CVE-2026 list

CVE-2026 records published in October 2026

Page four of 14: records 3,001 to 4,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 3,001 to 4,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-87866curl wolfSSL public-key pinning bypass–0.2%2026-10-20Fix
CVE-2026-87865curl knownhost callback mismatches key as missing–0.3%2026-10-20Fix
CVE-2026-87864curl IMAP APPEND plus CRLF conversion command injection–0.2%2026-10-20Fix
CVE-2026-87863curl HSTS response erases persisted entries–0.3%2026-10-20Fix
CVE-2026-87862curl HSTS cache import drops longer-lived child–0.3%2026-10-20Fix
CVE-2026-87861curl cross-origin reuse of a Negotiate connection–0.3%2026-10-20Fix
CVE-2026-87800IBM Cyber Fraud includes components with multiple known vulnerabilities6.8CNA v3.10.5%2026-10-20Fix
CVE-2026-87423Oracle Solaris X Window System component unauthorized data modification4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87422Oracle Solaris services component unauthorized data modification2.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87421Oracle Solaris Image Packaging System component unauthorized data access7.1CNA v3.10.3%2026-10-20Fix
CVE-2026-87420Oracle Service Bus Core component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87419Oracle Service Bus Core component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87418Oracle PeopleSoft Enterprise PeopleTools Updates Environment Mgmt component information disclosure2.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87417Oracle Solaris Image Packaging System component unauthorized data access7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87416Oracle PeopleSoft Enterprise PeopleTools Report Distribution component information disclosure3.7CNA v3.10.3%2026-10-20Fix
CVE-2026-87415Oracle PeopleSoft Enterprise PeopleTools Report Distribution component unauthorized data access5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87414Oracle Solaris Image Packaging System component unauthorized data modification3.1CNA v3.10.1%2026-10-20Fix
CVE-2026-87413Oracle Solaris Filesystems component denial of service5.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87412Oracle PeopleSoft Enterprise PeopleTools Report Distribution component information disclosure2.7CNA v3.10.3%2026-10-20Fix
CVE-2026-87411Oracle Solaris Filesystems component denial of service5.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87410Oracle PeopleSoft Enterprise PeopleTools Report Distribution component unauthorized data access6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-87409Oracle PeopleSoft Enterprise PeopleTools nVision component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87408Oracle E-Business Suite Applications Framework Personalization component unauthorized data access8.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87407Oracle E-Business Suite Applications Framework Security component unauthorized data access6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87404Oracle E-Business Suite Pasta Printing Engine component takeover7.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87403Oracle E-Business Suite Applications DBA AD Utilities component unauthorized data access7.1CNA v3.10.1%2026-10-20Fix
CVE-2026-87402Oracle E-Business Suite Applications DBA AD Utilities component takeover7.3CNA v3.10.1%2026-10-20Fix
CVE-2026-87401Oracle PeopleSoft Enterprise PeopleTools XML Publisher component information disclosure3.3CNA v3.10.1%2026-10-20Fix
CVE-2026-87400Oracle WebCenter Content Server component unauthorized data access6.9CNA v3.10.2%2026-10-20Fix
CVE-2026-87399Oracle WebCenter Content Server component unauthorized data modification6.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87398Oracle Outside In Technology Outside In Core component denial of service7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87397Oracle Outside In Technology Outside In Core component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87396Oracle Outside In Technology Outside In Core component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87395Oracle Outside In Technology Outside In Core component denial of service7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87394Oracle Outside In Technology Outside In Core component unauthorized data access8.2CNA v3.10.4%2026-10-20Fix
CVE-2026-87393Oracle Outside In Technology Outside In Core component denial of service6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87392Oracle WebCenter Content: Imaging Core component unauthorized data modification6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87391Oracle WebCenter Content: Imaging Core component unauthorized data access5.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87390Oracle WebCenter Content Server component unauthorized data modification5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-87389Oracle JD Edwards EnterpriseOne Human Resources Management unauthorized data modification3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87388Oracle JD Edwards EnterpriseOne Configurator unauthorized data modification5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87387Oracle JD Edwards EnterpriseOne Homebuilder Management component unauthorized data modification6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87386Oracle JD Edwards EnterpriseOne General Ledger E1 Foundation component denial of service5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87385Oracle JD Edwards EnterpriseOne Human Resources Management unauthorized data modification4.8CNA v3.10.2%2026-10-20Fix
CVE-2026-87384Oracle JD Edwards EnterpriseOne Human Resources Management unauthorized data modification5.4CNA v3.10.3%2026-10-20Fix
CVE-2026-87383Oracle JD Edwards EnterpriseOne Tools Package Build SEC component takeover6.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87382Oracle JD Edwards EnterpriseOne Operational Sourcing unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87381Oracle JD Edwards EnterpriseOne Tools unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87380Oracle JD Edwards EnterpriseOne Sales Order Entry unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87379Oracle WebCenter Content: Imaging Core component information disclosure4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87378Oracle WebCenter Content: Imaging Core component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87377Oracle WebCenter Content: Imaging Core component unauthorized data access6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-87376Oracle WebCenter Content: Imaging Core component unauthorized data access6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-87375Oracle WebCenter Content: Imaging Core component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87374Oracle WebCenter Content Server component unauthorized data access6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-87373Oracle WebCenter Content Server component unauthorized data access6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87372Oracle WebCenter Content Server component unauthorized data access6.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87371Oracle WebCenter Content Server component unauthorized data access6.8CNA v3.10.2%2026-10-20Fix
CVE-2026-87370Oracle WebCenter Content Server component unauthorized data access6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-87369Oracle Service Bus Core component denial of service7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87367Oracle Java SE JAXP vulnerability3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87366Oracle E-Business Suite Applications Framework Web Utilities component unauthorized data access4.9CNA v3.10.4%2026-10-20Fix
CVE-2026-87365Oracle WebCenter Content Server component denial of service6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87364Oracle Service Bus Core component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87363Oracle E-Business Suite Payroll Internal Operations component takeover7.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87362Oracle Supply Chain Agile PLM Folders, files & Attachments component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87361Oracle WebCenter Content Server component unauthorized data modification4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87360Oracle WebCenter Content Server component unauthorized data access5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87359Oracle Service Bus Core component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87358Oracle E-Business Suite General Ledger Internal Operations component unauthorized data modification7.1CNA v3.10.3%2026-10-20Fix
CVE-2026-87357Oracle E-Business Suite Order Capture Internal Operations component takeover7.2CNA v3.10.5%2026-10-20Fix
CVE-2026-87356Oracle E-Business Suite Applications Platform Engineering Valid Session component takeover7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-87355Oracle PeopleSoft Enterprise PeopleTools Panel Processor component unauthorized data modification4.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87354Oracle TimesTen In-Memory Database Kubernetes Operator information disclosure4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87353Oracle PeopleSoft Enterprise PeopleTools Porting component unauthorized data modification4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87352Oracle PeopleSoft Enterprise PeopleTools LDAP component unauthorized data modification4.4CNA v3.10.1%2026-10-20Fix
CVE-2026-87351Oracle GoldenGate takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87350Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data modification4.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87349Oracle PeopleSoft Enterprise PeopleTools Security component takeover6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-87348Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification4.2CNA v3.10.1%2026-10-20Fix
CVE-2026-87347Oracle HTTP Server OSSL module component unauthorized data access9.6CNA v3.10.4%2026-10-20Fix
CVE-2026-87346Oracle HTTP Server unauthorized data access8.7CNA v3.10.3%2026-10-20Fix
CVE-2026-87345Oracle PeopleSoft Enterprise PeopleTools Business Interlink component unauthorized data modification6.1CNA v3.10.2%2026-10-20Fix
CVE-2026-87344Oracle PeopleSoft Enterprise PeopleTools LDAP component unauthorized data modification6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87343Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification4.8CNA v3.10.2%2026-10-20Fix
CVE-2026-87342Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data access6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87340Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87339Oracle Siebel CRM Integration REST component information disclosure3.1CNA v3.10.2%2026-10-20Fix
CVE-2026-87338Oracle Siebel CRM Integration EAI component unauthorized data access6.9CNA v3.10.2%2026-10-20Fix
CVE-2026-87337Oracle Access Manager Authentication Engine component unauthorized data access10.0CNA v3.10.4%2026-10-20Fix
CVE-2026-87336Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data access5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87335Oracle E-Business Suite Applications DBA Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87334Oracle JDeveloper ADF Faces component unauthorized data access5.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87333Oracle JD Edwards EnterpriseOne Tools unauthorized data modification3.6CNA v3.10.1%2026-10-20Fix
CVE-2026-87332Oracle JD Edwards EnterpriseOne Tools unauthorized data modification3.0CNA v3.10.1%2026-10-20Fix
CVE-2026-87331Oracle JD Edwards EnterpriseOne Tools unauthorized data modification3.4CNA v3.10.1%2026-10-20Fix
CVE-2026-87330Oracle JD Edwards EnterpriseOne Tools unauthorized data modification4.2CNA v3.10.1%2026-10-20Fix
CVE-2026-87329Oracle JD Edwards EnterpriseOne Tools unauthorized data modification6.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87328Oracle JD Edwards EnterpriseOne Tools unauthorized data access5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-87327Oracle JD Edwards EnterpriseOne Tools unauthorized data access5.9CNA v3.10.2%2026-10-20Fix
CVE-2026-87326Oracle JD Edwards EnterpriseOne Tools unauthorized data access5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-87325Oracle JD Edwards EnterpriseOne Tools unauthorized data modification6.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87324Oracle JD Edwards EnterpriseOne Tools unauthorized data modification6.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87323Oracle JD Edwards EnterpriseOne Tools Installation Security component unauthorized data access5.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87322Oracle VM VirtualBox Core component takeover8.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87321Oracle JD Edwards EnterpriseOne Tools Package Build SEC component takeover6.4CNA v3.10.1%2026-10-20Fix
CVE-2026-87320Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech - UNIX component takeover6.7CNA v3.10.1%2026-10-20Fix
CVE-2026-87319Oracle JD Edwards EnterpriseOne Tools unauthorized data access6.3CNA v3.10.1%2026-10-20Fix
CVE-2026-87318Oracle JD Edwards EnterpriseOne Tools unauthorized data access6.3CNA v3.10.1%2026-10-20Fix
CVE-2026-87317Oracle JD Edwards EnterpriseOne Tools unauthorized data modification4.8CNA v3.10.3%2026-10-20Fix
CVE-2026-87316Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component takeover7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-87315Oracle JD Edwards EnterpriseOne Tools unauthorized data modification7.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87314Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component unauthorized data access7.4CNA v3.10.3%2026-10-20Fix
CVE-2026-87313Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87312Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component takeover7.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87311Oracle VM VirtualBox Core component denial of service5.6CNA v3.10.1%2026-10-20Fix
CVE-2026-87310Oracle JD Edwards EnterpriseOne Tools Database and Comm SEC component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87309Oracle JD Edwards EnterpriseOne Tools Package Build SEC component unauthorized data modification8.1CNA v3.10.4%2026-10-20Fix
