026-10-21Fix
CVE-2026-110744Red Hat Multicluster Global Hub multicluster-global-hub-operator-bundle privilege escalation7.2CNA v3.10.3%2026-10-21
CVE-2026-110651Swift Performance Lite for WordPress Author+ SQLi via Image Optimizer6.8CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-110523WP User Manager - unauthenticated privilege escalation8.1CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-110514WPZOOM Portfolio for WordPress Contributor+ arbitrary Post/Page type Overwrite via IDOR4.9CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-110370GS Pins for Pinterest WordPress plugin PHP object injection8.8CNA v3.10.4%2026-10-21Fix
CVE-2026-110369WordPress Team Members GS Plugins plugin PHP object injection8.8CNA v3.10.4%2026-10-21Fix
CVE-2026-109926Productive Commerce for WordPress Subscriber+ arbitrary plugin activation4.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-109619PHP RCE via stale global state9.2CNA v4.06.0%2026-10-21Reported exploitedEmerging ThreatsSnortExploit codeKCVFix
CVE-2026-109618PHP RCE via OOM corruption9.2CNA v4.011.6%2026-10-21Reported exploitedNucleiEmerging ThreatsSnortExploit codeKCVFix
CVE-2026-109147WP Booking System for WordPress reflected XSS via booking_id parameter7.1CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-109125NLnet Labs Unbound possible cache poisoning vulnerability5.3CNA v3.10.1%2026-10-21Fix
CVE-2026-108073SureCart for WordPress unauthenticated Private Catalog data disclosure via expand parameter5.3CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-107790HireZoot WP Job Openings admin dashboard stored cross-site scripting6.8CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-107789SmartyParcel for WordPress unauthenticated Shipping Label disclosure via IDOR5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-107788SmartyParcel (WC Ukr Shipping) for WordPress Subscriber+ arbitrary Shipping Label deletion4.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-107588Multiple vulnerabilities in the Highcharts Library Bundled with Vaadin Charts8.4CNA v4.00.5%2026-10-21Fix
CVE-2026-107506Simple Banner for WordPress authenticated privilege escalation via user Permissions setting7.5CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-107447Contest Gallery WordPress plugin vulnerability5.3CNA v3.10.2%2026-10-21Fix
CVE-2026-107435Strong Testimonials WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-21Fix
CVE-2026-107237WP Time Capsule Backup and Staging by WP Time Capsule wptc_copy_stage_to_live handler vulnerability8.2CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-107128Uncanny Toolkit for LearnDash for WordPress Cross-Site account Lockout via missing authorization5.0CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-107127Uncanny Toolkit for LearnDash for WordPress account takeover via password reset CSRF7.5CISA ADP v3.10.1%2026-10-21Fix
CVE-2026-106932Moloni for WordPress Subscriber+ arbitrary order Invoice Generation via genInvoice6.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-105999Booking Package for WordPress unauthenticated Calendar account information disclosure5.3CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-105998Booking Package for WordPress unauthenticated Subscription deactivation via missing authorization5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-105996Booking Package WordPress plugin information disclosure4.8CISA ADP v3.10.1%2026-10-21Fix
CVE-2026-105992Ettrick Escape Room Booking for WordPress unauthenticated Payment Confirmation bypass5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-105945Apache Pulsar Packages Management Service filesystem storage provider path traversal7.7CNA v4.00.5%2026-10-21Fix
CVE-2026-105944Apache Pulsar Manager missing authentication10.0CNA v4.00.7%2026-10-21Fix
CVE-2026-105942Apache Pulsar broker privilege escalation7.7CNA v4.00.4%2026-10-21Fix
CVE-2026-105938Apache Pulsar admin REST API incorrect authorization2.3CNA v4.00.5%2026-10-21Fix
CVE-2026-105937Apache Pulsar shadow topic source missing authorization8.7CNA v4.00.2%2026-10-21Fix
CVE-2026-105936Apache Pulsar Functions worker REST API missing authorization5.3CNA v4.00.4%2026-10-21Fix
CVE-2026-105935Apache Pulsar Functions Worker REST API missing authorization4.9CNA v4.00.4%2026-10-21Fix
CVE-2026-105934Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic7.2CNA v4.00.5%2026-10-21Fix
CVE-2026-105933Apache Pulsar topic initialization fail-open behavior2.3CNA v4.00.3%2026-10-21Fix
CVE-2026-105932Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints2.3CNA v4.00.5%2026-10-21Fix
CVE-2026-105931Apache Pulsar transaction administration REST API missing authorization2.3CNA v4.00.5%2026-10-21Fix
CVE-2026-105930Apache Pulsar Functions worker incorrect authorization6.0CNA v4.00.5%2026-10-21Fix
CVE-2026-105927Apache Pulsar WebSocket service incorrect authorization2.3CNA v4.00.4%2026-10-21Fix
CVE-2026-105926Apache Pulsar binary protocol schema commands missing authorization5.3CNA v4.00.4%2026-10-21Fix
CVE-2026-105923Qt null-pointer dereference in QTriangulator reachable through VectorImage4.0CNA v4.00.1%2026-10-21Fix
CVE-2026-105869Apache Pulsar MultiRolesTokenAuthorizationProvider improper signature verification9.2CNA v4.00.3%2026-10-21Fix
CVE-2026-105777Insertion of sensitive information into sent data in GitLab4.3CNA v3.10.3%2026-10-21Fix
CVE-2026-105711GitLab fragment cache information disclosure3.5CNA v3.10.2%2026-10-21Fix
CVE-2026-105262Falang multilanguage for WordPress Subscriber+ stored XSS via Term Translation8.0CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-105257Appointment Booking Plugin information disclosure2.7CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-105256LatePoint for WordPress unauthenticated Payment bypass via payment_portion parameter5.3CNA v3.10.1%2026-10-21Fix
CVE-2026-105044OS command injection in Qingteng Host Adaptive Security Platform Security Toolbox8.5CNA v4.00.9%2026-10-21Fix
CVE-2026-104949EnterpriseDB WarehousePG missing authorization2.3CNA v4.00.2%2026-10-21Fix
CVE-2026-104948EnterpriseDB WarehousePG missing authorization7.1CNA v4.00.2%2026-10-21Fix
CVE-2026-104947EnterpriseDB WarehousePG missing authorization5.3CNA v4.00.2%2026-10-21Fix
CVE-2026-104642Simple Shopping Cart - Contributor+ Price Manipulation via Price Verification Bypass2.7CNA v3.10.1%2026-10-21Fix
CVE-2026-104641Simple Shopping Cart PayPal IPN recipient vulnerability5.3CNA v3.10.1%2026-10-21Fix
CVE-2026-103515Incorrect authorization in GitLab2.7CNA v3.10.2%2026-10-21Fix
CVE-2026-103302Idram Payment Gateway for Idram WordPress plugin vulnerability5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-103301The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications, because the secret used to sign them is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary WooCommerce orders as paid.5.3CNA v3.10.1%2026-10-21Fix
CVE-2026-103090Unauthenticated Biscuit credential disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)8.8CNA v4.00.3%2026-10-21Fix
CVE-2026-102499Modern Events Calendar (Lite and Pro) for WordPress Subscriber+ SQLi via mec_attendees AJAX action7.7CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-102486Out-of-bounds read in NTPsec7.5CNA v3.10.8%2026-10-21Fix
CVE-2026-102485Out-of-bounds read in NTPsec5.2CNA v3.10.2%2026-10-21Fix
CVE-2026-102484Heap-based buffer overflow in NTPsec6.4CNA v3.10.3%2026-10-21Fix
CVE-2026-102483Reachable assertion in NTPsec7.5CNA v3.10.6%2026-10-21Fix
CVE-2026-101138CMP Coming Soon and Maintenance - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist5.3CNA v3.10.2%2026-10-21Fix
CVE-2026-100420Information disclosure vulnerability in the cloud-client daemon of Deco BE636.8CNA v4.00.2%2026-10-21Fix
CVE-2026-100145Synchrony Financing - unauthenticated order takeover via admin_order_callback REST route6.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-98869In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register liveness analysis As reported in the thread [1], the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on–0.2%2026-10-21Fix
CVE-2026-97313ISC BIND 9 specific RPZ configurations and query patterns may result in an unexpected exit7.5CNA v3.10.4%2026-10-21Fix
CVE-2026-97206NLnet Labs Unbound use-after-free7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-96901Cart Abandonment Recovery for WooCommerce for WordPress unauthenticated authentication bypass3.7CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-96888ISC BIND 9 null pointer dereference7.5CNA v3.10.5%2026-10-21Fix
CVE-2026-96778Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer7.7CNA v4.00.4%2026-10-21Fix
CVE-2026-96644Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-96643Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-96642Pillow: TarIO negative size field causes infinite CPU-spin loop7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-96641python-pillow Pillow integer overflow6.5CNA v3.10.3%2026-10-21Fix
CVE-2026-96640Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion8.2CNA v4.00.4%2026-10-21Fix
CVE-2026-96639Pillow multi-frame loaders can reuse stale native image storage after mode transitions9.8CNA v3.10.6%2026-10-21Fix
CVE-2026-96638Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode6.5CNA v3.10.3%2026-10-21Fix
CVE-2026-96637Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek leads to unbounded allocation DoS7.1CNA v4.00.3%2026-10-21Fix
CVE-2026-96636Pillow: Decompression-bomb protection bypass via multi-frame seek in MPO and DCX6.5CNA v3.10.3%2026-10-21Fix
CVE-2026-96405NLnet Labs Unbound resource exhaustion5.3CNA v3.10.2%2026-10-21Fix
CVE-2026-94423Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so t–0.3%2026-10-21Fix
