CVE-2026 list

CVE-2026 records published in October 2026

Page seven of 14: records 6,001 to 7,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 6,001 to 7,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-94377Verified Reviews (Avis Vérifiés) WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-10-14
CVE-2026-94370Memory corruption vulnerability in core string handling impacts Qt for MCUs6.5CNA v4.00.3%2026-10-14Fix
CVE-2026-94360Paymentfor Gateway for WooCommerce for WordPress missing authorization5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-94348Dell PowerScale InsightIQ SQL injection6.1CNA v3.10.2%2026-10-14Fix
CVE-2026-94261Sifalo Pay - Unauthenticated Payment Confirmation Forgery via an Unbound Transaction Id5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-94260Sifalo Pay - Unauthenticated Order Payment Metadata Modification and Forced Order failure5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-94254SellKit - Unauthenticated arbitrary Price Manipulation via sellkit_product_prices parameter5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-94200Erlang OTP improper input validation8.2CNA v4.00.5%2026-10-14Fix
CVE-2026-94197F5 NGINX Ingress Controller F5 NGINX Kubernetes Ingress controller authorization bypass8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-93885Cryptocurrency Donation Box WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-10-14
CVE-2026-93683DPDK vhost library vulnerability6.4CNA v3.10.1%2026-10-14Fix
CVE-2026-93637Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting3.7CNA v3.10.3%2026-10-14
CVE-2026-93635Zimbra Collaboration Suite LDAP Filter injection via Unescaped computeDn Template Substitution5.3CNA v3.10.2%2026-10-14
CVE-2026-93479NGINX map directive and regex matching vulnerability9.2CNA v4.00.6%2026-10-14Fix
CVE-2026-93388Printcart Store Web to Print Product Designer for WooCommerce arbitrary file upload9.8CNA v3.10.9%2026-10-14Fix
CVE-2026-92426YITH WooCommerce Popup WordPress plugin Contributor+ arbitrary post Meta deletion4.9CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-92409Donation Thermometer - Contributor+ stored XSS via shortcode6.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-92392curl HTTP/2 upload use-after-free8.1CISA ADP v3.10.9%2026-10-14Exploit codeFix
CVE-2026-92160nasa fprime F´: SendPartial integer overflow leading to Assertion DoS6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-92159NASA F´ TlmPacketizer vulnerability6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-92158NASA F Prime FpySequencer out-of-bounds write7.2CNA v3.10.7%2026-10-14Fix
CVE-2026-92157NASA F Prime Svc::FileDownlink SendPartial integer overflow6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-92156NASA F Prime EventManager denial of service6.5CNA v3.10.5%2026-10-14Fix
CVE-2026-92155nasa fprime F´: FileUplink Unknown Packet Type Assertion DoS7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-92154NASA F Prime Svc::FileUplink integer overflow8.1CNA v3.10.6%2026-10-14Fix
CVE-2026-92153nasa fprime F´: Arbitrary file write in Svc::FileUplink7.1CNA v3.10.4%2026-10-14Fix
CVE-2026-92152nasa fprime F´: Unvalidated Port Index in GenericHub9.3CNA v4.00.7%2026-10-14Fix
CVE-2026-92151nasa fprime F´: SpacePacketDeframer Small Packet Assertion DoS7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-92150nasa fprime F´: GenericHub Malformed Buffer Assertion DoS7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-92097holithemes Click to Chat greetings_dialog function code injection9.1CNA v3.10.5%2026-10-14Fix
CVE-2026-91883Dell Terraform Provider for OME sensitive information in log files4.3CNA v3.10.3%2026-10-14Fix
CVE-2026-91882Dell Terraform Provider for OME information disclosure through error messages8.6CNA v3.10.4%2026-10-14Fix
CVE-2026-91881Dell Terraform Provider for Redfish improper certificate validation9.0CNA v3.10.3%2026-10-14Fix
CVE-2026-91184F5 NGINX Gateway Fabric AuthenticationFilter vulnerability8.7CNA v4.00.5%2026-10-14Fix
CVE-2026-91159Discourse: Stored oEmbed HTML injection via allowed iframe7.7CNA v3.10.4%2026-10-14Exploit codeFix
CVE-2026-91157Discourse: Media uploads remain publicly accessible after category permissions are restricted7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-91156Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-91076Robokassa payment gateway for WooCommerce WordPress plugin missing authorization5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-90989Tainacan WordPress plugin Repository Staff email Address disclosure via Reports REST Endpoints4.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-90954BusyBox dpkg-deb archive extraction link following7.8CNA v3.10.2%2026-10-14
CVE-2026-89310SQL command injection vulnerability in JTL-WMS9.4CNA v4.00.5%2026-10-14Fix
CVE-2026-89288Fast Courier - unauthenticated SQLi via wp_order_id parameter8.6CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-89077MOVEit Transfer Identity validation flaw in SFTP authentication7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-89076MOVEit Transfer SQL injection in custom reporting7.2CNA v3.10.5%2026-10-14Fix
CVE-2026-89075MOVEit Transfer Local Disclosure of Session Information vulnerability7.3CNA v3.10.2%2026-10-14Fix
CVE-2026-89074MOVEit Transfer Email MFA Bypass7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-89073MOVEit Transfer access restriction bypass in OAuth authentication7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-89072MOVEit Transfer Authorization Flaw in Certificate Management7.5CNA v3.10.2%2026-10-14Fix
CVE-2026-89071MOVEit Transfer LDAP injection in certificate-based authentication7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-89070MOVEit Transfer OIDC Authentication Replay vulnerability7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-89069MOVEit Transfer stored XSS vulnerability in Ad Hoc Packages8.0CNA v3.10.3%2026-10-14Fix
CVE-2026-89068MOVEit Transfer authentication bypass in LDAP sign-on8.1CNA v3.10.5%2026-10-14Fix
CVE-2026-89067MOVEit Transfer Secure Messaging authentication bypass8.8CNA v3.10.5%2026-10-14Fix
CVE-2026-88998Tickera WordPress plugin unauthenticated order Payment bypass via 2Checkout IPN5.3CNA v3.10.1%2026-10-14Fix
CVE-2026-88927rtMedia for WordPress, BuddyPress and bbPress plugin arbitrary Album Media injection4.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-88842BusyBox dpkg out-of-bounds read3.3CNA v3.10.2%2026-10-14Fix
CVE-2026-88829Red Hat Hardened Images busybox: Busybox: Http request smuggling7.2CNA v3.10.3%2026-10-14
CVE-2026-88164Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.7%2026-10-14Fix
CVE-2026-87974Asaas Gateway for WooCommerce WordPress plugin unauthenticated order Payment bypass via Webhook5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-87968Product Feed for Google Shopping WordPress plugin unauthenticated Forced Store Registration5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-87855JTL-Connector for WooCommerce WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.8%2026-10-14Reported exploited
CVE-2026-87843Trust Payments Gateway for WooCommerce payment return page vulnerability6.5CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-87093MOVEit Transfer Service Directory Writable by Local Users enables local privilege escalation8.8CNA v3.10.1%2026-10-14Fix
CVE-2026-86856Red Hat Fast Datapath for RHEL 10 dpdk: Dpdk: Stack and heap buffer overflow in nfp vdpa driver6.5CNA v3.10.1%2026-10-14Fix
CVE-2026-86849DPDK vhost-crypto backend out-of-bounds write6.5CNA v3.10.1%2026-10-14Fix
CVE-2026-86848DPDK vhost-crypto out-of-bounds write8.8CNA v3.10.1%2026-10-14Fix
CVE-2026-86847DPDK vhost-crypto uninitialized pointer access6.5CNA v3.10.2%2026-10-14Fix
CVE-2026-86846DPDK vhost-crypto backend out-of-bounds write6.5CNA v3.10.2%2026-10-14Fix
CVE-2026-86845DPDK vhost-crypto session cleanup use-after-free6.5CNA v3.10.1%2026-10-14Fix
CVE-2026-86799Forms WordPress plugin unauthenticated stored XSS via form Submission8.8CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-86797Pricing Table block - Contributor+ stored XSS via Pricing Link6.8CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-86787affiliate-toolkit WordPress plugin Affiliate Toolkit - Contributor+ RCE via BladeOne @PHP Directive7.2CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-86607Internal application information exposure vulnerability in Hitachi Ops Center Administrator4.3CNA v3.10.2%2026-10-14Fix
CVE-2026-86573Hitachi Disk Array Driver for Virtual I/O Server out-of-bounds write5.1CNA v3.10.1%2026-10-14
CVE-2026-86567DPDK vhost VDUSE handler use-after-free8.8CNA v3.10.1%2026-10-14Fix
CVE-2026-86566DPDK lib/vhost integer underflow6.5CNA v3.10.1%2026-10-14Fix
CVE-2026-86565Red Hat DPDK lib/vhost out-of-bounds write8.2CNA v3.10.2%2026-10-14Fix
CVE-2026-86563Red Hat Fast Datapath for RHEL 10 dpdk: Dpdk: Double offset bug in vhost log mapping calculation7.8CNA v3.10.2%2026-10-14Fix
CVE-2026-86562DPDK vhost VDUSE control-queue handler heap buffer overflow7.8CNA v3.10.1%2026-10-14Fix
CVE-2026-86561DPDK vhost memory region setup resource exhaustion6.5CNA v3.10.2%2026-10-14Fix
CVE-2026-86476Red Hat Enterprise Linux 10 gstreamer1-plugins-base: Gst-plugins-base: Heap buffer overflow8.4CNA v3.10.2%2026-10-14
CVE-2026-86461FV Flowplayer Video Player WordPress plugin arbitrary file upload8.8CNA v3.10.7%2026-10-14Fix
CVE-2026-86002Dokku: Host command execution via eval of Unsanitized Docker options in DOCKER_ARGS9.0CNA v3.10.6%2026-10-14Fix
CVE-2026-85714Stirling-PDF: Remote code execution via H29.1CNA v3.10.6%2026-10-14NucleiFix
CVE-2026-85345FV Player - Contributor+ SSRF via retrieve_video_data4.1CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-85298Improper authorization in Google Cloud Application Integration leads to privilege escalation7.3CNA v4.00.4%2026-10-14Fix
CVE-2026-85000EmbedPress for WordPress unauthenticated YouTube API Quota Consumption and Database Bloating5.3CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-84471OpenVPN use-after-free7.2CNA v4.00.4%2026-10-14Fix
CVE-2026-83592Contact Form DB for Enfold WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-10-14
CVE-2026-82844WPForms Lite - Unauthenticated Payment Bypass via PayPal Commerce5.3CNA v3.10.1%2026-10-14Fix
CVE-2026-82715Hitachi Disk Array Driver for Virtual I/O Server insecure temporary file7.9CNA v3.10.1%2026-10-14Fix
CVE-2026-82402Gogs: Open redirect in /redirect endpoint via backslash bypass in `IsSameSite`5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-82153Dell OS Recovery Tool insecure storage of sensitive information2.2CNA v3.10.1%2026-10-14Fix
CVE-2026-82026Radar missing authorization via /API/local-terminal8.7CNA v4.00.9%2026-10-14Fix
CVE-2026-79957ServiceNext insecure direct object reference via GetUsarios8.1CNA v3.10.3%2026-10-14
CVE-2026-78433Gitea private attachment disclosure through repository mismatch5.9CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-78231Gitea blind SSRF through OpenID assertion verification5.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-78193JTL-Connector for WooCommerce WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2026-10-14
CVE-2026-77572VeraCrypt veracrypt.sys driver information disclosure3.3CNA v3.10.1%2026-10-14
CVE-2026-77564Talos Linux: Support bundle does not redact registry credentials3.3CNA v3.10.1%2026-10-14Fix
CVE-2026-77524KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication9.9CNA v3.10.6%2026-10-14Fix
CVE-2026-77427FileRise: Insecure default cryptographic key fallback in manual installs5.9CNA v3.10.3%2026-10-14Fix
CVE-2026-77371Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access9.3CNA v4.00.5%2026-10-14Fix
CVE-2026-77114Document Gallery WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-10-14
CVE-2026-76655HPE NonStop SNMP Trap Multiplexer buffer overflow7.5CNA v3.10.6%2026-10-14
CVE-2026-76519Cisco Secure Email Gateway relative path traversal9.8CNA v3.11.6%2026-10-14KEVExploit codeFix
CVE-2026-76113Dell Terraform Provider for Redfish sensitive information in log files4.3CNA v3.10.2%2026-10-14Fix
CVE-2026-76083Redash: JSON data source query URL can bypass base URL restriction4.9CNA v4.00.4%2026-10-14Fix
CVE-2026-75085zephyrproject zephyr STM32WBA IEEE 802.15.4 driver out-of-bounds read4.2CNA v3.10.2%2026-10-14
CVE-2026-75084zephyrproject zephyr TI CC1200 IEEE 802.15.4 driver out-of-bounds write6.8CNA v3.10.3%2026-10-14
CVE-2026-75083zephyrproject zephyr NXP KW41Z IEEE 802.15.4 driver out-of-bounds write5.9CNA v3.10.2%2026-10-14Fix