CVE-2026-87308Oracle JD Edwards EnterpriseOne Tools unauthorized data access7.1CNA v3.10.1%2026-10-20Fix
CVE-2026-87307Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component unauthorized data access7.1CNA v3.10.4%2026-10-20Fix
CVE-2026-87306Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component unauthorized data access8.1CNA v3.10.4%2026-10-20Fix
CVE-2026-87305Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component takeover8.1CNA v3.10.4%2026-10-20Fix
CVE-2026-87304Oracle Outside In Technology Outside In Core component unauthorized data access8.6CNA v3.10.4%2026-10-20Fix
CVE-2026-87303Oracle VM VirtualBox Core component denial of service5.9CNA v3.10.1%2026-10-20Fix
CVE-2026-87302Oracle WebLogic Server Core component unauthorized data access9.1CNA v3.10.4%2026-10-20Fix
CVE-2026-87301Oracle VM VirtualBox Core component unauthorized data access8.4CNA v3.10.1%2026-10-20Fix
CVE-2026-87300Oracle Weblogic Server Proxy Plug-in unauthorized data access8.7CNA v3.10.3%2026-10-20Fix
CVE-2026-87299Oracle WebCenter Content Server component unauthorized data modification6.1CNA v3.10.2%2026-10-20Fix
CVE-2026-87298Oracle WebCenter Content Server component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87297Oracle Communications Billing and Revenue Management Platform component takeover6.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87296Oracle Access Manager Authentication Engine component unauthorized data access7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-87295Oracle E-Business Suite HRMS (India) Indian Payroll component unauthorized data access6.5CNA v3.10.1%2026-10-20Fix
CVE-2026-87294Oracle Java SE Security vulnerability6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-87293Oracle Java SE RMI vulnerability5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-87292Oracle Java SE Networking vulnerability3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-87291Oracle Java SE Networking information disclosure5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-87290Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-87263Oracle Business Intelligence Enterprise Edition Analytics Server component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-87255Oracle Java SE Compiler information disclosure3.7CNA v3.10.3%2026-10-20Fix
CVE-2026-87251Oracle Access Manager Authentication Engine component takeover9.8CNA v3.10.5%2026-10-20Fix
CVE-2026-86981Apple macOS out-of-bounds write5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86979Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86976Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86975Apple macOS out-of-bounds read4.3CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-86963Apple iOS and iPadOS denial of service5.9CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-86962Apple macOS double free5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86961Apple macOS race condition7.8CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86957Apple macOS out-of-bounds read6.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-86955Apple iOS and iPadOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86953Apple macOS out-of-bounds write4.6CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-86949Apple Xcode sandbox escape8.8CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86948Apple Xcode sandbox escape–0.1%2026-10-20Fix
CVE-2026-86940Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86933Apple macOS insecure permissions3.3CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86932Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86928Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86922Apple Safari type confusion8.8CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-86921Apple macOS insecure permissions6.2CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86919Apple macOS stack-based buffer overflow8.8CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-86918Apple macOS out-of-bounds write4.3CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-86915Apple macOS race condition4.7CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86914Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86913Apple macOS use-after-free5.4CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-86907Apple macOS System Keychain vulnerability4.4CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86875Apple Xcode improper input validation4.3CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-86874Apple Xcode out-of-bounds read3.3CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-86872Apple Safari logic flaw5.4CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-86871Apple macOS integer underflow5.9CISA ADP v3.10.4%2026-10-20Fix
CVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system user9.3CNA v4.00.6%2026-10-20Fix
CVE-2026-86467Apache Airflow Amazon provider AWS auth manager cross-site request forgery–0.2%2026-10-20Fix
CVE-2026-86415curl auto client cert connection reuse mixup–0.2%2026-10-20Fix
CVE-2026-86414curl leaking host credentials to HTTP proxy–0.3%2026-10-20Fix
CVE-2026-86413curl negotiate credentials sent to redirected origin–0.3%2026-10-20Fix
CVE-2026-86412curl server-set cookie erases cookie jar–0.3%2026-10-20Fix
CVE-2026-86411curl FTP connection reuse inherits client-certificate–0.1%2026-10-20Fix
CVE-2026-86410curl redirect to SFTP or SCP bypasses host verification–0.3%2026-10-20Fix
CVE-2026-86409curl stale SigV4 headers sent unintended–0.2%2026-10-20Fix
CVE-2026-85783Crypt::Age versions for Perl allow CPU exhaustion–0.2%2026-10-20Fix
CVE-2026-85267Cross-Site WebSocket Hijacking in Google Cloud Shell8.7CNA v4.00.2%2026-10-20Fix
CVE-2026-84613Apple macOS out-of-bounds write6.5CISA ADP v3.10.3%2026-10-20Fix
CVE-2026-84579Apple macOS logic flaw–0.2%2026-10-20Fix
CVE-2026-84547Apple macOS memory corruption3.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-84508Apple macOS, visionOS, iOS and iPadOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-84490Apple iOS and iPadOS iPhone Mirroring authentication bypass2.0CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-83427Oracle PeopleSoft Enterprise PeopleTools Multichannel Framework component takeover6.6CNA v3.10.4%2026-10-20Fix
CVE-2026-83426Oracle Access Manager Authentication Engine component unauthorized data access8.7CNA v3.10.3%2026-10-20Fix
CVE-2026-83409Oracle Access Manager Authentication Engine component takeover8.1CNA v3.10.4%2026-10-20Fix
CVE-2026-83407Oracle Access Manager Authentication Engine component unauthorized data access8.6CNA v3.10.4%2026-10-20Fix
CVE-2026-83406Oracle Communications Billing and Revenue Management Platform component takeover6.7CNA v3.10.2%2026-10-20Fix
CVE-2026-83404Oracle MySQL Connectors Connector/Python component unauthorized data access7.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83403Oracle Identity Manager OIM Legacy UI component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-83402Oracle Identity Manager OIM Legacy UI component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-83401Oracle Identity Manager OIM Legacy UI component unauthorized data modification6.1CNA v3.10.2%2026-10-20Fix
CVE-2026-83400Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service5.3CNA v3.10.4%2026-10-20Fix
CVE-2026-83399Oracle WebLogic Server Core component takeover9.8CNA v3.10.5%2026-10-20Fix
CVE-2026-83398Oracle Data Integrator Data Transforms component unauthorized data access8.2CNA v3.10.3%2026-10-20Fix
CVE-2026-83397Oracle Data Integrator console / Repository Explorer component takeover9.8CNA v3.10.5%2026-10-20Fix
CVE-2026-83396Oracle Data Integrator console / Repository Explorer component takeover9.8CNA v3.10.5%2026-10-20Fix
CVE-2026-83395Oracle Java SE Networking vulnerability6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-83394Oracle Supply Chain Demand Planning Internal Operations component unauthorized data access6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-83393Oracle E-Business Suite Product Hub Internal Operations component takeover8.5CNA v3.10.3%2026-10-20Fix
CVE-2026-83392Oracle E-Business Suite Applications Manager Diagnostics component information disclosure3.1CNA v3.10.2%2026-10-20Fix
CVE-2026-83391Oracle E-Business Suite HRMS (US) US Payroll Year End component unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-83390Oracle E-Business Suite Applications Manager Diagnostics component denial of service4.2CNA v3.10.3%2026-10-20Fix
CVE-2026-83389Oracle E-Business Suite HRMS (UK) Internal Operations component unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-83388Oracle E-Business Suite Applications Manager Diagnostics component information disclosure2.2CNA v3.10.2%2026-10-20Fix
CVE-2026-83387Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-83386Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83385Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83384Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83383Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83382Oracle E-Business Suite Report Manager Internal Operations component information disclosure4.3CNA v3.10.3%2026-10-20Fix
CVE-2026-83381Oracle Java SE Security vulnerability4.8CNA v3.10.2%2026-10-20Fix
CVE-2026-83380Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition information disclosure5.3CNA v3.10.3%2026-10-20Fix
CVE-2026-83379Oracle Weblogic Server Proxy Plug-in unauthorized data access8.7CNA v3.10.3%2026-10-20Fix
CVE-2026-83378Oracle Java SE Compiler vulnerability4.8CNA v3.10.2%2026-10-20Fix
CVE-2026-83377Oracle E-Business Suite HRMS (US) Mobile Applications component unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-83376Oracle Java SE JSSE vulnerability3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-83375Oracle PeopleSoft Enterprise HCM Human Resources unauthorized data modification6.0CNA v3.10.2%2026-10-20Fix
CVE-2026-83374Oracle Java SE Security vulnerability5.9CNA v3.10.3%2026-10-20Fix
CVE-2026-83373Oracle PeopleSoft Enterprise PeopleTools portal component information disclosure3.0CNA v3.10.2%2026-10-20Fix
CVE-2026-83372Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-83371Oracle E-Business Suite HRMS (UK) Internal Operations component unauthorized data modification5.4CNA v3.10.2%2026-10-20Fix
CVE-2026-83370Oracle E-Business Suite Sourcing Auctions component takeover7.5CNA v3.10.3%2026-10-20Fix
CVE-2026-83367Oracle E-Business Suite Shipping Execution Workflow Events component unauthorized data access7.4CNA v3.10.3%2026-10-20Fix
CVE-2026-83366Oracle E-Business Suite Shipping Execution Workflow Events component unauthorized data access7.4CNA v3.10.3%2026-10-20Fix
CVE-2026-83363Oracle Contract Lifecycle Management for Public Sector Award/PO component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-83361Oracle Contract Lifecycle Management for Public Sector Award/PO component unauthorized data access8.1CNA v3.10.4%2026-10-20Fix
CVE-2026-83360Oracle HRMS (Republic of Korea) Korean Payroll component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83359Oracle E-Business Suite HRMS (India) Indian Payroll component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83358Oracle E-Business Suite HRMS (Norway) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-83139Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access6.5CNA v3.10.4%2026-10-20Fix
CVE-2026-82891IBM Guardium Data Protection hard-coded cryptographic key8.1CNA v3.10.5%2026-10-20Fix
CVE-2026-81212IBM DataStage on Cloud Pak for Data improper authorization10.0CNA v3.10.3%2026-10-20Fix
CVE-2026-80353Apache Tomcat time-of-check time-of-use race condition–0.2%2026-10-20Fix
CVE-2026-77938Letta credential exposure via Tool Sandbox Environment Inheritance7.1CNA v4.00.3%2026-10-20
CVE-2026-77937Letta Cross-Tenant Impersonation via user_id header8.6CNA v4.00.4%2026-10-20
CVE-2026-77936Letta insecure default Configuration Unauthenticated API and PostgreSQL Access9.3CNA v4.00.5%2026-10-20
CVE-2026-77935coze-dev coze-studio Coze Studio Cross-Space Workflow IDOR via Workflow API Handlers8.7CNA v4.00.3%2026-10-20
CVE-2026-77934coze-dev coze-studio Coze Studio RCE via Unsandboxed Local Python Code Runner8.7CNA v4.00.5%2026-10-20Fix
CVE-2026-77933DB-GPT Hard-coded MySQL Root Credentials in docker-compose Deployment9.3CNA v4.00.3%2026-10-20
CVE-2026-77932DB-GPT unauthenticated RCE via /API/v1/chat/react-agent9.3CNA v4.00.6%2026-10-20
CVE-2026-77930EvoScientist Human Approval Bypass via Async Sub-Agents9.3CNA v4.00.6%2026-10-20Fix
CVE-2026-77926Aix-DB authenticated RCE via ChatBI Common Agent Execute tool8.7CNA v4.00.7%2026-10-20
CVE-2026-76587IBM Planning Analytics buffer overflow8.8CNA v3.10.6%2026-10-20Fix
CVE-2026-75753ASUS Router certain ASUS missing authentication5.3CNA v4.00.2%2026-10-20
CVE-2026-75128Langchain-Chatchat Unauthenticated RCE via /tools/call endpoint9.3CNA v4.00.5%2026-10-20
CVE-2026-74049Apache Tomcat Jasper JSTL c:redirect plug-in vulnerability–0.3%2026-10-20Fix
CVE-2026-74048Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up–0.2%2026-10-20Fix
CVE-2026-73964Oracle Database Server RDBMS information disclosure2.7CNA v3.10.3%2026-10-20Fix
CVE-2026-70869Oracle PeopleSoft Enterprise PeopleTools Integration Broker component unauthorized data modification4.7CNA v3.10.2%2026-10-20Fix
CVE-2026-70860Oracle PeopleSoft Enterprise FIN Common Objects Argentina unauthorized data modification5.9CNA v3.10.2%2026-10-20Fix
CVE-2026-65396Apple macOS buffer overflow5.5CISA ADP v3.10.2%2026-10-20Fix
CVE-2026-65379Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-65372Apple macOS race condition4.7CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-65356Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-60968Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification6.0CNA v3.10.1%2026-10-20Fix
CVE-2026-60964Oracle PeopleSoft Enterprise PeopleTools Open Query component information disclosure1.9CNA v3.10.1%2026-10-20Fix
CVE-2026-60887Oracle PeopleSoft Enterprise PeopleTools Data Mover component unauthorized data modification3.8CNA v3.10.1%2026-10-20Fix
