CVE-2026 list

CVE-2026 records published in October 2026

Page six of 14: records 5,001 to 6,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 5,001 to 6,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-111105Telegram rlottie numeric truncation remote code execution7.0CNA v3.00.1%2026-10-15
CVE-2026-111096JetBrains TeamCity cross-site scripting6.7CNA v3.10.2%2026-10-15Fix
CVE-2026-111095JetBrains TeamCity cross-site scripting8.0CNA v3.10.2%2026-10-15Fix
CVE-2026-111094JetBrains TeamCity deserialization of untrusted data8.1CNA v3.10.4%2026-10-15Fix
CVE-2026-111093JetBrains Datalore relative path traversal7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-111092JetBrains YouTrack missing authorization6.5CNA v3.10.3%2026-10-15Fix
CVE-2026-111091JetBrains Junie CLI inclusion of untrusted functionality7.8CNA v3.10.1%2026-10-15Fix
CVE-2026-110958Wavlink WN530HG4B api.cgi heap-based overflow10.0CNA v4.01.1%2026-10-15Fix
CVE-2026-110957Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection10.0CNA v4.03.5%2026-10-15Fix
CVE-2026-110936Siemens Software Center uncontrolled search path element8.4CNA v4.00.2%2026-10-15KEVFix
CVE-2026-110934Samsung Open Source Vyond improper array index validation4.4CNA v3.10.1%2026-10-15
CVE-2026-110933Samsung Open Source Vyond improper error handling4.4CNA v3.10.1%2026-10-15
CVE-2026-110927A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.4.3CNA v3.1–2026-10-15Fix
CVE-2026-110926A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths.5.3CNA v3.1–2026-10-15Fix
CVE-2026-110925A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.5.4CNA v3.1–2026-10-15Fix
CVE-2026-110924A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.4.8CNA v3.1–2026-10-15
CVE-2026-110923A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected.6.5CNA v3.1–2026-10-15Fix
CVE-2026-110922Google Chrome Prerender use-after-free8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110921Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110920Google Chrome V8 memory corruption8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110919Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110918Google Chrome Core memory corruption4.3CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-110917Google Chrome SVG memory corruption4.3CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-110916Google Chrome Desktop improper input validation9.6CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110915Google Chrome Compositing use-after-free8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110914Google Chrome Workers memory corruption8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110913Google Chrome DOM memory corruption8.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-110912DragonFlyBSD improper length parameter handling7.1CNA v4.00.2%2026-10-15Exploit code
CVE-2026-110911Wheels SQL injection9.8CNA v3.10.3%2026-10-15Fix
CVE-2026-110909Wheels CLI improper channel restriction5.0CNA v3.10.1%2026-10-15Fix
CVE-2026-110908Netgate pfSense-pkg-frr OS command injection8.8CNA v3.16.1%2026-10-15
CVE-2026-110907backdropcms Backdrop incorrect resource transfer7.5CNA v3.10.2%2026-10-15Fix
CVE-2026-110904ApostropheCMS incorrect authorization5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110891WordLift WordPress plugin broken access control5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-110890JetSmartFilters WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-110888AI Engine WordPress plugin broken access control4.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110878aureuserp Aureus ERP stored XSS via Inventory Rule Action Information5.1CNA v4.00.2%2026-10-15
CVE-2026-110877AdPlug heap out-of-bounds read via CdmoLoader::load6.8CNA v4.00.1%2026-10-15
CVE-2026-110876AdPlug out-of-bounds read via CxsmPlayer::play_note in XSM files6.8CNA v4.00.1%2026-10-15
CVE-2026-110875AdPlug heap buffer overflow via CksmPlayer::update in ksm.cpp6.9CNA v4.00.1%2026-10-15
CVE-2026-110874Dolibarr PHP object injection via jsonOrUnserialize7.5CNA v4.00.5%2026-10-15Fix
CVE-2026-110812Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune9.4CNA v4.00.4%2026-10-15Fix
CVE-2026-110810ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds2.4CNA v4.00.1%2026-10-15Fix
CVE-2026-110746TotalSecurity TotalAV local privilege escalation7.8CISA ADP v3.10.2%2026-10-15
CVE-2026-110726Eclipse Connected Services Platform use of a less trusted source6.5CISA ADP v3.10.2%2026-10-15
CVE-2026-110724Eclipse Connected Services Platform improper privilege management7.5CISA ADP v3.10.3%2026-10-15
CVE-2026-110723Eclipse Connected Services Platform authentication bypass by spoofing7.5CISA ADP v3.10.3%2026-10-15
CVE-2026-110381Simply Schedule Appointments WordPress plugin insecure direct object references (IDOR)6.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110378Ninja Forms Signature Contract Add-On WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110375Download Monitor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-110374Login with phone number WordPress plugin broken access control4.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110371Strong Testimonials WordPress plugin broken access control4.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110367APIExperts Square for WooCommerce WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110364Flexible Quantity for WordPress WP Desk missing authorization5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110362PlanetStudio Payment Gateway WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-110361Infinite Uploads WordPress plugin sensitive data exposure6.5CNA v3.10.3%2026-10-15Fix
CVE-2026-110360Ajax Search Lite WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-109932undici WebSocket client vulnerable to denial of service via unbounded automatic PONG buffering5.9CNA v3.10.3%2026-10-15Fix
CVE-2026-109924undici vulnerable to denial of service via unbounded memory in the EventSource parser5.9CNA v3.10.3%2026-10-15Fix
CVE-2026-109897Strong Testimonials WordPress plugin broken access control5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-109893Presto Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-109892Frontend Admin by DynamiApps WordPress plugin privilege escalation9.8CNA v3.10.3%2026-10-15Fix
CVE-2026-109869undici vulnerable to denial of service via unhandled error on excessive content-encodings7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-109855undici WebSocket client vulnerable to denial of service via failed HTTP/2 handshake7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-109841undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens5.9CNA v3.10.3%2026-10-15Fix
CVE-2026-109829undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects7.4CNA v3.10.1%2026-10-15Fix
CVE-2026-109702Social Share Buttons WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-15
CVE-2026-109698Mang Board WP WordPress plugin SQL injection9.3CNA v3.10.3%2026-10-15Fix
CVE-2026-109695FluentCart WordPress plugin sensitive data exposure7.5CNA v3.10.2%2026-10-15Fix
CVE-2026-109694Fluent CRM WordPress plugin privilege escalation9.8CNA v3.10.3%2026-10-15Fix
CVE-2026-109693Fluent CRM WordPress plugin privilege escalation8.8CNA v3.10.3%2026-10-15Fix
CVE-2026-109692User Registration WordPress plugin broken access control7.1CNA v3.10.2%2026-10-15Fix
CVE-2026-109689Sunshine Photo Cart WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-109688Link Whisper Free WordPress plugin SQL injection9.3CNA v3.10.2%2026-10-15Fix
CVE-2026-109686Link Whisper Free WordPress plugin PHP object injection9.8CNA v3.10.3%2026-10-15Fix
CVE-2026-109685Link Whisper Free WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-15Fix
CVE-2026-109468Microsoft Visual Studio 2022 ASP.NET Core denial of service7.5CNA v3.10.6%2026-10-15Fix
CVE-2026-109449Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions crash the Process8.7CNA v4.00.5%2026-10-15Fix
CVE-2026-109430Ellucian WebAdvisor unauthenticated XXE injection8.7CNA v4.00.3%2026-10-15
CVE-2026-109413Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document crash the Process8.7CNA v4.00.5%2026-10-15Fix
CVE-2026-109383undici vulnerable to TLS certificate validation bypass via dropped TLS options in agent7.4CNA v3.10.2%2026-10-15Fix
CVE-2026-109145User Rights Access Manager for WordPress unauthenticated privilege escalation9.8CISA ADP v3.10.3%2026-10-15
CVE-2026-109131Red Hat Ansible Automation Platform 2 ansible-ui: Ansible-ui: Stored XSS5.4CNA v3.10.2%2026-10-15
CVE-2026-10858710Web Booster WordPress plugin unauthenticated arbitrary file upload via page_id parameter9.8CNA v3.10.9%2026-10-15Fix
CVE-2026-108499Knowledge Base WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-108498BSK PDF Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-15
CVE-2026-108497Amelia WordPress plugin SQL injection9.3CNA v3.10.2%2026-10-15Fix
CVE-2026-108491Everest Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-15Fix
CVE-2026-108455Microsoft Office PowerPoint information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108454Microsoft Office PowerPoint information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108453Microsoft Office PowerPoint information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108452Microsoft Office SharePoint remote code execution8.8CNA v3.10.6%2026-10-15Fix
CVE-2026-108451Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108450Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108449Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108448Microsoft Office Outlook remote code execution7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-108447Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108446Microsoft Office Excel remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108445Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108444Microsoft Office remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108443Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108442Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108441Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108440Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108439Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108438Microsoft Office Word information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108437Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108436Microsoft Office Word information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108435Microsoft Office Word information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108434Microsoft Office Word information disclosure6.5CNA v3.10.5%2026-10-15Fix
CVE-2026-108433Microsoft Office Word security feature bypass7.8CNA v3.10.3%2026-10-15Fix
CVE-2026-108432Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108431Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108430Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108429Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108428Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108427Microsoft Office Word remote code execution8.8CNA v3.10.5%2026-10-15Fix
CVE-2026-108426Microsoft Office Word remote code execution8.8CNA v3.10.4%2026-10-15Fix
CVE-2026-108334Red Hat Connectivity Link expression language injection7.4CNA v3.10.3%2026-10-15Fix
CVE-2026-108175MDTF WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-108126temporal-proxy payload decryption is not bound to the request namespace6.0CNA v4.00.4%2026-10-15Fix
CVE-2026-108116MDX and SOAP injection in Kendo UI for jQuery7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-108092Blog2Social WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-10-15Fix
CVE-2026-108082Symfony: ReDoS in HeaderUtils::split Reachable through the Cache-Control request header8.7CNA v4.00.4%2026-10-15Fix
CVE-2026-107416Webba Booking WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-106708XXL-JOB JobUserController cross-site request forgery8.8CNA v3.10.1%2026-10-15
CVE-2026-106707XXL-JOB job log list page stored cross-site scripting5.4CNA v3.10.2%2026-10-15
CVE-2026-106706XXL-JOB GLUE code editor stored cross-site scripting5.4CNA v3.10.2%2026-10-15
CVE-2026-106701ELADMIN WebSocketServer, SpringSecurityConfig and deploy.vue cross-site scripting6.1CNA v3.10.2%2026-10-15
CVE-2026-106700ELADMIN UserController improper access control8.8CNA v3.10.3%2026-10-15
CVE-2026-106604YITH WooCommerce Compare WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-106163Cross-site scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-106162Cross-site scripting in FileManager Drag Hints in Kendo UI for jQuery4.7CNA v3.10.1%2026-10-15Fix
CVE-2026-106161Cross-site scripting via Badge Text Binding in Kendo UI for jQuery5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106160Prototype pollution via Model.accept and kendo.setter in Kendo UI for jQuery5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106159Cross-site scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery4.7CNA v3.10.2%2026-10-15Fix
CVE-2026-106158Cross-site scripting via Scheduler Resource Colors in Kendo UI for jQuery4.7CNA v3.10.2%2026-10-15Fix
CVE-2026-106157Cross-site scripting via PanelBar Item URLs in Kendo UI for jQuery4.7CNA v3.10.2%2026-10-15Fix