CVE-2026-94300ISC BIND 9 concurrent GSS-TSIG messages corrupt memory8.1CNA v3.10.7%2026-10-21Exploit codeFix
CVE-2026-94140Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds its ssh command with that option, for password authentication, for private-key authentication and for the fallback. The–0.3%2026-10-21
CVE-2026-93856OpenStack Cinder incorrect resource transfer4.3CNA v3.10.3%2026-10-21Fix
CVE-2026-92999Click n Chat - Unauthenticated lead data disclosure via click_n_chat_update_lead_list_export_action5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-92998Click n Chat - unauthenticated SQLi via 'sort_by'/'sort_order' parameters8.6CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-92997Click n Chat WordPress plugin unauthenticated SQLi via datacolumn parameter8.6CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-92824Red Hat libmodulemd rpm-map emission path out-of-bounds read6.2CNA v3.10.1%2026-10-21
CVE-2026-92823Red Hat libmodulemd denial of service6.2CNA v3.10.1%2026-10-21
CVE-2026-92822Red Hat libmodulemd denial of service6.2CNA v3.10.1%2026-10-21
CVE-2026-92210NoMachine nxhtd server-side request forgery information disclosure7.2CNA v3.00.3%2026-10-21
CVE-2026-92209NoMachine Redis improper authentication local privilege escalation7.8CNA v3.00.2%2026-10-21Exploit code
CVE-2026-92208NoMachine mDNS heap-based buffer overflow remote code execution8.8CNA v3.00.6%2026-10-21Exploit code
CVE-2026-92207MindsDB OpenBBtable code injection remote code execution8.8CNA v3.00.7%2026-10-21
CVE-2026-92206CrewAI crewAI Framework Agent Loading unsafe reflection remote code execution8.8CNA v3.00.5%2026-10-21
CVE-2026-92205BusyBox libarchive Symlink directory traversal arbitrary file creation6.1CNA v3.00.3%2026-10-21
CVE-2026-92204Airbyte OneDrive Connector server-side request forgery7.7CNA v3.00.4%2026-10-21
CVE-2026-92203Airbyte SharePoint Connector server-side request forgery7.7CNA v3.00.4%2026-10-21
CVE-2026-92202Luxion KeyShot BIP File Parsing uncontrolled search path element remote code execution7.8CNA v3.00.3%2026-10-21Fix
CVE-2026-92183GIMP APNG File Parsing stack-based buffer overflow remote code execution7.8CNA v3.00.4%2026-10-21
CVE-2026-91403Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access9.1CNA v3.10.4%2026-10-21Fix
CVE-2026-90484Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash–0.2%2026-10-21Fix
CVE-2026-89052Hard-coded AES encryption key in Archer C65.9CNA v4.00.2%2026-10-21Fix
CVE-2026-89035MikroTik RouterOS WebFig Session Token Replay authentication bypass9.1CNA v4.00.3%2026-10-21
CVE-2026-88784Weglot WordPress plugin unauthenticated stored XSS via Translated page Link Rewriting7.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-87849Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing–0.2%2026-10-21Fix
CVE-2026-87838Wava Payment - Unauthenticated Merchant Credential Overwrite via Install Webhook6.5CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-87837Wava Payment - Unauthenticated Order Status Change via Payment Webhook5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-87096Acronis Cyber Infrastructure incorrect authorization3.3CNA v3.00.1%2026-10-21Fix
CVE-2026-87095Acronis Cyber Infrastructure incorrect authorization9.1CNA v3.00.2%2026-10-21Fix
CVE-2026-86611Download Manager (Free and Pro) Privacy Settings Update via CSRF4.3CISA ADP v3.10.1%2026-10-21Fix
CVE-2026-86249Apache bRPC brpc::Server authentication bypass–0.3%2026-10-21Fix
CVE-2026-86147Apache bRPC: Arbitrary file creation/truncation–0.2%2026-10-21Fix
CVE-2026-86146Apache bRPC: HTTP request smuggling and header injection via Lenient HTTP/1.1 Header Parsing–0.2%2026-10-21Fix
CVE-2026-85683Jane Menu WordPress plugin unauthenticated stored XSS via Store Config Proxy URL8.8CNA v3.10.3%2026-10-21Fix
CVE-2026-85642Formidable Forms - Unauthenticated Payment Gateway Connect Verification DoS7.5CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-85518Red Hat Hardened Images openscap: Openscap: Arbitrary file write6.1CNA v3.10.3%2026-10-21Fix
CVE-2026-84748Apache bRPC improper authorization–0.2%2026-10-21Fix
CVE-2026-84747Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments–0.2%2026-10-21Fix
CVE-2026-84727Apache bRPC: Use-after-free in RTMP Chunk Stream Handling via Abort message5.4CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-82987ViewSonic vCast media streaming service vulnerability–0.3%2026-10-21Fix
CVE-2026-82953Apache bRPC RTMP protocol implementation null pointer dereference–0.2%2026-10-21Fix
CVE-2026-82942Apache bRPC RDMA transport race condition–0.1%2026-10-21Fix
CVE-2026-82819Universal Naming Convention (UNC) path injection in Cerberus FTP Server7.1CNA v4.00.5%2026-10-21Fix
CVE-2026-82814Duplicator and Duplicator Pro WordPress plugin PHP object injection8.8CNA v3.10.5%2026-10-21Fix
CVE-2026-82425Apache bRPC: Reachable assertion in Socket::OnInputEvent allows Remote denial of service–0.1%2026-10-21Fix
CVE-2026-82231Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client–0.1%2026-10-21Fix
CVE-2026-82230Apache bRPC: Stack exhaustion via Unbounded Recursion in mcpack2pb parser7.5CISA ADP v3.10.6%2026-10-21Fix
CVE-2026-82210Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames–0.2%2026-10-21Fix
CVE-2026-81813Elementor WordPress plugin Contributor+ stored XSS via SVG CDATA Sanitizer bypass6.8CISA ADP v3.10.3%2026-10-21Fix
CVE-2026-81812Elementor WordPress plugin Author+ stored XSS via SVG upload6.4CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-81755Apache bRPC: Uncontrolled resource consumption via Excessive Streams in a Single RPC request–0.2%2026-10-21Fix
CVE-2026-80463Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly–0.2%2026-10-21Fix
CVE-2026-79976zephyrproject zephyr MCTP I2C+GPIO target binding null pointer dereference7.1CNA v3.10.2%2026-10-21
CVE-2026-79704Apache bRPC: Out-of-bounds read in Multi-stream RPC Response Handling–0.2%2026-10-21Fix
CVE-2026-79627Advanced File Manager - authenticated stored XSS via SVG Sanitiser Content-Sniff Bypass7.1CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-78334Apache bRPC: Missing authentication for Streaming RPC Frames–0.3%2026-10-21Fix
CVE-2026-78119zephyrproject zephyr Nuvoton NPCX eSPI driver out-of-bounds write6.3CNA v3.10.1%2026-10-21Fix
CVE-2026-78118zephyrproject zephyr kernel wait queues race condition7.0CNA v3.10.1%2026-10-21Fix
CVE-2026-78117zephyrproject zephyr Infineon PSOC 6 BLESS Bluetooth driver race condition4.2CNA v3.10.1%2026-10-21
CVE-2026-78116Zephyr Broadcom AFBR-S50 sensor driver double free5.2CNA v3.10.2%2026-10-21Fix
CVE-2026-78066Apache bRPC: Resource exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes–0.2%2026-10-21Fix
CVE-2026-78058Apache bRPC: Unbounded resource consumption and crash in the HTTP/2 Receive Path–0.3%2026-10-21Fix
CVE-2026-78048Apache bRPC: Remote denial of service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder–0.2%2026-10-21Fix
CVE-2026-76531Files or directories accessible to external parties in Splunk SOAR9.9CISA ADP v3.10.4%2026-10-21
CVE-2026-76530As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-78.8CISA ADP v3.10.2%2026-10-21
CVE-2026-76529Improper protection of alternate path in Splunk SOAR–0.2%2026-10-21
CVE-2026-76528Protection mechanism failure in Splunk SOAR–0.1%2026-10-21
CVE-2026-76527Improper check or handling of exceptional conditions in Splunk SOAR–0.1%2026-10-21
CVE-2026-76526Improper neutralization in Splunk SOAR–0.2%2026-10-21
CVE-2026-76524Cisco Open Source Snort3 Open Source Snort 3 Control Channel Socket Aribitrary command execution7.8CNA v3.10.1%2026-10-21Fix
CVE-2026-76505Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets denial of service7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-76497Cisco Expressway Series Software Hardening Release: October 2026 insecure temporary file6.6CNA v3.10.1%2026-10-21Fix
CVE-2026-76496Cisco TelePresence Video Communication Server (VCS) Expressway link following7.0CNA v3.10.1%2026-10-21Fix
CVE-2026-76495Cisco Expressway Series Software Hardening Release: October 2026 incorrect permission assignment7.8CNA v3.10.1%2026-10-21Fix
CVE-2026-76494Cisco Expressway Series Software Hardening Release: October 2026 code injection7.8CNA v3.10.2%2026-10-21Fix
CVE-2026-76493Cisco Expressway Series Software Hardening Release: October 2026 uncaught exception7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-76492Cisco Expressway Series Software Hardening Release: October 2026 null pointer7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-76491Cisco Expressway Series Software Hardening Release: October 2026 denial of service7.5CNA v3.10.3%2026-10-21Fix
CVE-2026-76490Cisco Expressway Series Software Hardening Release: October 2026 out-of-bounds write8.6CNA v3.10.3%2026-10-21Fix
CVE-2026-76489Multiple Cisco Products Snort 3 Generic File Processing memory exhaustion denial of service5.8CNA v3.10.3%2026-10-21Fix
CVE-2026-76487Cisco Unified Communications Manager improper access control5.3CNA v3.10.5%2026-10-21Fix
CVE-2026-76481Cisco Emergency Responder improper exception handling7.5CNA v3.10.5%2026-10-21Fix
CVE-2026-76479Cisco Unified Communications Products Hardening Release: October 2026 path traversal7.8CNA v3.10.2%2026-10-21Fix
CVE-2026-76478Cisco Unified Communications Products Hardening Release: October 2026 improper access control8.8CNA v3.10.1%2026-10-21Fix
CVE-2026-76477Cisco Unified Communications Products Hardening Release: October 2026 injection8.8CNA v3.10.4%2026-10-21Fix
CVE-2026-76476Cisco Unified Communications Products Hardening Release: October 2026 improper input validation8.8CNA v3.10.3%2026-10-21Fix
CVE-2026-76475Cisco Unified Communications Products Hardening Release: October 2026 cross-site scripting9.3CNA v3.10.3%2026-10-21Fix