CVE-2026-73814Gitea repository ownership escalation by administrators6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-73804Gitea API token scope escalation through HTTP signatures8.1CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-73802Gitea Runner host isolation bypass through container options8.8CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-73800Gitea reusable workflow secret exposure in pull_request_target8.8CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-73798HPE NonStop DNS Non Secure Version8.2CNA v3.10.3%2026-10-14
CVE-2026-73797HPE NonStop TSQLFIL memory corruption5.3CNA v3.10.1%2026-10-14
CVE-2026-73796HPE NonStop TSQLEXE memory corruption4.4CNA v3.10.1%2026-10-14
CVE-2026-73795HPE NonStop TMF Auditread2 denial of service6.4CNA v3.10.1%2026-10-14
CVE-2026-73794HPE NonStop MODULAR NSJ vulnerability in Random Number Generation4.6CNA v3.10.2%2026-10-14
CVE-2026-73793HPE NonStop Middleware Secret key handling vulnerability7.9CNA v3.10.4%2026-10-14
CVE-2026-73792HPE NonStop Java JToolkit command injection and buffer overflow3.8CNA v3.10.3%2026-10-14
CVE-2026-73791HPE NonStop Hpjmeter buffer overflow2.0CNA v3.10.2%2026-10-14
CVE-2026-73790HPE NonStop iTP WebServer memory corruption8.2CNA v3.10.3%2026-10-14
CVE-2026-73539Gitea external renderer argument injection and code execution7.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-73535Gitea second-factor bypass through OpenID identity linking8.8CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-73273Gitea Maven checksum upload quota bypass and memory exhaustion4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-73261Cesanta Mongoose built-in TCP/IP stack out-of-bounds read7.5CNA v3.10.3%2026-10-14Fix
CVE-2026-73260Mongoose: Out-of-bounds read via length-counter underflow in built-in TLS X.509 DER parser7.5CNA v3.10.2%2026-10-14Fix
CVE-2026-73252Cesanta Mongoose built-in TLS stack out-of-bounds read7.5CNA v3.10.4%2026-10-14Fix
CVE-2026-73135Gitea hidden-owner repository listing disclosure5.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-73130Gitea repository initialization resource exhaustion4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-73126Gitea private workflow badge token scope bypass4.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-71854OpenAEV has unauthenticated access and missing object-level authorization on player lessons API8.2CNA v3.10.2%2026-10-14Fix
CVE-2026-71301Gitea private pull request title disclosure through markup4.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-71184Gitea fork workflow approval bypass through review events8.8CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-70407Gitea organization listing token scope bypass4.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-70406Gitea private comparison disclosure with public-only tokens6.5CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-70402Gitea local code execution through writable Git hooks5.8CISA ADP v3.10.2%2026-10-14Fix
CVE-2026-70400Gitea private migration creation with public-only tokens5.4CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-70396Gitea organization repository creation token scope bypass5.4CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-69194FileRise: Unsanitized footerHtml in Public Site Config4.8CNA v3.10.2%2026-10-14Fix
CVE-2026-69193FileRise: Rate Limiting Bypass via Username Rotation enables Unlimited Password Spraying6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-69191FileRise: Login Method Restriction Bypass via Direct API Access5.4CNA v3.10.2%2026-10-14Fix
CVE-2026-68964Gitea restricted-user SSH and GPG key metadata disclosure4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-68957Gitea restricted-user issue search disclosure4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-67577Gitea restricted-user activity and heatmap disclosure4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-67418RabbitMQ MQTT 5: Inapplicable PUBLISH property disconnects matching subscribers5.3CNA v4.00.4%2026-10-14Fix
CVE-2026-67416RabbitMQ: AMQP symbolic body descriptor prefix collisions bypass validation5.3CNA v4.00.5%2026-10-14Fix
CVE-2026-67414RabbitMQ AMQP parser: Amplification memory-exhaustion DoS via zero-width array aggregation6.0CNA v4.00.5%2026-10-14Fix
CVE-2026-66877Gitea fork workflow approval bypass through concurrency cancellation8.1CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-66874Gitea required Actions check bypass through skipped workflows6.5CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-66853Gitea restricted-user organization metadata disclosure4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-66849Gitea restricted-user package visibility bypass4.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-64856FileRise: Missing authentication Guard on File Snippet Preview endpoint3.7CNA v3.10.2%2026-10-14Fix
CVE-2026-63792Gitea private reusable workflow disclosure to fork runs5.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-63626Cesanta Mongoose ppp_handle_ipv6cp heap overflow8.8CNA v3.10.2%2026-10-14Fix
CVE-2026-63021Gitea Swift package manifest memory exhaustion6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-62925Gitea Alpine package parsing memory exhaustion6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-62858YOURLS: Unauthenticated file inclusion5.3CNA v3.10.5%2026-10-14Fix
CVE-2026-62664error311 FileRise path traversal5.4CNA v3.10.3%2026-10-14Fix
CVE-2026-61844FileRise: Folder Metadata Filename Collisions Bypass read_own Isolation7.1CNA v3.10.3%2026-10-14Fix
CVE-2026-61843FileRise: Unauthenticated File Overwrite through Upload-Enabled Folder Shares8.2CNA v3.10.3%2026-10-14Fix
CVE-2026-60021Gitea GitLab migration denial of service6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-60018Gitea OneDev migration denial of service6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-60010Gitea organization team policy bypass through repository API6.5CISA ADP v3.10.5%2026-10-14Fix
CVE-2026-60008Gitea Jupyter notebook UI redress through CSS class injection3.5CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-59951MCP Python SDK StreamableHTTP transport resource exhaustion6.9CNA v4.00.5%2026-10-14Fix
CVE-2026-59774Gitea Org-mode file disclosure and code execution9.8CISA ADP v3.128.3%2026-10-14Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2026-59766Gitea private repository metadata disclosure after access revocation4.3CISA ADP v3.10.3%2026-10-14Fix
CVE-2026-57493FileRise: Remember-me auto-login uses stale admin role from token instead of current role6.8CNA v3.10.2%2026-10-14Fix
CVE-2026-57492error311 FileRise missing authentication7.4CNA v3.10.3%2026-10-14Fix
CVE-2026-57491FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist6.5CNA v3.10.3%2026-10-14Fix
CVE-2026-57490FileRise: WebDAV authentication bypasses TOTP/MFA entirely8.1CNA v3.10.4%2026-10-14Fix
CVE-2026-57489error311 FileRise authentication bypass8.1CNA v3.10.5%2026-10-14Fix
CVE-2026-55787flytohub flyto-core flyto2 Core: SSRF guard bypass7.1CNA v3.10.2%2026-10-14Fix
CVE-2026-55786flytohub flyto-core flyto2 Core: Unauthenticated command execution via HTTP MCP `execute_module`8.4CNA v3.10.3%2026-10-14Reported exploitedFix
CVE-2026-55684WeGIA: SQL injection in html/socio/sistema/cadastro_cobrancas_geracao.php9.8CNA v3.10.5%2026-10-14Fix
CVE-2026-55683WeGIA: SQL injection in html/socio/sistema/cadastro_cobranca.php9.8CNA v3.10.5%2026-10-14Fix
CVE-2026-55682WeGIA: Session fixation8.1CNA v3.10.3%2026-10-14Fix
CVE-2026-55681WeGIA: SQL injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter8.8CNA v3.10.4%2026-10-14Fix
CVE-2026-55680WeGIA: Unauthenticated SQL injection in cadastro_cobranca.php via codigo parameter9.8CNA v3.10.5%2026-10-14Fix
CVE-2026-55679WeGIA: Pre-auth Installer injection Chain enables command execution and arbitrary PHP code injection6.5CNA v3.10.4%2026-10-14Fix
CVE-2026-55573e107inc e107 install.php unsafe deserialization9.8CNA v3.10.6%2026-10-14Fix
CVE-2026-55572e107inc e107 alt_auth plugin SQL injection10.0CNA v3.10.5%2026-10-14Fix
CVE-2026-55498FileRise Shared Folder Symlink Escape4.8CNA v3.10.3%2026-10-14Fix
CVE-2026-55387InvoiceShelf bulk deletion lacks company scoping7.2CNA v4.00.3%2026-10-14Fix
CVE-2026-55386InvoiceShelf ORDER BY SQL injection through orderByField7.1CNA v4.00.4%2026-10-14Fix
CVE-2026-55385InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration6.8CNA v3.10.5%2026-10-14Fix
CVE-2026-55384InvoiceShelf trusts client-supplied document totals5.3CNA v4.00.3%2026-10-14Fix
CVE-2026-55383InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure8.2CNA v3.10.4%2026-10-14Fix
CVE-2026-55382InvoiceShelf NotePolicy insecure direct object reference7.6CNA v3.10.4%2026-10-14Fix
CVE-2026-55381InvoiceShelf ConvertEstimateController insecure direct object reference7.1CNA v3.10.3%2026-10-14Fix
CVE-2026-55167LDAP Account Manager WebAuthn authentication authentication bypass by replay4.2CNA v3.10.2%2026-10-14Fix
CVE-2026-54703shd101wyy vscode-markdown-preview-enhanced Markdown Preview Enhanced: Arbitrary file write5.8CNA v4.00.2%2026-10-14KCVFix
CVE-2026-54702shd101wyy vscode-markdown-preview-enhanced webview message handler vulnerability7.3CNA v4.00.2%2026-10-14KCVFix
CVE-2026-54701shd101wyy vscode-markdown-preview-enhanced Markdown Preview Enhanced: Stored XSS6.9CNA v4.00.2%2026-10-14KCVFix
CVE-2026-54566shd101wyy vscode-markdown-preview-enhanced markdown Preview Enhanced: Remote code execution8.5CNA v4.00.3%2026-10-14Fix
CVE-2026-54554fogproject FOG adInfo endpoint is reported to disclose the Active Directory join password7.5CNA v3.10.5%2026-10-14Fix
CVE-2026-54525shd101wyy vscode-markdown-preview-enhanced Markdown Preview Enhanced: One Click RCE8.8CNA v3.10.4%2026-10-14Fix
CVE-2026-53999Radius controller may Delete a Container Resource via an Injected Deployment Annotation7.7CNA v3.10.3%2026-10-14Fix
CVE-2026-53615util-linux libblkid DOS extended-partition overflow produces invalid partition metadata8.0CNA v3.10.2%2026-10-14Fix
CVE-2026-53614util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass7.0CNA v3.10.1%2026-10-14Fix
CVE-2026-53613util-linux mount target TOCTOU allows local privilege escalation7.0CNA v3.10.1%2026-10-14Fix
CVE-2026-53612util-linux mount hook_owner TOCTOU allows local privilege escalation7.0CNA v3.10.1%2026-10-14Fix
CVE-2026-50218Akamai Guardicore Platform Agent resource injection8.5CNA v3.10.3%2026-10-14Fix
CVE-2026-50217Akamai Guardicore Platform Agent Windows WFP callout driver use-after-free4.7CNA v3.10.1%2026-10-14Fix
CVE-2026-50216Akamai Guardicore Platform Agent An integer underflow5.3CNA v3.10.3%2026-10-14Fix
CVE-2026-50215Akamai Guardicore Platform Agent Windows WFP packet-capture driver shipped use-after-free4.4CNA v3.10.1%2026-10-14Fix
CVE-2026-49206d99kris rapidcsv integer overflow2.9CNA v3.10.2%2026-10-14Fix
CVE-2026-46449Akamai Guardicore Platform Agent OS command injection6.7CNA v3.11.7%2026-10-14Fix
CVE-2026-42093Redash: SQL injection via Query Results parameterized query substitution8.7CNA v4.00.7%2026-10-14Fix
CVE-2026-35161Dell PowerScale InsightIQ denial of service5.3CNA v3.10.4%2026-10-14Fix
CVE-2026-33798Juniper Networks Junos OS Evolved stack-based buffer overflow8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-33796Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow9.3CNA v4.00.6%2026-10-14Fix
CVE-2026-33795Juniper Networks Junos OS Evolved numeric truncation8.7CNA v4.00.4%2026-10-14Fix
CVE-2026-33792Juniper Networks Junos OS srxpfe process stack-based buffer overflow9.3CNA v4.00.6%2026-10-14Fix
CVE-2026-33789Juniper Networks Junos OS routing protocol daemon stack-based buffer overflow9.2CNA v4.00.7%2026-10-14Fix
CVE-2026-25946Gitea OpenID discovery server-side request forgery5.3CISA ADP v3.10.4%2026-10-14Fix
CVE-2026-19673zephyrproject Zephyr Ethernet L2 out-of-bounds read7.1CNA v3.10.3%2026-10-14Fix
CVE-2026-17092wpWax Directorist missing authorization8.1CNA v3.10.5%2026-10-14Fix
CVE-2026-16741TR7 Cyber Defense TR7 ASP OS command improper neutralization9.8CNA v3.11.7%2026-10-14Fix
CVE-2026-16740Missing authentication for critical function in TR7 Cyber Defense's TR7 ASP9.8CNA v3.11.7%2026-10-14Fix
CVE-2026-16495Countdown Timer Widget Countdown WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-10-14
CVE-2026-15176F5 NGINX ngx_http_core_module heap-based buffer overflow9.2CNA v4.00.5%2026-10-14Fix
CVE-2026-15102Cleartext transmission of sensitive information in ADP Desktop SDK7.5CNA v3.10.1%2026-10-14Fix
CVE-2026-14851Unauthorised disclosure of information on Copart’s online billing service9.2CNA v4.00.3%2026-10-14Fix
CVE-2026-14765Epic Games Unreal Engine insecure default URL Scheme Allowance in LaunchURL7.7CNA v3.10.4%2026-10-14
CVE-2026-0322Palo Alto Networks PAN-OS code injection8.6CNA v4.01.2%2026-10-14KEVExploit codeFix
CVE-2026-0321PAN-OS: Denial of service (DoS) vulnerabilities in Network services6.6CNA v4.00.3%2026-10-14Fix
CVE-2026-0320PAN-OS: Authenticated admin command injection6.1CNA v4.00.8%2026-10-14Fix