CVE-2026-60885Oracle PeopleSoft Enterprise PeopleTools Push Notifications component takeover6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-60882Oracle PeopleSoft Enterprise PeopleTools Search Framework component unauthorized data access5.3CNA v3.10.2%2026-10-20Fix
CVE-2026-60881Oracle PeopleSoft Enterprise PeopleTools Meta Data component unauthorized data access6.5CNA v3.10.5%2026-10-20Fix
CVE-2026-60878Oracle PeopleSoft Enterprise PeopleTools Process Scheduler component unauthorized data modification4.4CNA v3.10.2%2026-10-20Fix
CVE-2026-60876Oracle PeopleSoft Enterprise PeopleTools Search Framework component unauthorized data modification4.2CNA v3.10.2%2026-10-20Fix
CVE-2026-60874Oracle PeopleSoft Enterprise PeopleTools portal component denial of service4.2CNA v3.10.3%2026-10-20Fix
CVE-2026-60869Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification6.8CNA v3.10.3%2026-10-20Fix
CVE-2026-60839Oracle PeopleSoft Enterprise PeopleTools Query component unauthorized data modification5.5CNA v3.10.3%2026-10-20Fix
CVE-2026-60819Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification3.7CNA v3.10.2%2026-10-20Fix
CVE-2026-60814Oracle PeopleSoft Enterprise PeopleTools Business Interlink component unauthorized data modification3.9CNA v3.10.1%2026-10-20Fix
CVE-2026-60809Oracle PeopleSoft Enterprise PeopleTools Weblogic component unauthorized data modification4.2CNA v3.10.1%2026-10-20Fix
CVE-2026-60746Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access5.9CNA v3.10.2%2026-10-20Fix
CVE-2026-60745Oracle PeopleSoft Enterprise PeopleTools Application Server - JRE component unauthorized data access4.4CNA v3.10.2%2026-10-20Fix
CVE-2026-60743Oracle PeopleSoft Enterprise PeopleTools Weblogic component unauthorized data access6.5CNA v3.10.3%2026-10-20Fix
CVE-2026-60662Oracle Solaris services component takeover7.8CNA v3.10.2%2026-10-20Fix
CVE-2026-60500Oracle PeopleSoft Enterprise PeopleTools Web Server component information disclosure5.8CNA v3.10.3%2026-10-20Fix
CVE-2026-60453Oracle Solaris X Window System component unauthorized data modification5.3CNA v3.10.1%2026-10-20Fix
CVE-2026-60432Oracle Solaris Image Packaging System component takeover9.8CNA v3.10.5%2026-10-20Fix
CVE-2026-47025Oracle Solaris utility component takeover8.8CNA v3.10.4%2026-10-20Fix
CVE-2026-43858Advantech ADAM-3600 stack-based buffer overflow8.6CNA v4.00.7%2026-10-20Fix
CVE-2026-43857Advantech ADAM-3600 arbitrary code execution8.6CNA v4.00.7%2026-10-20Fix
CVE-2026-43856Advantech ADAM-3600 FileProcess::CheckDir function stack-based buffer overflow8.6CNA v4.00.7%2026-10-20Fix
CVE-2026-43855Advantech ADAM-3600 heap-based buffer overflow7.5CNA v4.00.6%2026-10-20Fix
CVE-2026-43854Advantech ADAM-3600 EdgeLink information disclosure6.3CNA v4.00.1%2026-10-20Fix
CVE-2026-43853Advantech ADAM-3600 crash8.2CNA v4.00.4%2026-10-20Fix
CVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.8.2CNA v4.00.5%2026-10-20Fix
CVE-2026-43851Advantech ADAM-3600 path traversal8.2CNA v4.00.5%2026-10-20Fix
CVE-2026-43850Advantech ADAM-3600 command injection8.6CNA v4.01.3%2026-10-20Fix
CVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.6.9CNA v4.00.4%2026-10-20Fix
CVE-2026-43848Advantech ADAM-3600 crash6.9CNA v4.00.3%2026-10-20Fix
CVE-2026-43847Advantech ADAM-3600 missing brute-force protection8.2CNA v4.00.2%2026-10-20Fix
CVE-2026-43846Advantech ADAM-3600 non-functional feature stack-based buffer overflow8.6CNA v4.00.3%2026-10-20Fix
CVE-2026-43845Advantech ADAM-3600 authentication bypass9.2CNA v4.00.3%2026-10-20Fix
CVE-2026-43844Advantech ADAM-3600 authentication bypass9.3CNA v4.00.4%2026-10-20Fix
CVE-2026-43843Advantech ADAM-3600 license manager service integer overflow6.9CNA v4.00.3%2026-10-20Fix
CVE-2026-43842Advantech ADAM-3600 license manager service null pointer dereference6.9CNA v4.00.3%2026-10-20Fix
CVE-2026-43841Advantech ADAM-3600 license manager service null pointer dereference6.9CNA v4.00.3%2026-10-20Fix
CVE-2026-43840Advantech ADAM-3600 license manager service null pointer dereference6.9CNA v4.00.3%2026-10-20Fix
CVE-2026-43839Advantech ADAM-3600 logs management functionality null pointer dereference8.7CNA v4.00.3%2026-10-20Fix
CVE-2026-43838Advantech ADAM-3600 login functionality stack-based buffer overflow9.2CNA v4.00.3%2026-10-20Fix
CVE-2026-43837Advantech ADAM-3600 password verification functionality buffer overflow7.5CNA v4.00.4%2026-10-20Fix
CVE-2026-43836Advantech ADAM-3600 arbitrary command execution9.3CNA v4.00.6%2026-10-20Fix
CVE-2026-43835Advantech ADAM-3600 firmware upgrade functionality vulnerability8.6CNA v4.00.2%2026-10-20Fix
CVE-2026-43834Advantech ADAM-3600 logs settings functionality stack-based buffer overflow7.5CNA v4.00.3%2026-10-20Fix
CVE-2026-42026Totolink exploitable stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-42025Totolink exploitable stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-42024Totolink stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-42023Totolink stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-42022Totolink stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-42021Totolink stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-42020Totolink boa formIpv6Setup pppoe functionality stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-42019Totolink boa formIpv6Setup pppoe functionality stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-41223Totolink A stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-41222Totolink A stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-40627Totolink boa formWsc targetAPSsid functionality OS command injection9.1CNA v3.11.0%2026-10-20
CVE-2026-40615Totolink A stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-35499Totolink boa formWsc peerRptPin functionality OS command injection9.1CNA v3.11.0%2026-10-20
CVE-2026-34485A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)–0.2%2026-10-20
CVE-2026-34484A Shell privilege escalation vulnerability in Nokia 1830 Global Express (GX)–0.1%2026-10-20
CVE-2026-33568Totolink A OS command injection9.1CNA v3.11.0%2026-10-20
CVE-2026-28853Apple macOS privilege escalation7.8CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-28850Apple visionOS information disclosure5.5CISA ADP v3.10.1%2026-10-20Fix
CVE-2026-28763Totolink A stack-based buffer overflow9.1CNA v3.10.7%2026-10-20
CVE-2026-28331SolarWinds Patch Manager sensitive information exposure4.4CNA v3.10.2%2026-10-20Fix
CVE-2026-28330SolarWinds Observability Self-Hosted cross-site scripting4.6CNA v3.10.4%2026-10-20Fix
CVE-2026-28329SolarWinds Observability Self-Hosted server-side request forgery (SSRF)6.4CNA v3.10.3%2026-10-20Fix
CVE-2026-28328SolarWinds Observability Self-Hosted broken authorization schema8.8CNA v3.10.5%2026-10-20Fix
CVE-2026-18205XSS in Ticimax Informatics' Ticimax E-Commerce Platform6.1CNA v3.10.2%2026-10-20
CVE-2026-17518ASUS Router certain ASUS buffer overflow8.2CNA v4.00.1%2026-10-20
CVE-2026-14933Unblu Spark cross-site scripting in Embedded Co-Browsing8.6CNA v4.00.6%2026-10-20
CVE-2026-12489Zyxel EX3501-T0 firmware Data Access Layer incorrect authorization6.5CNA v3.10.2%2026-10-20Fix
CVE-2026-11960FacturaScripts information disclosure6.9CNA v4.00.3%2026-10-20
CVE-2026-11959FacturaScripts stored cross-site scripting6.9CNA v4.00.2%2026-10-20
CVE-2026-10141Totolink improper signature verification9.1CNA v3.10.4%2026-10-20
CVE-2026-10139Totolink Mcli functionality of X2000R stack-based buffer overflow9.1CNA v3.10.9%2026-10-20
CVE-2026-10138Totolink boa formUpload functionality of X2000R OS command injection9.1CNA v3.11.2%2026-10-20
CVE-2026-10137Totolink boa formUpload functionality of X2000R stack-based buffer overflow9.1CNA v3.10.9%2026-10-20
CVE-2026-10136Totolink boa formUpload functionality of X2000R heap-based buffer overflow9.1CNA v3.10.9%2026-10-20
CVE-2026-10135Totolink batchupg functionality of X2000R OS command injection9.1CNA v3.11.2%2026-10-20
CVE-2026-10133Totolink batchupg functionality of X2000R stack-based buffer overflow9.1CNA v3.10.9%2026-10-20
CVE-2026-10132Totolink A stack-based buffer overflow9.1CNA v3.10.9%2026-10-20
CVE-2026-10131Totolink boa formPasswordSetup functionality of X2000R OS command injection9.1CNA v3.11.2%2026-10-20
CVE-2026-9869Totolink boa formTR069Config functionality of X2000R stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-9827Totolink boa formUploadFile functionality of X2000R arbitrary file write9.1CNA v3.11.0%2026-10-20
CVE-2026-9825IBM Cyber Fraud reachable assertion3.7CNA v3.10.3%2026-10-20Fix
CVE-2026-9817Totolink boa formUploadFile functionality of X2000R stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-9814Totolink An OS command injection9.1CNA v3.11.3%2026-10-20
CVE-2026-9660Totolink boa formFilter functionality of X2000R stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-9659Totolink boa formFilter functionality of X2000R stack-based buffer overflow9.1CNA v3.10.8%2026-10-20
CVE-2026-9589Unblu Spark authorization bypass in Configuration Cascade Operations9.3CNA v4.00.4%2026-10-20Fix
CVE-2026-112991MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url6.3CNA v4.00.3%2026-10-19
CVE-2026-112901Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open for minutes6.9CNA v4.00.3%2026-10-19Fix
CVE-2026-112900Pillow: Argument injection in Ghostscript call, potentially leading into RCE9.2CNA v4.00.4%2026-10-19Fix
CVE-2026-112898Pillow: Image.quantize with empty palette leaks uninitialized stack memory6.9CNA v4.00.3%2026-10-19Fix
CVE-2026-112897Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112896Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read8.8CNA v4.00.3%2026-10-19Fix
CVE-2026-112895Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for)8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112894Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112893Pillow: Invalid free in FreeType glyph rendering when a stroker is active8.2CNA v4.00.3%2026-10-19Fix
CVE-2026-112892Pillow: MSP RLE decoder expands a tiny file into unbounded memory8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112891Pillow: Quadratic GIF comment copying during save6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-112782Grav and Image Pixel Limit Bypass denial of service8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112781Grav information disclosure via form config-*@ Directives8.7CNA v4.00.2%2026-10-19Fix
CVE-2026-112780Grav arbitrary Static Method Call via Flex form replace-name@9.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112779getgrav grav-plugin-api grav API Plugin Cache Exhaustion and page permission bypass9.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112778Traefik,, and Cross-Namespace Resource Reference via Kubernetes Annotations6.4CNA v4.00.2%2026-10-19Fix
CVE-2026-112777Craft CMS and Twig create Blocklist Bypass leading to RCE8.7CNA v4.00.5%2026-10-19Fix
CVE-2026-112776Craft CMS GraphQL Site-Scope Bypass via Mutations9.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112775Craft CMS Verification Code Reuse via users/set-password8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112774Craft CMS admin RCE via ContentBlock Field Layout8.7CNA v4.00.5%2026-10-19Fix
CVE-2026-112773Craft CMS RCE via Twig Sandbox Behavior injection8.7CNA v4.00.7%2026-10-19Fix
CVE-2026-112772Craft CMS RCE via Asset::getMimeType Transform injection8.7CNA v4.00.6%2026-10-19Fix
CVE-2026-112771Craft CMS and Twig Sandbox Allowlist Bypass via Array Filters7.1CNA v4.00.2%2026-10-19Fix
CVE-2026-112770Craft CMS and authenticated RCE via Twig group Filter Array-Callable8.7CNA v4.00.6%2026-10-19Fix
CVE-2026-112769parse-community parse-server Parse Server and Session Class-Level permission bypass2.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112768parse-community parse-server Parse Server and information disclosure via User Update6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-112406Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112405Pillow: Null pointer dereference in Image.merge via an unvalidated band 08.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112404Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels8.8CNA v4.00.3%2026-10-19Fix
CVE-2026-112403Pillow: Heap buffer overflow in ImagingJpegDecode9.2CNA v4.00.3%2026-10-19Exploit codeFix
CVE-2026-112402Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform8.7CNA v4.00.4%2026-10-19Fix
CVE-2026-112401Pillow: Quadratic GIF comment concatenation allows DoS in Image.open6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-112400Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112399Pillow: APNG background disposal allocates full canvas before decompression bomb check8.7CNA v4.00.3%2026-10-19Fix
CVE-2026-112398Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution9.2CNA v4.00.3%2026-10-19Fix
CVE-2026-112397Pillow: Out-of-bounds access in _imagingmorph on a zero-width image8.7CNA v4.00.4%2026-10-19Fix
CVE-2026-112396Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer5.9CNA v3.10.5%2026-10-19Fix
CVE-2026-112395Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)6.5CNA v3.10.3%2026-10-19Fix
CVE-2026-112394Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112393Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO9.2CNA v4.00.5%2026-10-19Fix
CVE-2026-112392Pillow: Null dereference in ImagingExpand via rank filters on zero-size images8.2CNA v4.00.3%2026-10-19Fix
CVE-2026-112391Pillow: PdfParser can recurse without limit in get_value and linearize_page_tree6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112390Pillow: Infinite loop in MIC n_frames when the embedded TIFF8.2CNA v4.00.3%2026-10-19Fix
CVE-2026-112377CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack9.1CNA v4.00.2%2026-10-19
CVE-2026-112373H3C Magic NX15 usrlist sub_416874 stack-based overflow7.1CNA v4.00.4%2026-10-19
CVE-2026-112372H3C Magic NX15 upload importprofile path traversal5.1CNA v4.00.4%2026-10-19
CVE-2026-112371H3C Magic NX15 RPC esps write code injection9.4CNA v4.00.4%2026-10-19
CVE-2026-112370H3C Magic NX15 usrlist sub_416874 os command injection9.4CNA v4.01.7%2026-10-19
CVE-2026-112368MongoDB PHP Driver unbounded Recursion in phongo_bson_visit_document/visit_array8.2CNA v4.00.3%2026-10-19Fix
CVE-2026-112366Picomatch ReDoS via single-branch repeated extglob patterns8.7CNA v4.00.3%2026-10-19