CVE-2026-76474Cisco Unified Communications Products Hardening Release: October 2026 improper authentication9.8CNA v3.10.4%2026-10-21Fix
CVE-2026-76473Cisco Unified Communications Products injection9.8CNA v3.10.4%2026-10-21Fix
CVE-2026-76466Cisco Expressway Series remote code execution9.8CNA v3.10.4%2026-10-21Fix
CVE-2026-76462Cisco Secure Client privilege escalation5.5CNA v3.10.1%2026-10-21Fix
CVE-2026-76445Multiple Cisco Products Snort 3 denial of service5.3CNA v3.10.4%2026-10-21Fix
CVE-2026-76435Cisco Expressway Series information disclosure5.3CNA v3.10.3%2026-10-21Fix
CVE-2026-76408Improper control of a resource through its lifetime in Splunk SOAR–0.2%2026-10-21
CVE-2026-76407Improper access control in Splunk SOAR–0.1%2026-10-21
CVE-2026-76406Information disclosure through REST API Authentication in Splunk SOAR5.9CNA v3.10.3%2026-10-21
CVE-2026-76308Missing authorization through the REST API in Splunk SOAR6.5CNA v3.10.2%2026-10-21
CVE-2026-76307Sensitive information disclosure through REST API Query Filters in Splunk SOAR7.2CNA v3.10.3%2026-10-21
CVE-2026-76306Information disclosure through REST API Query Filters in Splunk SOAR7.5CNA v3.10.2%2026-10-21
CVE-2026-76305Improper access control during App Downloads in Splunk SOAR6.5CNA v3.10.3%2026-10-21
CVE-2026-76304Sensitive information disclosure through Automation Broker Configuration in Splunk SOAR4.3CNA v3.10.2%2026-10-21
CVE-2026-76303Stored cross-site scripting (XSS) through App Documentation in Splunk SOAR5.7CNA v3.10.2%2026-10-21
CVE-2026-76302Security Hardening in Splunk Enterprise October 20269.9CISA ADP v3.10.4%2026-10-21
CVE-2026-76301Security Hardening in Splunk Enterprise October 2026–0.2%2026-10-21
CVE-2026-76300Security Hardening in Splunk Enterprise October 2026–0.2%2026-10-21
CVE-2026-76299Security Hardening in Splunk Enterprise October 20269.9CISA ADP v3.10.3%2026-10-21
CVE-2026-76298Splunk Enterprise PostgreSQL sidecar service hard-coded cryptographic key8.8CNA v3.10.3%2026-10-21
CVE-2026-76297Splunk Enterprise Splunk Web federated provider REST API cross-site request forgery4.2CNA v3.10.1%2026-10-21
CVE-2026-76296Missing authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise4.3CNA v3.10.2%2026-10-21
CVE-2026-76295SPL injection through the REST API in Splunk Secure Gateway4.3CNA v3.10.2%2026-10-21
CVE-2026-76294Improper access control in Field Extraction Management in Splunk Enterprise4.3CNA v3.10.2%2026-10-21
CVE-2026-76293Splunk Enterprise Splunk Web Manager XML code injection7.2CNA v3.10.3%2026-10-21
CVE-2026-76292Missing authorization through REST API endpoints in Splunk Secure Gateway6.5CNA v3.10.3%2026-10-21
CVE-2026-76291Improper access control through Scheduled Search Safeguards in Splunk Enterprise8.8CNA v3.10.3%2026-10-21
CVE-2026-76290Splunk Enterprise Splunk Pipeline Builders app REST API denial of service7.5CNA v3.10.4%2026-10-21
CVE-2026-76289Denial of service (DoS) through the REST API in Splunk Enterprise6.5CNA v3.10.3%2026-10-21
CVE-2026-76288Denial of service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise7.5CNA v3.10.4%2026-10-21
CVE-2026-76287Authorization bypass in the Data Management REST API in Splunk Enterprise5.4CNA v3.10.2%2026-10-21
CVE-2026-74758Apache bRPC: Heap use-after-free in RTMP Abort Message Handling–0.2%2026-10-21Fix
CVE-2026-74757Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count–0.2%2026-10-21Fix
CVE-2026-74755Apache bRPC: Integer underflow in mcpack2pb parser leading to denial of service–0.2%2026-10-21Fix
CVE-2026-71195OpenStack Manila incorrect authorization9.9CNA v3.10.5%2026-10-21Fix
CVE-2026-70387OnePlus OxygenOS exposed dangerous method8.4CNA v4.00.1%2026-10-21Fix
CVE-2026-70386OnePlus OxygenOS improper neutralization of special elements8.5CNA v4.01.2%2026-10-21Fix
CVE-2026-66392Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names–0.1%2026-10-21Fix
CVE-2026-61916Apache bRPC: Out-of-bounds read in URL and Header Lookup Tables on Unsigned-char Platforms–0.2%2026-10-21Fix
CVE-2026-61902Apache bRPC: Memory exhaustion through Inconsistent Message Body Limits–0.2%2026-10-21Fix
CVE-2026-59562Apache IoTDB: Remote code execution and unauthenticated path traversal in legacy pipe sendFile RPC–0.3%2026-10-21Fix
CVE-2026-59229Apache IoTDB: Legacy Pipe privilege escalation–0.3%2026-10-21Fix
CVE-2026-58663Apache IoTDB: Auth Bypass in pipeTransfer interface–0.3%2026-10-21Fix
CVE-2026-58064Apache bRPC: Denial of service via Unbounded Redis Inline Command Allocation–0.2%2026-10-21Fix
CVE-2026-56388Apache bRPC: Out-of-bounds write in Redis command parser–0.3%2026-10-21Fix
CVE-2026-56387Apache bRPC: Remote memory exhaustion in RTMP AMF parser–0.3%2026-10-21Fix
CVE-2026-56386Apache bRPC: Integer underflow and out-of-bounds read in HTTP/2 DATA Frame parser7.5CISA ADP v3.10.7%2026-10-21Fix
CVE-2026-54427Apache bRPC: Stack exhaustion via Unbounded Recursion in AMF parser–0.2%2026-10-21Fix
CVE-2026-54426Apache bRPC: Stack exhaustion via Unbounded Recursion in Redis Reply parser–0.2%2026-10-21Fix
CVE-2026-54425Apache bRPC: Stack exhaustion via Recursive HPACK Dynamic Table Size Update Decoding–0.3%2026-10-21Fix
CVE-2026-53986Girafit camera app Hard-coded TURN credentials disclosure6.9CNA v4.00.2%2026-10-21
CVE-2026-50106NLnet Labs Unbound validator reliance on untrusted input in a security decision6.5CNA v3.10.2%2026-10-21Fix
CVE-2026-48830Apache bRPC improper authentication–0.3%2026-10-21Fix
CVE-2026-41114Apache IoTDB JDBC driver: Large-scale memory exhaustion via BigDecimal toPlainString in JDBC driver–0.2%2026-10-21Fix
CVE-2026-35501NLnet Labs Unbound DNSSEC validator improper integrity check validation3.7CNA v3.10.1%2026-10-21Fix
CVE-2026-29001TastyIgniter PHP object injection via settings deserialization8.6CNA v4.00.6%2026-10-21
CVE-2026-20356Multiple Cisco Products Snort 3 Software Hardening Release: October 20267.5CNA v3.10.3%2026-10-21Fix
CVE-2026-20291Multiple Cisco Products Snort 3 Software Hardening Release: October 20267.8CNA v3.10.1%2026-10-21Fix
CVE-2026-20236Multiple Cisco Products Snort 3 Software Hardening Release: October 20267.5CNA v3.10.3%2026-10-21Fix
CVE-2026-20221Multiple Cisco Products Snort 3 Generic Routing Encapsulation denial of service5.8CNA v3.10.5%2026-10-21Fix
CVE-2026-20218Cisco Secure Firewall Threat Defense Snort 3 VBA Decompression Engine denial of service5.8CNA v3.10.4%2026-10-21Fix
CVE-2026-20197Multiple Cisco Products Snort 3 Teredo protocol denial of service5.8CNA v3.10.4%2026-10-21Fix
CVE-2026-20179Multiple Cisco Products Snort 3 Generic Routing Encapsulation denial of service5.8CNA v3.10.4%2026-10-21Fix
CVE-2026-20043Multiple Cisco Products Snort 3 Software Hardening Release: October 20269.0CNA v3.10.3%2026-10-21Fix
CVE-2026-20019Multiple Cisco Products Snort 3 Netflow denial of service5.8CNA v3.10.4%2026-10-21Fix
CVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME denial of service5.8CNA v3.10.4%2026-10-21Fix
CVE-2026-19947zephyrproject zephyr device multiplexer pseudo-driver missing authorization5.3CNA v3.10.1%2026-10-21Fix
CVE-2026-19676zephyrproject zephyr PECI driver untrusted pointer dereference7.8CNA v3.10.1%2026-10-21
CVE-2026-19630ISC BIND 9 amplified resource exhaustion in inbound message processing7.5CNA v3.10.4%2026-10-21Fix
CVE-2026-18748zephyrproject zephyr out-of-bounds read in Bluetooth Classic A2DP codec information element handling3.5CNA v3.10.2%2026-10-21
CVE-2026-17557Red Hat OpenShift AI lm-evaluation-harness: Lm-evaluation-harness: Ssrf6.5CNA v3.10.3%2026-10-21
CVE-2026-16255Incorrect authorization in GitLab5.9CNA v3.10.2%2026-10-21Fix
CVE-2026-15723Improper neutralization of special elements used in an LDAP query (LDAP injection) in GitLab8.2CNA v3.10.3%2026-10-21Fix
CVE-2026-15261TI WooCommerce Wishlist for WordPress unauthenticated Private Wishlist disclosure via share_key5.3CISA ADP v3.10.2%2026-10-21Fix
CVE-2026-14556HappyForms for WordPress unauthenticated HTML injection in admin Notification email5.4CNA v3.10.2%2026-10-21Fix
CVE-2026-14288GitLab EE merge request approval policy improper access control3.1CNA v3.10.2%2026-10-21Fix
CVE-2026-13319Authorization bypass through user-controlled key in GitLab4.3CNA v3.10.2%2026-10-21Fix
CVE-2026-12664Incorrect authorization in GitLab6.8CNA v3.10.2%2026-10-21Fix
CVE-2026-113869Mozilla Thunderbird use-after-free in S/MIME decryption during a security device password prompt5.4CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113868Mozilla Thunderbird POP3 and SMTP NTLM authentication information disclosure5.3CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113867Mozilla Thunderbird stanza injection in XMPP chat–0.2%2026-10-20Fix
CVE-2026-113866Mozilla Thunderbird account password sent unencrypted during Exchange account setup5.9CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113812Mozilla::CA for Perl CA certificate bundle improper certificate validation–0.2%2026-10-20Fix
CVE-2026-113810Stormshield Network Security stored XSS on SNS Enrollment portal7.0CNA v3.10.1%2026-10-20
CVE-2026-113808Stormshield Network Security stored XSS on SNS Enrollment portal7.1CNA v3.10.2%2026-10-20
CVE-2026-113802Wavlink WL-WN530BE1-A unauthenticated OS command injection in ioos protocol.csp ovpn_file handler9.3CNA v4.02.9%2026-10-20
CVE-2026-113776pypa virtualenv activation scripts code injection7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-113735D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials6.3CNA v4.00.6%2026-10-20
CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-113731djust find_handlers_for_template MCP tool path traversal3.3CNA v3.10.2%2026-10-20Fix
CVE-2026-113730OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies5.6CNA v3.10.4%2026-10-20Fix