CVE-2026-0319PAN-OS: Improper Input Handling vulnerability4.9CNA v4.00.3%2026-10-14Fix
CVE-2026-0318PAN-OS: Denial of service (DoS) on Panorama4.6CNA v4.00.3%2026-10-14Fix
CVE-2026-0317PAN-OS: Denial of service1.2CNA v4.00.3%2026-10-14Fix
CVE-2026-0316PAN-OS: Stored cross-site scripting (XSS)1.1CNA v4.00.3%2026-10-14Fix
CVE-2026-0315GlobalProtect App: Local privilege escalation vulnerability on macOS5.9CNA v4.00.1%2026-10-14Fix
CVE-2026-0314GlobalProtect App: Local denial of service (DoS) on Windows4.3CNA v4.00.1%2026-10-14Fix
CVE-2026-0313Cortex XSOAR: OS command injection6.1CNA v4.00.8%2026-10-14Fix
CVE-2026-0312Checkov by Prisma Cloud: Path traversal4.3CNA v4.00.1%2026-10-14Fix
CVE-2026-0311Checkov by Prisma Cloud: Server-side request forgery1.1CNA v4.00.1%2026-10-14Fix
CVE-2026-110256Dockhand Username Enumeration via LDAP injection in tryLdapAuth6.3CNA v4.00.3%2026-10-13Fix
CVE-2026-110255Dockhand SSRF via /API/templates/compose endpoint8.4CNA v4.00.3%2026-10-13Fix
CVE-2026-110254Dockhand SSRF via IPv6 Transition Address Bypass in ipCategory5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-110249Mozilla Thunderbird denial of service in the Exchange email component8.6CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110247Mozilla Thunderbird integer overflow in libmime buffer growth could lead to heap corruption8.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110240Lancet SSRF Protection Bypass via netutil.IsInternalIP6.3CNA v4.00.3%2026-10-13
CVE-2026-110239zofe rapyd-admin rapyd Admin stored XSS via rich-text component2.1CNA v4.00.2%2026-10-13Fix
CVE-2026-110238zofe rapyd-admin rapyd Admin authorization bypass via UsersModalEditEmbed component8.7CNA v4.00.5%2026-10-13Fix
CVE-2026-110237Vifm Unverified IPC FIFO Ownership allows Cross-user command execution7.0CNA v4.00.1%2026-10-13Fix
CVE-2026-110236KDE Dolphin OS command injection via Crafted Folder Name7.1CNA v4.01.0%2026-10-13
CVE-2026-110235MP Manager path traversal via Archive Extraction sanitizeEntryName Bypass6.7CNA v4.00.3%2026-10-13Fix
CVE-2026-110234Elio insecure temporary file Creation in External Preview Command Capture4.1CNA v4.00.1%2026-10-13Fix
CVE-2026-110233rovr OS command injection via unquoted path to cmd.exe8.4CNA v4.01.1%2026-10-13Fix
CVE-2026-110232Fossify File Manager Zip Slip path traversal via DecompressActivity4.6CNA v4.00.2%2026-10-13Fix
CVE-2026-110231muCommander path traversal via Archive Extraction to FTP/SFTP5.6CNA v4.00.2%2026-10-13Fix
CVE-2026-110230XBackBone missing authorization via Upload Vanity endpoint5.3CNA v4.00.3%2026-10-13
CVE-2026-110229QloApps Missing Hotel Access Restriction in Credit Slips5.3CNA v4.00.3%2026-10-13
CVE-2026-110228wallabag stored XSS via Failed HTML Import upload5.1CNA v4.00.2%2026-10-13
CVE-2026-110226QloApps authorization bypass via id_hotel in Room Type Creation5.3CNA v4.00.3%2026-10-13
CVE-2026-110225Shaarli SSRF via Thumbnail Retrieval update-thumbnail route5.1CNA v4.00.3%2026-10-13
CVE-2026-110224QloApps reflected XSS via Search Alias Validation Errors5.1CNA v4.00.3%2026-10-13
CVE-2026-110223Kavita SSRF Blocklist Bypass via upload-cbl-file endpoint2.3CNA v4.00.3%2026-10-13
CVE-2026-110222Razorpay IFSC Ruby gem SSRF via IFSC lookup6.9CNA v4.00.3%2026-10-13
CVE-2026-110221QloApps reflected XSS via Advanced Price Rule Name and Impact Value5.1CNA v4.00.2%2026-10-13
CVE-2026-110220Kubeflow Model Registry SSRF via InferenceService Controller URL Annotation7.1CNA v4.00.3%2026-10-13
CVE-2026-110219QloApps reflected XSS via Additional Facility Price field5.1CNA v4.00.3%2026-10-13
CVE-2026-110218Aureus ERP Unpublished Blog Post Disclosure via Direct URL6.3CNA v4.00.4%2026-10-13Fix
CVE-2026-110217vhr through commit 03abbd3 information disclosure of Operator Password Hashes via GET /chat/hrs7.1CNA v4.00.5%2026-10-13
CVE-2026-110216youlai-boot missing authorization in User Status Update endpoint7.1CNA v4.00.4%2026-10-13
CVE-2026-110215youlai-boot missing authorization in Role Menu Assignment allows privilege escalation8.7CNA v4.00.4%2026-10-13
CVE-2026-110214Snowy Hard-coded Download Signature Key allows Unauthenticated File Download6.3CNA v4.00.5%2026-10-13
CVE-2026-110213ai-fusion-video insecure direct object reference in Generation Task Item endpoints5.3CNA v4.00.3%2026-10-13
CVE-2026-110212ai-fusion-video path traversal in Media upload subDir parameter5.3CNA v4.00.4%2026-10-13
CVE-2026-110211SkillHub missing authorization in CLI Skill Delete endpoint7.2CNA v4.00.4%2026-10-13
CVE-2026-110210Phase Console missing authorization via secretHistory GraphQL Query6.0CNA v4.00.4%2026-10-13
CVE-2026-110209ai-fusion-video missing authorization in Configuration Read endpoints exposes Stored Credentials7.1CNA v4.00.5%2026-10-13
CVE-2026-110208Wukong AICRM missing authorization in System Configuration APIs exposes Stored AI Provider Keys7.1CNA v4.00.4%2026-10-13
CVE-2026-110207Wukong AICRM missing authorization in User and Role Management APIs8.7CNA v4.00.4%2026-10-13
CVE-2026-110206Roo-Code Auto-Approve Bypass via Command Substitution at Command Position7.7CNA v4.00.5%2026-10-13
CVE-2026-110205Roo-Code Auto-Approve Bypass via Glob Token Discarding Command Substitution7.7CNA v4.00.5%2026-10-13
CVE-2026-110204Roo-Code Auto-Approve Bypass via Funsub Command Substitution7.7CNA v4.00.5%2026-10-13
CVE-2026-110203Roo-Code Auto-Approve Bypass via Quote Masking Desynchronization7.7CNA v4.00.5%2026-10-13
CVE-2026-110202Roo-Code Auto-Approve Bypass via Redirect Operator Stripping7.7CNA v4.00.3%2026-10-13
CVE-2026-110172Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110171Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110170Google Chrome Bindings use-after-free4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110169Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110168Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110167Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110166Google Chrome Animation buffer overflow8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110165Google Chrome Core use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110164Google Chrome DOM use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110163Google Chrome DOM use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110162Google Chrome Desktop use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110161Google Chrome Network use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110160Google Chrome ReadingMode missing authorization4.2CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110159Google Chrome Updater incorrect authorization9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110158Google Chrome Passwords use-after-free8.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110157Google Chrome SVG use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110156Google Chrome incorrectly resolved name or reference8.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110155Google Chrome PDFium buffer overflow8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110154Google Chrome Canvas use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110153Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110152Google Chrome ANGLE buffer overflow9.6CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-110151Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110150Google Chrome execution with unnecessary privileges5.5CISA ADP v3.10.1%2026-10-13Fix
CVE-2026-110149Google Chrome Browser use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110148Google Chrome SVG use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110147Google Chrome PDF use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110146Google Chrome Passwords information disclosure6.5CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110145Google Chrome Passwords use-after-free8.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110144Google Chrome Mojo incorrect authorization8.6NVD v3.10.2%2026-10-13Fix
CVE-2026-110143Google Chrome ThirdParty lmza_sdk uninitialized variable use4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110142Google Chrome FileSystem use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110141Google Chrome Media observable discrepancy3.1CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-110140Google Chrome V8 type confusion8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110139Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110138Google Chrome ShapeDetection use-after-free8.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110137Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-110136Google Chrome PDF use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-110131ThriveX-Server missing authorization via Article Retrieval endpoints6.9CNA v4.00.3%2026-10-13Fix
CVE-2026-110130Dockhand authentication bypass via Static-Asset Check10.0CNA v4.00.6%2026-10-13Fix
CVE-2026-110129fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail7.1CNA v4.00.3%2026-10-13
CVE-2026-110128fuint through commit 4c4bc8a missing authentication via /clientApi/order/detail8.7CNA v4.00.4%2026-10-13
CVE-2026-110127waynboot-mall IDOR via Mobile Cart endpoints5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-110126waynboot-mall IDOR via Mobile Address endpoints5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-110125waynboot-mall IDOR via Mobile Order endpoints5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-110124FastBee IDOR via DeviceController /iot/device endpoints8.6CNA v4.00.3%2026-10-13
CVE-2026-110123Makunet maku-boot missing authorization via Mail and SMS Config endpoints7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-110122PickMall lilishop IDOR via Goods Freight endpoint5.3CNA v4.00.2%2026-10-13
CVE-2026-110121PickMall lilishop IDOR via Goods Edit endpoint7.1CNA v4.00.3%2026-10-13
CVE-2026-110120yshopmall IDOR via After-Sales API in StoreAfterSalesController5.3CNA v4.00.2%2026-10-13
CVE-2026-110119yshopmall IDOR via Member Address API in UserAddressController7.1CNA v4.00.3%2026-10-13
CVE-2026-110118WorkFlow-Engine missing authorization via flowableui buttonOperation endpoints7.1CNA v4.00.3%2026-10-13
CVE-2026-110117SmartAdmin missing authorization via AdminProtectController7.1CNA v4.00.3%2026-10-13
CVE-2026-110116Digital-Infrastructure path traversal via fileManager storeFile8.8CNA v4.00.6%2026-10-13
CVE-2026-110115Digital-Infrastructure path traversal via fileManager retrieveFileStream8.7CNA v4.00.4%2026-10-13
CVE-2026-110114oms-erp through PRE missing authentication via skyer-goods es-test endpoints6.9CNA v4.00.4%2026-10-13
CVE-2026-110113PublicCMS IDOR via tradeAddress/save endpoint5.3CNA v4.00.2%2026-10-13
CVE-2026-110112Dockhand OIDC privilege escalation via Missing Token Claim Validation9.2CNA v4.00.4%2026-10-13Fix
CVE-2026-110111vatesfr xen-orchestra xen Orchestra privilege escalation7.7CNA v4.00.6%2026-10-13Fix
CVE-2026-110110JetLinks Community missing authorization via Alarm Enable/Disable endpoints5.3CNA v4.00.2%2026-10-13
CVE-2026-110109JetLinks Community missing authorization via Product-Level Transparent Codec Save7.1CNA v4.00.3%2026-10-13
CVE-2026-110108MateCloud missing authorization via /API/v1/admin/storage API8.6CNA v4.00.3%2026-10-13
CVE-2026-110107Dromara RuoYi-Cloud-Plus insecure direct object reference2.3CNA v4.00.3%2026-10-13
CVE-2026-110106Dromara RuoYi-Vue-Plus insecure direct object reference2.3CNA v4.00.3%2026-10-13
CVE-2026-110105B3log Symphony missing authorization in Admin Console Routes6.9CNA v4.00.3%2026-10-13
CVE-2026-110104Novel Unsalted MD5 Password Storage8.2CNA v4.00.3%2026-10-13
CVE-2026-110103bbs-go stored XSS via Image Upload Content-Type5.1CNA v4.00.2%2026-10-13
CVE-2026-110102powerlevel10k download of code without integrity check in gitstatus Installer7.7CNA v4.00.1%2026-10-13
CVE-2026-110101Koillection stored XSS via Datum File Attachment Uploads5.1CNA v4.00.2%2026-10-13Fix
CVE-2026-110100Jorani missing authorization and SSRF via Contracts::import5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-110099Jorani missing authorization in HR Export Actions5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-110098Jorani insecure direct object reference in Leave and Overtime requests5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-110097Ikaros TOTP authentication bypass via Temp Token8.6CNA v4.00.4%2026-10-13Fix
CVE-2026-110084Adobe Experience Manager XML injection (aka blind XPath injection)7.1CNA v3.10.4%2026-10-13Fix
CVE-2026-110083Adobe Experience Manager improper neutralization of special elements used in an SQL command7.1CNA v3.10.3%2026-10-13Fix