CVE-2026-112363Crawl4AI SSRF Bypass via SSLCertificate.from_url URL Userinfo6.9CNA v4.00.2%2026-10-19
CVE-2026-112361Dolibarr CSP document.php protection mechanism5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112360Netis EAP930 CGI endpoint debug return200 backdoor8.9CNA v4.00.4%2026-10-19
CVE-2026-112358TiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgery2.1CNA v4.00.3%2026-10-19
CVE-2026-112329Sensei LMS broken access control via save_new_message5.3CNA v4.00.2%2026-10-19Fix
CVE-2026-112328Sensei LMS broken access control via add_new_module_term AJAX5.3CNA v4.00.2%2026-10-19Fix
CVE-2026-112310docling-core Local File Disclosure via Plain Path ImageRef5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112309@rvf/set-get prototype pollution via setPath Inherited Methods8.7CNA v4.00.4%2026-10-19Fix
CVE-2026-112308crewai-tools SSRF via SeleniumScrapingTool8.3CNA v4.00.2%2026-10-19
CVE-2026-112307sqlparse PHP code injection via output_format='PHP'8.4CNA v4.00.1%2026-10-19
CVE-2026-112306NocoBase plugin-collection-sql SQL injection via sqlCollection:setFields8.6CNA v4.00.3%2026-10-19
CVE-2026-112305Semaphore UI RCE via Task Environment Ansible Variable Override8.7CNA v4.00.6%2026-10-19
CVE-2026-112304docTR unsafe deserialization RCE via load_pretrained_params7.7CNA v4.00.3%2026-10-19
CVE-2026-112303GDevelop Cookie leak via LocalFileDownloader Resource URLs5.3CNA v4.00.3%2026-10-19
CVE-2026-112302kiwilan php-archive Extraction ArchiveZip.php extract path traversal5.3CNA v4.00.4%2026-10-19
CVE-2026-112301orbitale imagemagick-php Command.php font os command injection6.9CNA v4.02.0%2026-10-19
CVE-2026-112300DiffSK configobj __init__.py _sectionmarker redos6.9CNA v4.00.4%2026-10-19
CVE-2026-112299smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery5.3CNA v4.00.4%2026-10-19
CVE-2026-112297ptbsare anx-calibre-manager LLM Configuration llm.py LLMClient.chat server-side request forgery5.3CNA v4.00.3%2026-10-19
CVE-2026-112296FlyCms through commit edfdf724 Default Super Administrator Credentials9.3CNA v4.00.4%2026-10-19
CVE-2026-112295FlyCms through commit edfdf724 mass assignment via /ucenter/account_update5.3CNA v4.00.3%2026-10-19
CVE-2026-112294FlyCms through commit edfdf724 missing authorization via Action Counter endpoint5.3CNA v4.00.2%2026-10-19
CVE-2026-112293BoxyHQ SaaS Starter Kit missing authorization on Team Payment API5.3CNA v4.00.2%2026-10-19
CVE-2026-112292CheckCle missing authorization via Empty PocketBase API Rules9.3CNA v4.00.3%2026-10-19
CVE-2026-112291Flarum Extension Manager missing authorization via Task API6.9CNA v4.00.3%2026-10-19Fix
CVE-2026-112290MI6 @ukic/canary-web-components DOM XSS via ic-tree-item2.3CNA v4.00.2%2026-10-19Fix
CVE-2026-112289Koalixcrm stored XSS via Task Title in Django Admin5.1CNA v4.00.2%2026-10-19
CVE-2026-112288Krayin CRM SSRF Filter Bypass via DNS Rebinding2.1CNA v4.00.2%2026-10-19Fix
CVE-2026-112287Krayin CRM Broken Object Level Authorization in Mail module7.1CNA v4.00.2%2026-10-19Fix
CVE-2026-112286Krayin CRM IDOR via Quote Search and Lead-Products endpoints7.1CNA v4.00.3%2026-10-19Fix
CVE-2026-112285Thelia and Coupon Usage Limit Bypass via Pay-Later Orders5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112284libaribcaption out-of-bounds read via DecoderImpl::HandleGLGR4.8CNA v4.00.2%2026-10-19
CVE-2026-112283libbluray Uncontrolled Memory Allocation via _parse_extent_start_points6.8CNA v4.00.1%2026-10-19
CVE-2026-112282VideoLAN libbluray out-of-bounds read via clpi_access_point6.8CNA v4.00.2%2026-10-19
CVE-2026-112281nkoriyama aribb24 libaribb24 stack buffer overflow via decoder_handle_csi6.9CNA v4.00.2%2026-10-19
CVE-2026-112280Libaribb24 (aribb24) heap buffer overflow via parse_data_unit_statement_body6.9CNA v4.00.1%2026-10-19
CVE-2026-112279rdesktop heap out-of-bounds read via process_bmpcache27.1CNA v4.00.3%2026-10-19
CVE-2026-112278rdesktop heap out-of-bounds read via process_raw_bmpcache7.1CNA v4.00.3%2026-10-19
CVE-2026-112277rdesktop heap out-of-bounds read via process_plane7.1CNA v4.00.4%2026-10-19
CVE-2026-112276Netpbm Heap out-of-bounds read via rasttopnm Colormap6.9CNA v4.00.2%2026-10-19
CVE-2026-112275Netpbm Heap out-of-bounds write via rasttopnm pr_load_image6.9CNA v4.00.1%2026-10-19
CVE-2026-112274libtins out-of-bounds read via DNS::soa_record::init6.3CNA v4.00.5%2026-10-19
CVE-2026-112273libtins heap out-of-bounds read via DNS::compose_name6.9CNA v4.00.5%2026-10-19
CVE-2026-112272libdisplay-info heap out-of-bounds read via DisplayID v2 parser6.8CNA v4.00.2%2026-10-19
CVE-2026-112271libdisplay-info heap out-of-bounds read via DisplayID v1 parser6.8CNA v4.00.2%2026-10-19
CVE-2026-112270SGLang memory exhaustion via Mooncake STAGING_RSP chunk_idx7.1CNA v4.00.2%2026-10-19
CVE-2026-112269SGLang memory exhaustion via Unauthenticated Mooncake Decode Registrations7.1CNA v4.00.5%2026-10-19
CVE-2026-112268sglang-router authorization bypass via Mesh HA Management Routes5.3CNA v4.00.3%2026-10-19
CVE-2026-112267SGLang SSRF via bootstrap_host and bootstrap_port on Decode Worker6.9CNA v4.00.4%2026-10-19
CVE-2026-112266SGLang Cross-Request Abort via rid Prefix Matching8.2CNA v4.00.4%2026-10-19
CVE-2026-112265LangBot Missing Lark/Feishu Webhook Authenticity Verification8.3CNA v4.00.2%2026-10-19
CVE-2026-112264BentoML Dockerfile Instruction injection via docker.env Keys8.5CNA v4.00.2%2026-10-19
CVE-2026-112263Television OS command injection via External Action Formatting8.5CNA v4.00.7%2026-10-19
CVE-2026-112262RisingWave missing authorization via posix_fs and fs Connectors7.1CNA v4.00.3%2026-10-19Fix
CVE-2026-112261Red Hat Enterprise Linux 10 Gimp: Gimp: Use-after-free in xcf loader via prop_selected_path7.8CNA v3.10.1%2026-10-19
CVE-2026-112260Red Hat Enterprise Linux 10 gimp: Gimp: Heap out-of-bounds read in xcf text-layer parasite parsing7.1CNA v3.10.2%2026-10-19
CVE-2026-112259Red Hat Enterprise Linux 10 gimp: Gimp: Null pointer dereference in swatchbooker palette import5.5CNA v3.10.1%2026-10-19
CVE-2026-112258Red Hat Enterprise Linux 10 gimp: Gimp: Use-after-free in xcf loader7.8CNA v3.10.1%2026-10-19
CVE-2026-112257Red Hat Enterprise Linux 10 gimp: Gimp: Heap out-of-bounds read/write in psd thumbnail loader7.8CNA v3.10.1%2026-10-19
CVE-2026-112254agit8or1 clientst0r Property URL Importer server-side request forgery5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112252A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely.6.9CNA v4.00.3%2026-10-19
CVE-2026-112251antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect5.3CNA v4.00.3%2026-10-19
CVE-2026-112249grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross-site scripting4.8CNA v4.00.4%2026-10-19Fix
CVE-2026-112248grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal5.1CNA v4.00.6%2026-10-19Fix
CVE-2026-112247A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation of5.3CNA v4.00.3%2026-10-19Reported exploited
CVE-2026-112222Surfer WordPress plugin broken access control5.4CNA v3.10.2%2026-10-19Fix
CVE-2026-112214Red Hat Enterprise Linux 10 excessive memory allocation6.5CNA v3.10.2%2026-10-19
CVE-2026-112210Red Hat Enterprise Linux 10 rhc: Rhc: Local privilege escalation6.0CNA v3.10.1%2026-10-19
CVE-2026-112199YITH WooCommerce Wishlist WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-19Fix
CVE-2026-112195FusionPBX Dialplan Editor dialplan.php os command injection5.1CNA v4.02.5%2026-10-19Exploit code
CVE-2026-112193Webkul Aureus ERP UserForm.php weak password6.3CNA v4.00.4%2026-10-19
CVE-2026-112192MISP module Settings Expose Redacted Values and allow API Modification of CLI-Only settings5.3CNA v4.00.4%2026-10-19Fix
CVE-2026-112190Webkul Aureus ERP composer.json insertion of sensitive information into debugging code6.9CNA v4.00.3%2026-10-19
CVE-2026-112188MISP Server Settings Lookup exposes Sensitive Configuration Data via Branch Name Resolution7.1CNA v4.00.3%2026-10-19Fix
CVE-2026-112184MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels4.8CNA v4.00.4%2026-10-19Fix
CVE-2026-112183MISP CSS injection via Remote Tag Colour in Event Preview4.8CNA v4.00.3%2026-10-19Fix
CVE-2026-112180MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records5.1CNA v4.00.3%2026-10-19
CVE-2026-112179MISP Event Synchronization exposes Non-Exportable Tags on Remote Instances5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112178MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control7.1CNA v4.00.2%2026-10-19Fix
CVE-2026-112161Mobatek MobaXterm CygUtils64.plugin insufficient verification of data authenticity8.5CNA v4.00.1%2026-10-19
CVE-2026-112159JumpServer Template Rendering os command injection5.1CNA v4.00.9%2026-10-19Fix
CVE-2026-112158MikroTik RouterOS ipt_SAME.ko same_check integer overflow7.1CNA v4.00.3%2026-10-19
CVE-2026-112157MemTensor memmy-agent Memory service http.ts requireAdminWrite resource consumption2.3CNA v4.00.3%2026-10-19
CVE-2026-112153vraj404 Criminal-Management-System Officer Registration Form addOfficer.php SQL injection6.9CNA v4.00.4%2026-10-19
CVE-2026-112152vraj404 Criminal-Management-System Search searchOff.php mysqli_query SQL injection6.9CNA v4.00.3%2026-10-19
CVE-2026-112151vraj404 Criminal Management System Submission form home.php SQL injection6.9CNA v4.00.3%2026-10-19
CVE-2026-112150vraj404 Criminal-Management-System search.php SQL injection6.9CNA v4.00.3%2026-10-19
CVE-2026-112149vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload6.9CNA v4.00.5%2026-10-19
CVE-2026-112147ai-genius-automations octoally index.ts information disclosure6.9CNA v4.00.5%2026-10-19Fix
CVE-2026-112146D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials5.3CNA v4.00.4%2026-10-19
CVE-2026-112145speaches-ai speaches Pyannote Diarization Model Loading unsafe reflection6.9CNA v4.00.4%2026-10-19
CVE-2026-112144satya-vinay Events-Management-System project.sql file access6.9CNA v4.00.5%2026-10-19
CVE-2026-112143satya-vinay Events-Management-System missing authentication6.9CNA v4.00.5%2026-10-19
CVE-2026-112142satya-vinay Events-Management-System Registration-Delete dodelete.php SQL injection6.9CNA v4.00.3%2026-10-19
CVE-2026-112141satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query SQL injection6.9CNA v4.00.4%2026-10-19
CVE-2026-112140llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection5.3CNA v4.00.4%2026-10-19
CVE-2026-112139subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php SQL injection6.9CNA v4.00.3%2026-10-19
CVE-2026-112138diem-project diem dmCodeEditor actions.class.php join path traversal5.1CNA v4.00.3%2026-10-19
CVE-2026-112108ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow5.3CNA v4.00.4%2026-10-19
CVE-2026-112107ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow5.3CNA v4.00.4%2026-10-19
CVE-2026-112106TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation6.3CNA v4.00.3%2026-10-19
CVE-2026-112105GlitterWare Passy TLS main.dart MyHttpOverrides certificate validation6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112104eremef bandcamp-player Remote Control Server database.ts missing authentication6.9CNA v4.00.8%2026-10-19Fix
CVE-2026-112103f3-factory fatfree-core HTTP client web.php _curl certificate validation6.3CNA v4.00.4%2026-10-19Fix
CVE-2026-112102AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection5.3CNA v4.00.4%2026-10-19
CVE-2026-112101BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112100DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection5.1CNA v4.00.3%2026-10-19
CVE-2026-112098DeepPavlov Config Reference Resolver params.py resolve code injection5.3CNA v4.00.3%2026-10-19
CVE-2026-112097SourceCodester Inventory System Sales Management Handler cross-site scripting5.1CNA v4.00.2%2026-10-19
CVE-2026-112096SourceCodester Inventory System Purchase Records Handler cross-site scripting5.1CNA v4.00.2%2026-10-19
CVE-2026-112095SourceCodester Inventory System Product Management products_handler.php save cross-site scripting5.1CNA v4.00.2%2026-10-19
CVE-2026-112094michaelrsweet mxml mxml-file.c mxml_load_data use-after-free5.1CNA v4.00.2%2026-10-19Fix
CVE-2026-112093subhajitkhan online-clinic-management-system feedback.php cross-site scripting5.3CNA v4.00.3%2026-10-19
CVE-2026-112092subhajitkhan online-clinic-management-system cross-site scripting5.3CNA v4.00.3%2026-10-19
CVE-2026-112091Dav-ee dairy-management-system AJAX endpoint checkfarmer.json.php information disclosure6.9CNA v4.00.3%2026-10-19
CVE-2026-112090Dav-ee dairy-management-system pay.php mysqli_real_escape_string SQL injection5.3CNA v4.00.2%2026-10-19
CVE-2026-112089Dav-ee dairy-management-system delete.php mysqli_query SQL injection5.1CNA v4.00.2%2026-10-19
CVE-2026-112088Dav-ee dairy-management-system add.php mysqli_query SQL injection5.3CNA v4.00.2%2026-10-19
CVE-2026-112087itsourcecode Online Cake Ordering System confirm.php SQL injection5.3CNA v4.00.3%2026-10-19
CVE-2026-112086ESPnet Inference Model inference_model.py build_model deserialization5.3CNA v4.00.3%2026-10-19
CVE-2026-112083sgl-project SGLang Weight Exporter denial of service6.9CNA v4.00.4%2026-10-19
CVE-2026-112082sgl-project SGLang Expert-Distribution Recording Endpoint denial of service8.7CNA v4.00.6%2026-10-19
CVE-2026-112081hankcs HanLP Model Config Loading reflection.py HanLP.load deserialization5.3CNA v4.00.3%2026-10-19
CVE-2026-112080Llama-Chinese Adapter Config chat_gradio_no_merge.py code injection5.3CNA v4.00.3%2026-10-19
CVE-2026-112079hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization5.3CNA v4.00.3%2026-10-19
CVE-2026-112078RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection5.3CNA v4.00.2%2026-10-19
CVE-2026-112077radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112076alexta69 MeTube Feed-metadata Thumbnail Fetch Handler server-side request forgery6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112075unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-112074Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow5.3CNA v4.00.2%2026-10-19
CVE-2026-112073Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds5.3CNA v4.00.2%2026-10-19
CVE-2026-112045donetick History Deletion model.go CanDeleteHistory improper authorization5.3CNA v4.00.2%2026-10-19
CVE-2026-112044dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication6.9CNA v4.00.4%2026-10-19
CVE-2026-112043calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization5.3CNA v4.00.3%2026-10-19