CVE-2026-106153Cross-site scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106151Cross-site scripting in Validator Validation messages in Kendo UI for jQuery5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106150Cross-site scripting (XSS) in Kendo UI for jQuery Splitter, window, and Tooltip5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106149Cross-site scripting (XSS) in Kendo UI for jQuery menu5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106148Cross-site scripting via TabStrip, menu, and PanelBar Image URLs in Kendo UI for jQuery5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106147Cross-site scripting via ListBox Bound Text in Kendo UI for jQuery5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-106031Spin Wheel for WordPress unauthenticated Coupon code disclosure via Forged Spin Result6.5CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-105882User Registration WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-15Fix
CVE-2026-105660Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit6.9CNA v4.00.5%2026-10-15Fix
CVE-2026-105474WebPros SolusVM 2 server-side template injection9.4CNA v4.00.5%2026-10-15
CVE-2026-105271GEO "ゲオアプリ" cleartext storage of sensitive information5.1CNA v4.00.1%2026-10-15
CVE-2026-105065XStore WordPress theme cross-site scripting (XSS)7.1CNA v3.10.1%2026-10-15Fix
CVE-2026-105040EnergizeLab Eilik User-ID mass assignment account takeover8.8CNA v3.10.3%2026-10-15Fix
CVE-2026-105039EnergizeLab Station Middleware Admin APIs Missing Role Checks9.6CNA v3.10.3%2026-10-15Fix
CVE-2026-105038EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching9.8CNA v3.10.6%2026-10-15Fix
CVE-2026-105037EnergizeLab Station Middleware Authenticated path traversal arbitrary file read9.9CNA v3.10.4%2026-10-15Fix
CVE-2026-105036EnergizeLab Firmware Updates Downloaded over HTTP without Integrity Checks7.5CNA v3.10.2%2026-10-15
CVE-2026-105035EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key7.8CNA v3.10.2%2026-10-15
CVE-2026-105034EnergizeLab Eilik Unauthenticated Device-Token Issuance for arbitrary Serial Numbers8.2CNA v3.10.6%2026-10-15
CVE-2026-105033EnergizeLab AI Station Default Root Credentials with SSH Enabled8.8CNA v3.10.4%2026-10-15
CVE-2026-105032EnergizeLab Eilik AI Skill Upload Unauthenticated path traversal arbitrary file write9.1CNA v3.10.9%2026-10-15
CVE-2026-104828HtmlUnit Neko: Mutation XSS in HTMLWriterFilter TEXTAREA/TITLE entity decode without re-encode7.2CNA v3.10.3%2026-10-15Fix
CVE-2026-104827React/http: Unbounded HTTP Client Response Header Buffering leads to memory exhaustion DoS7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-104643Easy HTTPS Redirection (SSL) for WordPress Scan Result disclosure and Site-Wide URL Rewrite4.2CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-104618SUSE Linux Enterprise Server sdbootutil: World-readable debug log6.9CNA v4.00.1%2026-10-15
CVE-2026-104617SUSE sdbootutil qrencode invocation information disclosure5.9CNA v4.00.1%2026-10-15
CVE-2026-104586AUTOM8N WHM cPanel plugin borg_restore.cgi OS command injection9.8CISA ADP v3.11.9%2026-10-15
CVE-2026-104266tinytag metadata parser infinite loop6.5CNA v3.10.3%2026-10-15Fix
CVE-2026-104198ZoneMinder failed token handling bypasses web authentication5.3CNA v3.10.4%2026-10-15Fix
CVE-2026-104150adonisjs http-server router.matchers.slug denial of service8.7CNA v4.00.4%2026-10-15Fix
CVE-2026-104025Path traversal in PeaZip object preview allows execution of arbitrary programs8.4CNA v4.00.2%2026-10-15Fix
CVE-2026-104024PeaZip incomplete denylist4.6CNA v4.00.1%2026-10-15Fix
CVE-2026-103936libp2p js-libp2p @libp2p/webrtc Node.js listener vulnerability7.5CNA v3.10.5%2026-10-15Fix
CVE-2026-103509Credential disclosure in P4 Search Configuration API8.5CNA v4.00.2%2026-10-15
CVE-2026-103508Perforce P4 (Helix Core) path traversal via logging configuration in P4Search7.3CNA v4.00.4%2026-10-15
CVE-2026-103350Booking and Rental Manager WordPress plugin Other vulnerability type vulnerability5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-103324Cardinity Payment Gateway for WooCommerce insufficient verification of data authenticity5.3CNA v3.10.1%2026-10-15Fix
CVE-2026-103304eaSYNC for WordPress unauthenticated Cancellation request creation and email Template update5.3CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-103224Eclipse Vert.x man-in-the-middle8.2CNA v4.00.3%2026-10-15
CVE-2026-103223Eclipse Vert.x man-in-the-middle8.2CNA v4.00.3%2026-10-15
CVE-2026-103083Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-102946authlib joserfc jws.deserialize_json vulnerability9.1CNA v3.10.1%2026-10-15Fix
CVE-2026-102764BeyondTrust Remote Support authentication bypass by spoofing9.3CNA v4.01.2%2026-10-15KEVExploit codeFix
CVE-2026-102740async-http-client PropertiesBasedResumableProcessor symlink following5.8CNA v3.10.1%2026-10-15Fix
CVE-2026-102631Canonical authd user identity matching improper authentication5.9CNA v4.00.1%2026-10-15Fix
CVE-2026-102527nuxt-modules og-image nuxt OG Image cache poisoning6.9CNA v4.00.2%2026-10-15Fix
CVE-2026-102477Eclipse Vert.x vertx-gprc-server vulnerability8.7CNA v4.00.3%2026-10-15
CVE-2026-102475Eclipse Vert.x vertx-http-proxy vulnerability8.7CNA v4.00.3%2026-10-15
CVE-2026-102469Eclipse Vert.x Vert.x DB2 client vulnerability9.2CNA v4.00.4%2026-10-15
CVE-2026-102467Eclipse Vert.x decompression bomb8.7CNA v4.00.3%2026-10-15
CVE-2026-102466Eclipse Vert.x man-in-the-middle8.2CNA v4.00.3%2026-10-15
CVE-2026-102465Eclipse Vert.x man-in-the-middle8.2CNA v4.00.2%2026-10-15
CVE-2026-102464Eclipse Vert.x MQTT MqttClient vulnerability8.2CNA v4.00.3%2026-10-15
CVE-2026-102463Eclipse Vert.x cleartext transmission of sensitive information8.2CNA v4.00.3%2026-10-15
CVE-2026-102462Eclipse Vert.x man-in-the-middle8.2CNA v4.00.3%2026-10-15
CVE-2026-102461Eclipse Vert.x denial of service8.7CNA v4.00.4%2026-10-15
CVE-2026-102389Broken Link Checker WordPress plugin content injection6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-101311FreeBSD multiple vulnerabilities in bhyve device models7.0CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-101310FreeBSD multiple vulnerabilities in bhyve device models7.0CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-101309FreeBSD multiple vulnerabilities in bhyve device models7.0CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-101308FreeBSD TOCTOU race between sound(4) buffer resizing and mmap5.5CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-101307FreeBSD remotely triggerable buffer overflow in tcp_rack8.2CISA ADP v4.00.3%2026-10-15Fix
CVE-2026-101306FreeBSD multiple jail filesystem root escapes9.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-101305FreeBSD multiple jail filesystem root escapes8.8CISA ADP v3.10.4%2026-10-15Fix
CVE-2026-101304FreeBSD multiple jail filesystem root escapes7.1CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-101303FreeBSD IPv6 UDP sendto(2) bypasses jail loopback restriction7.5CISA ADP v3.10.4%2026-10-15Fix
CVE-2026-101302FreeBSD remote DoS via receive-side kernel TLS6.5CISA ADP v3.10.4%2026-10-15Fix
CVE-2026-101290SICK Safetyscanners Base CPP Driver out-of-bounds read7.5CNA v3.10.5%2026-10-15Fix
CVE-2026-101287Authentication bypass in Stela by Diaple Networking9.3CNA v4.00.4%2026-10-15
CVE-2026-100409OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-100354getkin kin-openapi uncontrolled recursion7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-100353getkin kin-openapi openapi3filter null pointer dereference7.5CNA v3.10.3%2026-10-15Fix
CVE-2026-100352getkin kin-openapi improper check for exceptional conditions7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-100351getkin kin-openapi ValidationHandler authentication bypass7.4CNA v3.10.5%2026-10-15Fix
CVE-2026-100350kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression5.3CNA v3.10.5%2026-10-15Fix
CVE-2026-100349getkin kin-openapi openapi3filter null pointer dereference8.2CNA v4.00.4%2026-10-15Fix
CVE-2026-100348kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)5.3CNA v3.10.4%2026-10-15Fix
CVE-2026-100347getkin kin-openapi openapi3filter legacy router denial of service5.3CNA v3.10.5%2026-10-15Fix
CVE-2026-99999Linux kernel ipv4 stack vulnerability9.3CNA v3.10.3%2026-10-15Reported exploitedExploit codeFix
CVE-2026-98432In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmit–0.2%2026-10-15Fix
CVE-2026-97712Nexus Repository 3 privilege escalation via Role Management8.7CNA v4.00.3%2026-10-15Fix
CVE-2026-97667Nexus Repository 3 stored cross-site scripting in Browse UI5.1CNA v4.00.3%2026-10-15Fix
CVE-2026-97666Nexus Repository 3 unsafe reflection in ExtDirect Repository endpoint6.9CNA v4.00.6%2026-10-15Fix
CVE-2026-97665Nexus Repository 3 missing authorization on NuGet Symbol Package upload7.1CNA v4.00.3%2026-10-15Fix
CVE-2026-97394getkin kin-openapi uncaught exception7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-97370Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-96806Apache Airflow Keycloak provider insufficient session expiration5.8CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-96614GEO "ゲオアプリ" improper authorization5.1CNA v4.00.2%2026-10-15
CVE-2026-96537Tutor LMS WordPress plugin unauthenticated Tutor page Force-Publish and content Overwrite7.5CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-96449WP EasyPay WordPress plugin broken access control5.3CNA v3.10.2%2026-10-15Fix
CVE-2026-95180An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient5.5CISA ADP v3.10.1%2026-10-15
CVE-2026-95179An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.7.5CISA ADP v3.10.4%2026-10-15
CVE-2026-95155FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.7.5CISA ADP v3.10.3%2026-10-15
CVE-2026-94621AliasVault: Server-side request forgery via DNS rebinding in Favicon Extraction6.3CNA v3.10.2%2026-10-15Fix
CVE-2026-94135Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default4.3CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-94134Apache Airflow SSH provider key exchange without authentication9.1CISA ADP v3.10.3%2026-10-15Exploit codeFix
CVE-2026-93649Eclipse Foundation Adoptium Temurin download without integrity check7.5CISA ADP v3.10.2%2026-10-15
CVE-2026-93484Znuny ticket search SQL injection8.6CNA v4.00.3%2026-10-15Fix
CVE-2026-93483Znuny use of a less trusted source9.5CNA v4.00.2%2026-10-15Fix
CVE-2026-92982Ansible-operator-plugins: Ansible operator plugins: Arbitrary code execution8.5CNA v3.10.5%2026-10-15Fix
CVE-2026-92777Lenovo Idea Tab Pro (TB373FU) arbitrary code execution5.4CNA v4.00.2%2026-10-15Fix
CVE-2026-92707MessagePack-CSharp MessagePack: Nested arrays can blow past buffer length limits5.3CNA v3.10.6%2026-10-15Fix
CVE-2026-92629Lenovo Baiying PC Client missing authorization7.0CNA v4.00.1%2026-10-15Fix
CVE-2026-92429Rede Itaú for WooCommerce - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook5.3CNA v3.10.1%2026-10-15Fix
CVE-2026-92428Rede Itaú for WooCommerce 3DS Failure Webhook insufficient verification of data authenticity5.3CNA v3.10.1%2026-10-15Fix
CVE-2026-92228Apache Airflow Keycloak provider multi-team provisioning incorrect permission assignment6.5CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-89062Lenovo Energy Management Driver out-of-bounds write6.8CNA v4.00.1%2026-10-15Fix
CVE-2026-89057Lenovo Idea Tab Pro (TB373FU) authentication bypass7.0CNA v4.00.3%2026-10-15Fix
CVE-2026-88794XML external entity injection in Sparx Enterprise Architect8.2CNA v4.00.3%2026-10-15
CVE-2026-88753Markdown2 Regular-Expression denial of service7.5CISA ADP v3.10.3%2026-10-15Fix
CVE-2026-88043Mang Board WP WordPress plugin unauthenticated stored cross-site scripting via data_type parameter7.2CNA v3.10.2%2026-10-15Fix
CVE-2026-87029undici vulnerable to denial of service via unhandled exception in the decompress interceptor5.9CNA v3.10.3%2026-10-15Fix
CVE-2026-87018undici vulnerable to denial of service via TLS 1.2 certificate-changing renegotiation7.5CNA v3.10.2%2026-10-15Fix
CVE-2026-86803oceanwp Ocean Extra oceanwp_library shortcode template code injection6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-85634Red Hat Fuse 7 wildfly-core: Wildfly-core: Deployer rbac role privilege escalation8.8CNA v3.10.4%2026-10-15
CVE-2026-84823Red Hat WildFly take-snapshot operation path traversal7.1CNA v3.10.3%2026-10-15
CVE-2026-84731Pre-Authentication Admin Bypass and remote code execution in Nutanix Prism Gateway inside AOS9.3CNA v4.01.3%2026-10-15Fix
CVE-2026-81534Email Customizer for WooCommerce (Pro) WordPress plugin remote code execution8.8CNA v3.10.5%2026-10-15Fix
CVE-2026-79843HPE NonStop SQL/MX EXE out-of-bounds read6.5CNA v3.10.1%2026-10-15
CVE-2026-79841HPE NonStop RDMA SERVICES NSK Out-of-bounds memory write vulnerability5.8CNA v3.10.1%2026-10-15
CVE-2026-79840HPE NonStop XABroker memory corruption7.3CNA v3.10.1%2026-10-15
CVE-2026-79839HPE NonStop ODBC/MX Server memory corruption7.3CNA v3.10.1%2026-10-15
CVE-2026-79838HPE NonStop ODBC/MX Services memory corruption7.3CNA v3.10.1%2026-10-15
CVE-2026-79837HPE NonStop SQL/MX UDR server service disruption vulnerability7.3CNA v3.10.1%2026-10-15
CVE-2026-79836HPE NonStop SQL/MX Run-Time Statistics information disclosure and DoS6.4CNA v3.10.2%2026-10-15
CVE-2026-79835HPE Nonstop KMS Server buffer overflow2.8CNA v3.10.1%2026-10-15
CVE-2026-79834HPE NonStop SQL/MX SQLCAT unauthorized command execution7.4CNA v3.10.6%2026-10-15
CVE-2026-79833HPE NonStop ANSI SQLUTIL denial of service7.5CNA v3.10.3%2026-10-15
CVE-2026-79832HPE NonStop SQL/MX Executor buffer overflow7.6CNA v3.10.2%2026-10-15
CVE-2026-79831HPE NonStop Posix User Threads heap buffer overflow6.6CNA v3.10.1%2026-10-15
CVE-2026-79830HPE NonStop Kernel Level Thread Model Lib stack buffer overflow6.6CNA v3.10.1%2026-10-15
CVE-2026-79829HPE NonStop HTTP WEBSERVER memory corruption8.2CNA v3.10.4%2026-10-15
CVE-2026-79828HPE NonStop Debug Utilities heap buffer overflow7.1CNA v3.10.2%2026-10-15
CVE-2026-79827HPE NonStop Inspect Subsystem heap buffer overflow7.1CNA v3.10.2%2026-10-15
CVE-2026-79826HPE NonStop OCAX heap buffer overflow7.1CNA v3.10.2%2026-10-15
CVE-2026-79825HPE NonStop NDSREST heap buffer overflow7.1CNA v3.10.1%2026-10-15
CVE-2026-79824HPE NonStop Python 3.x directory traversal8.0CNA v3.10.5%2026-10-15
CVE-2026-79823HPE NonStop EMS Distributor buffer overflow4.0CNA v3.10.1%2026-10-15
CVE-2026-79822HPE NonStop TNS/X Native Inspect heap-based buffer overflow7.1CNA v3.10.1%2026-10-15
CVE-2026-79821HPE NonStop SOAP memory corruption8.2CNA v3.10.2%2026-10-15
CVE-2026-78851Grav CMS path traversal6.5CISA ADP v3.11.1%2026-10-15
CVE-2026-78850Matomo SiteContentDetector / SitesManager information disclosure5.0CISA ADP v3.10.3%2026-10-15
CVE-2026-78087VK Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-10-15Fix
CVE-2026-78001Post and Page Builder by BoldGrid WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-10-15Fix
CVE-2026-77931MoviePilot command injection via ExecuteCommandTool8.7CNA v4.01.0%2026-10-15
CVE-2026-77711Eclipse Jetty information disclosure8.2CNA v4.00.3%2026-10-15Fix
CVE-2026-77470LycheeOrg Lychee webshop checkout web parameter tampering8.3CNA v4.00.5%2026-10-15Fix
CVE-2026-77468LycheeOrg Lychee /docs/api resource exhaustion6.9CNA v4.00.4%2026-10-15Fix
CVE-2026-77467Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path7.1CNA v4.00.3%2026-10-15Fix
CVE-2026-77466Lychee: Webshop payment bypass via unrestricted Dummy gateway selection8.3CNA v4.00.4%2026-10-15Fix
CVE-2026-77460EspoCRM: Mass email template renderer leaks restricted record fields6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-76668HPE NonStop Kernel Access to unmapped or privileged data6.3CNA v3.10.1%2026-10-15
CVE-2026-76667HPE NonStop EXPAND Out-of-Bounds memory read vulnerability5.7CNA v3.10.1%2026-10-15
CVE-2026-76666HPE NonStop EXPAND Out-of-Bounds memory read4.7CNA v3.10.1%2026-10-15
CVE-2026-76665HPE NonStop EXPAND buffer overflow7.1CNA v3.10.2%2026-10-15
CVE-2026-76664HPE NonStop EXPAND Out-of-Bounds memory read/write6.4CNA v3.10.1%2026-10-15
CVE-2026-76663HPE NonStop TELSERV memory corruption7.5CNA v3.10.3%2026-10-15
CVE-2026-76662HPE NonStop TELSERV memory corruption5.9CNA v3.10.2%2026-10-15
CVE-2026-76661HPE NonStop QIOMON memory corruption7.6CNA v3.10.2%2026-10-15
CVE-2026-76660HPE NonStop CIPSAM memory corruption8.7CNA v3.10.1%2026-10-15
CVE-2026-76659HPE NonStop TCP/IP UTILITIES denial of service7.5CNA v3.10.3%2026-10-15
CVE-2026-76656HPE NonStop TCP/IP UTILITIES denial of service5.3CNA v3.10.2%2026-10-15
CVE-2026-76184Eclipse Jetty information disclosure8.2CNA v4.00.3%2026-10-15Fix
CVE-2026-76182Eclipse Jetty injection6.9CNA v4.00.3%2026-10-15Fix
CVE-2026-76066IntentKit Executor tool authorization bypass via ToolNode8.7CNA v4.00.4%2026-10-15
CVE-2026-75941Lenovo Legion Zone Application deserialization of untrusted data8.6CNA v4.00.3%2026-10-15Fix
CVE-2026-75559The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.6.9CNA v4.00.2%2026-10-15
CVE-2026-75505EspoCRM Mass Update vulnerability6.0CNA v4.00.3%2026-10-15Fix
CVE-2026-74920Document Gallery WordPress plugin reflected XSS via data-shortcode attribute7.1CISA ADP v3.10.1%2026-10-15Reported exploited
CVE-2026-73799HPE NonStop SNMP Trap Multiplexer memory corruption7.5CNA v3.10.3%2026-10-15
CVE-2026-72528CREEMA "Handmade Marketplace App open redirect5.1CNA v4.00.2%2026-10-15Fix
CVE-2026-71490OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection7.1CNA v3.10.4%2026-10-15Fix
CVE-2026-63442OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking8.1CNA v3.10.3%2026-10-15Fix
CVE-2026-63430rust-ammonia ammonia MathML annotation-xml encoding strip vulnerability6.3CNA v4.00.6%2026-10-15Fix
CVE-2026-63315Slican IPx plaintext storage of a password in WebCTI8.2CNA v4.00.3%2026-10-15Fix
CVE-2026-63314Slican IPx SQL injection in WebCTI8.7CNA v4.00.2%2026-10-15Fix
CVE-2026-63130EspoCRM: Admin path traversal in LabelManager allows arbitrary `.json` file read, write and delete5.5CNA v3.10.3%2026-10-15Fix
CVE-2026-62679Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read8.9CNA v4.00.4%2026-10-15Fix
CVE-2026-62322Python Social Auth LINE backend cross-site request forgery6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-61838Lychee: Album password bypass in ZIP downloads8.2CNA v4.00.4%2026-10-15Fix
CVE-2026-61702OpenPrinting CUPS: Root-side banner file disclosure5.3CNA v3.10.5%2026-10-15Fix
CVE-2026-61611Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-61610LycheeOrg Lychee Photo::highlight API improper access control2.3CNA v4.00.2%2026-10-15Fix
CVE-2026-59994EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received4.3CNA v3.10.3%2026-10-15Fix
CVE-2026-58395OPNsense: Xpath injection in MVC safe-delete4.3CNA v3.10.4%2026-10-15Fix
CVE-2026-58394OPNsense: Stored XSS in Administration settings via Certificate Description5.2CNA v3.10.2%2026-10-15Fix
CVE-2026-58393OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files5.9CNA v3.10.4%2026-10-15Fix
CVE-2026-58392OPNsense: Stored XSS in Services: NTP GPS5.4CNA v3.10.3%2026-10-15Fix
CVE-2026-58391OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-58390OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views8.0CNA v3.10.5%2026-10-15Fix
CVE-2026-58100FreeBSD memory safety bugs in kqueue copy-on-fork implementation7.0CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-58099FreeBSD memory safety bugs in kqueue copy-on-fork implementation7.0CISA ADP v3.10.1%2026-10-15Fix
CVE-2026-58098FreeBSD heap out-of-bounds access in semop(2)8.4CISA ADP v3.10.2%2026-10-15Fix
CVE-2026-57569LycheeOrg Lychee Photo::fromUrl flow server-side request forgery2.3CNA v4.00.2%2026-10-15Fix
CVE-2026-57568Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery view)5.7CNA v4.00.3%2026-10-15Fix
CVE-2026-57496Labs64 NetLicensing-MCP NetLicensing MCP Server: REST path traversal Bypasses Token Redaction9.6CNA v3.10.4%2026-10-15Fix
CVE-2026-57183Erudika scoold improper authentication6.1CNA v3.10.2%2026-10-15Fix
CVE-2026-57155OPNsense: Root RCE via arbitrary file write in GeoIP Alias Importer9.9CNA v3.10.9%2026-10-15Exploit codeFix
CVE-2026-55876HeliumEdu platform Helium: Stored XSS3.5CNA v3.10.2%2026-10-15Fix
CVE-2026-55875HeliumEdu platform Helium: SSRF4.3CNA v3.10.2%2026-10-15Fix
CVE-2026-55872mayerbalintdev GYM-One GYM One admin user list is vulnerable to stored cross-site scripting8.7CNA v3.10.2%2026-10-15Fix
CVE-2026-55871mayerbalintdev GYM-One admin/users/index.php SQL injection6.5CNA v3.10.3%2026-10-15Fix
CVE-2026-55842Erudika scoold apiCorsConfiguration method origin validation error5.4CNA v3.10.1%2026-10-15Fix
CVE-2026-55840Scoold: Open redirect in getBackToUrl allows phishing via domain-prefix startsWith bypass5.4CNA v3.10.3%2026-10-15Fix
CVE-2026-55587AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID8.1CNA v3.10.1%2026-10-15Fix
CVE-2026-55480OpenPrinting CUPS scheduler/ipp.c link following5.7CNA v3.10.2%2026-10-15Fix
CVE-2026-55467CUPS fax option values bypass the control-character sanitizer (incomplete fix)2.5CNA v3.10.2%2026-10-15Fix
CVE-2026-55453CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp3.3CNA v3.10.2%2026-10-15Fix
CVE-2026-55414nl-portal-backend-libraries form resolver server-side request forgery5.3CNA v3.10.4%2026-10-15Fix
CVE-2026-55246Tatsh bincookie bincookie_init_file heap buffer overflow7.8CNA v3.10.2%2026-10-15Fix
CVE-2026-55240Tianji: Remote code execution via lodash template evaluate pattern in survey feed templates9.1CNA v3.10.6%2026-10-15Fix
CVE-2026-55239Tianji: SQL injection via unsanitized timezone parameter in analytics queries8.8CNA v3.10.3%2026-10-15Fix
CVE-2026-55184EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled3.5CNA v3.10.2%2026-10-15Fix
CVE-2026-55154EspoCRM: CSV/formula injection sanitizer bypass via leading whitespace/control characters in export5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-55103Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening8.6CNA v3.10.2%2026-10-15
CVE-2026-54683nl-portal-backend-libraries improper authorization6.5CNA v3.10.3%2026-10-15Fix
CVE-2026-53882Path traversal in Virtualization Station VM Import8.7CNA v4.00.5%2026-10-15Fix
CVE-2026-53582OPNsense: XPATH injection can disclose any secret in config.xml7.1CNA v3.10.7%2026-10-15Fix
CVE-2026-53575EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user2.7CNA v3.10.2%2026-10-15Fix
CVE-2026-53574EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression7.6CNA v3.10.2%2026-10-15Fix
CVE-2026-52167AOC LC32D1320 gensub_ParsePsb function stack overflow–0.2%2026-10-15
CVE-2026-50619QNAP Systems Qsirch unauthenticated remote code execution9.3CNA v4.00.4%2026-10-15Fix
CVE-2026-50612Import symlink following remote code execution vulnerability in QuMagie9.4CNA v4.00.5%2026-10-15Fix
CVE-2026-47790Privilege escalation via QuFTP Log-based XSS6.3CNA v4.00.3%2026-10-15Fix
CVE-2026-47786QNAP Systems HybridDesk Station pre-authentication command injection9.3CNA v4.01.1%2026-10-15Fix
CVE-2026-47218containerd runwasi containerd-shim-wasmtime-v1 deserialization of untrusted data9.3CNA v4.00.4%2026-10-15Fix
CVE-2026-47168EspoCRM: Authenticated RCE via Unsafe PHP object deserialization in MassAction/Export params9.1CNA v3.10.4%2026-10-15Fix
CVE-2026-46708EspoCRM Target list Opt-Out actions missing authorization4.3CNA v3.10.2%2026-10-15Fix
CVE-2026-46694EspoCRM: Portal User ACL Bypass exposes Internal Stream Notes6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-46691EspoCRM: IDOR in Import exportErrors endpoint leaks CSV data of other Users6.5CNA v3.10.2%2026-10-15Fix
CVE-2026-45452Unitronics use of externally-controlled format string8.3CNA v3.10.3%2026-10-15
CVE-2026-45451Unitronics improper authentication8.3CNA v3.10.3%2026-10-15
CVE-2026-45450Unitronics improper restriction of operations within the bounds of a memory buffer8.3CNA v3.10.3%2026-10-15
CVE-2026-45449Unitronics improper neutralization of special elements used in an OS command (OS command injection)8.3CNA v3.10.8%2026-10-15
CVE-2026-45165Idira Secrets Manager (Self-Hosted): Improper authorization in REST API8.6CNA v4.00.2%2026-10-15Fix
CVE-2026-44084Access Code Forgery in Video Station leading to unauthorized media access8.7CNA v4.00.4%2026-10-15Fix
CVE-2026-41545QNAP Systems QuMagie WebSocket timelapse path traversal and command injection8.6CNA v4.00.5%2026-10-15Fix
CVE-2026-41544QNAP Systems QcalAgent /calapi/renameUpload endpoint path traversal8.7CNA v4.00.4%2026-10-15Fix
CVE-2026-41541QNAP Systems Qsync Central symlink creation in qsyncsrv.cgi5.3CNA v4.00.5%2026-10-15Fix
CVE-2026-39997Unauthenticated remote input injection in QNAP HD Station's remotepad8.9CNA v4.00.2%2026-10-15Fix
CVE-2026-39993Path traversal to Root RCE in QNAP Download Station via Addon/Search addon parameter8.7CNA v4.00.4%2026-10-15Fix
CVE-2026-39991Stored cross-site scripting (XSS) in Note Station file upload functionality4.8CNA v4.00.3%2026-10-15Fix
CVE-2026-39989SSRF in QNAP Download Station5.3CNA v4.00.4%2026-10-15Fix
CVE-2026-36436Trisolutions BRPerfX administrative configuration interface information disclosure7.5CISA ADP v3.10.3%2026-10-15
CVE-2026-35088Inadequate encryption strength in Slican telephone exchanges8.2CNA v4.00.1%2026-10-15Fix
CVE-2026-34015Remote code execution in upload.php of Video Station8.7CNA v4.00.5%2026-10-15Fix
CVE-2026-34014QNAP Systems Download Station ds-move-files.sh is writable and executed as root8.4CNA v4.00.1%2026-10-15Fix
CVE-2026-34009QNAP Systems Notes Station 3 improper isolation8.4CNA v4.00.1%2026-10-15Fix
CVE-2026-34008QNAP Systems Notes Station 3 crontab path privilege escalation8.5CNA v4.00.1%2026-10-15Fix
CVE-2026-34007QNAP Systems Notes Station 3 **RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec`6.9CNA v4.01.6%2026-10-15Fix
CVE-2026-34006Pre-Authentication multiple Critical vulnerabilities in QNAP sMedioDTCPServer9.3CNA v4.00.5%2026-10-15Fix
CVE-2026-26245QNAP Systems Video Station SQLi#2 SQL injection in class_videos.php getSmartVideosByOffset7.1CNA v4.00.5%2026-10-15Fix
CVE-2026-26244QNAP Systems Video Station SQLi#1 SQL injection in class_videos.php _getFilters7.1CNA v4.00.5%2026-10-15Fix
CVE-2026-26243QNAP Systems Qsync Central path traversal7.2CNA v4.00.5%2026-10-15Fix
CVE-2026-24723QNAP Systems File Station 5 null pointer dereference in utilRequest.cgi5.3CNA v4.00.3%2026-10-15Fix
CVE-2026-24722Null pointer dereference in File Station 55.3CNA v4.00.3%2026-10-15Fix
CVE-2026-24721Null pointer dereference in File Station 55.3CNA v4.00.3%2026-10-15Fix
CVE-2026-24718Path traversal vulnerability in Qsync Central's qsyncsrv.cgi5.3CNA v4.00.4%2026-10-15Fix
CVE-2026-24715Lack of Reproducible vulnerability Evidence in QNAP Report5.3CNA v4.00.2%2026-10-15Fix
CVE-2026-22896Stored XSS via Interface Name in Network and Virtual Switch App6.2CNA v4.00.4%2026-10-15Fix
CVE-2026-19864Eclipse Jetty SessionAuthentication cleartext storage of sensitive information5.6CNA v4.00.1%2026-10-15Fix
CVE-2026-19863EthereumAuthenticator authentication bypass9.3CNA v4.00.5%2026-10-15
CVE-2026-19377Improper certificate validation in Cato Client tunnel handshake6.0CNA v4.00.1%2026-10-15Fix
CVE-2026-18662Eclipse Jetty jetty-security incorrect authorization6.9CNA v4.00.4%2026-10-15Fix
CVE-2026-18661Eclipse Jetty jetty-annotations incorrect authorization8.8CNA v4.00.3%2026-10-15Fix
CVE-2026-18660Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8CNA v4.00.3%2026-10-15Fix
CVE-2026-18659Eclipse Jetty ConstraintSecurityHandler incorrect authorization6.9CNA v4.00.4%2026-10-15Fix
CVE-2026-18586Premium Packages WordPress plugin unauthenticated stored cross-site scripting via order_email7.2CNA v3.10.2%2026-10-15Fix
CVE-2026-18557Photo Gallery by 10Web WordPress plugin reflected cross-site scripting via title parameter6.1CNA v3.10.2%2026-10-15Fix
CVE-2026-18548Groundhogg WordPress plugin unauthenticated stored cross-site scripting via ref parameter7.2CNA v3.10.3%2026-10-15Fix
CVE-2026-17525My Control System Disk space exhaustion due to incorrect temporary file cleanup after XML conversion5.1CNA v4.00.1%2026-10-15Fix
CVE-2026-17031Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin authorization bypass8.1CNA v3.10.3%2026-10-15Fix
CVE-2026-17001Import and export users and customers WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-10-15Fix
CVE-2026-16755Lenovo Smart Camera C33 default password6.0CNA v4.00.2%2026-10-15Fix
CVE-2026-16754Lenovo Smart Camera C33 improper certificate validation5.9CNA v4.00.1%2026-10-15Fix
CVE-2026-16438Mitsubishi Electric GENESIS64 incorrect privilege assignment9.4CNA v4.00.2%2026-10-15Fix
CVE-2026-16437Mitsubishi Electric GENESIS weak password recovery7.1CNA v4.00.1%2026-10-15Fix
CVE-2026-16436Mitsubishi Electric GENESIS weak password recovery9.2CNA v4.00.3%2026-10-15Fix
CVE-2026-15180Tracking Code Manager WordPress plugin reflected cross-site scripting via TCM_ErrorMessages6.1CNA v3.10.2%2026-10-15Fix
CVE-2026-15090Link Library WordPress plugin unauthenticated SQL injection via link_url parameter7.5CNA v3.10.4%2026-10-15Fix
CVE-2026-14572Kirki WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-10-15Fix
CVE-2026-11905Elementor Website Builder WordPress plugin information disclosure4.3CNA v3.10.3%2026-10-15Fix
CVE-2026-9703Grafana Enterprise viewer role can create, modify and delete Loki alerting rules7.1CNA v3.10.2%2026-10-15Fix
CVE-2026-8145WholesaleX WordPress plugin unauthenticated limited privilege escalation via process_registration5.4CNA v3.10.2%2026-10-15Fix
CVE-2026-3712PhastPress WordPress plugin unauthenticated server-side request forgery via src parameter7.3CNA v3.10.2%2026-10-15Fix
CVE-2026-0993SODOLA SL902-SWTGW124AS buffer overflow DoS via Multipart Boundary parser8.7CNA v4.00.4%2026-10-15
CVE-2026-110873Heym Credential Theft via error_workflow_id field7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110872Nodemailer denial of service via SMTP Reply Parsing8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110871Nodemailer Quadratic DKIM Header Unfolding denial of service7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110870Nodemailer improper input validation via Angle-Bracket Address Comments6.9CNA v4.00.2%2026-10-14Fix
CVE-2026-110869Nodemailer ReDoS via SMTP AUTH Mechanism Detection Regexes8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110868Renovate SSRF via HTTP Preset URLs and customDatasources8.4CNA v4.00.2%2026-10-14Fix
CVE-2026-110867Renovate allowedEnv Allowlist Bypass via Shared Preset9.0CNA v4.00.3%2026-10-14Fix
CVE-2026-110866Renovate minimumReleaseAge Bypass via PR Rebase request5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-110865Renovate HTTP Header Allowlist Bypass via Shared Presets7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110864better-auth Better Auth authentication bypass via OAuth Proxy9.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110863Better Auth @better-auth/sso authentication bypass via Personal SSO Providers8.6CNA v4.00.3%2026-10-14Fix
CVE-2026-110862better-auth Better Auth authentication bypass via Magic Link9.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110861Better Auth drizzle-adapter Rate Limit Bypass via race condition6.3CNA v4.00.2%2026-10-14Fix
CVE-2026-110860GitPython Symlink path traversal via Submodule.move6.9CNA v4.00.1%2026-10-14Fix
CVE-2026-110859GitPython arbitrary file read via Head.checkout Branch Name8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110858GitPython command injection via Remote.pull Refspec9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-110857GitPython command execution via ls_remote ext:: URLs7.7CNA v4.00.4%2026-10-14Fix
CVE-2026-110856GitPython ReDoS via _re_actor_epoch in parse_actor_and_date8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110855GitPython Environment Variable Disclosure via .gitmodules Submodule Name7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110854parse-community parse-server Parse Server and denial of service via Unhandled Email Error8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110853n8n authorization bypass via Execute Sub-workflow Inline JSON7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110852n8n,, and Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution6.3CNA v4.00.4%2026-10-14Fix
CVE-2026-110851n8n and Cross-Project Agent Ownership Transfer via Agents Create endpoint6.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110850n8n and Credential Check Bypass via Agent Node parameters7.2CNA v4.00.2%2026-10-14Fix
CVE-2026-110849n8n,, and stored XSS via Binary-Data File Preview7.2CNA v4.00.2%2026-10-14Fix
CVE-2026-110848n8n,, and prototype pollution via AI Workflow Builder Connection Merge6.0CNA v4.00.3%2026-10-14Fix
CVE-2026-110847n8n,, and stored XSS via Chat Trigger customCss parameter7.0CNA v4.00.4%2026-10-14Fix
CVE-2026-110846n8n and Send-and-Wait HMAC Signature Bypass via Waiting-Webhook7.0CNA v4.00.5%2026-10-14Fix
CVE-2026-110845n8n,, and code execution via Git Node Log Operation7.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110844n8n Credential authorization bypass via Nested Inline Sub-Workflows7.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110843n8n and Unauthenticated Unbounded OAuth Client Persistence via Authorize endpoint8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110842n8n and prototype pollution via MCP Workflow-Validation Interpreter7.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110841n8n and authorization bypass in Agent Chat Resume Tool Approval6.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110840n8n and SQL injection via Microsoft SQL Node Query field7.0CNA v4.00.3%2026-10-14Fix
CVE-2026-110839FreeRDP heap out-of-bounds write via Grayscale JPEG Clipboard Data7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-110838FreeRDP shadow Pre-authentication input injection via Confirm Active bypass8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-110837FreeRDP heap buffer overflow via MP3 Audio Decoding6.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110836FreeRDP infinite loop DoS via Gateway Content-Type7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110835FreeRDP HTTP header injection via Proxy Routing Token6.3CNA v4.00.2%2026-10-14Fix
CVE-2026-110834FreeRDP denial of service via Serial IRP Null Handle7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110833FreeRDP Unbounded Memory Retention via RDPDR Proxy8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110832FreeRDP memory exhaustion via DRDYNVC DATA_FIRST7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110831FreeRDP resource leak via Drive Redirection IRP_MJ_CREATE5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-110830FreeRDP denial of service via Serial IRP_MJ_CREATE8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-110829FreeRDP null pointer dereference via rdpsnd Fragment7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-110816ljharb qs qs.stringify vulnerability6.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110809sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service5.3CNA v4.00.3%2026-10-14
CVE-2026-110807sgl-project SGLang generate endpoint io_struct.py denial of service5.3CNA v4.00.3%2026-10-14
CVE-2026-110777GNOME Evolution Data Server Evolution-data-server: Local file disclosure via attach file:// uris5.7CNA v3.10.4%2026-10-14
CVE-2026-110775Nexent Cross-Tenant Knowledge-Base File Read via check_file_access7.1CNA v4.00.2%2026-10-14
CVE-2026-110774Blinko Private Attachment Read via /API/file route6.0CNA v4.00.2%2026-10-14
CVE-2026-110773GrowChief missing authorization via /users/all-users endpoint5.3CNA v4.00.2%2026-10-14
CVE-2026-110772Sure missing authorization via Transaction Bulk Update5.3CNA v4.00.3%2026-10-14
CVE-2026-110771Shopizer authorization bypass via Product Review customerId5.3CNA v4.00.2%2026-10-14
CVE-2026-110770Databasus account takeover via password reset brute-force9.2CNA v4.00.5%2026-10-14
CVE-2026-110769holaOS missing authorization in Channel-Gateway Connectors8.3CNA v4.00.3%2026-10-14
CVE-2026-110768holaOS authorization bypass via Telegram Connector Username Allowlist6.3CNA v4.00.2%2026-10-14
CVE-2026-110767Gitingest arbitrary file read via Symlink in Blob Ingestion8.7CNA v4.00.4%2026-10-14
CVE-2026-110766Colanode Server path traversal via Avatar Download route5.3CNA v4.00.3%2026-10-14
CVE-2026-110765FlexPrice QuickBooks Webhook signature verification Bypass8.2CNA v4.00.2%2026-10-14
CVE-2026-110764iflytek astron-rpa AstronRPA Cross-Tenant File Disclosure via /file/download6.0CNA v4.00.2%2026-10-14
CVE-2026-110763lamp-boot IDOR via /anyone/findDeptByCompany5.3CNA v4.00.2%2026-10-14
CVE-2026-110762bbPress information disclosure via BuddyPress Activity Stream6.3CNA v4.00.2%2026-10-14Fix
CVE-2026-110761ILIAS,, and PHP object injection via Test results Import8.7CNA v4.00.6%2026-10-14Fix
CVE-2026-110736Godot Engine improper index validation3.6CNA v3.10.1%2026-10-14
CVE-2026-110735Godot Engine out-of-bounds write2.5CNA v3.10.2%2026-10-14
CVE-2026-110734Godot Engine out-of-bounds write2.5CNA v3.10.2%2026-10-14
CVE-2026-110719Portkey AI Gateway SSRF via x-portkey-custom-host header6.9CNA v4.00.4%2026-10-14
CVE-2026-110718TurboDocx html-to-docx SSRF via img src Remote Image Download8.2CNA v4.00.4%2026-10-14
CVE-2026-110717meetecho janus-gateway janus WebRTC server path traversal via Record&Play Filename6.9CNA v4.00.5%2026-10-14
CVE-2026-110716unshield heap out-of-bounds read via unshield_get_file_table6.8CNA v4.00.2%2026-10-14
CVE-2026-110715MuJS heap out-of-bounds read/Write via Array.prototype.sort6.9CNA v4.00.2%2026-10-14Fix
CVE-2026-110714libsmb2 heap out-of-bounds read via decode_acl integer underflow7.1CNA v4.00.5%2026-10-14
CVE-2026-110713libsmb2 heap out-of-bounds read via File System Info Decoders7.1CNA v4.00.5%2026-10-14
CVE-2026-110712libsmb2 heap out-of-bounds read via smb2_decode_file_all_info7.1CNA v4.00.4%2026-10-14
CVE-2026-110698Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110696itsmeravitejak Online-Examination-System dbtables.sql information disclosure6.9CNA v4.00.4%2026-10-14
CVE-2026-110695turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow5.3CNA v4.00.4%2026-10-14
CVE-2026-110694OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds5.3CNA v4.00.3%2026-10-14
CVE-2026-110690coderaiser cloudcmd cloud Commander path traversal via GET /API/v1/pack8.7CNA v4.00.9%2026-10-14Fix
CVE-2026-110689OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism4.8CNA v4.00.1%2026-10-14Fix
CVE-2026-110679OpenSIPS rtpproxy rtpproxy_answer out-of-bounds6.9CNA v4.00.3%2026-10-14Fix
CVE-2026-110670cemtan sar2html Archive Processing sar2html.py updateDb SQL injection6.9CNA v4.00.3%2026-10-14
CVE-2026-110669cemtan sar2html sar2html.py deleteAll missing authentication6.9CNA v4.00.6%2026-10-14
CVE-2026-110668cemtan sar2html sar2html.py index SQL injection6.9CNA v4.00.3%2026-10-14
CVE-2026-110667cemtan sar2html sar2html.py hard-coded credentials6.9CNA v4.00.3%2026-10-14
CVE-2026-110666cemtan sar2html file upload sar2html.py updateDb path traversal6.9CNA v4.00.5%2026-10-14
CVE-2026-110661CGNS stack out-of-bounds read via ADFI_read_node_header4.8CNA v4.00.2%2026-10-14
CVE-2026-110660vgmstream through r2117 stack out-of-bounds read via G./Siren14 Decoder4.8CNA v4.00.2%2026-10-14
CVE-2026-110659ELFIO null pointer dereference via relocation_section_accessor get_entry6.8CNA v4.00.2%2026-10-14
CVE-2026-110658Sofia-SIP heap out-of-bounds read via msg_multipart_parse6.9CNA v4.00.7%2026-10-14
CVE-2026-110657Khronos NNEF-Tools nnef and nnef-tools path traversal via Variable Label4.8CNA v4.00.2%2026-10-14
CVE-2026-110656miniupnpc heap out-of-bounds read via minixml parseelt2.3CNA v4.00.3%2026-10-14
CVE-2026-110655miniupnpc heap out-of-bounds read via minixml parseatt2.3CNA v4.00.3%2026-10-14
CVE-2026-110654libzvbi out-of-bounds write via Teletext DRCS convert_drcs6.9CNA v4.00.2%2026-10-14
CVE-2026-110652ONLYOFFICE DocumentServer SSRF via downloadfile isInJwtToken Bypass6.3CNA v4.00.4%2026-10-14Fix
CVE-2026-110650Thumbnail OS command injection via generate_thumbnail File Paths9.3CNA v4.03.0%2026-10-14
CVE-2026-110649Stills OS command injection via Media File Names9.3CNA v4.02.5%2026-10-14Fix
CVE-2026-110648@offactory/compress-fonts OS command injection via Font File Names8.5CNA v4.01.1%2026-10-14Fix
CVE-2026-110647Turnpress OS command injection via Crafted .docx File Names8.5CNA v4.01.0%2026-10-14
CVE-2026-110646Beganovich snappdf OS command injection on Windows via setUrl9.2CNA v4.02.1%2026-10-14Fix
CVE-2026-110645Video-stitch OS command injection via concat and cut9.3CNA v4.03.2%2026-10-14Fix
CVE-2026-110644nodejs-whisper OS command injection via convertToWavType9.3CNA v4.02.7%2026-10-14
CVE-2026-110643transcribe2texts OS command injection via transcribeAudio audioPath9.3CNA v4.02.6%2026-10-14
CVE-2026-110642xhtml2pdf OS command injection via startViewer File Name8.5CNA v4.01.1%2026-10-14Fix
CVE-2026-110641@runnerty/executor-decompress OS command injection via Archive File Name8.7CNA v4.02.5%2026-10-14
CVE-2026-110640Whisper-node OS command injection via filePath and language9.3CNA v4.02.7%2026-10-14
CVE-2026-110639@mborne/extract OS command injection via archivePath and targetDir9.3CNA v4.02.7%2026-10-14Fix
CVE-2026-110638doc-recog OS command injection via DocData._readPDF File Path9.3CNA v4.02.7%2026-10-14
CVE-2026-110637buildebooks OS command injection via kindlegen EPUB File Name8.5CNA v4.01.1%2026-10-14Fix
CVE-2026-110636pypdftk OS command injection via PDF and Output Paths9.3CNA v4.02.3%2026-10-14
CVE-2026-110635webp-converter OS command injection via File Names and options9.3CNA v4.02.5%2026-10-14Fix
CVE-2026-110634git-diff OS command injection via gitDiff Input Strings9.3CNA v4.02.3%2026-10-14Fix
CVE-2026-110633MyReport Updater local privilege escalation via Updater service8.5CNA v4.00.1%2026-10-14
CVE-2026-110632Report One MyReport Updater Unauthenticated gRPC service RCE9.2CNA v4.00.6%2026-10-14
CVE-2026-110631Komodo Periphery Agent Unauthenticated RCE via Default Configuration9.3CNA v4.00.7%2026-10-14
CVE-2026-110630VentureDrake Laravel CRM privilege escalation via Unscoped Role Assignment7.0CNA v4.00.6%2026-10-14Fix
CVE-2026-110629VentureDrake Laravel CRM missing authorization via Livewire Actions7.1CNA v4.00.6%2026-10-14Fix
CVE-2026-110628Kan Unauthenticated SSRF via /API/download/attatchment9.2CNA v4.00.4%2026-10-14Fix
CVE-2026-110627MacWarrior clipbucket-v5 ClipBucket v5#206 reflected XSS via add_todo val parameter2.1CNA v4.00.4%2026-10-14
CVE-2026-110626MacWarrior clipbucket-v5 ClipBucket v5#206 reflected XSS via edit_language in language_settings.php5.1CNA v4.00.4%2026-10-14
CVE-2026-110625MacWarrior clipbucket-v5 ClipBucket v5#206 reflected XSS via type parameter in flagged_item.php5.1CNA v4.00.4%2026-10-14
CVE-2026-110624Papermerge Core missing authorization via /tags/all and /document-types/all2.3CNA v4.00.3%2026-10-14
CVE-2026-110623Papermerge Core missing authorization in Shared Nodes API7.7CNA v4.00.5%2026-10-14
CVE-2026-110622Papermerge Core missing authorization in Page Management and OCR endpoints7.7CNA v4.00.5%2026-10-14
CVE-2026-110621Swetrix Cloud missing authorization via POST /project/organisation/:orgId8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-110620Formbricks Cross-Organization IDOR in Server Actions via organizationId6.1CNA v4.00.6%2026-10-14Fix
CVE-2026-110619frp missing authentication for pprof Debug endpoints6.3CNA v4.00.8%2026-10-14
CVE-2026-110618SmsForwarder missing authentication in HTTP Server Remote Control API8.6CNA v4.00.4%2026-10-14
CVE-2026-110617we-mp-rss missing authorization via Export File Download endpoint6.3CNA v4.00.6%2026-10-14
CVE-2026-110616NullHub missing authentication for /API Management API9.2CNA v4.00.8%2026-10-14
CVE-2026-110615jshERP missing authorization via /user/batchSetStatus7.1CNA v4.00.4%2026-10-14
CVE-2026-110614Yiuman citrus ORDER BY SQL injection via sortBy parameter7.1CNA v4.00.5%2026-10-14
CVE-2026-110613youlai-mall through commit 9f62de8 order information disclosure via App Order List7.1CNA v4.00.4%2026-10-14
CVE-2026-110612vlife authentication bypass via Hard-coded JWT Secret in TokenUtil9.3CNA v4.01.0%2026-10-14
CVE-2026-110611REBUILD authorization bypass via aibot2 Chat endpoints chatid6.0CNA v4.00.3%2026-10-14
CVE-2026-110610ruoyi-vue-pro SSRF via Midjourney referImageUrl and notify imageUrl5.3CNA v4.00.3%2026-10-14
CVE-2026-110609Dromara Skyeye through commit 65d3ddcede70 SQL injection via keyword parameter7.1CNA v4.00.5%2026-10-14
CVE-2026-110608BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive5.3CNA v4.00.4%2026-10-14
CVE-2026-110607BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay endpoint7.1CNA v4.00.3%2026-10-14
CVE-2026-110606LibreCAD libdxfrw through LC2. stack out-of-bounds read via dwgReader18::readFileHeader4.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110605libschrift divide by zero via unitsPerEm in draw_line6.8CNA v4.00.2%2026-10-14
CVE-2026-110604Mini-XML stack out-of-bounds write via mxml_strtod2.0CNA v4.00.2%2026-10-14Fix
CVE-2026-110603LASzip Invalid Free via Truncated VLR header in laszip_read_header5.8CNA v4.00.2%2026-10-14
CVE-2026-110602libmspack uninitialized pointer Free via kwajd_open Error Path5.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110601libsixel and heap out-of-bounds write via GIF5.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110600xlsxio null pointer dereference via Worksheet Relationship without Id6.8CNA v4.00.2%2026-10-14
CVE-2026-110599L-SMASH double free in HEVC and H.264 Importer Probe6.9CNA v4.00.2%2026-10-14
CVE-2026-110598Libyal libpff heap out-of-bounds read via libpff_record_entry_get_multi_value6.9CNA v4.00.2%2026-10-14
CVE-2026-110597Tinyexr Heap out-of-bounds read via ParseEXRMultipartHeaderFromMemory6.9CNA v4.00.3%2026-10-14
CVE-2026-110596quirc denial of service via find_alignment_pattern Spiral Search6.8CNA v4.00.2%2026-10-14
CVE-2026-110595BottleCRM memory exhaustion via Contact and Case CSV Import5.3CNA v4.00.5%2026-10-14
CVE-2026-110594BottleCRM ReDoS via Case Routing Rule Regex6.9CNA v4.00.6%2026-10-14
CVE-2026-110593BottleCRM server-side template injection via Account Email create_mail5.3CNA v4.00.4%2026-10-14
CVE-2026-110592BottleCRM HTML injection via Custom Invoice PDF template5.1CNA v4.00.4%2026-10-14
CVE-2026-110591OW2 ASM Excessive resource consumption via Analyzer6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110536D-Link DIR-868L HNAP CGI cgibin system os command injection10.0CNA v4.02.9%2026-10-14
CVE-2026-110467WisdomGarden｜Tronclass insecure direct object reference5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110466WisdomGarden｜Tronclass sensitive data exposure5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110465WisdomGarden｜Tronclass insecure direct object reference5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-110459Ubiquiti UniFi Protect AI Key improper access control8.6CNA v3.10.3%2026-10-14Fix
CVE-2026-110458Ubiquiti UniFi Protect AI Key path traversal3.7CNA v3.10.3%2026-10-14Fix
CVE-2026-110457Ubiquiti UniFi Protect AI Key path traversal3.7CNA v3.10.3%2026-10-14Fix
CVE-2026-110456Ubiquiti UniFi Protect AI Key improper access control5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-110455Ubiquiti UniFi Protect AI Key improper input validation8.1CNA v3.11.2%2026-10-14Fix
CVE-2026-110454Ubiquiti UniFi Protect AI Key improper access control5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-110453NixOS Nix incorrect authorization4.3CNA v3.10.1%2026-10-14Fix
CVE-2026-110452NixOS Nix multi-user installer vulnerability4.0CNA v3.10.1%2026-10-14Fix
CVE-2026-110451NixOS Nix incorrect authorization4.3CNA v3.10.1%2026-10-14Fix
CVE-2026-110450NixOS Nix incorrect behavior order8.0CNA v3.10.2%2026-10-14Fix
CVE-2026-110449NixOS Nix integer overflow7.5CNA v3.10.2%2026-10-14Fix
CVE-2026-110447Collabora Online – Built-in CODE Server OS command injection9.2CNA v4.01.2%2026-10-14KEVFix
CVE-2026-110445TEAMPLUS TECHNOLOGY｜TeamPlus Messenger code injection8.6CNA v4.00.6%2026-10-14Fix
CVE-2026-110444TEAMPLUS TECHNOLOGY｜TeamPlus Messenger code injection8.6CNA v4.00.6%2026-10-14Fix
CVE-2026-110392Samsung QA-Board Unauthenticated OS command injection via output redo/tuning9.8CNA v3.11.2%2026-10-14
CVE-2026-110385ONLYOFFICE Document Server remote code execution8.7CNA v4.01.0%2026-10-14Fix
CVE-2026-110359Hyland Desktop Host incorrect default permissions7.8CNA v3.10.1%2026-10-14Fix
CVE-2026-110310Amazon.Extensions.S3.Encryption response discrepancy6.0CNA v4.00.5%2026-10-14Fix
CVE-2026-110284LifterLMS WordPress plugin local file inclusion7.5CNA v3.10.7%2026-10-14Fix
CVE-2026-110270OW2 ASM Exponential Memory Allocation in JSRInlinerAdapter6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110263OW2 ASM uncontrolled recursion in SignatureReader6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110262OW2 ASM excessive memory allocation in AdviceAdapter4.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110261OW2 ASM Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110260OW2 ASM Quadratic Memory Allocation via Exception Handlers6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110259OW2 ASM uncontrolled recursion via ClassWriter.replaceAsmInstructions6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110258OW2 ASM excessive memory allocation via multiple RET Instructions6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110257OW2 ASM excessive memory allocation via BootstrapMethods attribute6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-110248Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py6.0CNA v4.00.5%2026-10-14Fix
CVE-2026-110227Restricted Site Access WordPress plugin broken access control5.3CNA v3.10.2%2026-10-14Fix
CVE-2026-110002Snazzy Social Media Feed WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.0%2026-10-14
CVE-2026-109971Clevis clevis-decrypt-pkcs11 script information disclosure4.7CNA v3.10.1%2026-10-14
CVE-2026-109970Red Hat Enterprise Linux 10 clevis: Clevis: Pkcs#11 token pin written to world-readable file4.7CNA v3.10.1%2026-10-14
CVE-2026-109969Red Hat Clevis clevis-pkcs11-afunix-socket-unlock daemon missing authentication4.7CNA v3.10.1%2026-10-14
CVE-2026-109968Clevis clevis-pkcs11-afunix-socket-unlock daemon information disclosure5.5CNA v3.10.1%2026-10-14
CVE-2026-109901CP Multi View Event Calendar WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-14Fix
CVE-2026-109527Model Context Protocol python-sdk HTTP and OAuth endpoints denial of service7.5CNA v3.10.7%2026-10-14Fix
CVE-2026-109506Improper authentication in multiple TP-Link WiFi Repeaters5.9CNA v4.00.3%2026-10-14Exploit codeFix
CVE-2026-109439Lantronix XPress-DR Unauthenticated Configuration Write via UDP 307189.3CNA v4.00.6%2026-10-14
CVE-2026-1094383proxy uninitialized stack Memory Disclosure via SOCKS46.3CNA v4.00.4%2026-10-14
CVE-2026-108484Best Payments Plugin for WP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-108483Hippoo Mobile App for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-108480Skydropx WordPress plugin broken access control8.2CNA v3.10.3%2026-10-14Fix
CVE-2026-108473Improper authentication and credential exposure in multiple TP-Link Kasa Devices8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-108395Model Context Protocol Java SDK HTTP server transports denial of service7.5CNA v3.10.6%2026-10-14Fix
CVE-2026-108390HestiaCP Low-Privileged User to Root via Config-field injection and path Hijacking9.9CNA v3.10.7%2026-10-14Fix
CVE-2026-108337Hitachi Vantara Remot Ops Agent Password Reset Code Accessible in User Listing API7.4CNA v4.00.3%2026-10-14
CVE-2026-108336Hitachi Vantara Remot Ops Agent Token Signing Key allows Unauthenticated Administrative Access9.1CNA v4.00.2%2026-10-14
CVE-2026-108335Hitachi Vantara Remote Ops Agent password reset functionality missing brute-force Protection9.1CNA v4.00.2%2026-10-14
CVE-2026-108291Affiliates WordPress plugin PHP object injection9.8CNA v3.10.5%2026-10-14Fix
CVE-2026-108151MDTF WordPress plugin arbitrary code execution5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-108072TSplus Remote Access vulnerability due to insecure permissions5.4CNA v4.00.1%2026-10-14
CVE-2026-108071TSplus Remote Access Improper Multi-Factor Authentication Validation allows authentication bypass8.7CNA v4.00.5%2026-10-14
CVE-2026-108070TSplus Remote Access web server improper access control8.7CNA v4.00.4%2026-10-14
CVE-2026-108069Sunshine Photo Cart WordPress plugin unauthenticated content injection5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-108066WP 2FA WordPress plugin Admin+ arbitrary user 2FA Removal via IDOR2.7CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-108065Unauthenticated SQL injection in Channel Software WebAlliance eCommerce9.8CNA v3.10.8%2026-10-14
CVE-2026-108064WP Encryption wple_auto_handler vulnerability6.5CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-107870JetEngine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-14Fix
CVE-2026-107867JetProductTables WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-107795Improper authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API7.5CNA v4.00.2%2026-10-14Fix
CVE-2026-107757Gallery Custom Links WordPress plugin stored cross-site scripting4.9CNA v3.10.2%2026-10-14Fix
CVE-2026-107756Meow Lightbox WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-107754GeoDirectory WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-107751Mang Board WordPress plugin unauthenticated stored cross-site scripting via user_name parameter7.2CNA v3.10.3%2026-10-14Fix
CVE-2026-107652Database Addon for Contact Form 7 WordPress plugin unauthenticated limited file deletion5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-107650GeoDirectory WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-107631Record of Consent Extension for Complianz WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2026-10-14Fix
CVE-2026-107594File Upload to Order for WordPress unauthenticated arbitrary file deletion10.0CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-107508Ultimate Multisite WordPress plugin unauthenticated LFI via attributes parameter8.6CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-107433WP OAuth Server WordPress plugin broken access control6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-107431JetFormBuilder WordPress plugin broken access control7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-107428Paid Videochat Turnkey Site WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-107426Paid Videochat Turnkey Site WordPress plugin broken access control7.3CNA v3.10.3%2026-10-14Fix
CVE-2026-107425Bus Ticket Booking with Seat Reservation WordPress plugin broken access control6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-107424Frontend Dashboard WordPress plugin privilege escalation9.8CNA v3.10.4%2026-10-14Fix
CVE-2026-107422WP w3all phpBB WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-14Fix
CVE-2026-107421Broadcast Live Video WordPress plugin session hijacking7.3CNA v3.10.2%2026-10-14Fix
CVE-2026-107417Push Notification for Post and BuddyPress WordPress plugin broken access control6.5CNA v3.10.2%2026-10-14Fix
CVE-2026-107381darylldoyle svg-sanitizer Resolver::processReferences denial of service6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-107350Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer8.8CNA v3.10.4%2026-10-14Fix
CVE-2026-107349Infinite loop on empty option name in startup options parameter in PgBouncer7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-107348Integer overflow causes an infinite loop in message buffer growth in PgBouncer5.9CNA v3.10.4%2026-10-14Fix
CVE-2026-107320GamiPress - Unauthenticated Private Activity Log Disclosure5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-107319GamiPress WordPress plugin Subscriber+ Activity Log disclosure4.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-107178Image Photo Gallery Final Tiles Grid WordPress plugin stored XSS6.8CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-107171Trellix Agent An hard-coded cryptographic key6.9CNA v4.00.1%2026-10-14
CVE-2026-107160LTL Freight Quotes Old Dominion Edition WordPress plugin unauthenticated stored HTML injection5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-107158LTL Freight Quotes REST route incorrect authorization5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-107153Rakuten Mobile Rakuten Mini weak credentials7.0CNA v4.00.2%2026-10-14
CVE-2026-107126WP Booking System WordPress plugin unauthenticated stored XSS via X-Forwarded-For Header8.8CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS command injection8.5CNA v4.01.2%2026-10-14KEVFix
CVE-2026-106646Classified Listing gallery AJAX handlers vulnerability5.9CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-106599SureCart WordPress plugin PHP object injection8.8CNA v3.10.4%2026-10-14Fix
CVE-2026-106469Gutenverse Form WordPress plugin Contributor+ stored XSS via SVG Icon6.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-106465Eclipse Foundation NetX Duo authentication bypass by spoofing8.7CNA v4.00.3%2026-10-14
CVE-2026-106464Eclipse Foundation NetX Duo out-of-bounds read8.7CNA v4.00.2%2026-10-14
CVE-2026-106166NEX-Forms - Unauthenticated arbitrary Form Entry Modification via nf_set_entry_update_id parameter5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-106099WP Data Access WordPress plugin unauthenticated sensitive data disclosure via Table export5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-106098WP Data Access WordPress plugin unauthenticated incorrect authorization via Inline App update5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-105975CamPay Shortcode Payment Gateway missing authorization5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-105969CodeAtoz B2B Suite for WooCommerce WordPress plugin unauthenticated Guest Quote disclosure5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-105874SureCart WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-105659mtrudel bandit resource exhaustion8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-105429NetBird client SSH config Match line injection8.9CNA v4.00.6%2026-10-14Fix
CVE-2026-105261PublishPress Future - Contributor+ stored XSS via wrapper and dateformat shortcode attributes6.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-105236Erlang OTP ssl application improper certificate validation6.3CNA v4.00.4%2026-10-14Fix
CVE-2026-105107Koha SQL injection in reports/cat_issues_top.pl7.2CNA v4.00.3%2026-10-14Fix
CVE-2026-105106Koha authenticated OS command injection in tools/scheduler.pl8.8CNA v3.11.6%2026-10-14Fix
CVE-2026-105067Modern Events Calendar Lite WordPress plugin SQL injection8.5CNA v3.10.3%2026-10-14Fix
CVE-2026-105066SimplyRETS Real Estate IDX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-10-14Fix
CVE-2026-104995BP Profile Search WordPress plugin unauthenticated local file inclusion to remote code execution8.1CNA v3.10.9%2026-10-14Fix
CVE-2026-104939F5 NGINX Ingress Controller externalAuth policy flawed authentication8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-104909Mang Board WordPress plugin local file inclusion8.1CNA v3.11.0%2026-10-14Fix
CVE-2026-104800AGE-GATE WordPress plugin unauthenticated remote code execution9.8CNA v3.11.0%2026-10-14
CVE-2026-104795Red Hat OpenShift Container Platform insights-runtime-extractor vulnerability8.8CNA v3.10.2%2026-10-14Fix
CVE-2026-104767davefx Membership and User Roles for WooCommerce (Automatic Role Changer) privilege escalation7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-104764Post Export Import with Media WordPress plugin PHP object injection7.2CNA v3.10.6%2026-10-14Fix
CVE-2026-104761Mang Board WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-104751Rank Math SEO for WordPress unauthenticated SEO Analyzer Results deletion5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-104749Bit integrations WordPress plugin unauthenticated privilege escalation7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-104748SimpleForm WordPress plugin unauthenticated privilege escalation to wp_capabilities mass assignment9.8CNA v3.10.6%2026-10-14Exploit codeFix
CVE-2026-104644Image Photo Gallery Final Tiles Grid WordPress plugin stored XSS6.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-104143DataEase: Stored SQL injection via dateFormat field templates8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-104142DataEase: Stored SQL injection in group-field binning bounds8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-104141DataEase: SQL injection in datasource metadata identifiers8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-104110error311 FileRise /api/pro/portals/get.php information disclosure5.3CNA v3.10.4%2026-10-14Fix
CVE-2026-104109error311 FileRise ZIP extraction link following6.8CNA v3.10.3%2026-10-14Fix
CVE-2026-104108FileRise OIDC login can bind an attacker identity to an existing local account8.1CNA v3.10.2%2026-10-14Fix
CVE-2026-104107FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-104106error311 FileRise TOTP enrollment missing authentication6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-104105FileRise: TOTP codes are not single-use valid 6-digit code can be replayed within its window6.4CNA v3.10.2%2026-10-14Fix
CVE-2026-104103Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members8.1CNA v3.10.5%2026-10-14Fix
CVE-2026-1040867-Zip SquashFS uninitialized memory Disclosure via UID/GID Table6.8CNA v4.00.2%2026-10-14Fix
CVE-2026-103994Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-103993Juniper Networks Junos OS routing protocol daemon out-of-bounds write6.9CNA v4.00.2%2026-10-14Fix
CVE-2026-103988FileRise renameFolder omits destination-parent authorization5.4CNA v3.10.2%2026-10-14Fix
CVE-2026-103977FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts8.1CNA v3.10.4%2026-10-14Exploit codeFix
CVE-2026-103975Appium: Symlink based Zip Slip in @appium/support ZIP extraction6.5CNA v3.10.6%2026-10-14Fix
CVE-2026-103974lichess-org lila lichess.org: Stored HTML injection via PGN Annotator Tag in Studies5.4CNA v3.10.2%2026-10-14
CVE-2026-103946Tenable Nessus SQL injection8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-103930cpp-httplib open_stream serializes CRLF in request target into HTTP request line3.7CNA v3.10.4%2026-10-14Fix
CVE-2026-103929mise permits untrusted local configuration to override default shell arguments7.8CNA v3.10.2%2026-10-14Fix
CVE-2026-103907JNews WordPress plugin unauthorized access6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-103905Unauthenticated Plugin Safe Mode Toggle vulnerability in JTL-Shop8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-103904Stored XSS vulnerability in JTL-Shop8.6CNA v4.00.4%2026-10-14Fix
CVE-2026-103671EC-CUBE AmazonPay V2 Plugin (4.0/4.1 series) web parameter tampering5.3CNA v4.00.2%2026-10-14Reported exploited
CVE-2026-103425Booking Package WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-103423Booking Package WordPress plugin authorization bypass7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-103422AnyComment WordPress plugin unauthenticated stored cross-site scripting via email parameter7.2CNA v3.10.3%2026-10-14
CVE-2026-103415Eclipse Foundation NetX Duo out-of-bounds write9.3CNA v4.00.3%2026-10-14
CVE-2026-103414Eclipse Foundation GUIX out-of-bounds write8.4CNA v4.00.2%2026-10-14
CVE-2026-103380Appointment Booking Plugin WordPress plugin information disclosure4.3CNA v3.10.3%2026-10-14Fix
CVE-2026-103369Social Share Buttons and Analytics WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14
CVE-2026-103367ShopMagic WordPress plugin unauthenticated local file inclusion via billing.first_name parameter8.1CNA v3.11.0%2026-10-14Fix
CVE-2026-103366Appointment Booking Plugin WordPress plugin insecure direct object reference7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-103358Email Template Customizer for WooCommerce WordPress plugin content injection7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-103308Visma Pay for WooCommerce for WordPress unauthenticated Payment bypass and order data disclosure6.5CNA v3.10.1%2026-10-14Fix
CVE-2026-103307Walletdoc Payment Gateway for WooCommerce payment webhook SQL injection8.6CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-103081Salevo WordPress plugin content injection7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-102986makeplane plane EntityAssetEndpoint insecure direct object reference8.1CNA v3.10.4%2026-10-14Fix
CVE-2026-102985Plane: Any project member can modify (deactivate) other members' records6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-102980Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scope6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-102944yhirose cpp-httplib create_redirect_client vulnerability7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-102899Sentry: Improper authentication on SAML SSO process allows user identity linking7.6CNA v4.00.4%2026-10-14Fix
CVE-2026-102893Zulip: OpenID Connect authentication ignores the email_verified claim9.1CNA v4.00.4%2026-10-14Fix
CVE-2026-102756DataEase bar-horizontal Axis Label Tooltip stored cross-site scripting5.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102755DataEase Datasource/Dataset Folder Name stored cross-site scripting5.1CNA v4.00.4%2026-10-14Fix
CVE-2026-102748dgraph Dgraph Zero HTTP admin interface denial of service9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-102695OmniFaces: Forged combined-resource IDs and related output/push boundaries8.2CNA v3.10.3%2026-10-14Fix
CVE-2026-102682pipecat-ai pipecat development runner missing authorization5.6CNA v3.10.2%2026-10-14Fix
CVE-2026-102479Eclipse Vert.x vertx-core HTTP/1.x decoder vulnerability8.7CNA v4.00.3%2026-10-14
CVE-2026-102476Eclipse Vert.x vertx-core HTTP client vulnerability9.1CNA v4.00.2%2026-10-14
CVE-2026-102471Eclipse Vert.x vertx-mail-client vulnerability6.9CNA v4.00.3%2026-10-14
CVE-2026-102460Eclipse Vert.x Vert.x Web ChainAuthHandler vulnerability8.6CNA v4.00.3%2026-10-14
CVE-2026-102354BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker6.8CNA v3.10.2%2026-10-14Fix
CVE-2026-102298Insufficient authorization and User Boundary Validation in Omada Controller MSP7.5CNA v4.00.4%2026-10-14Fix
CVE-2026-102251Abandoned Cart Pro for WooCommerce WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-102185Juniper Networks Junos OS routing protocol daemon infinite loop8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102184Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102183Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102182Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution9.3CNA v4.00.4%2026-10-14Fix
CVE-2026-102180Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102179Juniper Networks Junos OS routing protocol daemon out-of-bounds write8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102178Juniper Networks Junos OS Evolved stack-based buffer overflow9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-102177Juniper Networks Junos OS routing protocol daemon out-of-bounds write7.2CNA v4.00.3%2026-10-14Fix
CVE-2026-102176Juniper Networks Junos OS SDK service process buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102175Juniper Networks Junos OS Evolved heap-based buffer overflow9.3CNA v4.00.7%2026-10-14Fix
CVE-2026-102174Juniper Networks Junos OS iked IKE key-management daemon stack-based buffer overflow8.7CNA v4.00.6%2026-10-14Fix
CVE-2026-102087Juniper Networks Junos OS routing protocol daemon incomplete denylist7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102086Juniper Networks Junos OS DNS plugin null pointer dereference8.2CNA v4.00.4%2026-10-14Fix
CVE-2026-102085Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker6.9CNA v4.00.3%2026-10-14Fix
CVE-2026-102084Juniper Networks Junos OS VPN daemon improper syntax validation9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-102083Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-102082Juniper Networks Junos OS SSL plugin denial of service8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-102081Juniper Networks Junos OS packet forwarding engine memory leak8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102080Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover6.0CNA v4.00.2%2026-10-14Fix
CVE-2026-102079Juniper Networks Junos OS CLI OS command injection8.5CNA v4.00.7%2026-10-14Fix
CVE-2026-102078Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-102077Juniper Networks Junos OS Packet Forwarding Engine improper check for exceptional conditions8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102072Juniper Networks Junos OS gRPC library denial of service7.1CNA v4.00.4%2026-10-14Fix
CVE-2026-102071Juniper Networks Junos OS routing protocol daemon reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102070Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-102069Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102068Juniper Networks Junos OS Evolved kernel stack-based buffer overflow9.2CNA v4.00.7%2026-10-14Fix
CVE-2026-102067Juniper Networks Junos OS An improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102066Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102065Juniper Networks Junos OS An improper input validation8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102064Juniper Networks Junos OS routing protocol daemon reachable assertion8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102063Juniper Networks Junos OS routing protocol daemon reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102062Juniper Networks Junos OS ipfd daemon format string9.2CNA v4.00.4%2026-10-14Fix
CVE-2026-102061Juniper Networks Junos OS phone-home daemon stack-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102060Juniper Networks Junos OS Evolved null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102059Juniper Networks Junos OS and Junos OS Evolved phone-home daemon OS command injection8.7CNA v4.03.9%2026-10-14Fix
CVE-2026-102058Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102057Junos OS: An attacker causes DHCP service disruption during DHCP client operation8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-102056Juniper Networks Junos OS Evolved out-of-bounds read7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102055Juniper Networks Junos OS Evolved stack-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102054Juniper Networks Junos OS Evolved improper length parameter handling5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-102053Juniper Networks Junos OS and Junos OS Evolved l2ald process memory leak6.9CNA v4.00.3%2026-10-14Fix
CVE-2026-102052Juniper Networks Junos OS Evolved stack-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102051Juniper Networks Junos OS and Junos OS Evolved l2cpd process memory leak7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102050Juniper Networks Junos OS Evolved stack-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102049Juniper Networks Junos OS Evolved stack-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102048Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102047Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102046Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102045Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102044Juniper Networks Junos OS Evolved reachable assertion8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102043Juniper Networks Junos OS Evolved numeric truncation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102042Juniper Networks Junos OS Evolved reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102041Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102040Juniper Networks Junos OS Evolved null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102039Juniper Networks Junos OS Evolved null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102037Juniper Networks Junos OS Unified Threat Management daemon XML injection9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-102036Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102035Juniper Networks Junos OS Evolved reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102034Juniper Networks Junos OS Evolved reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102033Juniper Networks Junos OS Evolved improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102032Juniper Networks Junos OS Evolved memory leak7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102031Juniper Networks Junos OS Evolved TACACS OS command injection9.3CNA v4.02.1%2026-10-14Fix
CVE-2026-102030Juniper Networks Junos OS Evolved incomplete cleanup8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102029Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102028Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102027Juniper Networks Junos OS routing protocol daemon incorrect buffer size calculation8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102026Juniper Networks Junos OS routing protocol daemon improper resource control8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102025Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon denial of service8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102024Juniper Networks Junos OS routing daemon integer overflow8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102023Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102022Juniper Networks Junos OS routing protocol daemon reachable assertion8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102021Juniper Networks Junos OS routing protocol daemon null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102020Juniper Networks Junos OS Evolved reachable assertion8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102019Juniper Networks Junos OS Input vulnerability in the rpd process improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102018Juniper Networks Junos OS Evolved null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102017Juniper Networks Junos OS Evolved out-of-bounds write7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102016Juniper Networks Junos OS Evolved improper input validation8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-102015Juniper Networks Junos OS Evolved heap-based buffer overflow8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102014Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-102013Juniper Networks Junos OS Evolved null pointer dereference6.7CNA v4.00.2%2026-10-14Fix
CVE-2026-102012Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled8.7CNA v4.00.6%2026-10-14Fix
CVE-2026-102011Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-102000Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101999Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101997Juniper Networks Junos OS ipfd SQL injection9.2CNA v4.00.4%2026-10-14Fix
CVE-2026-101996Juniper Networks Junos OS Evolved reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101995Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-101994Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101993Juniper Networks Junos OS routing protocol daemon reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101992Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101991Juniper Networks Junos OS routing protocol daemon improper length parameter handling5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-101990Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow9.3CNA v4.00.6%2026-10-14Fix
CVE-2026-101989Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101988Juniper Networks Junos OS routing protocol daemon null pointer dereference7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101987Juniper Networks Junos OS An improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101986Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution9.3CNA v4.00.6%2026-10-14Fix
CVE-2026-101985Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101984Juniper Networks Junos OS routing protocol daemon reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101983Juniper Networks Junos OS Evolved stack-based buffer overflow9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-101982Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow9.3CNA v4.00.6%2026-10-14Fix
CVE-2026-101981Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow8.7CNA v4.00.2%2026-10-14Fix
CVE-2026-101980Juniper Networks Junos OS kernel integer underflow9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-101979Juniper Networks Junos OS Evolved authd Juniper Networks Junos OS and stack-based buffer overflow8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101978Juniper Networks Junos OS Evolved bootzd zero-touch provisioning daemon OS command injection8.7CNA v4.03.9%2026-10-14Fix
CVE-2026-101977Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101976Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101975Juniper Networks Junos OS routing protocol daemon reachable assertion7.1CNA v4.00.2%2026-10-14Fix
CVE-2026-101974Juniper Networks Junos OS Evolved improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101973Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101972Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101971Juniper Networks Junos OS rpd resource exhaustion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101970Juniper Networks Junos OS Evolved use-after-free7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101969Juniper Networks Junos OS Evolved improper input validation7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101968Juniper Networks Junos OS rpd process integer underflow5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-101967Juniper Networks Junos OS Evolved bootzd zero-touch provisioning daemon OS command injection9.3CNA v4.03.9%2026-10-14Fix
CVE-2026-101966Juniper Networks Junos OS Evolved jti-dialoutd format string8.8CNA v4.00.4%2026-10-14Fix
CVE-2026-101965Juniper Networks Junos OS Evolved gRPC daemon format string8.7CNA v4.00.6%2026-10-14Fix
CVE-2026-101964Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101963Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101962Juniper Networks Junos OS routing protocol daemon improper length parameter handling8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101961Juniper Networks Junos OS Evolved null pointer dereference8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101960Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101959Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101957Juniper Networks Junos OS routing protocol daemon improper initialization8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101956Junos OS: Unauthorized root command execution when J-Web is enabled9.3CNA v4.00.7%2026-10-14Fix
CVE-2026-101955Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used9.2CNA v4.00.6%2026-10-14Fix
CVE-2026-101954Juniper Networks Junos OS Evolved improper authentication9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-101952Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon denial of service8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101951Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon denial of service8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101950Juniper Networks Junos OS SVR component heap-based buffer overflow9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-101949Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-101948Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101946Juniper Networks Junos OS Evolved out-of-bounds read5.3CNA v4.00.2%2026-10-14Fix
CVE-2026-101945Juniper Networks Junos OS Evolved integer overflow8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101944Juniper Networks Junos OS routing protocol daemon integer overflow8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101943Juniper Networks Junos OS routing protocol daemon improper input validation8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101942Juniper Networks Junos OS routing protocol daemon improper length parameter handling8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101941Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101940Juniper Networks Junos OS Evolved null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101939Juniper Networks Junos OS routing protocol daemon null pointer dereference8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-101938Juniper Networks Junos OS Evolved integer underflow7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101937Juniper Networks Junos OS srxpfe denial of service7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101936Juniper Networks Junos OS srxpfe process reachable assertion7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-101934Junos OS and Junos OS Evolved: An attacker causes denial of service in eventd6.7CNA v4.00.2%2026-10-14Fix
CVE-2026-101927Juniper Networks Junos OS Evolved heap-based buffer overflow8.6CNA v4.00.2%2026-10-14Fix
CVE-2026-101926Hyyan WooCommerce Polylang Integration WordPress plugin SQL injection6.5CNA v3.10.3%2026-10-14
CVE-2026-101924NewStatPress WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-10-14
CVE-2026-101897Angular DevTools (local DoS)5.1CNA v4.00.4%2026-10-14Fix
CVE-2026-101896Angular: Denial of service via Numeric URL Matrix parameters in Server-Side Rendering (SSR)8.2CNA v4.00.7%2026-10-14Fix
CVE-2026-101895Angular SSR: Denial of service (DoS) via infinite loop on Malformed DOCTYPE8.7CNA v4.00.7%2026-10-14Fix
CVE-2026-101341NLnet Labs NSD stack overwrite from specially formatted TXT-DATA RDATA field8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-101339NLnet Labs NSD stack overwrite from a specially crafted and formatted HIP RR8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-101338NLnet Labs NSD stack overwrite from a specially crafted and formatted SVCB or HTTPS RR8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-101337NLnet Labs NSD stack overwrite from specially formatted base64 RDATA field8.7CNA v4.00.3%2026-10-14Fix
CVE-2026-101301WPCode - Unauthenticated Snippet Suppression via Safe Mode Bypass5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-101217Dell Unisphere for PowerMax vApp path traversal6.5CNA v3.10.6%2026-10-14Fix
CVE-2026-101216Dell Unisphere for PowerMax vApp command injection6.6CNA v3.11.1%2026-10-14Fix
CVE-2026-101215Dell Unisphere for PowerMax vApp OS command injection6.6CNA v3.11.1%2026-10-14Fix
CVE-2026-101025F5 NGINX JavaScript ngx_http_js_module memory leak6.9CNA v4.00.3%2026-10-14Fix
CVE-2026-101019F5 NGINX JavaScript njs XML module interpretation conflict8.3CNA v4.00.2%2026-10-14Fix
CVE-2026-100413SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments7.0CNA v4.00.4%2026-10-14Fix
CVE-2026-100406dbt-labs dbt-core dbt: Unauthenticated arbitrary SQL Execution in `dbt docs serve`8.2CNA v4.00.3%2026-10-14Fix
CVE-2026-100404Zulip: Guests can read new messages in non-subscribed public channels6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-100394nezhahq nezha dashboard null pointer dereference6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-100236Red Hat Fast Datapath for RHEL 10 dpdk: Dpdk: Heap out-of-bounds read/write in gso header copy8.6CNA v3.10.3%2026-10-14Fix
CVE-2026-100232SonicWall Network Security Manager (NSM) OS command injection7.2CISA ADP v3.11.2%2026-10-14Fix
CVE-2026-100231Red Hat Enterprise Linux 10 out-of-bounds write6.1CNA v3.10.2%2026-10-14
CVE-2026-100229Red Hat Enterprise Linux 10 out-of-bounds write6.5CNA v3.10.4%2026-10-14
CVE-2026-100193Tutor LMS WordPress plugin reflected cross-site scripting via tab parameter4.7CNA v3.10.2%2026-10-14Fix
CVE-2026-100185wpWax Directorist phone listing field stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-100169Prowler social account linking path of the improper authentication7.6CNA v4.00.9%2026-10-14Fix
CVE-2026-100163Appointment Booking Plugin WordPress plugin authentication bypass7.4CNA v3.10.4%2026-10-14Fix
CVE-2026-100153NewStatPress WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-10-14
CVE-2026-98431Linux kernel RDMA/uverbs deadlock–0.2%2026-10-14Fix
CVE-2026-98430In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin completion queue and the async event queue. The driver registered the IRQ before constructing these queues and destroyed–0.2%2026-10-14Fix
CVE-2026-98429In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before free_ir–0.2%2026-10-14Fix
CVE-2026-98428Linux kernel 6fire use-after-free–0.2%2026-10-14Fix
CVE-2026-98427In the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the dropping loop per dequeue call The CoDel control law schedules the next drop one interval/sqrt(count) after the previous drop, using the configured interval (codel_params.interval). For very small inter–0.2%2026-10-14Fix
CVE-2026-98426In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop "for (j = 0; j msix–0.2%2026-10-14Fix
CVE-2026-98425In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211_request_ibss_scan() warns when regulatory leaves no allowed channel, but that can happen as the regdomain can change while IBSS is operating, and it can cont–0.2%2026-10-14Fix
CVE-2026-98424In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg80211_switch_netns() moves the wiphy itself by setting its network namespace and then renaming it, which makes sysfs move it–0.2%2026-10-14Fix
CVE-2026-98423In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping The code checks ->started for frames coming from wmediumd, but the radio can be stopped after the check and before frame delivery, causing mac80211 to hit the WARN–0.2%2026-10-14Fix
CVE-2026-98422In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown On ifup, AP_VLAN interfaces get crypto_tx_tailroom_needed_cnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing–0.2%2026-10-14Fix
CVE-2026-98421In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only acce–0.2%2026-10-14Fix
CVE-2026-98420In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbd_session_register() destroys valid sessions after ten seconds of inactivity whenever a client starts another SessionSetup exchange. This confuses Session.IdleTime with Session.E–0.2%2026-10-14Fix
CVE-2026-98419Linux kernel drop_monitor out-of-bounds write–0.2%2026-10-14Fix
CVE-2026-98418In the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can move a blocked donor's scheduling context to the lock owner's CPU even when the donor is migration-disabled. The donor does not execute there, and its–0.2%2026-10-14Fix
CVE-2026-98417In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand xfrm packets whose transport header offset no longer fits after the stream parser trims the TCP envelope. The plain transport header reset truncates–0.2%2026-10-14Fix
CVE-2026-98416Linux kernel k3-udma-glue null pointer dereference–0.2%2026-10-14Fix
CVE-2026-98415Linux kernel exynos-pmu use-after-free–0.2%2026-10-14Fix
CVE-2026-98414In the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() obj_cgroup_charge_pages() resolves the objcg to its memcg and calls try_charge_memcg(), which does not short circuit the root memcg. That memcg can be the root m–0.2%2026-10-14Fix
CVE-2026-98413Linux kernel selinux uninitialized memory use–0.2%2026-10-14Fix
CVE-2026-98412Linux kernel sequencing null pointer dereference–0.2%2026-10-14Fix
CVE-2026-98411Linux kernel sequencing null pointer dereference–0.2%2026-10-14Fix
CVE-2026-98410In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_pro–0.2%2026-10-14Fix
CVE-2026-98409Linux kernel rtd119x divide by zero–0.2%2026-10-14Fix
CVE-2026-98408Linux kernel rzv2h divide by zero–0.2%2026-10-14Fix
CVE-2026-98407Linux kernel rsi out-of-bounds write–0.2%2026-10-14Fix
CVE-2026-98406In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver ieee80211_set_bitrate_mask() checks if the interface is running via ieee80211_sdata_running(), but it does not check if the interface is still present in the–0.2%2026-10-14Fix
CVE-2026-98405In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied out_len without being validated against the actual length of the received iov (iov_len). I–0.2%2026-10-14Fix
CVE-2026-98404Linux kernel drm/virtio null pointer dereference–0.2%2026-10-14Fix
CVE-2026-98403In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the terminating byte of COMMAND_LINE_SIZE. In that case append_ipl_block_parm() passes a zero size to the IPL parameter conversion helpers a–0.2%2026-10-14Fix
CVE-2026-98402In the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot reported a WARNING triggered by DEBUG_NET_WARN_ON_ONCE(): WARNING: at skb_transport_header include/linux/skbuff.h:3087 [inline] WARNING: at udp_hdr–0.2%2026-10-14Fix
CVE-2026-98401Linux kernel iptunnel crash–0.2%2026-10-14Fix
CVE-2026-98400In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QEMU direct kernel boot, might not provide an IPL parameter block. In this case, reipl_type_init() selects IPL_TYPE_UNKNOWN, and reip–0.2%2026-10-14Fix
CVE-2026-98399In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through os_info, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. So–0.2%2026-10-14Fix
CVE-2026-98398In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot reported a lockdep splat hitting DEBUG_LOCKS_WARN_ON(1) in hlock_class() due to an invalid class_idx: WARNING: kernel/locking/lockdep.c:238 at __loc–0.2%2026-10-14Fix
CVE-2026-98397Linux kernel x86-android-tablets use-after-free–0.2%2026-10-14Fix
CVE-2026-98396Linux kernel powerpc remote file inclusion–0.2%2026-10-14Fix
CVE-2026-98395In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_interrupts() replays a pending interrupt (e.g. PACA_IRQ_DEC -> timer_interrupt), it calls the handler directly with a synthetic pt_regs. The–0.2%2026-10-14Fix
CVE-2026-98394In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Fahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait in unix_stream_read_generic() if recv() is blocking and the last skb in the queue is–0.2%2026-10-14Fix
CVE-2026-98393In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork->base.fragsize to IP_MAX_MTU to avoid a possible overflow of UDP length that triggers a WARN in udp_set_len_short when setsockopt IP_MTU_DIS–0.2%2026-10-14Fix
CVE-2026-98392Linux kernel btintel_pcie off-by-one error–0.2%2026-10-14Fix
CVE-2026-98391In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM reference is dropped asynchronously, allowing the device to autosuspend while stale page faults belonging to the now-dead VM are still q–0.2%2026-10-14Fix
CVE-2026-98390Linux kernel x86/amd_node divide by zero–0.2%2026-10-14Fix
CVE-2026-98389In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU reset, the gfx idle work may invoke switch_power_profile before the reset completes. This causes the following assert error because the register acc–0.2%2026-10-14Fix
CVE-2026-98388Linux kernel exec deadlock–0.2%2026-10-14Fix
CVE-2026-98387Linux kernel s390/crypto incorrect behavior–0.2%2026-10-14Fix
CVE-2026-98386In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot For QLAFX00 the request ring is ioremapped device I/O memory (ha->iobase + req_que_off), not DMA-coherent RAM, which is why the rest of the FX00 path accesses it th–0.2%2026-10-14Fix
CVE-2026-97668Abandoned Cart Pro for WooCommerce WordPress plugin unauthenticated SQL injection9.8CNA v3.10.4%2026-10-14Reported exploitedFix
CVE-2026-97657Abandoned Cart Pro for WooCommerce WordPress plugin unauthenticated authentication bypass9.8CNA v3.10.4%2026-10-14Exploit codeFix
CVE-2026-97629F5 NGINX Plus uninitialized resource use8.3CNA v4.00.2%2026-10-14Exploit codeFix
CVE-2026-97471Avada (Fusion) Builder WordPress plugin information disclosure5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-97398FV Flowplayer Video Player WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-10-14Fix
CVE-2026-97315Responsive Blocks WordPress plugin unauthenticated HTML injection in form Notification email5.4CNA v3.10.2%2026-10-14Fix
CVE-2026-97278Polylang WordPress plugin PHP object injection7.2CNA v3.10.4%2026-10-14Fix
CVE-2026-97205F5 NGINX Plus use-after-free9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-97020PO/MO Editor WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14
CVE-2026-96904AWP Classifieds WordPress plugin unauthenticated Listing Contact email disclosure via Place Ad page5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-96900Cart Abandonment Recovery for WooCommerce WordPress plugin insecure direct object reference5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-96661Gmedia Photo Gallery WordPress plugin unauthenticated SQL injection via gmedia__in parameter7.5CNA v3.10.5%2026-10-14
CVE-2026-96615F5 NGINX Gateway Fabric authentication bypass by spoofing7.1CNA v4.00.3%2026-10-14Fix
CVE-2026-96596Erlang rebar3 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole5.9CNA v4.00.2%2026-10-14Fix
CVE-2026-96540SonicWall Network Security Manager (NSM) incorrect authorization8.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-95816Smart Forms WordPress plugin unauthenticated stored cross-site scripting via formString parameter7.2CNA v3.10.4%2026-10-14
CVE-2026-95808Form Maker by 10Web WordPress plugin unauthenticated SQL injection via inputs parameter7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-95807FV Player 8 WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-10-14Fix
CVE-2026-95101Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to6.9CNA v4.00.2%2026-10-14Fix