CVE-2026-110082Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-110081Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-110080Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110079Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110078Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110077Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110076Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110075Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110074Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-110073Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-110037Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-110036Red Hat device-mapper-persistent-data denial of service3.3CNA v3.10.1%2026-10-13
CVE-2026-110025slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload6.9CNA v4.00.4%2026-10-13Exploit codeFix
CVE-2026-110005Moghtech Komodo contains an OS command injection8.8CISA ADP v3.12.1%2026-10-13Fix
CVE-2026-109976Clevis clevis-pkcs11-afunix-socket-unlock daemon integer underflow4.7CNA v3.10.1%2026-10-13
CVE-2026-109967yt-dlp-web-ui null pointer dereference DoS via Service.Formats8.7CNA v4.00.6%2026-10-13
CVE-2026-109966yt-dlp-web-ui argument injection via Service.Formats JSON-RPC method6.9CNA v4.00.4%2026-10-13
CVE-2026-109965Serena symlink following in file tools allows Access Outside Project Root8.4CNA v4.00.2%2026-10-13Fix
CVE-2026-109964ImageMagick and heap buffer underwrite in PICT Decoder6.3CNA v4.00.4%2026-10-13Fix
CVE-2026-109963Froxlor IDOR in Email Template Editor via admin_templates.php5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109962Froxlor missing authorization in MysqlServer and Cronjobs API5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109961Froxlor Newline injection via Ftps.add additional_members8.4CNA v4.00.2%2026-10-13Fix
CVE-2026-109960froxlor customer_index.php stored cross-site scripting8.7CNA v4.00.3%2026-10-13Fix
CVE-2026-109959EspoCRM Field-Level Security Bypass via Note Read endpoint5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109958EspoCRM Field-Level Access Bypass via Address-Book Search5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109957EspoCRM IDOR via Import attachmentId parameter5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109956NLTK path traversal via WekaClassifier Model Path8.3CNA v4.00.3%2026-10-13Fix
CVE-2026-109955Hono Middleware Bypass via serveStatic Double Decoding6.9CNA v4.00.3%2026-10-13Fix
CVE-2026-109954parse-community parse-server Parse Server Transactional Batch Request Write Interference8.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109953FreeRDP Cleartext credential disclosure via /restricted-admin6.0CNA v4.00.2%2026-10-13Fix
CVE-2026-109952FreeRDP Security Protocol Downgrade via Negotiation Response6.0CNA v4.00.3%2026-10-13Fix
CVE-2026-109951FreeRDP heap buffer over-read via Proxy DRDYNVC Channel Name6.9CNA v4.00.3%2026-10-13Fix
CVE-2026-109950FreeRDP heap out-of-bounds read via RD Gateway messages5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-109949FreeRDP PIN brute-force via Virtual Smartcard7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109948FreeRDP Memory Disclosure via SCardTransmit Smartcard Redirection5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-109947FreeRDP Unbounded Allocation via drive_process_irp_read7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109946FreeRDP reachable assertion via AVC444 Odd Region Width7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109945FreeRDP Smartcard use-after-free via Concurrent Disconnect and Transmit6.0CNA v4.00.2%2026-10-13Fix
CVE-2026-109944FreeRDP reachable assertion via Stale Smartcard Handle7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109943FreeRDP double free via Async-Update Polygon Order7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109942FreeRDP null pointer dereference via RD Gateway Close Channel Packet7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109941FreeRDP infinite loop via RD Gateway Chunked Response7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109940FreeRDP stack buffer overflow via PKCS#11 Key Name5.1CNA v4.00.1%2026-10-13Fix
CVE-2026-109939FreeRDP null pointer dereference via Cache Bitmap V3 Order7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109938FreeRDP integer overflow via Mapped Video Geometry Update7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109898WP Event Solution WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-109896Download Monitor integration for WooCommerce WordPress plugin broken access control4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-109890Premium Addons for Elementor WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-109854m17n-lib ISO-2022 compound text UTF-8 decoding vulnerability2.5CNA v3.10.2%2026-10-13Fix
CVE-2026-109833gnome-remote-desktop VNC TLS peek buffer heap buffer overflow5.9CNA v3.10.4%2026-10-13
CVE-2026-109832Red Hat Enterprise Linux 10 gnome-remote-desktop: Busy-wait DoS in vnc TLS i/o handlers7.5CNA v3.10.4%2026-10-13
CVE-2026-109828libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable5.3CNA v4.00.4%2026-10-13
CVE-2026-109827GPAC AIT parser ait.c gf_m2ts_decode_ait out-of-bounds write5.3CNA v4.00.3%2026-10-13
CVE-2026-109786fail2ban log injection5.3CNA v3.10.3%2026-10-13
CVE-2026-109783Mozilla Firefox Mitigation bypass in the File Handling component–0.2%2026-10-13Fix
CVE-2026-109782Mozilla Firefox Mitigation bypass in the File Handling component–0.2%2026-10-13Fix
CVE-2026-109781Mozilla Firefox denial of service in the Printing: Output component6.5CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109780Mozilla Firefox mitigation bypass in the DOM: Core and HTML component–0.2%2026-10-13Fix
CVE-2026-109779Mozilla Firefox race condition in the Networking: DNS component4.2CISA ADP v3.10.1%2026-10-13Fix
CVE-2026-109778Mozilla Firefox privilege escalation in the WebExtensions component8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109777Mozilla Firefox information disclosure in the Storage: IndexedDB component4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109776Mozilla Firefox race condition in the XPCOM component4.2CISA ADP v3.10.1%2026-10-13Fix
CVE-2026-109775Mozilla Firefox denial of service in the WebRTC component6.5CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109774Mozilla Firefox invalid pointer, undefined behavior in the DOM: Notifications component–0.2%2026-10-13Fix
CVE-2026-109773Mozilla Firefox denial of service in the Sync component6.5CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109772Mozilla Firefox same-origin policy bypass in the DevTools component–0.2%2026-10-13Fix
CVE-2026-109771Mozilla Firefox information disclosure in the WebRTC: Networking component4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109770Mozilla Firefox spoofing issue in the DOM: Web Serial component6.1CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109769Mozilla Firefox information disclosure in the Networking: Cache component4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109768Mozilla Firefox denial of service in the Site Reports component6.5CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109767Mozilla Firefox information disclosure in the Networking component4.3CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109766Mozilla Firefox Mitigation bypass in the Enterprise Policies component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109765Mozilla Firefox race condition, use-after-free in the Graphics: Text component4.2CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109764Mozilla Firefox Mitigation bypass in the Enterprise Policies component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109763Mozilla Firefox Mitigation bypass in the File Handling component–0.2%2026-10-13Fix
CVE-2026-109762Mozilla Firefox incorrect boundary conditions in the SVG component8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109761Mozilla Firefox use-after-free in the JavaScript: WebAssembly component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109760Mozilla Firefox mitigation bypass in the Networking: HTTP component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109759Mozilla Firefox site isolation issue in the Networking component8.1CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109758Perforce Helix Authentication Service hard-coded credentials9.3CNA v4.00.4%2026-10-13Fix
CVE-2026-109757Mozilla Firefox sandbox escape due to race condition in the Networking component8.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109756Mozilla Firefox privilege escalation in the DOM: Navigation component8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109755Mozilla Firefox sandbox escape in the DOM: Content Processes component9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109754Mozilla Firefox incorrect boundary conditions in the DOM: Editor component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109753Mozilla Firefox incorrect boundary conditions in the Layout component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109752Mozilla Firefox use-after-free in the DOM: Workers component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109751Mozilla Firefox information disclosure in the Networking component4.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109750Mozilla Firefox Site isolation issue in the DOM: Web Authentication component9.6CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-109749Mozilla Firefox use-after-free in the JavaScript: WebAssembly component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109748Mozilla Firefox use-after-free in the JavaScript: WebAssembly component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109747Mozilla Firefox Other issue in the Address Bar component7.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109746Mozilla Firefox mitigation bypass in the DOM: Security component7.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109745Mozilla Firefox sandbox escape due to uninitialized memory in the DOM: Web Serial component9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109744Mozilla Firefox other issue in the DOM: File component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109743Mozilla Firefox privilege escalation in the Panning and Zooming component8.8CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-109742Mozilla Firefox information disclosure in the PDF Viewer component4.3CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109741Mozilla Firefox use-after-free in the Storage: Bucket File System component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109740Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109739Mozilla Firefox privilege escalation in the WebExtensions component8.8CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-109738Mozilla Firefox use-after-free in the Audio/Video: Playback component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109737Mozilla Firefox Mitigation bypass in the Enterprise Policies component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109736Mozilla Firefox frame poisoning in the Layout component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109735Mozilla Firefox use-after-free in the DOM: Animation component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109734Mozilla Firefox mitigation bypass in the DOM: Security component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109733Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109732Mozilla Firefox use-after-free in the DOM: Streams component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109731Mozilla Firefox incorrect boundary conditions in the Graphics: Canvas2D component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109730Mozilla Firefox integer overflow in the Graphics component8.8CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-109729Mozilla Firefox use-after-free in the JavaScript Engine: JIT component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109728Mozilla Firefox use-after-free in the DOM: Animation component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109727Mozilla Firefox use-after-free in the Audio/Video component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109726Mozilla Firefox use-after-free in the SVG component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109725Mozilla Firefox use-after-free in the DOM: Core and HTML component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109724Mozilla Firefox use-after-free in the DOM: Core and HTML component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109723Mozilla Firefox integer overflow in the Layout: Text and Fonts component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109722Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109721Mozilla Firefox incorrect boundary conditions in the JavaScript Engine: JIT component5.4CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109720Mozilla Firefox JIT miscompilation in the JavaScript: WebAssembly component7.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109719Mozilla Firefox race condition, use-after-free in the Graphics: CanvasWebGL component4.2CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109718Mozilla Firefox use-after-free in the XML component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109717Mozilla Firefox use-after-free in the DOM: Bindings (WebIDL) component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109716Mozilla Firefox incorrect boundary conditions in the JavaScript Engine component8.1CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109715Mozilla Firefox incorrect boundary conditions in the JavaScript Engine component8.1CISA ADP v3.10.3%2026-10-13Exploit codeFix