CVE-2026-112042diem-project diem dmWidget dmBaseLinkTag.php text cross-site scripting5.1CNA v4.00.2%2026-10-19
CVE-2026-112041diem-project diem dmString.php random weak prng6.3CNA v4.00.3%2026-10-19
CVE-2026-112040diem-project diem Sign-In BasedmUserActions.class.php redirect5.3CNA v4.00.3%2026-10-19
CVE-2026-112039diem-project diem Administrative console actions.class.php append cross-site scripting4.8CNA v4.00.2%2026-10-19
CVE-2026-112038diem-project diem Version Check service dmAdminCtrl.js html cross-site scripting4.8CNA v4.00.2%2026-10-19
CVE-2026-112037diem-project diem Google Analytics client gapi.class.php certificate validation6.3CNA v4.00.2%2026-10-19
CVE-2026-112036Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free5.3CNA v4.00.3%2026-10-19
CVE-2026-112035aircheng-org iWebShop-5 simple.php send_message_mobile password recovery5.3CNA v4.00.3%2026-10-19
CVE-2026-112034aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect5.3CNA v4.00.3%2026-10-19
CVE-2026-112033aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery5.3CNA v4.00.2%2026-10-19
CVE-2026-111946Perl Plack::Middleware::ETag ETag header information disclosure–0.2%2026-10-19Fix
CVE-2026-111939Frappe Helpdesk Ticket Creation authorization bypass5.1CNA v4.00.2%2026-10-19Fix
CVE-2026-111938Frappe CRM missing authorization via add_note_to_call_log5.3CNA v4.00.3%2026-10-19Fix
CVE-2026-111937Frappe CRM missing authorization on CRM Notification Records5.3CNA v4.00.2%2026-10-19Fix
CVE-2026-111936Sigma File Manager SSRF via Extension Download commands5.3CNA v4.00.3%2026-10-19
CVE-2026-111935NoteGen Local File Disclosure via Chat Image Analysis2.1CNA v4.00.3%2026-10-19
CVE-2026-111925Mopidy path traversal via File Backend library.lookup6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-111915Yank Note path traversal via /API/help endpoint8.2CNA v4.00.5%2026-10-19Fix
CVE-2026-111899KitchenOwl SSRF via Recipe Import scrapeKitchenOwl Fetch5.3CNA v4.00.3%2026-10-19
CVE-2026-111883Locust CSRF via Web UI /stop and /stats/reset5.3CNA v4.00.2%2026-10-19
CVE-2026-111862Rank Math SEO PRO unauthenticated embedded malicious code9.8CNA v3.10.7%2026-10-19Fix
CVE-2026-111845YITH WooCommerce Product Bundles WordPress plugin broken access control5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111839Broadcast Live Video WordPress plugin broken access control5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111836FluentCommunity WordPress plugin broken access control4.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111831FluentForm WordPress plugin broken access control5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111829WP Mailster WordPress plugin local file inclusion6.5CNA v3.10.3%2026-10-19Fix
CVE-2026-111828Classified Listing WordPress plugin direct static code injection4.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111766markdown-it inline HTML parsing denial of service3.7CNA v3.10.4%2026-10-19Fix
CVE-2026-111759markdown-it smartquotes rule denial of service7.5CNA v3.10.6%2026-10-19Fix
CVE-2026-111757honojs hono serveStatic information disclosure5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-111755follow-redirects sensitiveHeaders regex escaping can expose credential headers8.2CNA v4.00.4%2026-10-19Fix
CVE-2026-111750AIOHTTP: Pure-Python parser request smuggling6.3CNA v4.00.3%2026-10-19Fix
CVE-2026-111749AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies2.3CNA v4.00.3%2026-10-19Fix
CVE-2026-111748AIOHTTP: Absolute-form request targets can spoof Request.scheme6.3CNA v4.00.4%2026-10-19Fix
CVE-2026-111441openGauss-server HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写8.1CNA v3.10.4%2026-10-19
CVE-2026-111440openGauss-server openGauss-connector-jdbc JDBC LogFactory 任意类加载/构造导致潜在 RCE7.0CNA v3.10.2%2026-10-19
CVE-2026-111439openGauss-server pg_read_binary_file_blocks function missing authorization4.3CNA v3.10.3%2026-10-19
CVE-2026-111438openGauss-server hba.cpp authentication bypass6.5CNA v3.10.4%2026-10-19
CVE-2026-111414JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-19Fix
CVE-2026-111410e2pdf WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-19Fix
CVE-2026-111408Quiz And Survey Master WordPress plugin PHP object injection8.8CNA v3.10.4%2026-10-19Fix
CVE-2026-111407Tutor LMS WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-19Fix
CVE-2026-111406MapSVG WordPress plugin arbitrary file upload9.9CNA v3.10.4%2026-10-19Fix
CVE-2026-111398MapSVG WordPress plugin arbitrary file deletion7.7CNA v3.10.3%2026-10-19Fix
CVE-2026-111066AIOHTTP: File descriptor exhaustion in multipart requests8.2CNA v4.00.4%2026-10-19Fix
CVE-2026-111065AIOHTTP: Connector pool exhaustion via Max-Age overflow6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-111064aiohttp server lacks an initial request/header timeout8.2CNA v4.00.4%2026-10-19Fix
CVE-2026-111063AIOHTTP: Secure attribute not enforced for shared cookie6.3CNA v4.00.2%2026-10-19Fix
CVE-2026-111061russh agent server converts constraint records into unbounded never-rolled-back tasks4.3CNA v3.10.3%2026-10-19Fix
CVE-2026-111059mljar Mercury mr.Markdown cross-site scripting6.1CNA v3.10.3%2026-10-19Fix
CVE-2026-111058Mercury: Unauthenticated remote code execution via /API/kernels9.8CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-111057Mercury: Unauthenticated remote code execution in /API/terminals access control bypass10.0CNA v3.10.4%2026-10-19Fix
CVE-2026-111056FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint6.9CNA v4.00.3%2026-10-19Fix
CVE-2026-111053FOSSBilling guest/system/template_exists endpoint information disclosure6.9CNA v4.00.4%2026-10-19Fix
CVE-2026-111046FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions2.3CNA v4.00.2%2026-10-19Fix
CVE-2026-111045anshupriyan cli-bridge sandbox escape7.5CNA v3.10.4%2026-10-19Fix
CVE-2026-110902Event Tickets WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.2%2026-10-19Fix
CVE-2026-110898Essential Addons for Elementor WordPress plugin privilege escalation6.4CNA v3.10.3%2026-10-19Fix
CVE-2026-110887HivePress WordPress plugin remote code execution (RCE)9.9CNA v3.10.5%2026-10-19Fix
CVE-2026-110688Cpanel::JSON::XS incr_parse vulnerability–0.2%2026-10-19Fix
CVE-2026-110687Cpanel::JSON::XS utf16_cmp improper unicode handling–0.2%2026-10-19Fix
CVE-2026-110686Cpanel::JSON::XS decode_hv use-after-free–0.2%2026-10-19Fix
CVE-2026-110685Cpanel::JSON::XS decode_tag memory leak–0.2%2026-10-19Fix
CVE-2026-110684Cpanel::JSON::XS encode_stringify memory leak–0.2%2026-10-19Fix
CVE-2026-110682Cpanel::JSON::XS incr_parse interpretation conflict–0.2%2026-10-19Fix
CVE-2026-110681Cpanel::JSON::XS use-after-free–0.2%2026-10-19Fix
CVE-2026-110680Cpanel::JSON::XS encode_hv out-of-bounds write–0.2%2026-10-19Fix
CVE-2026-110678Cpanel JSON::XS incr_parse memory exhaustion–0.2%2026-10-19Fix
CVE-2026-110677Cpanel::JSON::XS decode_hv memory leak–0.2%2026-10-19Fix
CVE-2026-110676Cpanel::JSON::XS denial of service–0.2%2026-10-19Fix
CVE-2026-110675Cpanel::JSON::XS decode_hv improper syntax validation–0.2%2026-10-19Fix
CVE-2026-110674Cpanel::JSON::XS decode_hv type confusion–0.2%2026-10-19Fix
CVE-2026-110673Cpanel::JSON::XS versions for Perl allow stack exhaustion–0.2%2026-10-19Fix
CVE-2026-110672Cpanel::JSON::XS decode_hv memory leak–0.2%2026-10-19Fix
CVE-2026-110379Quiz Maker WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-19Fix
CVE-2026-110363LearnPress WordPress plugin broken access control5.4CNA v3.10.1%2026-10-19Fix
CVE-2026-110034Salon Booking System for WordPress unauthenticated Negative Booking Total via Discount code3.7CNA v3.10.2%2026-10-19Fix
CVE-2026-110008@fastify/oauth2 vulnerable to login CSRF via OAuth state cookie not cleared after callback4.2CNA v3.10.1%2026-10-19Fix
CVE-2026-109437Cognition Unauthenticated RCE via Local Shell Backend9.2CNA v4.00.6%2026-10-19Fix
CVE-2026-109434Sleipnir Browser Fullscreen address bar spoofing5.1CNA v4.00.3%2026-10-19Fix
CVE-2026-109433Camunda broken access control via Cockpit6.0CNA v4.00.3%2026-10-19Fix
CVE-2026-109432Camunda Expression injection via orQueries RCE9.3CNA v4.00.6%2026-10-19Fix
CVE-2026-109431Camunda missing authorization in Task Sub-Resources8.6CNA v4.00.4%2026-10-19Fix
CVE-2026-109126IBM Verify Identity Access and IBM Security Verify Access hard-coded credentials8.8CNA v3.10.2%2026-10-19Fix
CVE-2026-108984GV-ASManager web server buffer overflow7.5CNA v3.10.3%2026-10-19
CVE-2026-108983GV-ASManager web server command injection9.8CNA v3.10.3%2026-10-19
CVE-2026-108837Apache Kylin: Potential computed-column resource exhaustion–0.2%2026-10-19Fix
CVE-2026-108833Apache Kylin: Default startup profile miss security settings–0.2%2026-10-19Fix
CVE-2026-108823Apache Kylin: Potential unauthenticated job metadata replacement–0.2%2026-10-19Fix
CVE-2026-108780Apache Kylin: Potential JDBC source configuration validation issue–0.2%2026-10-19Fix
CVE-2026-108776Apache Kylin: Tables/names SparkSQL injection–0.2%2026-10-19Fix
CVE-2026-108771Apache Kylin: Unauthenticated broadcast API and polymorphic deserialization–0.2%2026-10-19Fix
CVE-2026-108766Apache Kylin: Missing JDBC-config authorization–0.2%2026-10-19Fix
CVE-2026-108764Apache Kylin: Job-driver UI proxy SSRF–0.2%2026-10-19Fix
CVE-2026-108762Apache Kylin: Delete metadata backup path-confinement bypass–0.2%2026-10-19Fix
CVE-2026-108121Koozali SME Server improper input validation in domain Creation leads to denial of service6.9CNA v4.00.3%2026-10-19
CVE-2026-108120Path traversal inKoozali SME Server7.7CNA v4.00.4%2026-10-19
CVE-2026-107571Incorrect default permissions in hMailServer7.8CNA v3.10.1%2026-10-19
CVE-2026-107569Unchecked input for loop condition in hMailServer7.5CNA v3.10.4%2026-10-19
CVE-2026-107568Missing authorization in hMailServer6.5CNA v3.10.2%2026-10-19
CVE-2026-107567Progressive Robot hMailServer DKIM signing use of a less trusted source7.5CNA v3.10.2%2026-10-19
CVE-2026-107566Missing authorization in hMailServer6.5CNA v3.10.2%2026-10-19
CVE-2026-107400Security vulnerability identified in IBM TRIRIGA GWT Mock Authentication8.8CNA v3.10.4%2026-10-19Fix
CVE-2026-107366IBM Langflow OSS authorization bypass through user-controlled key8.3CNA v3.10.2%2026-10-19Fix
CVE-2026-107188Eptura Archibus Workflow Rule unrestricted file upload9.6CNA v3.10.4%2026-10-19Fix
CVE-2026-107187Eptura Archibus Workflow Rule enables Unauthenticated Database Read of Sensitive Tables8.5CNA v3.10.3%2026-10-19Fix
CVE-2026-107186Eptura Archibus Direct Web Remoting (DWR) API authentication bypass via Privileged Session Reuse8.6CNA v3.10.4%2026-10-19Fix
CVE-2026-107084Slims loan_history_maintenance.php cross-site request forgery–0.2%2026-10-19Exploit code
CVE-2026-107083SENAYAN Library Management System (SLiMS) Bulian dl_detail.php SQL injection9.8CISA ADP v3.10.5%2026-10-19Exploit code
CVE-2026-107082Senayan Slims admin/modules/bibliography/index.php SQL injection8.8CISA ADP v3.10.5%2026-10-19Exploit code
CVE-2026-107081SENAYAN Library Management System (SLiMS) Bulian admin AJAX endpoints SQL injection9.8CISA ADP v3.10.5%2026-10-19Exploit code
CVE-2026-106933Blaze Demo Importer for WordPress Author+ stored XSS via SVG upload6.8CISA ADP v3.10.3%2026-10-19Fix
CVE-2026-106028ActiveTrail for WooCommerce for WordPress unauthenticated arbitrary Coupon creation5.3CISA ADP v3.10.2%2026-10-19Fix
CVE-2026-106014Vantiv Gateway for Vantiv on WC hosted-payment return handler vulnerability5.3CISA ADP v3.10.2%2026-10-19
CVE-2026-106010BDM Digital Payment Gateway - Unauthenticated Payment Confirmation Forgery5.3CNA v3.10.2%2026-10-19
CVE-2026-105815TP-Link Tapo C210 DS JSON API improper authentication7.1CNA v4.00.2%2026-10-19Fix
CVE-2026-105814Order-Dependent authentication bypass in the DS JSON API in TP-Link Tapo C2105.3CNA v4.00.2%2026-10-19Fix
CVE-2026-105810Authenticated local stack overflow in TP-Link Tapo C320WS8.5CNA v4.00.2%2026-10-19Exploit codeFix
CVE-2026-105453IBM Sterling Connect:Direct for UNIX improper privilege management8.4CNA v3.10.1%2026-10-19Fix
CVE-2026-104679Yamaha VOCALOID6 Editor XML external entity injection6.9CNA v4.00.1%2026-10-19
CVE-2026-103314Red Hat Advanced Cluster Security for Kubernetes authentication bypass by replay7.4CNA v3.10.3%2026-10-19Fix
CVE-2026-103311Coinbase Commerce Payment Gateway for WooCommerce webhook signature verification vulnerability5.3CNA v3.10.1%2026-10-19
CVE-2026-103091Insecure default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)9.3CNA v4.00.5%2026-10-19Fix
CVE-2026-103038PingTools Network Utilities OS command injection through Watcher ICMP host8.6CNA v4.03.4%2026-10-19
CVE-2026-102503Missing authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)9.3CNA v4.00.3%2026-10-19Fix
CVE-2026-94294App Builder - Unauthenticated Option Write and Redirect via includes/pure.php5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-94273The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.5.3CISA ADP v3.10.2%2026-10-19Fix
CVE-2026-94272Snap Finance - Unauthenticated arbitrary Order Status Change via multiple AJAX Actions5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-94231TrueBooker Appointment Booking - Unauthenticated service and Category Creation and Modification5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-94230The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-94229The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal information of customers who booked an appointment, as well as inval5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-94228The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply.5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-91858Apache Camel Camel-FOP XML external entity injection6.5CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-91831Subscribe to Comments - Author+ email header injection via from Name setting3.8CNA v3.10.2%2026-10-19Fix
CVE-2026-91047The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.5.3CISA ADP v3.10.2%2026-10-19
CVE-2026-91046ElementsReady Addons for Elementor settings-save handlers missing authorization4.3CISA ADP v3.10.2%2026-10-19
CVE-2026-90910Apache Answer: Reaction API authorization bypass for restricted content9.8CISA ADP v3.10.6%2026-10-19Fix
CVE-2026-89286FormFlow for GoHighLevel WordPress plugin unauthenticated sensitive data disclosure via Log file5.3CISA ADP v3.10.2%2026-10-19Fix