CVE-2026-113729Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization7.5CNA v3.10.5%2026-10-20Fix
CVE-2026-113728Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpoint7.5CNA v3.10.5%2026-10-20Fix
CVE-2026-113727openchoreo WorkflowRun update route authorization bypass7.4CNA v3.10.4%2026-10-20Fix
CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-113725virtualenv bash activate runs commands from an environment name with a backslash before $7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-113724pypa virtualenv safe_delete error handler link following4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-113723pypa virtualenv bash activation prompt OS command injection7.1CNA v4.00.1%2026-10-20Fix
CVE-2026-113722pypa virtualenv POSIX console launchers OS command injection7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-113721pypa virtualenv link following4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-113720pypa virtualenv app-data copy seeder incorrect permission assignment4.4CNA v4.00.1%2026-10-20Fix
CVE-2026-113719pypa virtualenv PipInstall path traversal4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-113718pypa virtualenv xonsh activation code injection7.1CNA v4.00.1%2026-10-20Fix
CVE-2026-113717pypa virtualenv PipInvoke download without integrity check2.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113716pypa virtualenv builtin creator link following4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-113715pypa virtualenv stdlib venv creator CRLF injection2.0CNA v4.00.1%2026-10-20Fix
CVE-2026-113714pypa virtualenv download_wheel improper integrity check validation2.3CNA v4.00.2%2026-10-20Fix
CVE-2026-113713pypa virtualenv app-data seeder insecure temporary file4.4CNA v4.00.1%2026-10-20Fix
CVE-2026-113712Cachet has stored XSS in Incident component4.8CNA v4.00.4%2026-10-20
CVE-2026-113711ApostropheCMS: Unauthenticated resource exhaustion7.5CNA v3.10.5%2026-10-20Fix
CVE-2026-113710ApostropheCMS apostrophe password-change endpoint vulnerability5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-113709argoproj argo-cd argo CD: A Kustomize Helm config home can run commands in the repo-server9.9CNA v3.10.4%2026-10-20Fix
CVE-2026-113708argoproj argo-cd argo CD: A Kustomize remote ref can run commands in the repo-server9.9CNA v3.10.7%2026-10-20Fix
CVE-2026-113707a2aproject a2a-rs inmemory.rs update race condition5.3CNA v4.00.3%2026-10-20
CVE-2026-113706a2aproject a2a-rs inmemory.rs information disclosure5.1CNA v4.00.3%2026-10-20
CVE-2026-113705a2aproject a2a-rs error.rs information exposure6.9CNA v4.00.3%2026-10-20
CVE-2026-113704a2aproject a2a-rs Push Notification Handler server-side request forgery6.9CNA v4.00.5%2026-10-20
CVE-2026-113703SuggestArr authentication bypass via X-Forwarded-for spoofing9.1CNA v4.00.4%2026-10-20Fix
CVE-2026-113683jcrodriguez-dis moodle-mod_vpl VPL for Moodle reflected XSS via similarity/diff.php filename5.1CNA v4.00.3%2026-10-20Fix
CVE-2026-113682Networknt light-4j authentication bypass via Empty LDAP Password9.1CNA v4.00.5%2026-10-20Fix
CVE-2026-113681OpenImageIO,.x, and.x Cineon Reader Heap out-of-bounds read6.8CNA v4.00.2%2026-10-20Fix
CVE-2026-113680HarfBuzz WebAssembly Shaper null pointer dereference DoS6.8CNA v4.00.1%2026-10-20
CVE-2026-113679HarfBuzz out-of-bounds write via WebAssembly font_glyph_to_string7.3CNA v4.00.2%2026-10-20
CVE-2026-113678Froxlor symlink following privilege escalation via Traffic Cron9.4CNA v4.00.4%2026-10-20Fix
CVE-2026-113677Froxlor missing authorization via SubDomains.delete API5.3CNA v4.00.5%2026-10-20Fix
CVE-2026-113676Froxlor authorization bypass via Admins.get API5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113672argoproj argo-cd argo CD: A Jsonnet import can read files from the repo-server9.9CNA v3.10.8%2026-10-20Fix
CVE-2026-113671ApostropheCMS ai-helper server-side request forgery4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-113670ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permission(false) in getOne and in the all=1 tree dump, bypassing page-type viewRole, visibility: private, and visibility: loginRequired checks. Unauthenticated5.3CNA v3.1–2026-10-20Fix
CVE-2026-113669ApostropheCMS: Cross-domain session token in URL confers session takeover5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113668ApostropheCMS apostrophe REST route information disclosure5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-113667ApostropheCMS: CAPTCHA response token not URL-encoded5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113666ApostropheCMS db-connect denial of service7.1CNA v3.10.4%2026-10-20Fix
CVE-2026-113665ApostropheCMS: Missing authorization on Notification PATCH/delete endpoints3.7CNA v3.10.3%2026-10-20Fix
CVE-2026-113664ApostropheCMS import-export tar guard misses ./.. because it is a literal ../ substring test5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113662ApostropheCMS import-export: NoSQL injection5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-113661ApostropheCMS sanitize-html meta refresh elements cross-site scripting5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-113660ApostropheCMS exist-in-locale API missing authorization4.3CNA v3.10.4%2026-10-20Fix
CVE-2026-113659ApostropheCMS apos.http.parseQuery prototype pollution6.1CNA v3.10.3%2026-10-20Fix
CVE-2026-113658ApostropheCMS apostrophe Rich Text CSV conversion route resource exhaustion7.5CNA v3.10.5%2026-10-20Fix
CVE-2026-113657ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection3.7CNA v3.10.3%2026-10-20Fix
CVE-2026-113656ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS5.3CNA v3.10.4%2026-10-20Fix
CVE-2026-113655ApostropheCMS apostrophe page move operation missing authorization4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-113654ApostropheCMS sanitize-html cross-site scripting5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113653ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship6.9CNA v4.00.4%2026-10-20Fix
CVE-2026-113652ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL5.6CNA v3.10.3%2026-10-20Fix
CVE-2026-113651ApostropheCMS: Path traversal in uploadfs3.3CNA v3.10.3%2026-10-20Fix
CVE-2026-113650ApostropheCMS sanitize-html uncontrolled recursion5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-113649ApostropheCMS: Import API bypasses publication roles for protected content6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-113648ApostropheCMS: Missing authentication in `cleanExport` route3.1CNA v3.10.3%2026-10-20Fix
CVE-2026-113643EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization5.3CNA v4.00.4%2026-10-20
CVE-2026-113620Eclipse ioFog operator WebSocket accepts an unverified JWT9.8CNA v3.10.3%2026-10-20
CVE-2026-113619Eclipse ioFog renders request templates before authentication7.5CNA v3.10.4%2026-10-20
CVE-2026-113613FlexGet path traversal (Zip Slip) via decompress plugin9.2CNA v4.00.8%2026-10-20Fix
CVE-2026-113612SparkyFitness missing authorization via food-variants delete endpoint5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113611Outline information disclosure via Orphaned Webhook Subscriptions6.9CNA v4.00.4%2026-10-20Fix
CVE-2026-113610vatesfr xen-orchestra xen Orchestra authorization bypass via user.set API5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113609Bandisoft Bandizip Mark-of-the-Web Bypass for PowerShell scripts4.8CNA v4.00.2%2026-10-20Fix
CVE-2026-113608jleyva moodle-block_configurablereports Configurable Reports block for Moodle SQL injection6.0CNA v4.00.3%2026-10-20Fix
CVE-2026-113607jleyva moodle-block_configurablereports configurable Reports block for Moodle authorization bypass7.1CNA v4.00.4%2026-10-20Fix
CVE-2026-113606Stirling-PDF authorization bypass via Processing Folders7.1CNA v4.00.3%2026-10-20
CVE-2026-113605Stirling-PDF H2 SQL Denylist Bypass via import-database8.6CNA v4.00.7%2026-10-20
CVE-2026-113604Ghidra denial of service via ELF Loader Extended Header Counts6.8CNA v4.00.2%2026-10-20
CVE-2026-113603x402 @x402/extensions SIWX Payment Bypass via PaymentPayload.resource6.9CNA v4.00.3%2026-10-20
CVE-2026-113602json-smart Strict-Mode Validation Bypass via 0x1A Character6.9CNA v4.00.4%2026-10-20
CVE-2026-113601Memos missing authorization via ActivityService ListActivities/GetActivity5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113600fat_free_crm fat Free CRM IDOR via CommentsController update and destroy5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113599Modoboa IDOR via API v2 armessages Auto-Reply Creation5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113598Modoboa IDOR via API v2 alarms bulk_delete5.3CNA v4.00.2%2026-10-20Fix
CVE-2026-113597Blinko IDOR via Tag tRPC Router Procedures5.3CNA v4.00.3%2026-10-20
CVE-2026-113596Webstudio information disclosure via tRPC publishedBuilds and findManyByIds2.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113595Sharkord missing authorization via changeLogo tRPC route5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113594Sharkord missing authorization via updateSettings tRPC route5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113583Cypht Stored DOM XSS via externalResources.js5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113507aaPanel common.py GetClientIp access control6.9CNA v4.00.4%2026-10-20
CVE-2026-113506aaPanel File Manager common.py ExecShell os command injection9.4CNA v4.02.1%2026-10-20
CVE-2026-113505aaPanel Download endpoint v2.py send_file path traversal5.3CNA v4.00.4%2026-10-20
CVE-2026-113496Red Hat Enterprise Linux 10 cockpit-machines: Vnc console password disclosure5.0CNA v3.10.1%2026-10-20
CVE-2026-113495Red Hat Enterprise Linux 10 cockpit-machines: Rhsm access-token disclosure5.0CNA v3.10.2%2026-10-20