CVE-2026-109714Mozilla Firefox incorrect boundary conditions in the Layout component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109713Mozilla Firefox use-after-free in the crash Reporting component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109712Mozilla Firefox sandbox escape due to uninitialized memory in the Graphics component7.1CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109711Mozilla Firefox use-after-free in the Graphics: Canvas2D component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109710Mozilla Firefox use-after-free in the Graphics: Text component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109709Mozilla Firefox and Thunderbird Process Sandboxing information disclosure8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109708Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Networking component9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109707Mozilla Firefox sandbox escape due to use-after-free in the Networking component9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109706Mozilla Firefox use-after-free in the Storage: IndexedDB component5.4CISA ADP v3.10.2%2026-10-13Fix
CVE-2026-109705Mozilla Firefox and Thunderbird Networking component use-after-free9.6CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109704Mozilla Firefox privilege escalation in the Application Update component8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-109703WPGraphQL WordPress plugin sensitive data exposure5.3CNA v3.10.2%2026-10-13
CVE-2026-109699User Registration WordPress plugin broken access control5.4CNA v3.10.2%2026-10-13Fix
CVE-2026-109697SureCart WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-109696FluentBoards WordPress plugin broken access control5.4CNA v3.10.1%2026-10-13Fix
CVE-2026-109691Prime Slider Addons For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-109687Link Whisper Free WordPress plugin SQL injection7.6CNA v3.10.2%2026-10-13Fix
CVE-2026-109684Amelia WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-109680FreeRDP heap out-of-bounds write via ARM Redirected Username6.0CNA v4.00.3%2026-10-13Fix
CVE-2026-109679FreeRDP null pointer crash via ARM Response6.0CNA v4.00.3%2026-10-13Fix
CVE-2026-109678FreeRDP reachable assertion via Emulated SCardStatusA7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109677FreeRDP out-of-bounds read via LocateCardsByATRA handler7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-109676FreeRDP use-after-free via Smartcard Connect8.7CNA v4.00.3%2026-10-13Fix
CVE-2026-109620SourceCodester Online Reviewer System index.php prepare SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-109607SourceCodester Online Exam System Login endpoint loginExe.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-109606SourceCodester Art Gallery Management System Account Creation admin_class.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-109605SourceCodester Simple Cafe Billing System User Management admin_class.php improper authorization6.9CNA v4.00.5%2026-10-13
CVE-2026-109526HBAI-Ltd Toonflow-app exportData endpoint information disclosure4.8CNA v4.00.1%2026-10-13Fix
CVE-2026-109525girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization6.9CNA v4.00.3%2026-10-13
CVE-2026-109524girishsaraf Online-Appointment-Booking-System Admin Display pages showdoctor.php authorization6.9CNA v4.00.5%2026-10-13
CVE-2026-109523girishsaraf Online-Appointment-Booking-System AJAX endpoint getclinic.php SQL injection6.9CNA v4.00.3%2026-10-13
CVE-2026-109522girishsaraf Online-Appointment-Booking-System Admin CRUD endpoint deleteclinic.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-109521girishsaraf Online-Appointment-Booking-System changebookingstatus.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-109520Colorful iGameCenter AMDRyzenMasterDriver.sys Dispatch Handler incorrect privilege assignment9.3CNA v4.00.2%2026-10-13
CVE-2026-109519YouTransfer Template Rendering template path traversal6.9CNA v4.00.7%2026-10-13Exploit code
CVE-2026-109453Microsoft Windows virtual Hard Disk (VHD) Miniport driver elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-109429Mistral AI mistral-vibe permission bypass8.7CNA v4.00.6%2026-10-13Fix
CVE-2026-109428mistralai mistral-vibe Mistral Vibe permission bypass via Bash Line Continuation8.7CNA v4.00.5%2026-10-13Fix
CVE-2026-109415Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-109412Ivanti Neurons Patch for Intune exposed dangerous method9.9CNA v3.10.9%2026-10-13Fix
CVE-2026-109410macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation4.8CNA v4.00.3%2026-10-13
CVE-2026-109409HBAI-Ltd Toonflow-app Open Folder endpoint openFolder.ts child_process.exec command injection4.8CNA v4.00.7%2026-10-13Fix
CVE-2026-109407macrozheng mall Coupon Redemption generateOrder race condition2.3CNA v4.00.3%2026-10-13
CVE-2026-109406macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error5.3CNA v4.00.3%2026-10-13
CVE-2026-109405conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery6.9CNA v4.00.5%2026-10-13
CVE-2026-109404conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery6.9CNA v4.00.5%2026-10-13
CVE-2026-109403conductor-oss conductor Agent Card Fetching server-side request forgery6.9CNA v4.00.4%2026-10-13
CVE-2026-109402conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery5.3CNA v4.00.3%2026-10-13
CVE-2026-109190conductor-oss conductor API Tool Configuration server-side request forgery5.3CNA v4.00.3%2026-10-13
CVE-2026-109189fit2cloud MeterSphere Swagger3 Parser server-side request forgery5.3CNA v4.00.3%2026-10-13
CVE-2026-109162TYPO3 CMS Security Misconfiguration in Form Framework6.3CNA v4.00.5%2026-10-13Fix
CVE-2026-109160PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect5.3CNA v4.00.3%2026-10-13
CVE-2026-109157TRENDnet TEW-432BRP formTcpipSetup stack-based overflow9.4CNA v4.00.6%2026-10-13Emerging Threats
CVE-2026-109156SeldonIO MLServer environment_tarball env.py _extract_env path traversal5.3CNA v4.00.4%2026-10-13
CVE-2026-109155DeepPavlov Model Download untar path traversal5.3CNA v4.00.4%2026-10-13
CVE-2026-109153MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal5.3CNA v4.00.5%2026-10-13
CVE-2026-109152jbardin scp.py SCP Receive _recv_pushd path traversal5.3CNA v4.00.6%2026-10-13Fix
CVE-2026-109149beautifier js-beautify excessive memory allocation6.9CNA v4.00.5%2026-10-13
CVE-2026-109144wbond certvalidator Certificate Path Builder resource consumption6.9CNA v4.00.3%2026-10-13
CVE-2026-109143calcom cal.com/cal.diy Credentials delete credentials.delete privileges management5.3CNA v4.00.2%2026-10-13
CVE-2026-109116AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization6.9CNA v4.00.3%2026-10-13
CVE-2026-109115AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php SQL injection6.9CNA v4.00.3%2026-10-13
CVE-2026-109114AdithyaYelloju Restaurant-Management-System Login form login.php improper authentication6.9CNA v4.00.5%2026-10-13
CVE-2026-109110Wavlink WL-WN592AX6 wmapd system os command injection10.0CNA v4.02.0%2026-10-13
CVE-2026-109109Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow10.0CNA v4.00.6%2026-10-13
CVE-2026-109108Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection9.4CNA v4.02.3%2026-10-13
CVE-2026-109107Wavlink WL-WN592AX6 upload.cgi main null pointer dereference6.9CNA v4.00.5%2026-10-13
CVE-2026-109106Polaris Office App Document Intake com.infraware.service.m.n.a path traversal4.8CNA v4.00.2%2026-10-13Fix
CVE-2026-108975SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload6.9CNA v4.00.3%2026-10-13
CVE-2026-108974SourceCodester E-Learning System Users.php save_users unrestricted upload6.9CNA v4.00.3%2026-10-13
CVE-2026-108973SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload6.9CNA v4.00.3%2026-10-13
CVE-2026-108972SourceCodester Human Resource Management System improper authentication6.9CNA v4.00.7%2026-10-13
CVE-2026-108971D-Link DCS-930L Emergency HTTP Recovery Server improper signature verification9.4CNA v4.00.2%2026-10-13
CVE-2026-108970itsmeravitejak Online-Examination-System Registration form database.php addNewUser SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-108969itsmeravitejak Online-Examination-System Session session.php checkLogin comparison6.9CNA v4.00.5%2026-10-13
CVE-2026-108968SourceCodester Performance Indicator System sales_history.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-108967SourceCodester Performance Indicator System edit_credit.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-108966SourceCodester Performance Indicator System product.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-108965SourceCodester Performance Indicator System edit_quantity.php SQL injection6.9CNA v4.00.3%2026-10-13
CVE-2026-108964SourceCodester Performance Indicator System addproduct.php SQL injection6.9CNA v4.00.4%2026-10-13
CVE-2026-108962storyicon comfyui_segment_anything GroundingDINO Model Loading code injection5.3CNA v4.00.4%2026-10-13
CVE-2026-108961PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection5.3CNA v4.00.4%2026-10-13
CVE-2026-108960Tiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds4.8CNA v4.00.2%2026-10-13
CVE-2026-108959itsourcecode Online Cake Ordering System addtransacdetail.php SQL injection5.3CNA v4.00.2%2026-10-13
CVE-2026-108958TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization5.3CNA v4.00.3%2026-10-13
CVE-2026-108957TinyLLaVA_Factory TinyLlavaConfig code injection5.3CNA v4.00.2%2026-10-13
CVE-2026-108956code-projects Online Reviewer System User Update btn_functions.php SQL injection6.9CNA v4.00.3%2026-10-13
CVE-2026-108955Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds4.8CNA v4.00.1%2026-10-13
CVE-2026-108954k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder buffer overflow5.3CNA v4.00.3%2026-10-13
CVE-2026-108948code-projects Online Reviewer System User Profile Update Handler mass assignment5.3CNA v4.00.3%2026-10-13
CVE-2026-108947yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization4.8CNA v4.00.3%2026-10-13
CVE-2026-108945iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection4.8CNA v4.00.1%2026-10-13
CVE-2026-108944repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection2.4CNA v4.00.1%2026-10-13
CVE-2026-108943ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection4.8CNA v4.00.1%2026-10-13
CVE-2026-108942philz1337x clarity-upscaler Extra Networks Card Rendering cross-site scripting5.1CNA v4.00.2%2026-10-13
CVE-2026-108496WP User Manager WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-108495SureForms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-108493Pay for Payment for WooCommerce WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-108492Quick Paypal Payments WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-108490Premium Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-108489Active Products Tables for WooCommerce WordPress plugin sensitive data exposure5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-108488PowerPack Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-108487Books Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-108471Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108468Microsoft Windows Installer elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108467Microsoft PostScript Printer driver remote code execution8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-108466Microsoft Windows Kernel denial of service5.3CNA v3.10.6%2026-10-13Fix
CVE-2026-108465Microsoft Windows Update Delivery Optimization elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108464Microsoft Windows Software Protection Platform (SPP) elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108463Microsoft Windows SmartScreen security feature bypass8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-108462Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-108461Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108460Microsoft Windows Message Queuing remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-108458Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-108457Microsoft Windows PDF remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-108400Microsoft HEVC Video Extensions remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-108399Microsoft Windows Hyper-V elevation of privilege7.2CNA v3.10.3%2026-10-13Fix