CVE-2026-88901Apache Camel: Camel-Smooks XML external entity Processing, external entities resolved by default8.2CNA v3.10.6%2026-10-19Exploit codeFix
CVE-2026-88900Apache Camel deserialization of untrusted data8.8CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-86791The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.5.3CNA v3.10.1%2026-10-19Fix
CVE-2026-86589Apache Answer flawed authentication–0.3%2026-10-19Fix
CVE-2026-86375Dell Application Installer missing encryption6.2CNA v3.10.1%2026-10-19Fix
CVE-2026-85317Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache4.8CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-85316Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching4.8CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-85315Apache Camel: Camel-gRPC information disclosure via Unmuted Consumer Exceptions5.3CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85314Apache Camel: Camel-mail header injection6.5CNA v3.10.4%2026-10-19Fix
CVE-2026-85313Apache Camel: Camel-Jetty Cross-Origin credential exposure4.3CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-85312Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action header4.8CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-85301Apache Camel improper authentication4.8CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85300Apache Camel: Camel-PQC Private key disclosure5.5CNA v3.10.1%2026-10-19Exploit codeFix
CVE-2026-85296Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State6.5CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85260Apache Camel: Camel-MLLP Protected Health information disclosure to Logs by Default5.5CNA v3.10.2%2026-10-19Exploit codeFix
CVE-2026-85257Apache Camel: Camel-CXF information disclosure via Unmuted Consumer Exceptions5.3CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85254Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing6.5CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85251Apache Camel: Camel-HTTP credential disclosure to Cross-Host Redirect Targets7.5CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-85250Apache Camel: Camel-XPath XML external entity Processing and File Disclosure7.5CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-85249Apache Camel: Camel-Tika header injection via Unfiltered Document Metadata6.5CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85248Apache Camel: Camel-PQC signature verification Bypass via a Shared Unsynchronized Signature Instance5.9CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85247Apache Camel: Camel-Knative improper certificate validation when SSL is Enabled without a Truststore5.9CNA v3.10.3%2026-10-19Exploit codeFix
CVE-2026-85246Apache Camel: Camel-Mina information disclosure via Unmuted Consumer Exceptions5.3CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-85245Apache Camel: Camel-Thrift Cross-Exchange data disclosure via a Shared deserialization Target5.9CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-85243Apache Camel improper integrity check validation5.9CNA v3.10.2%2026-10-19Exploit codeFix
CVE-2026-84181Apache Camel: Camel-Shiro authentication bypass via Skipped Credential Verification on Subject Reuse5.9CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-84180Apache Camel: Camel-Knative information disclosure via Unmuted Consumer Exceptions5.3CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-84178Apache Camel: Camel-OAuth login cross-site request forgery6.1CNA v3.10.2%2026-10-19Exploit codeFix
CVE-2026-84176Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin credential exposure6.5CNA v3.10.4%2026-10-19Fix
CVE-2026-83531Apache Camel dynamic-router-control endpoint code injection8.8CNA v3.10.8%2026-10-19Exploit codeFix
CVE-2026-82166Dell Application Store missing authentication8.8CNA v3.10.4%2026-10-19Fix
CVE-2026-80344Apache Camel: Camel-AS2 server-side request forgery and credential disclosure8.2CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-80343Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching8.2CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-80312Apache Camel: Camel-OAuth authentication bypass via Fail-Open Processors8.2CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-79986Apache Camel Azure Files component path traversal7.4CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-79985Apache Camel SMB component path traversal7.4CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-79984Apache Camel Mina SFTP component path traversal7.4CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-79983Apache Camel FTP component path traversal7.4CNA v3.10.5%2026-10-19Exploit codeFix
CVE-2026-79633Apache Answer: Missing authorization allows Mutations of Non-Public Content–0.2%2026-10-19Fix
CVE-2026-79624Apache Answer: Stale Visit Tokens Retain Access to Private Uploads after Session Revocation–0.2%2026-10-19Fix
CVE-2026-79620Apache Answer: Improper authorization allows Disclosure of Non-Public Question Metadata–0.2%2026-10-19Fix
CVE-2026-79613Apache Answer: Disclosure of Comments on Non-Public Content through Public Profiles–0.2%2026-10-19Fix
CVE-2026-78165Apache Camel: Camel-Spring-Redis Unfiltered Java deserialization of Redis Payloads8.8CNA v3.10.8%2026-10-19Exploit codeFix
CVE-2026-78164Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers8.2CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-78163Apache Camel Docling component server-side request forgery5.9CNA v3.10.4%2026-10-19Exploit codeFix
CVE-2026-78162Apache Camel: Camel-Hazelcast Managed Instances Missing Java deserialization Filter10.0CNA v4.01.3%2026-10-19Exploit codeFix
CVE-2026-77684zephyrproject zephyr Bluetooth Classic HFP Hands-Free memory leak5.7CNA v3.10.2%2026-10-19
CVE-2026-76994Apache Answer: Exposure of Hidden Question Metadata through Public Answer Profiles–0.2%2026-10-19Fix
CVE-2026-76788zephyrproject zephyr stack out-of-bounds write in the OSDP Control Panel reply parser8.8CNA v3.10.2%2026-10-19
CVE-2026-76787zephyrproject Zephyr UpdateHub FOTA client null pointer dereference5.9CNA v3.10.3%2026-10-19Fix
CVE-2026-76740HPE Compute Scale-up Server and Superdome Flex servers RMC remote command execution7.2CNA v3.10.4%2026-10-19Fix
CVE-2026-76739HPE Compute Scale-up Server and Superdome Flex server RMC filesystem improper input validation4.3CNA v3.10.2%2026-10-19Fix
CVE-2026-74922Document Gallery Thumber webhook vulnerability5.3CNA v3.10.1%2026-10-19
CVE-2026-74921Document Gallery - Contributor+ stored XSS via Gallery shortcode attributes6.8CNA v3.10.2%2026-10-19
CVE-2026-71563Apache Answer: MCP Answer Retrieval exposes Content from Non-Public Questions4.3CISA ADP v3.10.2%2026-10-19Fix
CVE-2026-71253Apache Johnzon ClassConverter unsafe reflection9.8CISA ADP v3.10.7%2026-10-19Fix
CVE-2026-71170Dell Application Store uncontrolled search path7.8CNA v3.10.2%2026-10-19Fix
CVE-2026-71169Dell Application Store incorrect permission assignment7.0CNA v3.10.1%2026-10-19Fix
CVE-2026-68482Apache Answer: Improper authorization in Question Invite User Lookup–0.2%2026-10-19Fix
CVE-2026-67249Apache Answer: Email Code Purpose Confusion may allow account takeover–0.2%2026-10-19Fix
CVE-2026-64945Apache Answer question operation controller incorrect authorization–0.2%2026-10-19Fix
CVE-2026-64944Apache Answer: Stored XSS via unsanitized HTML in imported question content–0.2%2026-10-19Fix
CVE-2026-64943Apache Answer: API keys logged in plaintext during authentication8.1CISA ADP v3.10.4%2026-10-19Fix
CVE-2026-55644Element X iOS io.element.call deeplink improper input validation5.1CNA v4.00.3%2026-10-19Fix
CVE-2026-53995MLflow path traversal via Trace ID API8.8CNA v4.00.6%2026-10-19Exploit code
CVE-2026-38671Ellucian Banner Student Registration Self-Service cross-site scripting6.1CISA ADP v3.10.4%2026-10-19
CVE-2026-19595Zephyr RTIO syscall verifier validates output parameters for read instead of write access6.1CNA v3.10.1%2026-10-19
CVE-2026-19178IBM TS4500 Tape Library race condition6.8CNA v3.10.2%2026-10-19Fix
CVE-2026-16487A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS conte8.1CNA v3.1–2026-10-19
CVE-2026-16460Red Hat bootc and ostree insufficient verification of data authenticity7.4CNA v3.10.1%2026-10-19
CVE-2026-15661IBM Concert software improper output neutralization for logs5.3CNA v3.10.3%2026-10-19Fix
CVE-2026-14511IBM MQ denial of service6.5CNA v3.10.4%2026-10-19Fix
CVE-2026-13695SQL injection in the Integratec application8.8CNA v4.00.2%2026-10-19
CVE-2026-12727IBM MQ buffer overflow4.3CNA v3.10.2%2026-10-19Fix
CVE-2026-12670IBM MQ denial of service5.3CNA v3.10.2%2026-10-19Fix
CVE-2026-12669IBM MQ out-of-bounds read3.1CNA v3.10.2%2026-10-19Fix
CVE-2026-12665IBM MQ buffer overflow8.1CNA v3.10.2%2026-10-19Fix
CVE-2026-12660IBM MQ path traversal2.7CNA v3.10.2%2026-10-19Fix
CVE-2026-12350IBM MQ deserialization of untrusted data6.5CNA v3.10.3%2026-10-19Fix
CVE-2026-12343IBM MQ denial of service6.5CNA v3.10.2%2026-10-19Fix
CVE-2026-12254Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue6.4CNA v4.00.2%2026-10-19Fix
CVE-2026-12155IBM MQ deserialization of untrusted data6.5CNA v3.10.3%2026-10-19Fix
CVE-2026-12148IBM MQ deserialization of untrusted data7.5CNA v3.10.3%2026-10-19Fix
CVE-2026-11831IBM MQ heap-based buffer overflow5.4CNA v3.10.2%2026-10-19Fix
CVE-2026-11829IBM MQ buffer overflow6.5CNA v3.10.2%2026-10-19Fix
CVE-2026-11828IBM MQ buffer overflow5.9CNA v3.10.3%2026-10-19Fix
CVE-2026-11319TickTick Android path traversal via ShareReceiveActivity6.9CNA v4.00.1%2026-10-19
CVE-2026-10743IBM MQ race condition8.8CNA v3.10.3%2026-10-19Fix
CVE-2026-10574IBM MQ buffer overflow8.8CNA v3.10.3%2026-10-19Fix
CVE-2026-10572IBM MQ buffer overflow8.8CNA v3.10.3%2026-10-19Fix
CVE-2026-8355IBM ContextForge MCP Gateway is affected by server-side request forgery5.4CISA ADP v3.10.2%2026-10-19Fix
CVE-2026-8168Denial of service vulnerability in the SVG parser and renderer impacts Qt7.1CNA v4.00.4%2026-10-19Fix
CVE-2026-6930IBM Concert Software Risky Cryptographic Algorithm3.7CNA v3.10.2%2026-10-19Fix
CVE-2026-6719IBM Concert software use of insufficiently random values7.5CNA v3.10.4%2026-10-19Fix
CVE-2026-4418IBM Cloud Pak System HTML injection5.4CNA v3.10.2%2026-10-19Fix
CVE-2026-4413IBM Concert software cross-site scripting6.1CNA v3.10.3%2026-10-19Fix
CVE-2026-4405IBM Concert software use of web browser cache containing sensitive information4.0CNA v3.10.2%2026-10-19Fix
CVE-2026-3628IBM Concert software information disclosure5.3CNA v3.10.3%2026-10-19Fix
CVE-2026-3303IBM Concert Software Permissive Cross-domain Security Policy3.7CNA v3.10.3%2026-10-19Fix
CVE-2026-3295IBM Cloud Pak System cross-site scripting7.4CNA v3.10.3%2026-10-19Fix
CVE-2026-3161IBM Cloud Pak System Risky Cryptographic Algorithm5.9CNA v3.10.2%2026-10-19Fix
CVE-2026-1510IBM Concert Software Improper Clearing of Heap Memory4.7CNA v3.10.1%2026-10-19Fix
CVE-2026-1501IBM Concert software improper certificate validation3.7CNA v3.10.1%2026-10-19Fix
CVE-2026-112112nic BIRD improper quantity validation2.3CNA v4.00.3%2026-10-18
CVE-2026-112111Bootstrap Shortcodes cross-site scripting5.1CNA v4.00.3%2026-10-18Fix
CVE-2026-112063libstrophe stack-based buffer overflow via SCRAM Salt in SCRAM_Hi6.0CNA v4.00.2%2026-10-18
CVE-2026-112062lwIP stack out-of-bounds write via mDNS Search Response handler6.0CNA v4.00.2%2026-10-18
CVE-2026-112061librtmp (RTMPDump) heap out-of-bounds read via AMFProp_Decode5.3CNA v4.00.2%2026-10-18
CVE-2026-112060librtmp (RTMPDump) heap out-of-bounds write via AMF3_Decode6.1CNA v4.00.2%2026-10-18
CVE-2026-112059libLAS heap out-of-bounds write via LASSchema VLR6.9CNA v4.00.1%2026-10-18
CVE-2026-112058libdvdnav out-of-bounds read via set_PTT JumpTT6.8CNA v4.00.1%2026-10-18
CVE-2026-112057libdvdnav out-of-bounds read in dvdnav_describe_title_chapters6.8CNA v4.00.1%2026-10-18Fix
CVE-2026-112056wvWare wv heap out-of-bounds read via wvGetSTSH6.8CNA v4.00.1%2026-10-18
CVE-2026-112055wvWare wv stack out-of-bounds read via wvGetPAPX_FKP and wvGetCHPX_FKP6.8CNA v4.00.1%2026-10-18
CVE-2026-112054Schroedinger libschroedinger divide by zero in Low-Delay Transform Parsing6.8CNA v4.00.1%2026-10-18
CVE-2026-112053Schroedinger libschroedinger out-of-bounds read via schro_params_set_default_quant_matrix6.8CNA v4.00.1%2026-10-18
CVE-2026-112052libspatialite integer overflow in WKB Geometry Parsing6.9CNA v4.00.1%2026-10-18
CVE-2026-112051xorbitsai inference Xinference path traversal via model_name in Custom Model Registration8.3CNA v4.00.4%2026-10-18
CVE-2026-112050Gitify Login CSRF via Missing OAuth State Validation2.3CNA v4.00.1%2026-10-18Fix
CVE-2026-112049Vita3K before build 4187 path traversal via VPK Package Installation6.7CNA v4.00.2%2026-10-18Fix
CVE-2026-112048libspatialite Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count6.9CNA v4.00.1%2026-10-18
CVE-2026-112047OneUptime incorrect authorization in Kubernetes AI Actions5.3CNA v4.00.2%2026-10-18Fix
CVE-2026-112046OW2 ASM denial of service via infinite loop in Label.resolve6.8CNA v4.00.1%2026-10-18Fix
CVE-2026-112032aircheng-org iWebShop-5 util.php search SQL injection5.1CNA v4.00.3%2026-10-18
CVE-2026-112031chamilo LMS Ticket Module cross-site scripting5.1CNA v4.00.2%2026-10-18
CVE-2026-112030diem-project diem dmDataLoad.php default password5.3CNA v4.00.2%2026-10-18
CVE-2026-112029diem-project diem SHA1 PluginDmUser.class.php weak password hash2.0CNA v4.00.1%2026-10-18
CVE-2026-112028light0011 cms Vote VoteController.class.php logic error6.9CNA v4.00.3%2026-10-18
CVE-2026-112027light0011 cms Uploadify check-exists.php file_exists file information disclosure6.9CNA v4.00.3%2026-10-18
CVE-2026-112026light0011 cms UserModel.class.php sha1 weak password hash6.3CNA v4.00.2%2026-10-18
CVE-2026-112025light0011 cms Captcha Validation UserController.class.php access control6.9CNA v4.00.5%2026-10-18
CVE-2026-112021snac2 heap-based buffer overflow via JSON parser _xs_json_load_lexer8.7CNA v4.00.7%2026-10-18Fix
CVE-2026-112020LodePNG heap out-of-bounds read via getFilterTypesInterlaced6.9CNA v4.00.1%2026-10-18
CVE-2026-112019cgltf heap out-of-bounds read via cgltf_accessor_unpack_floats6.9CNA v4.00.1%2026-10-18
CVE-2026-112018cgltf heap out-of-bounds write via cgltf_accessor_unpack_floats7.3CNA v4.00.1%2026-10-18
CVE-2026-112017JeecgBoot SQL injection via SqlInjectionUtil Newline Bypass7.1CNA v4.00.3%2026-10-18Fix
CVE-2026-112016Netcore NR256CN Unauthenticated Write to Fixed Boa Staging files6.9CNA v4.00.3%2026-10-18
CVE-2026-112015Omnigent path traversal via Sub-Agent os_env.cwd7.7CNA v4.00.4%2026-10-18Fix
CVE-2026-112014LobsterAI hard-coded password in Provider API Key Export6.8CNA v4.00.1%2026-10-18Fix
CVE-2026-112013libtta divide by zero via tta_decoder_init_get_info6.8CNA v4.00.1%2026-10-18
CVE-2026-112012libtta stack out-of-bounds write via Zero Channel Count4.8CNA v4.00.1%2026-10-18
CVE-2026-112011libtta integer overflow via tta_decoder_init_get_info Seek Table5.8CNA v4.00.1%2026-10-18
CVE-2026-112010smpeg integer underflow via stream_header in MPEGsystem.cpp6.8CNA v4.00.1%2026-10-18
CVE-2026-112009smpeg heap out-of-bounds read via MPEGsystem::FillBuffer6.8CNA v4.00.1%2026-10-18
CVE-2026-112008libmng heap buffer overflow via ORDR Chunk Reader mng_read_ordr6.9CNA v4.00.1%2026-10-18
CVE-2026-112007Schism Tracker Heap out-of-bounds write via ULT Loader6.9CNA v4.00.1%2026-10-18
CVE-2026-112006OpenTelemetry opentelemetry-exporter-otlp-proto-http improper certificate validation8.3CNA v4.00.2%2026-10-18Fix
CVE-2026-112005WhoDB arbitrary file read/Write via DuckDB Query Editor9.2CNA v4.00.6%2026-10-18Fix
CVE-2026-112004Teable authorization bypass via Folder Rename endpoint2.3CNA v4.00.3%2026-10-18Fix
CVE-2026-112003ProjectSend Path Validation Bypass via Orphan File Import/Delete6.0CNA v4.00.4%2026-10-18Fix
CVE-2026-112002ProjectSend unverified password change via /settings/password7.6CNA v4.00.3%2026-10-18Fix
CVE-2026-112001ProjectSend incorrect authorization via Users API Token Abilities8.6CNA v4.00.5%2026-10-18Fix
CVE-2026-112000Vanus missing authorization in Gateway Streaming RPCs7.2CNA v4.00.3%2026-10-18
CVE-2026-111999Vanus missing authentication via Gateway CloudEvents HTTP Receiver8.7CNA v4.00.5%2026-10-18
CVE-2026-111998Vanus Default Admin Credentials via Gateway9.3CNA v4.00.5%2026-10-18
CVE-2026-111997beaugunderson ip-address regular expression denial of service6.3CNA v4.00.3%2026-10-18Fix
CVE-2026-111993Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage4.8CNA v4.00.1%2026-10-18
CVE-2026-111992itsmeravitejak Online-Examination-System Exam exam.php startExam SQL injection5.3CNA v4.00.3%2026-10-18
CVE-2026-111991WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection5.3CNA v4.00.3%2026-10-18
CVE-2026-111990kishan0725 Hospital Management System Appointment Cancellation Handler SQL injection6.9CNA v4.00.3%2026-10-18
CVE-2026-111988dyad-sh dyad OAuth Callback cross-site request forgery5.3CNA v4.00.2%2026-10-18Fix
CVE-2026-111987AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder cross-site scripting5.3CNA v4.00.5%2026-10-18
CVE-2026-111986AUTOMATIC1111 stable-diffusion-webui Model Instantiation code injection5.3CNA v4.00.4%2026-10-18
CVE-2026-111985AUTOMATIC1111 stable-diffusion-webui Metadata Extraction resource exhaustion5.3CNA v4.00.5%2026-10-18
CVE-2026-111984AUTOMATIC1111 stable-diffusion-webui Card Builder cross-site scripting5.3CNA v4.00.5%2026-10-18
CVE-2026-111942hrisikeshpal Blood_Bank_Management_System abs.php cross-site scripting5.3CNA v4.00.3%2026-10-18
CVE-2026-111877dext34-morgan Books4Cash search.php cross-site scripting5.3CNA v4.00.3%2026-10-18
CVE-2026-111876alexpasmantier television entry.rs output command injection4.8CNA v4.00.6%2026-10-18
CVE-2026-111875David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization5.1CNA v4.00.2%2026-10-18Fix
CVE-2026-111874OpenCATS Career Portal CareersUI.php processLogin excessive authentication6.3CNA v4.00.5%2026-10-18
CVE-2026-111873itsmeravitejak Online-Examination-System AJAX endpoint exammanger.php topicslist SQL injection6.9CNA v4.00.3%2026-10-18
CVE-2026-111872itsmeravitejak Online-Examination-System database.php getreport SQL injection6.9CNA v4.00.3%2026-10-18
CVE-2026-111871itsmeravitejak Online-Examination-System subjectsdb.php SQL injection6.9CNA v4.00.3%2026-10-18
CVE-2026-111870itsmeravitejak Online-Examination-System admin.php isAdmin missing authentication6.9CNA v4.00.4%2026-10-18
CVE-2026-111869makeplane API endpoint reliance on untrusted inputs in a security decision6.9CNA v4.00.5%2026-10-18
CVE-2026-111868datastax pulsar-jms PulsarObjectMessage.java decode deserialization5.3CNA v4.00.2%2026-10-18
CVE-2026-111041AI Engine for WordPress arbitrary post modification via update_media_metadata and approve_media4.9CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110981WP Photo Album Plus for WordPress reflected XSS via wppa-cat parameter7.1CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110976AI Engine for WordPress Editor+ arbitrary post deletion via reject_media4.9CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110897PowerPack Lite for Beaver Builder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-18Fix
CVE-2026-110895Support Genix WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-18Fix
CVE-2026-110886Conversational Forms for ChatBot WordPress plugin PHP object injection9.8CNA v3.10.3%2026-10-18Fix
CVE-2026-110885HivePress WordPress plugin content injection6.5CNA v3.10.3%2026-10-18Fix
CVE-2026-1108832Way VideoCalls and Random Chat WordPress plugin broken authentication6.5CNA v3.10.3%2026-10-18Fix
CVE-2026-110880Kit (formerly ConvertKit) WordPress plugin broken access control6.5CNA v3.10.2%2026-10-18Fix
CVE-2026-110494Gitea release attachment re-linking of issue attachments6.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110383Electronic Signature Add-on for Fluent Forms WordPress plugin insecure direct object references7.5CNA v3.10.3%2026-10-18Fix
CVE-2026-110382Simply Schedule Appointments WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-18Fix
CVE-2026-110373Login with phone number WordPress plugin privilege escalation8.1CNA v3.10.3%2026-10-18Fix
CVE-2026-110372OttoKit WordPress plugin privilege escalation9.8CNA v3.10.9%2026-10-18Reported exploitedNucleiFix
CVE-2026-110365Advanced File Manager WordPress plugin broken access control6.5CNA v3.10.2%2026-10-18Fix
CVE-2026-110324Gitea private profile information disclosure through POST request6.5CISA ADP v3.10.3%2026-10-18Fix
CVE-2026-110311Gitea draft release creation disclosing attachment metadata4.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110070Modern Events Calendar Lite for WordPress Subscriber+ arbitrary post modification via IDOR6.5CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110069Modern Events Calendar Lite for WordPress sensitive data disclosure4.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110035Salon Booking System for WordPress Subscriber+ Coupon code disclosure via Discounts REST Route4.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110033Salon Booking System for WordPress Salon Staff+ stored XSS and SSRF via Salon REST image_url6.8CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110032Salon Booking System for WordPress incorrect authorization5.5CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110031Salon Booking System - Salon Staff+ privilege escalation to Administrator7.2CISA ADP v3.10.3%2026-10-18Fix
CVE-2026-110026Tasty Recipes Lite - Contributor+ Taxonomy Term Creation, Renaming and Deletion4.9CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-110024@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults6.8CNA v3.10.2%2026-10-18Fix
CVE-2026-109937Otter Blocks for WordPress unauthenticated open redirect via Stripe Checkout block5.4CISA ADP v3.10.1%2026-10-18Fix
CVE-2026-109895Booktics WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-18Fix
CVE-2026-109894Booktics WordPress plugin SQL injection9.3CNA v3.10.2%2026-10-18Fix
CVE-2026-109844Gitea watched repositories API disclosure after access revocation4.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-109553Gitea SSH certificate principal impersonation of other users7.5CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-108485eStore WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-18Fix
CVE-2026-107686Gitea reactions accepted on locked issues and comments4.3CISA ADP v3.10.2%2026-10-18Fix
CVE-2026-107618Gitea cross-site request forgery on repository topics–0.2%2026-10-18Fix
CVE-2026-107436Strong Testimonials WordPress plugin PHP object injection8.8CNA v3.10.4%2026-10-18Fix
CVE-2026-105964Gitea Actions artifact v4 API unbounded request body6.5CISA ADP v3.10.3%2026-10-18Fix
CVE-2026-105661Gitea panic on the repositories route of individual users5.3CISA ADP v3.10.3%2026-10-18Fix
CVE-2026-104627Gitea OpenID account linking without session binding5.4CISA ADP v3.10.1%2026-10-18Fix
CVE-2026-98868In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache_replay(), the writeback worker and the GC worker read a kset of get_kset_onmedia_size() bytes and advance the position by it. A forged key_num makes that size exceed the seg–0.2%2026-10-18Fix
CVE-2026-98867In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_key_decode() takes a key's logical off from the cache device and later indexes req_key_tree->subtrees[] by it in get_subtree(). An off past the device forms a su–0.2%2026-10-18Fix
CVE-2026-98866Linux kernel sched/cache use-after-free–0.1%2026-10-18Fix
CVE-2026-98865Linux kernel sched_ext deadlock–0.2%2026-10-18Fix
CVE-2026-98864In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task ebf1ccff79c4 ("sched_ext: Fix ops.dequeue() semantics") moved the final ops_state store in scx_dispatch_enqueue() after the DSQ unlock so that the custody update–0.2%2026-10-18Fix
CVE-2026-98863In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Re-pend GET_NESTED_STATE_PAGES before exiting to userspace if getting the nested pages fails in the KVM_RUN path. If userspace re-runs the vCPU, and vmcs02 hold–0.2%2026-10-18Fix
CVE-2026-98862Linux kernel audit use-after-free–0.2%2026-10-18Fix
CVE-2026-98861Linux kernel fprobe use-after-free–0.2%2026-10-18Fix
CVE-2026-98860In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to size_t when–0.2%2026-10-18Fix
CVE-2026-98859In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt_remove() quiesces the sticky-finger timer before stopping the hardware: timer_delete_sync(&td->release_timer); sysfs_remove_group(&hdev->dev.kobj, &–0.2%2026-10-18Fix
CVE-2026-98858Linux kernel io_uring use-after-free–0.2%2026-10-18Fix
CVE-2026-98857In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every previously unseen destination address. The table max_size only tells the periodic collector to reclaim entries after the–0.2%2026-10-18Fix
CVE-2026-98856In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, get_optimized_kprobe() stops at B when arming a new probe C at A+4. It leave–0.2%2026-10-18Fix
CVE-2026-98855In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). I–0.2%2026-10-18Fix
CVE-2026-98854In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of_overlay_fdt_apply() stores the idr_alloc() return value in ovcs->id before checking it. On failure the stored id is negative, free_overlay_changeset()'s "if (ovcs->id–0.2%2026-10-18Fix
CVE-2026-98853In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment() for each nested IP header. encap_level tracks header bytes, not callback depth, so a deep chain can exhaust the ker–0.1%2026-10-18Fix
CVE-2026-98852In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b ("net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback") split skb_gso_has_extension_hdr() into mutually exclusive branches on skb->encapsulatio–0.2%2026-10-18Fix
CVE-2026-98851In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path nft_flow_offload_init() bumps the flowtable use count with nft_use_inc() before calling nf_ct_netns_get(). When the latter fails, the error is returned as-i–0.2%2026-10-18Fix
CVE-2026-98850Linux kernel net/packet kernel panic–0.2%2026-10-18Fix
CVE-2026-98849Linux kernel pfcp null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98848In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with __counted_by") annotated the hws member of 'struct clk_hw_onecell_data' with __counted_by, which informs the bounds–0.2%2026-10-18Fix
CVE-2026-98847In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock–0.2%2026-10-18Fix
CVE-2026-98846In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect wait sctp_wait_for_connect() drops the socket lock while it sleeps. An out-of-the-blue ABORT can then be processed from the socket backlog and unlink the association. If a concurr–0.2%2026-10-18Fix
CVE-2026-98845In the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key name mismatch The null key name check exists to protect against TPM reset attacks, so a mismatch should stop the device from serving further requests. Currently it does not disable the chip when it fin–0.2%2026-10-18Fix
CVE-2026-98844In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region.–0.2%2026-10-18Fix
CVE-2026-98843In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfs_read_gaps() leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that late–0.2%2026-10-18Fix
CVE-2026-98842In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down. Also, if the module is a livepatch, mod–0.2%2026-10-18Fix
CVE-2026-98841In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driver_data before registering notification handlers Both probe paths register their notification handler before assigning driver_data, which the handler dereferences. In the devicetree path, the notification I–0.2%2026-10-18Fix
CVE-2026-98840Linux kernel vc_screen use-after-free–0.2%2026-10-18Fix
CVE-2026-98839Linux kernel selection out-of-bounds read–0.2%2026-10-18Fix
CVE-2026-98838In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on backgroup consoles [BUG] Recently, we encountered a KASAN warning as follows: BUG: KASAN: slab-out-of-bounds in fb_pad_aligned_buffer+0x11f/0x140 Read of size 1 at addr ff1100015fd–0.2%2026-10-18Fix
CVE-2026-98837Linux kernel caiaq use-after-free–0.2%2026-10-18Fix
CVE-2026-98836In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exactly LINE6_ISO_PACKETS * max_packet_size_out bytes, sized from the OUT endpoint, but the number of bytes written into that–0.2%2026-10-18Fix
CVE-2026-98835In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix array boundary check The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when la–0.2%2026-10-18Fix
CVE-2026-98834Linux kernel mtd core double free–0.2%2026-10-18Fix
CVE-2026-98833In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master. This breaks gluebi partitions because gluebi–0.2%2026-10-18Fix
CVE-2026-98832In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg_tryget_closest() bio_set_dev() associates the bio with a blkg through bio_associate_blkg(). If the blkg lookup misses, blkg_tryget_closest() takes q->queue_lock with spin_lock_irq() and releases–0.2%2026-10-18Fix
CVE-2026-98831In the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment references when changeset init fails init_overlay_changeset() stores the number of initialized fragments in ovcs->count only on full success. When find_target() or the __symbols__ lookup fails partw–0.2%2026-10-18Fix
CVE-2026-98830In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A f–0.2%2026-10-18Fix
CVE-2026-98829In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments to avoid extra_len overflow In ieee80211_rx_h_defragment(), fragment payloads are accumulated into entry->extra_len as subsequent fragments arrive: entry->extra_len += rx->skb->len; When–0.2%2026-10-18Fix
CVE-2026-98828In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that–0.2%2026-10-18Fix
CVE-2026-98827In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE __hif_usb_tx() dequeues up to MAX_TX_AGGR_NUM (20) frames into a single tx_buf of MAX_TX_BUF_SIZE (32768) bytes, limiting the batch by record count but never by cumulative b–0.2%2026-10-18Fix
CVE-2026-98826Linux kernel ac100 use-after-free–0.2%2026-10-18Fix
CVE-2026-98825In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() devm_clk_get(&pdev->dev, "rtcref")'s return value was passed straight into clk_get_rate() without checking it for an error first, unlike the "rtc" clock a few lines–0.2%2026-10-18Fix
CVE-2026-98824In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrel_ht_tx_status() converts the HT/VHT rate reported in a TX status into a group and rate index and uses those to index the minstrel_ht rate tables. The existing validation on–0.2%2026-10-18Fix
CVE-2026-98823In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group probe-response entry borrows its beacon IEs from the group's beacon entry. cfg80211_update_assoc_bss_entry() can pass such an entry to cfg80211_update_known_–0.2%2026-10-18Fix
CVE-2026-98822In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prevent AP VLAN tx from other interfaces Since the station lookup was factored out of ieee80211_build_hdr(), ieee80211_lookup_ra_sta() uses sta_info_get_bss() for all AP and AP VLAN frames, not only for control por–0.2%2026-10-18Fix
CVE-2026-98821Linux kernel block null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98820Linux kernel blk-mq information disclosure–0.2%2026-10-18Fix
CVE-2026-98819In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remai–0.2%2026-10-18Fix
CVE-2026-98818Linux kernel mm/slab deadlock–0.2%2026-10-18Fix
CVE-2026-98817In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add better pm_runtime error handling in func probe Add a common error path in probe that balances the runtime PM reference.–0.2%2026-10-18Fix
CVE-2026-98816Linux kernel bpf crash–0.2%2026-10-18Fix
CVE-2026-98815In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in [0] - the code there is heavily based on the NVMe code. Currently the NS head .open and .release file_operations methods take and put a ref–0.2%2026-10-18Fix
CVE-2026-98814Linux kernel nvme use-after-free–0.2%2026-10-18Fix
CVE-2026-98813In the Linux kernel, the following vulnerability has been resolved: bpf: Hold map BTF for the memory allocator destructor record bpf_ma_set_dtor() duplicates map->record so that the bpf_mem_alloc destructor can release the special fields of hash and rhash map elements once the allocator frees them–0.2%2026-10-18Fix
CVE-2026-98812Linux kernel net/mctp null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98811In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an empty proto on the error path Two racing tc filter add requests on the same chain/prio of an unlocked classifier both run change() on the shared proto and both can fail: the winner's tcf_chain_tp_del–0.2%2026-10-18Fix
CVE-2026-98810Linux kernel mac80211 out-of-bounds read–0.2%2026-10-18Fix
CVE-2026-98809In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister hci_unregister_dev() disables cmd_work and cmd_timer, then calls hci_cmd_sync_clear(), whose cancel_work_sync() waits for hci_cmd_sync_work() to return. That worker d–0.2%2026-10-18Fix
CVE-2026-98808Linux kernel systemport buffer overflow–0.2%2026-10-18Fix
CVE-2026-98807Linux kernel net/mlx5 out-of-bounds access–0.2%2026-10-18Fix
CVE-2026-98806In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Previously, BPID assignment under CONFIG_DCB assumed `queue_to_pfc_map` was always initialized. For SDP VFs this leads to invalid memory access as it was not initia–0.2%2026-10-18Fix
CVE-2026-98805Linux kernel tipc nonce reuse–0.1%2026-10-18Fix
CVE-2026-98804Linux kernel page_pool use-after-free–0.2%2026-10-18Fix
CVE-2026-98803In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix rx Scatter-Gather support When a received frame is larger than dma_buf_sz, the DMA scatters it across multiple RX descriptors (rx Scatter-Gather). The secondary RX buffer (sec_page) was only allocated and programm–0.2%2026-10-18Fix
CVE-2026-98802In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advance_nextseg() modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6_next_csid_advance_arg–0.2%2026-10-18Fix
CVE-2026-98801In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 ("net: add new socket option SO_RESERVE_MEM") and commit d00c8ee31729 ("net: fix possible NULL deref in sock_reserve_memory") only checked sk_has_ac–0.2%2026-10-18Fix
CVE-2026-98800In the Linux kernel, the following vulnerability has been resolved: bpf: Wait for an RCU tasks grace period before freeing trampoline progs When a prog is detached from a trampoline, it is freed after an RCU grace period, or an RCU tasks trace one if it is sleepable. This covers the tasks that are–0.2%2026-10-18Fix
CVE-2026-98799In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use bpf_tramp_image_put() makes sure a trampoline image is not freed while a task may still be running in it, but nothing similar is done for the progs called by that–0.2%2026-10-18Fix
CVE-2026-98798Linux kernel bcmgenet null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98797In the Linux kernel, the following vulnerability has been resolved: net: cap skb->queue_mapping when the tx queue is picked skbedit can set skb->queue_mapping and raise the per-CPU skip_txqueue flag so __dev_queue_xmit() honours the mapping. __dev_queue_xmit() cleared the flag before sch_handle_eg–0.2%2026-10-18Fix
CVE-2026-98796In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner The RX rings and the shared NAPI are carried by an internal "dummy" netdev (eth->dummy_dev). mtk_probe() creates that dummy device, and adds the shared tx/rx NAPI to it, onl–0.2%2026-10-18Fix
CVE-2026-98795Linux kernel sparx5 null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98794In the Linux kernel, the following vulnerability has been resolved: ipvs: filter some flags received in the backup server While the IPVS SYNC protocol is not secure by design we can still protect the backup server from messages that can wreak havoc. This commit addresses problems from received co–0.2%2026-10-18Fix
CVE-2026-98793In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manipulation type a wrong value can be passed directly to nf_nat_setup_info(). This triggers the WARN_ON() at nf_nat_setup_in–0.2%2026-10-18Fix
CVE-2026-98792In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to inhibit the flowtable GC worker until pending hw offload work has been completed. Apparently, nf_flow_offload_stats()–0.2%2026-10-18Fix
CVE-2026-98791Linux kernel net/mlx5e null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98790Linux kernel perf race condition–0.2%2026-10-18Fix
CVE-2026-98789In the Linux kernel, the following vulnerability has been resolved: bpf: Fix objects stuck in free_by_rcu_ttrace do_call_rcu_ttrace() returns early when call_rcu_ttrace_in_progress is set and leaves the objects in free_by_rcu_ttrace. __free_rcu() frees waiting_for_gp_ttrace only and clears the fla–0.2%2026-10-18Fix
CVE-2026-98788Linux kernel futex use-after-free–0.2%2026-10-18Fix
CVE-2026-98787In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() bpf_mem_cache_free_rcu() uses this_cpu_ptr() which requires migration to be disabled. All callers of rhtab_delete_elem() disable migration except __rht–0.2%2026-10-18Fix
CVE-2026-98786In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dc_sink dereferences in MST mode validation dm_dp_mst_is_port_support_mode() reads aconnector->dc_sink->dsc_caps... for the DSC branch-throughput check, and get_conv_frl_bw()'s HDMI-PCON FRL-bandwidth path r–0.2%2026-10-18Fix
CVE-2026-98785In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, retu–0.2%2026-10-18Fix
CVE-2026-98784In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down, leaking the firmware resources. Add gfx_v6_0_free_microcode() and call it from gf–0.2%2026-10-18Fix
CVE-2026-98783Linux kernel drm/mediatek crash–0.2%2026-10-18Fix
CVE-2026-98782In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk_drm_probe() creates an OVL adaptor platform device with platform_device_register_data() when the display pipeline requires the OVL adaptor. If a later initialization step fai–0.2%2026-10-18Fix
CVE-2026-98781In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it–0.2%2026-10-18Fix
CVE-2026-98780Linux kernel drm/amdgpu memory leak–0.2%2026-10-18Fix
CVE-2026-98779In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ACP MFD device leak on init failure acp_hw_init() registers ACP child devices with mfd_add_devices() before attaching them to the ACP power domain and initializing the hardware. If attaching a child to the power d–0.2%2026-10-18Fix
CVE-2026-98778In the Linux kernel, the following vulnerability has been resolved: binder: fix is_failure flag for superseded transaction cleanup When a TF_UPDATE_TXN transaction supersedes a pending async transaction, binder_release_entire_buffer() is called with is_failure=false. Since the superseded transacti–0.2%2026-10-18Fix
CVE-2026-98777In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede When a TF_UPDATE_TXN transaction supersedes a pending async transaction in a frozen process, the outdated transaction is freed with kfree() directly. This skips binder_free_t–0.2%2026-10-18Fix
CVE-2026-98776Linux kernel binderfs use-after-free–0.2%2026-10-18Fix
CVE-2026-98775Linux kernel nitro_enclaves use-after-free–0.2%2026-10-18Fix
CVE-2026-98774In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even i–0.2%2026-10-18Fix
CVE-2026-98773In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart in port_shutdown if disconnected acm_port_shutdown() is called from the tty-port machinery whenever the last user closes the port. acm_disconnect() sets acm->disconnected and calls tty_port_tty_vhan–0.2%2026-10-18Fix
CVE-2026-98772Linux kernel serial use-after-free–0.2%2026-10-18Fix
CVE-2026-98771In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierra_ms: reject short SWoC info transfers sierra_get_swoc_info() requests sizeof(struct swoc_info) (60) bytes from the device via usb_control_msg(), but its callers only treat a negative return value as failure. A–0.2%2026-10-18Fix
CVE-2026-98770In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out descriptor arrays in struct f_midi2_usb_config have the size of MAX_CABLES, which look reasonable -- but it turned out to be incorrect. Namely, the entries f–0.2%2026-10-18Fix
CVE-2026-98769Linux kernel f_uac1_legacy out-of-bounds access–0.2%2026-10-18Fix
CVE-2026-98768In the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the IRQ before destroying the workqueue The IRQ is devm-managed, so it can still queue plat->work while remove() is tearing the queue down. Disable it first.–0.2%2026-10-18Fix
CVE-2026-98767Linux kernel dwc3 gadget kernel panic–0.2%2026-10-18Fix
CVE-2026-98766Linux kernel aspeed-vhub use-after-free–0.2%2026-10-18Fix
CVE-2026-98765In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronize_irq() by waiting until its private callback_usage counter drops to 0 (with the private lock not held). This counter is–0.2%2026-10-18Fix
CVE-2026-98764Linux kernel f_fs null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98763In the Linux kernel, the following vulnerability has been resolved: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints In usb_enable_endpoint(), non-zero control endpoints (where usb_endpoint_xfer_control(&ep->desc) is true) populate both dev->ep_in[epnum] and dev->ep_out[epnum]–0.2%2026-10-18Fix
CVE-2026-98762In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2_wakeup_detected() accesses the DWC2 host state and can rearm the wakeup timer. dwc2_hcd_free() currently deletes the timer only after freeing host-owned state, and t–0.2%2026-10-18Fix
CVE-2026-98761In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: recover after failure to start the frs ams Reset the port if the tcpm fails to start the FAST_ROLE_SWAP AMS by initiating error recovery on it. This helps in cases where some cables (incorrectly) signal an FRS t–0.2%2026-10-18Fix
CVE-2026-98760Linux kernel tipd information disclosure–0.2%2026-10-18Fix
CVE-2026-98759Linux kernel tipd information disclosure–0.2%2026-10-18Fix
CVE-2026-98758Linux kernel glink use-after-free–0.2%2026-10-18Fix
CVE-2026-98757Linux kernel cdns3 use-after-free–0.2%2026-10-18Fix
CVE-2026-98756Linux kernel cdns3 null pointer dereference–0.2%2026-10-18Fix
CVE-2026-98755In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated struct vio_vcc pkt was partially initialized, leaving the tag.stype_env field uninitialized before being sent via ldc_write(), potentially leaking kern–0.2%2026-10-18Fix
CVE-2026-98754Linux kernel vcc use-after-free–0.2%2026-10-18Fix
CVE-2026-98753Linux kernel tty_port kernel panic–0.2%2026-10-18Fix