CVE-2026-113470Mozilla Firefox and Thunderbird Security Block-lists, Allow-lists, and other State vulnerability5.4CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113469Stormshield Network Security improper signature verification of Active Update files7.5CNA v3.10.2%2026-10-20
CVE-2026-113468Broken access control in extension TYPO3 Shop by coding.ms (shop)6.9CNA v4.00.4%2026-10-20Exploit codeFix
CVE-2026-113466MinIO Embedded console common-main.go SessionTokenAuthenticate hard-coded key6.9CNA v4.00.4%2026-10-20
CVE-2026-113465Stormshield Network Security Possible DOM XSS in SNS Web Administration portal6.6CNA v3.10.2%2026-10-20
CVE-2026-113459Sensitive data exposure in extension TYPO3 AI Integration Extension (ns_t3ai)7.1CNA v4.00.4%2026-10-20Fix
CVE-2026-113442Cross-site scripting in extension TYPO3 Fluid-Form by coding.ms (fluid_form)5.3CNA v4.00.5%2026-10-20Fix
CVE-2026-113411Nerimity Desktop Window Open Handler improper authorization5.3CNA v4.00.2%2026-10-20Fix
CVE-2026-113407YS-infoware｜BA-Workflow SQL injection8.7CNA v4.00.4%2026-10-20Fix
CVE-2026-113406YS-infoware｜BA-Workflow SQL injection8.7CNA v4.00.4%2026-10-20Fix
CVE-2026-113405YS-infoware｜BA-Workflow SQL injection8.7CNA v4.00.4%2026-10-20Fix
CVE-2026-113404Uniong｜WebITR insecure deserialization8.7CNA v4.00.4%2026-10-20
CVE-2026-113403ArmorX Global Technology｜ArmorX Spam command injection7.1CNA v4.00.8%2026-10-20Fix
CVE-2026-113402ArmorX Global Technology｜ArmorX Spam local file inclusion7.1CNA v4.00.4%2026-10-20Fix
CVE-2026-113401Mozilla Firefox denial of service in the PDF Viewer component6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113400Mozilla Firefox uninitialized memory in the Audio/Video: Cubeb component5.4CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113399Mozilla Firefox incorrect boundary conditions in the SVG component–0.2%2026-10-20Fix
CVE-2026-113397DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection5.3CNA v4.01.0%2026-10-20Fix
CVE-2026-113396DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection5.3CNA v4.01.5%2026-10-20Fix
CVE-2026-113395DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113394DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal5.3CNA v4.00.3%2026-10-20
CVE-2026-113393DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113392DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113391DrayTek Vigor2960 upload endpoint mainfunction.cgi uploadlangs command injection9.4CNA v4.02.3%2026-10-20Fix
CVE-2026-113390DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection9.4CNA v4.02.1%2026-10-20
CVE-2026-113389DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection9.4CNA v4.02.1%2026-10-20
CVE-2026-113388opensource-socialnetwork Cache settings dynamic.php input code injection4.8CNA v4.00.2%2026-10-20
CVE-2026-113386Roundcube Webmail CRLF injection7.1CNA v3.11.0%2026-10-20Fix
CVE-2026-113385LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java improper export of android application components4.8CNA v4.00.1%2026-10-20Fix
CVE-2026-113384Optimal IdM OptimalCloud social redirect open redirect5.3CNA v4.00.3%2026-10-20
CVE-2026-113383Optimal IdM OptimalCloud login cross-site scripting5.3CNA v4.00.3%2026-10-20
CVE-2026-113382arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload5.3CNA v4.00.4%2026-10-20Fix
CVE-2026-113381Osclass Item Model Item.php findUserItems SQL injection6.9CNA v4.00.4%2026-10-20
CVE-2026-113380Signal RingRTC improper check for exceptional conditions9.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113378mcollina mcp-ripgrep Advanced Search tool index.ts os command injection4.8CNA v4.00.7%2026-10-20
CVE-2026-113359Baserow Cross-Workspace data disclosure via unique_row_values endpoint5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113358LavaLite CMS missing authentication via Filer Download Routes8.7CNA v4.00.4%2026-10-20Fix
CVE-2026-113357@e2e-dev/github CI Report Hijacking via Predictable Comment Marker5.1CNA v4.00.2%2026-10-20Fix
CVE-2026-113356DokuWiki PHP object injection via Draft race condition7.7CNA v4.00.5%2026-10-20Fix
CVE-2026-113355Chatwoot stored XSS via Help Center Video Embed Links4.8CNA v4.00.2%2026-10-20Fix
CVE-2026-113354Dockhand arbitrary file read via /API/system/files/content7.1CNA v4.00.2%2026-10-20Fix
CVE-2026-113353LearnPress missing authorization via Legacy Editor AJAX Handlers5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-113352uTox path traversal via Auto-Accepted File Transfers7.7CNA v4.00.6%2026-10-20
CVE-2026-113351libexpat denial of service via XML_ParserReset8.2CNA v4.00.5%2026-10-20
CVE-2026-113350react-admin stored XSS via UrlField and FileField5.1CNA v4.00.2%2026-10-20Fix
CVE-2026-113349OpenCATS missing authorization in Calendar editEvent/deleteEvent5.3CNA v4.00.2%2026-10-20Fix
CVE-2026-113344Google Chrome Performance use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113343Google Chrome Sandbox memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113342Google Chrome Network memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113341Google Chrome Skia memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113340Google Chrome ANGLE memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113339Google Chrome SVG use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113338Google Chrome Turbolev use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113337Google Chrome Scroll memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113336Google Chrome Compositing memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113335Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113334Google Chrome ANGLE improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113333Google Chrome extensions memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113332Google Chrome GPU memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113331Google Chrome Controls memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113330Google Chrome CustomTabs memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113329Google Chrome Installer out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113328Google Chrome Privacy improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113327Google Chrome Chromecast use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113326Google Chrome Core memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113325Google Chrome SignIn memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113324Google Chrome GPU use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113323Google Chrome use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113322Google Chrome Dawn memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113321Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113320Google Chrome Navigation memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113319Google Chrome Accessibility use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113318Google Chrome ServiceWorker memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113317Google Chrome Accessibility memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113316Google Chrome Views improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113315Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113314Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113313Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113312Google Chrome Autofill memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113311Google Chrome ServiceWorker use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113310Google Chrome Bluetooth out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113309Google Chrome Media out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113308Google Chrome Core use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113307Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113306Google Chrome Network improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113305Google Chrome Privacy use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113304Google Chrome GPU memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113303Google Chrome WebRTC memory corruption8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113302Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113301Google Chrome WebAppInstalls memory corruption8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113300Google Chrome forms out-of-bounds write9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113299Google Chrome WebProtect memory corruption8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113298Google Chrome Transactions Platform use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113297Google Chrome Ozone improper access control6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113296Google Chrome Actor memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113295Google Chrome ANGLE out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113294Google Chrome Loader improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113293Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113292Google Chrome Omnibox improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113291Google Chrome FullScreen memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113290Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113289Google Chrome PerformanceAPIs improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113288Google Chrome Core memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113287Google Chrome Prompts use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113286Google Chrome Google Lens memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113285Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113284Google Chrome XML memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113283Google Chrome CredentialProvider memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113282Google Chrome Views use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113281Google Chrome SiteIsolation memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113280Google Chrome Paint memory corruption8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113279Google Chrome Accessibility memory corruption8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113278Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113277Google Chrome CustomTabs out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113276Google Chrome Passwords memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113275Google Chrome API use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113274Google Chrome ReadingMode use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113273Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113272Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113271Google Chrome Accessibility use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113270Google Chrome Internals use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113269Google Chrome BrowserTag memory corruption8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113268Google Chrome Navigation memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113267Google Chrome Video memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113266Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113265Google Chrome BFCache memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113264Google Chrome extensions improper input validation–0.4%2026-10-20Fix
CVE-2026-113263Google Chrome Core use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113262Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113261Google Chrome WebAppInstalls use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113260Google Chrome Core memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113259Google Chrome Frames use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113258Google Chrome Chromoting memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113257Google Chrome Media memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113256Google Chrome Permissions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113255Google Chrome CustomTabs use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113254Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113253Google Chrome Canvas use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113252Google Chrome ANGLE improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113251Google Chrome PDF use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113250Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113249Google Chrome Mobile improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113248Google Chrome FileSystem memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113247Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113246Google Chrome iOSWebView memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113245Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113244Google Chrome UI improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113243Google Chrome DOM memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113242Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113241Google Chrome Toolbar memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113240Google Chrome Chromecast use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113239Google Chrome arbitrary code execution8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113238Google Chrome CustomTabs memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113237Google Chrome Chromoting memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113236Google Chrome Navigation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113235Google Chrome Passwords improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113234Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113233Google Chrome Core out-of-bounds read8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113232Google Chrome Search memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113231Google Chrome extensions improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113230Google Chrome Browser improper input validation8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113229Google Chrome Loader use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113228Google Chrome Network use-after-free8.8CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113227Google Chrome Editing use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113226Google Chrome Model memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113225Google Chrome Browser memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113224Google Chrome WebAppInstalls memory corruption6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-113223Google Chrome DevTools memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113222Google Chrome V8 use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113221Google Chrome Google Lens use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113220Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113219Google Chrome Contacts memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113218Google Chrome DataTransfer use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113217Google Chrome WebAppInstalls use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113216Google Chrome Navigation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113215Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113214Google Chrome FullScreen improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113213Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113212Google Chrome PDF memory corruption–0.2%2026-10-20Fix
CVE-2026-113211Google Chrome ServiceWorker memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113210Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113209Google Chrome Navigation memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113208Google Chrome ContextualSearch use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113207Google Chrome SiteIsolation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113206Google Chrome Omnibox memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113205Google Chrome Variations use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113204Google Chrome TrustedWebActivities use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113203Google Chrome CSS use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113202Google Chrome BrowserTag use-after-free8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113201Google Chrome Google Lens memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113200Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113199Google Chrome Payments out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113198Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113197Google Chrome forms use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113196Google Chrome Mobile improper access control–0.2%2026-10-20Fix
CVE-2026-113195Google Chrome Downloads improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113194Google Chrome Core memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113193Google Chrome V8 memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113192Google Chrome V8 memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113191Google Chrome Internals use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113190Google Chrome ServiceWorker use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113189Google Chrome Core use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113188Google Chrome GPU memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113187Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113186Google Chrome DevTools memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113185Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113184Google Chrome Scheduling memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113183Google Chrome FedCM memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113182Google Chrome Passwords memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113181Google Chrome Navigation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113180Google Chrome ContentCapture memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113179Google Chrome Paint use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113178Google Chrome Views memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113177Google Chrome FileSystem use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113176Google Chrome Omnibox memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113175Google Chrome FileSystem improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113174Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113173Google Chrome UI improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113172Google Chrome ServiceWorker memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113171Google Chrome Prompts memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113170Google Chrome Autofill use-after-free8.8CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113169Google Chrome WebAppInstalls memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113168Google Chrome Permissions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113167Google Chrome Network memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113166Google Chrome History memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113165Google Chrome Core use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113164Google Chrome Voice memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113163Google Chrome WebGL use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113162Google Chrome Actor improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113161Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113160Google Chrome Turbolev use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113159Google Chrome DevTools improper access control6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113158Google Chrome Streaming use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113157Google Chrome ANGLE information disclosure6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113156Google Chrome messages use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113155Google Chrome Glic use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113154Google Chrome Canvas memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113153Google Chrome SiteIsolation memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113152Google Chrome SignIn memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113151Google Chrome Actor out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113150Google Chrome Bindings memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113149Google Chrome FullScreen memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113148Google Chrome WebUI memory corruption8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113147Google Chrome WebShare improper input validation8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113146Google Chrome PerformanceAPIs memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113145Google Chrome messages memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113144Google Chrome Speech memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113143Google Chrome ANGLE memory corruption–0.3%2026-10-20Fix
CVE-2026-113142Google Chrome extensions memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113141Google Chrome Transactions Platform use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113140Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113139Google Chrome Autofill memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113138Google Chrome WebAppInstalls memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113137Google Chrome extensions memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113136Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113135Google Chrome PictureInPicture memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113134Google Chrome ANGLE memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113133Google Chrome PlatformIntegration memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113132Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113131Google Chrome Bluetooth memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113130Google Chrome Actor use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113129Google Chrome extensions improper access control6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-113128Google Chrome Animation missing authorization–0.3%2026-10-20Fix
CVE-2026-113127Google Chrome Browser memory corruption8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113126Google Chrome PolicyContainer memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113125Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113124Google Chrome DataTransfer memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113123Google Chrome GPU use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113122Google Chrome Loader memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113121Google Chrome ContextMenu memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113120Google Chrome Media improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113119Google Chrome Network use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113118Google Chrome extensions memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113117Google Chrome ANGLE improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113116Google Chrome DevTools use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113115Google Chrome Transactions Platform use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113114Google Chrome SignIn use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113113Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113112Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113111Google Chrome Compositing use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113110Google Chrome ShadowDOM memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113109Google Chrome API memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113108Google Chrome script use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113107Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113106Google Chrome Skia memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113105Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113104Google Chrome Frames memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113103Google Chrome WebProtect use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113102Google Chrome FileSystem out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113101Google Chrome SiteIsolation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113100Google Chrome Audio memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113099Google Chrome Omnibox improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113098Google Chrome CacheStorage memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113097Google Chrome FileSystem use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113096Google Chrome Text memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113095Google Chrome Focus out-of-bounds read8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113094Google Chrome API memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113093Google Chrome DisplayLocking memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113092Google Chrome Passwords use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113091Google Chrome PerformanceAPIs use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113090Google Chrome Interstitials memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113089Google Chrome PrintPreview improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113088Google Chrome Mobile memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113087Google Chrome Actor use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113086Google Chrome Input improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113085Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113084Google Chrome Permissions improper input validation9.6CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113083Google Chrome Actor memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113082Google Chrome ANGLE memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113081Google Chrome Compositing use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113080Google Chrome WebAppInstalls use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113079Google Chrome SiteIsolation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113078Google Chrome Compositing improper input validation9.6CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113077Google Chrome Core memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113076Google Chrome Toolbar use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113075Google Chrome DevTools use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113074Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113073Google Chrome Browser use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113072Google Chrome CSS memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113071Google Chrome Notifications use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113070Google Chrome GetUserMedia out-of-bounds read6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-113069Google Chrome Compositing memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113068Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113067Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113066Google Chrome Fonts memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113065Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113064Google Chrome OptimizationGuide memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113063Google Chrome Chromoting improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113062Google Chrome API improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113061Google Chrome Chromoting memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113060Google Chrome Bluetooth improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113059Google Chrome Sensor memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113058Google Chrome WebUI use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113057Google Chrome ComputePressure improper access control–0.3%2026-10-20Fix
CVE-2026-113056Google Chrome PerformanceAPIs memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113055Google Chrome FullScreen type confusion8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113054Google Chrome SiteIsolation out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113053Google Chrome Cookies use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113052Google Chrome V8 memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113051Google Chrome CSS memory corruption6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-113050Google Chrome HID out-of-bounds read6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-113049Google Chrome Core memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113048Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113047Google Chrome BrowserTag memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113046Google Chrome Passwords improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113045Google Chrome Offline out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113044Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113043Google Chrome iOSWeb use-after-free8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113042Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113041Google Chrome Actor use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113040Google Chrome Proxy improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113039Google Chrome Bookmarks use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113038Google Chrome DevTools memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113037Google Chrome WebSockets use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113036Google Chrome HTML memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113035Google Chrome API out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113034Google Chrome FileSystem memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113033Google Chrome Streaming use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113032Google Chrome Omnibox memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113031Google Chrome Media memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113030Google Chrome V8 improper access control–0.4%2026-10-20Fix
CVE-2026-113029Google Chrome ANGLE improper access control8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113028Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113027Google Chrome WebFonts memory corruption8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113026Google Chrome PDF memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113025Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113024Google Chrome WebAppInstalls use-after-free8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113023Google Chrome extensions improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113022Google Chrome PDFium memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113021Google Chrome WebAppInstalls use-after-free8.8CISA ADP v3.10.6%2026-10-20Fix
CVE-2026-113020Google Chrome Date improper input validation9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113019Google Chrome Turbolev use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113018Google Chrome IME memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113017Google Chrome Views use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113016Google Chrome extensions improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113015Google Chrome Workers use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113014Google Chrome PerformanceAPIs use-after-free9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113013Google Chrome DevTools memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113012Google Chrome GPU improper input validation8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113011Google Chrome CredentialProvider use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113010Google Chrome extensions out-of-bounds read6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113009Google Chrome WindowControlsOverlay use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113008Google Chrome Transactions Platform memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113007Google Chrome Permissions memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-113006Google Chrome Navigation out-of-bounds read8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113005Google Chrome Bluetooth memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113004Google Chrome Sync memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113003Google Chrome HID memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113002Google Chrome Transactions Platform memory corruption6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-113001Google Chrome Workers use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-113000Google Chrome Paint memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112999Google Chrome API use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112998Google Chrome Views memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112997Google Chrome CSS memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112996Google Chrome Loader memory corruption8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112995Google Chrome Animation use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112994Google Chrome Browser memory corruption8.8CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-112993Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-112992Google Chrome Canvas memory corruption9.6CISA ADP v3.10.5%2026-10-20Fix
CVE-2026-112958ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-112957ApostropheCMS getOne REST endpoint missing authorization4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-112956ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-112955ApostropheCMS: Import archives can exhaust server storage and deny service6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-112954ApostropheCMS apostrophe public REST API information disclosure5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-112953ApostropheCMS: Exposure of sensitive information via predictable export filenames6.0CNA v4.00.6%2026-10-20Fix
CVE-2026-112952ApostropheCMS slugTaken API endpoint information disclosure4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-112951ApostropheCMS: Color field validation bypass allows stored XSS5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-112950Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix5.9CNA v3.10.4%2026-10-20Fix
CVE-2026-112949Vitest: Code injection via unauthenticated manual mock registration4.7CNA v3.10.2%2026-10-20Fix
CVE-2026-112948Vitest dev servers information disclosure6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-112947Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`6.3CNA v4.00.4%2026-10-20Fix
CVE-2026-112946vitejs vite path traversal6.3CNA v4.00.9%2026-10-20Fix
CVE-2026-112945Vite: Cross origin script execution through Vite custom middleware2.1CNA v4.00.5%2026-10-20Fix
CVE-2026-112944vitejs launch-editor argument injection6.3CNA v4.00.7%2026-10-20Fix
CVE-2026-112943vitejs launch-editor escapeCmdArgs OS command injection6.3CNA v4.00.4%2026-10-20Fix
CVE-2026-112942vitejs launch-editor launch-editor-middleware command injection7.5CNA v4.01.3%2026-10-20Fix
CVE-2026-112941tox-dev filelock SoftReadWriteLock race condition3.3CNA v3.10.1%2026-10-20Fix
CVE-2026-112940tox-dev filelock ReadWriteLock vulnerability7.1CNA v3.10.1%2026-10-20Fix
CVE-2026-112939tox-dev filelock SoftFileLock insufficient verification of data authenticity4.7CNA v3.10.1%2026-10-20Fix
CVE-2026-112937tox-dev filelock ReadWriteLock race condition6.1CNA v3.10.1%2026-10-20Fix
CVE-2026-112936tox-dev filelock ReadWriteLock link following6.1CNA v3.10.2%2026-10-20Fix
CVE-2026-112935tox-dev filelock SoftFileLock race condition4.7CNA v3.10.1%2026-10-20Fix
CVE-2026-112934tox-dev filelock SoftReadWriteLock denial of service6.1CNA v3.10.1%2026-10-20Fix
CVE-2026-112915tox-dev filelock ReadWriteLock resource exhaustion5.5CNA v3.10.2%2026-10-20Fix
CVE-2026-112914tox-dev filelock SoftFileLock symbolic link following5.3CNA v3.10.1%2026-10-20Fix
CVE-2026-112912tox-dev filelock SoftFileLock vulnerability2.5CNA v3.10.2%2026-10-20Fix
CVE-2026-112911filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created first by another local user in a shared parent directory, allowing that user to alter protocol st6.3CNA v3.10.1%2026-10-20Fix
CVE-2026-112909tox-dev filelock UnixFileLock incorrectly resolved name or reference6.1CNA v3.10.1%2026-10-20Fix
CVE-2026-112906tox-dev filelock SoftFileLock vulnerability4.7CNA v3.10.2%2026-10-20Fix
CVE-2026-112861Participants Database WordPress plugin insecure direct object references (IDOR)6.3CNA v3.10.2%2026-10-20
CVE-2026-112840SureCart WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-112836VikRentCar WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-10-20Fix
CVE-2026-112834Seriously Simple Podcasting WordPress plugin broken access control5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-112833Seriously Simple Podcasting WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-112829Booktics WordPress plugin broken access control5.3CNA v3.10.2%2026-10-20Fix
CVE-2026-112824Bus Ticket Booking with Seat Reservation WordPress plugin broken access control5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-112823WP User Manager WordPress plugin broken access control4.3CNA v3.10.2%2026-10-20Fix
CVE-2026-112787OpenCATS missing authorization in Reports Module EEO Reports5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-112786OpenCATS missing authorization via Import Revert action5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-112785OpenCATS missing authorization in Saved-List AJAX endpoints5.3CNA v4.00.3%2026-10-20Fix
CVE-2026-112784OpenCATS missing authorization via ajax/testEmailSettings.php5.3CNA v4.00.2%2026-10-20Fix
CVE-2026-112783OpenCATS missing authorization via Activity AJAX endpoints5.3CNA v4.00.2%2026-10-20Fix
CVE-2026-112712@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch9.1CNA v3.10.3%2026-10-20Fix
CVE-2026-112407Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications8.7CNA v4.00.3%2026-10-20Fix