CVE-2026-108398NET Framework security feature bypass8.8CNA v3.10.5%2026-10-13Fix
CVE-2026-108396Microsoft Windows Modern Device Management (MDM) elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-108388Indico legacy contribution export cache poisoning discloses restricted metadata3.5CNA v3.10.3%2026-10-13Fix
CVE-2026-108385dataclasses-avroschema enum symbols can inject statements through generated member names8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-108384dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108383dataclasses-avroschema enum field defaults can inject statements into generated modules8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108382dataclasses-avroschema allows code injection through generated enum-symbol string literals8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-108381dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108380dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions8.8CNA v3.10.5%2026-10-13Fix
CVE-2026-108379dataclasses-avroschema fixed namespaces allow code injection in generated annotations8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108378dataclasses-avroschema record documentation can terminate generated class docstrings8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108377dataclasses-avroschema allows code injection through generated Meta.schema_name8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-108376dataclasses-avroschema allows code injection through record names in generated default factories8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-108375dataclasses-avroschema allows code injection through generated field-default literals8.8CNA v3.10.5%2026-10-13Fix
CVE-2026-108185Zoom Communications Zoom Clients My Notes feature of certain improper certificate validation7.4CNA v3.10.2%2026-10-13
CVE-2026-108184Zoom Communications Zoom Clients certain improper certificate validation7.4CNA v3.10.2%2026-10-13
CVE-2026-108179WOLF WordPress plugin SQL injection7.6CNA v3.10.2%2026-10-13Fix
CVE-2026-108174FOX WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-108136Microsoft Windows Search component elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108135Microsoft Windows Backup Engine elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108134Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108133Microsoft Windows Modern Device Management (MDM) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108132Microsoft Windows Kerberos elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-108131Microsoft Windows Active Directory Federation Services (AD FS) spoofing7.5CNA v3.10.7%2026-10-13Fix
CVE-2026-108130Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-108129Microsoft Windows role: DNS server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-108128Microsoft Windows role: DNS server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-108127Microsoft Windows role: DNS server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-107918Insufficient input validation vulnerability in NETGEAR R73004.3CNA v4.00.2%2026-10-13Fix
CVE-2026-107917Insufficient input validation vulnerability in NETGEAR R7300 router4.3CNA v4.00.2%2026-10-13Fix
CVE-2026-107832fastify vulnerable to header validation bypass via case-sensitive propertyNames3.7CNA v3.10.3%2026-10-13Fix
CVE-2026-107682Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-107607Missing authentication for critical function in Swann Communications SWIFI-SE2KIC6.9CNA v4.00.2%2026-10-13
CVE-2026-107606Missing authentication for critical function in Swann Communications SWIFI-SE2KIC6.9CNA v4.00.2%2026-10-13
CVE-2026-107605Missing authentication for critical function in Swann Communications SWIFI-SE2KIC5.9CNA v4.00.2%2026-10-13
CVE-2026-107460Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding9.1CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-107371Missing Verification of auth_time Claim in auth0.js5.4CNA v3.10.2%2026-10-13Fix
CVE-2026-107370Improper Request Handling for Active Directory Logins in auth0-lock5.3CNA v3.10.3%2026-10-13Fix
CVE-2026-107369Improper validation of Post-Login Redirect URL in nextjs-auth06.1CNA v3.10.2%2026-10-13Fix
CVE-2026-107305Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-106634Adobe Experience Manager improper limitation of a pathname to a restricted directory7.7CNA v3.10.5%2026-10-13Fix
CVE-2026-106633Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-106632Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-106631Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-106630Adobe Experience Manager cross-site scripting (stored XSS)9.3CNA v3.10.7%2026-10-13Fix
CVE-2026-106629Adobe Experience Manager cross-site scripting (stored XSS)9.3CNA v3.10.7%2026-10-13Fix
CVE-2026-106628Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-106627Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-106626Adobe Experience Manager improper input validation9.1CNA v3.10.7%2026-10-13Fix
CVE-2026-106625Adobe Framemaker out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-106624Adobe ColdFusion improper control of generation of code (code injection)10.0CNA v3.11.0%2026-10-13Fix
CVE-2026-106623Adobe ColdFusion incorrect authorization7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-106622Adobe ColdFusion server-side request forgery (SSRF)10.0CNA v3.10.7%2026-10-13Fix
CVE-2026-106621Adobe ColdFusion improper control of generation of code (code injection)9.1CNA v3.10.7%2026-10-13Fix
CVE-2026-106620Adobe ColdFusion incorrect authorization9.6CNA v3.10.3%2026-10-13Fix
CVE-2026-106619Adobe ColdFusion improper input validation9.0CNA v3.10.6%2026-10-13Fix
CVE-2026-106618Adobe ColdFusion incorrect authorization8.8CNA v3.10.2%2026-10-13Fix
CVE-2026-106617Adobe ColdFusion incorrect authorization8.8CNA v3.10.1%2026-10-13Fix
CVE-2026-106616Adobe ColdFusion improper restriction of XML external entity reference (XXE)8.6CNA v3.10.5%2026-10-13Fix
CVE-2026-106615Adobe ColdFusion incorrect authorization8.8CNA v3.10.1%2026-10-13Fix
CVE-2026-106614Adobe ColdFusion incorrect authorization7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-106613Adobe ColdFusion improper input validation8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-106612Adobe ColdFusion incorrect authorization9.9CNA v3.10.4%2026-10-13Fix
CVE-2026-106598User Registration WordPress plugin sensitive data exposure5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-106597User Registration WordPress plugin broken access control5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-106176Fortinet FortiSIEM missing authorization3.4CNA v3.10.2%2026-10-13Fix
CVE-2026-106175Fortinet FortiSwitch double free2.1CNA v3.10.1%2026-10-13Fix
CVE-2026-106173Fortinet FortiSIEM path traversal9.4CNA v3.10.5%2026-10-13Reported exploitedEmerging ThreatsExploit codeFix
CVE-2026-106172Fortinet FortiSandbox hard-coded cryptographic key4.9CNA v3.10.2%2026-10-13Fix
CVE-2026-106171Fortinet FortiManager OS command injection5.3CNA v3.10.7%2026-10-13Fix
CVE-2026-106170Fortinet FortiSandbox uncaught exception4.8CNA v3.10.3%2026-10-13Fix
CVE-2026-106108Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory5.7CNA v4.00.2%2026-10-13Fix
CVE-2026-106090Adobe ColdFusion incorrect authorization8.8CNA v3.10.1%2026-10-13Fix
CVE-2026-106089Adobe ColdFusion incorrect authorization8.8CNA v3.10.2%2026-10-13Fix
CVE-2026-106047Ivanti Xtraction template export functionality path traversal7.7CNA v3.10.7%2026-10-13Fix
CVE-2026-106043Ivanti Xtraction missing authentication7.5CNA v3.10.7%2026-10-13Fix
CVE-2026-106042Ivanti Xtraction external control of a file path9.9CNA v3.10.8%2026-10-13Fix
CVE-2026-106035Ivanti Xtraction information disclosure5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-106034Ivanti Xtraction path traversal5.0CNA v3.10.5%2026-10-13Fix
CVE-2026-105994Adobe ColdFusion incorrect authorization7.7CNA v3.10.4%2026-10-13Fix
CVE-2026-105903Adobe ColdFusion improper control of generation of code (code injection)9.9CNA v3.10.5%2026-10-13Fix
CVE-2026-105902Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105901Adobe ColdFusion incorrect authorization8.8CNA v3.10.1%2026-10-13Fix
CVE-2026-105900Adobe ColdFusion improper input validation7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105899Adobe ColdFusion unrestricted upload of file with dangerous type10.0CNA v3.10.6%2026-10-13Fix
CVE-2026-105898Adobe ColdFusion incorrect authorization8.2CNA v3.10.1%2026-10-13Fix
CVE-2026-105897Adobe ColdFusion server-side request forgery (SSRF)8.6CNA v3.10.5%2026-10-13Fix
CVE-2026-105896Adobe Photoshop Desktop null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-105895Adobe Experience Manager improper input validation9.9CNA v3.10.6%2026-10-13Fix
CVE-2026-105881User Registration WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-105733Microsoft Windows Hyper-V remote code execution8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-105732Microsoft SysInternals elevation of privilege7.3CNA v3.10.4%2026-10-13Fix
CVE-2026-105731Microsoft Office Graphics component information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-105729Microsoft SysInternals elevation of privilege7.1CNA v3.10.3%2026-10-13Fix
CVE-2026-105728Dynamics Business Central information disclosure7.5CNA v3.10.9%2026-10-13Fix
CVE-2026-105727Microsoft Dynamics 365 Business Central elevation of privilege8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-105726Microsoft Defender information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-105725Microsoft Windows Security App elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-105723Microsoft Windows Distributed File System (DFS) elevation of privilege7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-105722Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-105720Microsoft Office SharePoint elevation of privilege4.3CNA v3.10.4%2026-10-13Fix
CVE-2026-105719Microsoft SharePoint server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-105718Microsoft Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-105717Microsoft Office Access remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-105716Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105715Microsoft Office Word remote code execution7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105714Microsoft Office Access remote code execution7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105713Microsoft Office SharePoint spoofing5.7CNA v3.10.4%2026-10-13Fix
CVE-2026-105599Microsoft Office PowerPoint remote code execution7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105598Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105597Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105596Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105595Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105593Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105592Microsoft Office Access remote code execution7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-105591Microsoft Office Access remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-105460Red Hat Enterprise Linux 10 bluez: Bluez: Stack-based out-of-bounds read in btmon5.5CNA v3.10.1%2026-10-13
CVE-2026-105458Reliance on untrusted inputs in a security decision in GitLab4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-105445Docker Hub account conversion could reassign an active personal access token to another user9.4CNA v4.00.4%2026-10-13Fix
CVE-2026-105443IBM WebSphere Application Server Liberty is affected by an improper access control8.2CNA v3.10.2%2026-10-13Fix
CVE-2026-105442IBM WebSphere Application Server messaging service deserialization of untrusted data7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-105390OpenVPN ovpn-dco-win improper synchronization6.9CNA v4.00.1%2026-10-13Fix
CVE-2026-105016Microsoft QUIC remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-105013Microsoft Office SharePoint remote code execution7.4CNA v3.10.8%2026-10-13Fix
CVE-2026-105010Microsoft Windows Search component elevation of privilege9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-105009Microsoft Windows Server Update service elevation of privilege7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-105008Microsoft Windows Schannel spoofing9.0CNA v3.10.6%2026-10-13Fix
CVE-2026-105007Microsoft Windows NDIS elevation of privilege8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-105006Microsoft Windows HID class driver elevation of privilege6.4CNA v3.10.3%2026-10-13Fix
CVE-2026-105005Microsoft Windows Schannel remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-105004Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-105003Microsoft Windows HID class driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-104937shopware stored cross-site scripting8.1CISA ADP v3.10.5%2026-10-13Fix
CVE-2026-104935Ivanti Connect Secure authentication bypass by spoofing8.6CNA v3.126.0%2026-10-13KEVNucleiEmerging ThreatsFix
CVE-2026-104875Ente: Accepted emergency contact can bypass the recovery notice period7.1CNA v3.10.3%2026-10-13Fix
CVE-2026-104817Misskey: Lack of rate limiting and size restrictions in RSS fetching API8.7CNA v4.00.5%2026-10-13Fix
CVE-2026-104816Misskey: Cross-site scripting in RSS feed item links8.5CNA v4.00.6%2026-10-13Fix
CVE-2026-104661Incorrect privilege assignment in GitLab4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-104587blob42 gosuki web interface bookmarks template stored cross-site scripting5.4CISA ADP v3.10.2%2026-10-13
CVE-2026-104585MobSF Mobile Security Framework Dynamic Analyzer ADB integration module command injection9.8CISA ADP v3.11.4%2026-10-13
CVE-2026-104584reNgine scan engine configuration OS command injection9.8CISA ADP v3.11.6%2026-10-13
CVE-2026-104348Adobe Photoshop Desktop heap-based buffer overflow7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-104347Adobe Photoshop Desktop out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-104346Adobe Photoshop Desktop out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-104345Adobe CAI Content Credentials improper input validation7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-104344Adobe Framemaker heap-based buffer overflow7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-104343Adobe Framemaker null pointer dereference5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-104342Adobe Framemaker use-after-free7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-104341Adobe Framemaker out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-104340Adobe Framemaker heap-based buffer overflow7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-104252Vitess vttablet /twopcz reflected XSS9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-104250unstructured ontology.py stored cross-site scripting6.1CNA v3.10.2%2026-10-13Fix
CVE-2026-104192DragonflyDB stream RDB deserialization double free9.6CNA v3.10.3%2026-10-13Fix
CVE-2026-104126JumpServer: Ansible Automation Template Rendering allows Unsafe Lookup Plugin Invocation6.0CNA v3.10.4%2026-10-13Fix
CVE-2026-104085odt2spip OS command injection via Document Filename8.7CNA v4.01.5%2026-10-13Fix
CVE-2026-104005Incorrect authorization in MongoDB Server router for bulk writes to system namespaces7.1CNA v4.00.2%2026-10-13Fix
CVE-2026-104004Collection validators using collation-accepting expressions can crash MongoDB Server on insert7.1CNA v4.00.2%2026-10-13Fix
CVE-2026-103967Adobe Framemaker out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103966Adobe Framemaker heap-based buffer overflow7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103965MongoDB Server aggregation framework $bucket stage information disclosure5.3CNA v4.00.2%2026-10-13Fix
CVE-2026-103937Misskey: Denial of service resulting from insufficient cleanup processing during file uploads8.7CNA v4.00.5%2026-10-13Fix
CVE-2026-103928Metabase: Arbitrary file read/Write via Unsafe H2 Built-in functions9.3CNA v4.00.4%2026-10-13Fix
CVE-2026-103857Adobe Framemaker out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103856Adobe Framemaker out-of-bounds read5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-103855Dimension null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103854Dimension stack-based buffer overflow7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103853Dimension out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103852Substance3D Stager null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103851Substance3D Stager stack-based buffer overflow7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103850Substance3D Stager out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103849Adobe Commerce improper neutralization of special elements used in a template engine10.0CNA v3.10.8%2026-10-13Exploit codeFix
CVE-2026-103848Adobe Experience Manager improper neutralization of special elements used in an OS command9.9CNA v3.11.4%2026-10-13Fix
CVE-2026-103847Dimension untrusted search path8.6CNA v3.10.2%2026-10-13Fix
CVE-2026-103846Dimension improper neutralization of input during web page generation (cross-site scripting)8.6CNA v3.10.2%2026-10-13Fix
CVE-2026-103845Dimension uncontrolled search path element8.6CNA v3.10.2%2026-10-13Fix
CVE-2026-103844Dimension out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103843Substance3D Stager use-after-free7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103842Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103841Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103840Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103839Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103838Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103837Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103836Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103835Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103834Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103833Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103832Substance3D Stager out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103830Substance3D Stager stack-based buffer overflow7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103829Adobe Substance3D Designer null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103828Adobe Substance3D Designer null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103827Adobe Substance3D Designer stack-based buffer overflow5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103826Adobe Substance3D Designer null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103825Adobe Substance3D Designer out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103824Adobe Substance3D Designer null pointer dereference5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-103823Adobe Substance3D Designer stack-based buffer overflow5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103822Adobe Substance3D Designer out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103821Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.1%2026-10-13Fix
CVE-2026-103820Adobe CAI Content Credentials improper limitation of a pathname to a restricted directory5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-103578Microsoft Windows Kernel elevation of privilege6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-103577Microsoft QUIC security feature bypass7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-103576Microsoft Windows Active Directory Federation Services (AD FS) spoofing6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-103575Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-103572Visual Studio tools for Applications and SQL Server Management Studio remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-103569Microsoft Windows IKE extension information disclosure7.5CNA v3.11.0%2026-10-13Fix
CVE-2026-103568Microsoft Windows Credential Providers elevation of privilege7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-103567Microsoft Windows Broadcast DVR user service information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-103565Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-103560Microsoft Windows role: DNS server tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-103558Microsoft Windows Routing and Remote Access Service (RRAS) denial of service7.5CNA v3.10.9%2026-10-13Fix
CVE-2026-103555Microsoft Windows virtual Hard Disk (VHD) Miniport driver elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-103554Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-103553Microsoft Windows Partition Management driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-103549Incorrect authorization in GitLab2.7CNA v3.10.2%2026-10-13Fix
CVE-2026-103499IBM WebSphere Application Server Liberty denial of service7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-103418Mozilla Firefox universal XSS via the HTML language attribute in Translation services8.8CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-103417Mozilla Firefox saved credentials can be autofilled after cross-origin navigation5.5CISA ADP v3.10.1%2026-10-13Fix
CVE-2026-103316The macOS version of the DigiD app is not signed with Hardened Runtime7.1CNA v3.10.1%2026-10-13Fix
CVE-2026-103297Adobe CAI Content Credentials improper verification of cryptographic signature7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-103296Adobe CAI Content Credentials improper verification of cryptographic signature7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-103294Adobe CAI Content Credentials improper certificate validation5.9CNA v3.10.2%2026-10-13Fix
CVE-2026-103076User Registration WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-10-13Fix
CVE-2026-103030Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-103028SFTPGo source-side file-pattern filter bypass during copy operations4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-102989TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses9.3CNA v3.10.5%2026-10-13Fix
CVE-2026-102988Plane: ORM field injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)5.3CNA v3.10.2%2026-10-13Fix
CVE-2026-102982Plane: XSS in work item comments8.5CNA v4.00.4%2026-10-13Fix
CVE-2026-102981Plane: Unauthenticated Workspace Invitation token leakage6.5CNA v3.10.2%2026-10-13Fix
CVE-2026-102870Microsoft Visual Studio 2022 ASP.NET Core remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-102869NET and Visual Studio elevation of privilege8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-102867Microsoft Office Word information disclosure6.5CNA v3.10.9%2026-10-13Fix
CVE-2026-102866Microsoft Office SharePoint elevation of privilege8.1CNA v3.10.5%2026-10-13Fix
CVE-2026-102865Microsoft Office SharePoint information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-102864Microsoft Office SharePoint spoofing4.6CNA v3.10.4%2026-10-13Fix
CVE-2026-102863Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-102862Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-102861Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-102860Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-102859Microsoft Office SharePoint spoofing4.6CNA v3.10.4%2026-10-13Fix
CVE-2026-102858Microsoft Office OneNote remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-102857Microsoft Office Visio remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-102856Microsoft Office Visio remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-102855Microsoft Office Visio remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-102851Microsoft Visual Studio Code security feature bypass6.1CNA v3.10.3%2026-10-13Fix
CVE-2026-102850Microsoft Office Access remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-102849Microsoft Office Access remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-102832JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked4.2CNA v3.10.1%2026-10-13Fix
CVE-2026-102734asteval sandbox escape: Arbitrary native memory read/write5.5CNA v3.10.1%2026-10-13Fix
CVE-2026-102702Xen GNTTABOP_cache_flush vulnerability7.5CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-102700Xen gnttab: Cache-flush handling may cause page reference leak4.7CISA ADP v3.10.1%2026-10-13Fix
CVE-2026-102699Xen GNTTABOP_cache_flush integer underflow7.5CISA ADP v3.10.3%2026-10-13Fix
CVE-2026-102672Electron: Local race condition in Squirrel.Mac update installation on macOS6.7CNA v3.10.1%2026-10-13Fix
CVE-2026-102603Gotify: Insufficiently Protected Password Change endpoint5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-102599Socket.IO: Engine.IO Protocol Revision Mismatch DoS7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-102562AcyMailing WordPress plugin unauthenticated stored cross-site scripting via customField[] parameter7.2CNA v3.10.2%2026-10-13Fix
CVE-2026-102502Adobe CAI Content Credentials improper verification of cryptographic signature5.3CNA v3.10.4%2026-10-13Fix
CVE-2026-102501Adobe CAI Content Credentials improper input validation5.3CNA v3.10.4%2026-10-13Fix
CVE-2026-102342ammonia allows stored XSS through unsanitized SVG animate and set attributes5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-102250Schneider Electric Sage RTU 1410 insufficient verification of data authenticity8.6CNA v4.00.2%2026-10-13Fix
CVE-2026-102238Microsoft Visual Studio Code remote code execution9.6CNA v3.10.7%2026-10-13Fix
CVE-2026-102235Microsoft Visual Studio Code remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-102234Microsoft Visual Studio Code security feature bypass7.4CNA v3.10.6%2026-10-13Fix
CVE-2026-102233Microsoft Visual Studio Code security feature bypass7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-102232Microsoft Visual Studio Code security feature bypass7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-102231Microsoft Visual Studio Code security feature bypass7.7CNA v3.10.4%2026-10-13Fix
CVE-2026-102229Microsoft Visual Studio Code information disclosure6.8CNA v3.10.9%2026-10-13Fix
CVE-2026-102227Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102226Dynamics Business Central elevation of privilege8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-102225Microsoft Windows Text Shaping remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-102221Microsoft Windows secure Boot security feature bypass4.4CNA v3.10.3%2026-10-13Fix
CVE-2026-102220Microsoft Windows VHD miniport driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102218Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102217Microsoft Windows WebDAV elevation of privilege8.8CNA v3.11.1%2026-10-13Fix
CVE-2026-102216Microsoft Windows StateRepository API elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102215Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102214Microsoft Windows Hyper-V remote code execution8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102211Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102210Microsoft Windows Text Shaping remote code execution9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-102209Microsoft Graphics component elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102208Microsoft Windows Win32 Kernel subsystem elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102207Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102206Microsoft Windows Portable Device MTP driver elevation of privilege6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-102205Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102204Microsoft Windows Subsystem for Linux elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102203Microsoft Windows RPC Runtime remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-102202Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102201Microsoft Windows Media Foundation elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102199Microsoft Windows Codecs library denial of service6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-102198Microsoft Windows Remote Desktop protocol information disclosure5.3CNA v3.10.7%2026-10-13Fix
CVE-2026-102197Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102196Microsoft Windows Broadcast DVR user service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-102195Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102194Microsoft Windows Graphics Kernel elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102193Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102192Microsoft Windows Failover Cluster denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-102191Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102189Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-102188Microsoft Windows Storage Port driver elevation of privilege6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-102187Microsoft Windows Kernel information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-102186Microsoft Windows Network file system information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-102076Siemens APOGEE MBC (PPC) (BACnet) stack-based buffer overflow8.7CNA v4.00.6%2026-10-13Fix
CVE-2026-102075Siemens APOGEE MBC (PPC) (BACnet) stack-based buffer overflow8.7CNA v4.00.6%2026-10-13Fix
CVE-2026-102074Siemens APOGEE MBC (PPC) (BACnet) stack-based buffer overflow8.7CNA v4.00.6%2026-10-13Fix
CVE-2026-102073Siemens APOGEE MBC (PPC) (BACnet) integer underflow8.8CNA v4.00.5%2026-10-13Fix
CVE-2026-102007Bit integrations WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-10-13Fix
CVE-2026-101899Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges6.9CNA v4.00.5%2026-10-13Fix
CVE-2026-101294IBM WebSphere Application Server missing cryptographic step8.7CNA v3.10.2%2026-10-13Fix
CVE-2026-101168Insertion of sensitive information into log file in GitLab6.2CNA v3.10.2%2026-10-13Fix
CVE-2026-101020Hammock AssetView An incorrect permission assignment8.5CNA v4.00.1%2026-10-13
CVE-2026-100755Acceptance of extraneous untrusted data with trusted data in GitLab4.6CNA v3.10.1%2026-10-13Fix
CVE-2026-100225Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-100222Microsoft Windows network Policy Server (NPS) remote code execution9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-100220Microsoft Windows Media Video Decoder remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-100219Microsoft QUIC remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-100218Microsoft Windows remote Desktop Gateway service remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-100217Microsoft Windows Group Policy elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-100216Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-100215Microsoft Graphics component remote code execution7.8CNA v3.10.5%2026-10-13Fix
CVE-2026-100214Microsoft Dynamics 365 Business Central remote code execution8.8CNA v3.11.8%2026-10-13Fix
CVE-2026-100212Microsoft Office Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-100211Microsoft Office Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-100210Microsoft Office Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-100209Microsoft Office Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-100207Microsoft Azure CycleCloud remote code execution7.3CNA v3.10.4%2026-10-13Fix
CVE-2026-100205Microsoft SysInternals elevation of privilege7.1CNA v3.10.3%2026-10-13Fix
CVE-2026-100203Microsoft Windows Update service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-100202Microsoft Windows Message Queuing Queue Manager remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-100201Microsoft Windows Client License service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-100200Microsoft Windows Update service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-100139Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-100138Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100137Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-100136Adobe CAI Content Credentials integer overflow or wraparound7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100135Adobe CAI Content Credentials improper input validation7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100133Adobe Commerce cross-site scripting (stored XSS)9.3CNA v3.10.9%2026-10-13Fix
CVE-2026-100131Adobe Substance3D Sampler out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-100130Adobe Substance3D Sampler out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-100129Bridge out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-100128Bridge out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-100127Bridge out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-100126Bridge out-of-bounds read5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-100125Adobe CAI Content Credentials improper input validation5.9CNA v3.10.5%2026-10-13Fix
CVE-2026-100124Adobe CAI Content Credentials improper input validation7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100123Adobe CAI Content Credentials improper certificate validation7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-100122Adobe CAI Content Credentials improper certificate validation7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-100121Adobe CAI Content Credentials improper certificate validation7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-100120Adobe CAI Content Credentials improper input validation7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-100119Adobe CAI Content Credentials improper input validation7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-100118Adobe CAI Content Credentials improper certificate validation7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-100117Adobe CAI Content Credentials improper input validation7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100116Adobe CAI Content Credentials improper certificate validation5.9CNA v3.10.2%2026-10-13Fix
CVE-2026-100115Adobe CAI Content Credentials improper access control7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-100114Adobe CAI Content Credentials improper access control7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-100113Adobe CAI Content Credentials improper input validation7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-100112Adobe Photoshop Desktop out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-100111Adobe Photoshop Desktop out-of-bounds write7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-100104Server-side request forgery (SSRF) in GitLab3.5CNA v3.10.2%2026-10-13Fix
CVE-2026-97844Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97843Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97842Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.6%2026-10-13Fix
CVE-2026-97841Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97840Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97839Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97838Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97837Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97836Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97835Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97834Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.6%2026-10-13Fix
CVE-2026-97833Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.6%2026-10-13Fix
CVE-2026-97832Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.6%2026-10-13Fix
CVE-2026-97831Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97830Microsoft Windows Internet Information services denial of service7.5CNA v3.10.9%2026-10-13Fix
CVE-2026-97829Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97828Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97827Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97826Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97825Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97824Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97823Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-97822Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97821Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97820Microsoft Windows role: DNS server information disclosure6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-97819Microsoft Windows role: DNS server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-97817Microsoft Windows role: DNS server information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-97816Microsoft OpenSSH for Windows remote code execution9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-97815Microsoft Windows Error Reporting remote code execution9.8CNA v3.10.7%2026-10-13Fix
CVE-2026-97814Microsoft Windows Text Shaping remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-97813Microsoft Windows Hyper-V information disclosure6.5CNA v3.11.0%2026-10-13Fix
CVE-2026-97812Microsoft Windows Update Orchestrator service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-97811Microsoft OpenSSH for Windows elevation of privilege7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-97810Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-97809Microsoft Windows Broadcast DVR user service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97808Microsoft Windows Broadcast DVR user service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-97807Microsoft Windows Broadcast DVR user service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97806Microsoft Windows Broadcast DVR user service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97805Microsoft Windows Partition Management driver remote code execution9.8CNA v3.10.9%2026-10-13Fix
CVE-2026-97804Microsoft Windows HID class driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97803Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97801NET Framework tampering7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-97800Microsoft Windows Mobile Broadband elevation of privilege7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-97799Microsoft Windows Audio service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97798Microsoft Windows Error Reporting service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-97794Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix