CVE-2026 list

CVE-2026 records published in October 2026

Page nine of 14: records 8,001 to 9,000 of the 13,324 published in October 2026, newest first. The first page carries the figures for October 2026.

CVE-2026 records published in October 2026, newest first: records 8,001 to 9,000 of 13,324
CVE Summary CVSS EPSS Published Signals
CVE-2026-75994Adobe ColdFusion incorrect authorization9.6CNA v3.10.3%2026-10-13Fix
CVE-2026-75826Teltonika command injection in Backup function8.5CNA v4.00.9%2026-10-13Fix
CVE-2026-75748Adobe ColdFusion server-side request forgery (SSRF)7.6CNA v3.10.6%2026-10-13Fix
CVE-2026-75732Adobe Experience Manager incorrect authorization9.9CNA v3.10.6%2026-10-13Fix
CVE-2026-75120Remote code execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents9.3CNA v4.00.4%2026-10-13Fix
CVE-2026-74047Wazuh authd.pass Disclosure via agent 000 Config endpoint7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-74045Wazuh heap buffer overflow in wazuh-analysisd FIM Decoder7.1CNA v4.00.3%2026-10-13Fix
CVE-2026-74043Wazuh path traversal via Cluster upload functions8.5CNA v4.00.4%2026-10-13Fix
CVE-2026-74041Wazuh Remote Command Validation Bypass via Case Mismatch9.4CNA v4.00.4%2026-10-13Fix
CVE-2026-74040Wazuh arbitrary file overwrite RCE via process_files_from_worker9.4CNA v4.00.6%2026-10-13Fix
CVE-2026-74037Wazuh Session Invalidation Bypass in check_token8.6CNA v4.00.4%2026-10-13Fix
CVE-2026-74036Wazuh remote code execution via SCA Command Policies8.6CNA v4.00.8%2026-10-13Fix
CVE-2026-74035Wazuh authentication bypass via Empty Password in update_user8.6CNA v4.00.5%2026-10-13Fix
CVE-2026-74034Wazuh arbitrary file read via upgrade_custom command8.7CNA v4.00.3%2026-10-13Exploit codeFix
CVE-2026-74033Wazuh from path traversal in CDB List Cluster Handlers8.4CNA v4.00.2%2026-10-13Fix
CVE-2026-74032Wazuh RBAC authorization bypass via /security/actions5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-74031Wazuh path traversal file deletion via Rule/Decoder Delete Helpers7.0CNA v4.00.5%2026-10-13Fix
CVE-2026-74030Wazuh memory exhaustion via SCA YAML Alias Expansion6.9CNA v4.00.4%2026-10-13Fix
CVE-2026-73027Microsoft Windows Setup Files Cleanup elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-72969Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-72968Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-72955Microsoft Windows Application Compatibility Cache elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-72934Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-72895Siemens SIMATIC IPC UEFI Secure Boot key database vulnerability8.4CNA v4.00.1%2026-10-13Fix
CVE-2026-71385Adobe ColdFusion incorrect authorization8.4CNA v3.10.4%2026-10-13Fix
CVE-2026-71347Microsoft Windows Security Center elevation of privilege6.4CNA v3.10.2%2026-10-13Fix
CVE-2026-70580Microsoft Windows Credential Guard spoofing8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70571Microsoft Exchange Server remote code execution8.1CNA v3.10.9%2026-10-13Fix
CVE-2026-70566Microsoft Windows Schannel elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70343Microsoft MPEG-2 Video Extension remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70303Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70302Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70301Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70300Microsoft Office Word remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70299Microsoft Windows Bind Filter driver elevation of privilege8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70298Microsoft Office SharePoint information disclosure6.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70297Microsoft Skype for Business remote code execution8.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70295Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70294Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70293Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70292Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70291Microsoft Office Outlook remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70288Microsoft Windows win32k information disclosure5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70287Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70286Microsoft Windows Graphics component elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70285Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70284Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70282Microsoft Office Outlook remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70281Microsoft Office Outlook information disclosure7.5CNA v3.11.0%2026-10-13Fix
CVE-2026-70280Microsoft Windows Hello security feature bypass4.4CNA v3.10.4%2026-10-13Fix
CVE-2026-70279Microsoft Exchange Server spoofing9.3CNA v3.10.9%2026-10-13Fix
CVE-2026-70278Microsoft Windows Media Foundation elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70277Microsoft Windows Fast FAT File System driver information disclosure5.5CNA v3.10.6%2026-10-13Fix
CVE-2026-70276Microsoft Office Click-To-Run elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70275Microsoft Windows CD-ROM File System driver remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70274Microsoft Windows Bind Filter driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70273Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70272Microsoft Windows Installer elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70271Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70270Microsoft Windows Container Isolation FS Filter driver elevation of privilege5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70269Microsoft Office Word remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70268Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70267Microsoft Office SharePoint remote code execution7.2CNA v3.10.9%2026-10-13Fix
CVE-2026-70266Microsoft Office SharePoint elevation of privilege8.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70264Microsoft Defender information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70263Microsoft Office Word information disclosure6.5CNA v3.10.9%2026-10-13Fix
CVE-2026-70262Microsoft Windows WebDAV elevation of privilege8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70261Microsoft Trace Data Helper information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70260Microsoft Trace Data Helper information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70259Microsoft Office SharePoint information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-70258Microsoft Windows Media Foundation remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70257Microsoft Office Outlook remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70256Microsoft Office Outlook remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70255Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70254Microsoft Office Excel remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70253Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70252Microsoft Windows Virtual Hard Disk (VHD) Miniport driver elevation of privilege Vulernability7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70251Microsoft Office SharePoint elevation of privilege7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70250Microsoft Windows DHCP client remote code execution8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70249Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70248Microsoft Windows Hyper-V denial of service6.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70247Microsoft Windows HTTP.sys remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70246Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-70245Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70244Microsoft Windows DNS server information disclosure6.5CNA v3.10.9%2026-10-13Fix
CVE-2026-70243Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70242Microsoft Office Outlook remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70241Microsoft Windows Kerberos elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70238Microsoft Windows Storage Spaces controller elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70237Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70236Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70235Microsoft Windows Event Tracing spoofing5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70234Microsoft Windows Desktop Window Manager information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70233Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70232Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70230Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70229Microsoft Windows Active Directory Domain services remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70228Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70227Microsoft Windows Device Association service information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70225Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70223Microsoft Windows console driver elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70222Microsoft Windows Shell elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70220Microsoft Office Word remote code execution7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70219Microsoft Office Excel information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-70218Microsoft Windows StateRepository API elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70217Microsoft Office SharePoint information disclosure4.9CNA v3.10.9%2026-10-13Fix
CVE-2026-70216Microsoft Windows Mobile Device Management tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70215Microsoft Office PowerPoint remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70214Microsoft Office Excel information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70213Microsoft Power Apps remote code execution8.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70212Microsoft Windows Security Center elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-70211Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70210Microsoft Windows OLE DB elevation of privilege8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70209Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70208Microsoft Windows HTTP.sys information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70207Microsoft Windows network Policy Server (NPS) remote code execution7.5CNA v3.10.7%2026-10-13Fix
CVE-2026-70206Microsoft Office Word information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-70205Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70202Microsoft Office SharePoint elevation of privilege7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70201Microsoft Windows DHCP server denial of service5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70199Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70198Microsoft Windows Push Notifications elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70197Microsoft .NET remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70196Microsoft ASP.NET Core denial of service5.9CNA v3.10.8%2026-10-13Fix
CVE-2026-70195Microsoft Windows Ancillary function driver for WinSock information disclosure4.7CNA v3.10.2%2026-10-13Fix
CVE-2026-70194Microsoft .NET Framework security feature bypass6.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70190Microsoft .NET elevation of privilege7.3CNA v3.10.5%2026-10-13Fix
CVE-2026-70189Microsoft SQL server remote code execution6.7CNA v3.10.3%2026-10-13Fix
CVE-2026-70188Microsoft ASP.NET Core security feature bypass9.1CNA v3.10.8%2026-10-13Fix
CVE-2026-70187Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70186Microsoft ASP.NET Core denial of service7.5CNA v3.10.8%2026-10-13Fix
CVE-2026-70185Microsoft PowerShell security feature bypass8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70184Microsoft Windows Backup Engine elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70183Microsoft ASP.NET Core elevation of privilege7.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70181Microsoft ASP.NET Core denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70179Microsoft Visual Studio 2022 ASP.NET Core elevation of privilege7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-70177Microsoft Windows Search component elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70176Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70175Microsoft ASP.NET Core elevation of privilege8.1CNA v3.10.6%2026-10-13Fix
CVE-2026-70174Microsoft .NET remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70173Microsoft Windows Search component information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70172Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70170Microsoft Windows Kernel denial of service6.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70169Microsoft Windows Connected Devices Platform service elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-70168Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70167Microsoft Windows Domain Name service remote code execution8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-70166Microsoft Windows DNS denial of service6.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70165Microsoft .NET elevation of privilege6.7CNA v3.10.4%2026-10-13Fix
CVE-2026-70164Microsoft Windows TCP/IP elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70163Microsoft OpenSSH for Windows denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70162Microsoft Visual Studio 2022 .NET denial of service5.9CNA v3.10.8%2026-10-13Fix
CVE-2026-70161Microsoft .NET elevation of privilege7.3CNA v3.10.5%2026-10-13Fix
CVE-2026-70160Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70159Microsoft Visual Studio 2022 ASP.NET Core denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70158Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-70157Microsoft Windows System Information console remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70156Microsoft Windows Search component elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70155Microsoft Windows DNS denial of service7.5CNA v3.11.2%2026-10-13Fix
CVE-2026-70153Microsoft PostScript Printer driver remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70151Microsoft Windows Direct Composition elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70150Microsoft Windows Search component elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70149Microsoft Windows Client Side Caching driver (csc.sys) elevation of privilege8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70148Microsoft Windows Broadcast DVR user service information disclosure6.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70147Microsoft PostScript Printer driver remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70144Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70143Microsoft Windows Network File System remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70142Microsoft Windows Update service elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70141Microsoft Windows Search component information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70140Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70139Microsoft Windows Update service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70138Microsoft Windows OLE elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70137Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70136Microsoft Windows Search component elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70135Microsoft Windows Remote POS driver information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70134Microsoft Windows Event Tracing elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70133Microsoft Windows SMB server denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70132Microsoft Windows Portable Device File System driver elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70131Microsoft Windows Media Foundation elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70128Microsoft Windows HID parser library information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70127Microsoft Windows Domain Name service remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70126Microsoft Windows Bluetooth Port driver remote code execution7.1CNA v3.10.5%2026-10-13Fix
CVE-2026-70123Microsoft Graphics component elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70122Microsoft Windows Broadcast DVR user service elevation of privilege6.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70121Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70119Microsoft Windows DNS remote code execution6.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70118Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70117Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70116Microsoft Windows Resilient File System (ReFS) security feature bypass4.2CNA v3.10.3%2026-10-13Fix
CVE-2026-70115Microsoft Windows Search component elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70114Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70113Microsoft Windows client for NFS elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70112Microsoft Windows Spaceport.sys remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70111Microsoft Windows Kernel elevation of privilege8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70110Microsoft PostScript Printer driver elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70109Microsoft PostScript Printer driver elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70108Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70106Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70104Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70103Microsoft Windows Error Reporting elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70102Microsoft Windows Spaceport.sys elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70098Microsoft Visual Studio Code remote code execution8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70097Microsoft Windows Virtualization-Based Security (VBS) Enclave spoofing5.6CNA v3.10.2%2026-10-13Fix
CVE-2026-70096Windows Rich Text Edit Control remote code execution9.8CNA v3.11.0%2026-10-13Fix
CVE-2026-70095Microsoft Windows iSCSI remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-70093Microsoft Windows Rich Text Edit Control elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70092Microsoft PostScript Printer driver elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70090Microsoft Windows Netlogon information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70089Microsoft Windows GDI remote code execution8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70087Microsoft Windows role: DNS server security feature bypass5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70086Microsoft Windows Search component elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70085Microsoft Windows role: DNS server tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70084Microsoft Windows Projected file system information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70083Microsoft Windows role: DNS server tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70082Microsoft Windows DNS denial of service7.5CNA v3.11.2%2026-10-13Fix
CVE-2026-70079Microsoft Windows DNS denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70077Microsoft Windows Kernel information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-70076Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70075Microsoft Windows Virtualization-Based Security (VBS) Enclave security feature bypass4.4CNA v3.10.3%2026-10-13Fix
CVE-2026-70074Microsoft Windows DNS information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70072Microsoft Windows Netlogon denial of service6.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70071Microsoft Windows role: DNS server tampering5.5CNA v3.10.2%2026-10-13Fix
CVE-2026-70069Microsoft Windows DHCP server remote code execution8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-70068Microsoft Windows Client-Side Caching (CSC) service elevation of privilege8.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70067Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70066Microsoft Windows DHCP server elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70064Microsoft Windows Kerberos elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70063Microsoft Windows Kernel information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-70062Microsoft Windows libarchive remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70060Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70059Microsoft Windows OLE elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70058Microsoft Windows DHCP server remote code execution7.5CNA v3.11.2%2026-10-13Fix
CVE-2026-70057Microsoft Windows Routing and Remote Access Service (RRAS) security feature bypass5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-70056Microsoft Windows Update service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70055Microsoft Windows Cryptographic services information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70054Microsoft Windows NetBIOS elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-70052Microsoft PowerShell remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70051Microsoft Windows SmartScreen elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70049Microsoft Configuration Manager elevation of privilege8.0CNA v3.12.3%2026-10-13Fix
CVE-2026-70048Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70045Microsoft Windows Work Folders elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70044Microsoft Windows Media Foundation information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-70041Microsoft Windows CD-ROM driver information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70038Microsoft Windows iSCSI remote code execution8.1CNA v3.10.7%2026-10-13Fix
CVE-2026-70035Microsoft .NET Framework remote code execution8.8CNA v3.11.3%2026-10-13Fix
CVE-2026-70033Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70031Microsoft Windows iSCSI denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-70027Microsoft Windows subsystem for Linux elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70026Microsoft Windows Secure Kernel Mode elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70025Microsoft Windows Netlogon denial of service5.3CNA v3.11.0%2026-10-13Fix
CVE-2026-70024Microsoft Windows Internet Information services remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-70023Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70021Microsoft Windows Direct Composition elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-70017Microsoft Windows Secure Kernel Mode information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70015Microsoft Windows Local Security Authority subsystem Service (LSASS) elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70014Microsoft Windows Cryptographic services remote code execution7.5CNA v3.10.7%2026-10-13Fix
CVE-2026-70013Microsoft Windows iSCSI remote code execution8.1CNA v3.10.5%2026-10-13Fix
CVE-2026-70012Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-70011Microsoft Windows IP over USB service information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-70010Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70008Microsoft Windows IP over USB service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-70007Microsoft .NET Framework remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-70006Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-70005Microsoft Windows active Directory Federation Services (AD FS) security feature bypass5.9CNA v3.10.6%2026-10-13Fix
CVE-2026-70004Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69999Microsoft Windows Update information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69998Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69997Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69996Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69995Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69994Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69992Microsoft Windows remote Desktop services remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69991Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69988Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69987Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69986Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69985Microsoft Windows libarchive remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-69984Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69982Microsoft Windows active Directory Federation Services (AD FS) security feature bypass5.9CNA v3.10.6%2026-10-13Fix
CVE-2026-69979Microsoft Windows AppX Deployment service security feature bypass5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-69978Microsoft Windows VMSwitch denial of service5.6CNA v3.10.3%2026-10-13Fix
CVE-2026-69977Microsoft Quality Windows Audio/Video Experience (QWAVE) service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69976Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-10-13Fix
CVE-2026-69974Microsoft Windows Desktop Window Manager information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-69973Microsoft Windows libarchive tampering6.5CNA v3.10.7%2026-10-13Fix
CVE-2026-69971Microsoft Windows Kernel-Mode drivers information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69970Microsoft Windows kernel Streaming service driver elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69969Microsoft Windows AppX Deployment service information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-69968Microsoft Windows libarchive tampering6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-69967Microsoft Windows Overlay Filter information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69966Microsoft Windows kernel Streaming service driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69964Microsoft Windows kernel Streaming service driver elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69963Microsoft Windows kernel Streaming service driver elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69959Microsoft Windows Overlay Filter remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69958Microsoft Windows Overlay Filter remote code execution6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69957Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69955Microsoft Windows client for NFS information disclosure6.5CNA v3.10.9%2026-10-13Fix
CVE-2026-69954Microsoft Windows Overlay Filter information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69953Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69952Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69950Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69949Microsoft Windows client for NFS elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69947Microsoft Windows Overlay Filter remote code execution6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69945Microsoft Windows AppX Deployment extensions elevation of privilege8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69943Microsoft Office SharePoint remote code execution8.8CNA v3.11.0%2026-10-13Fix
CVE-2026-69942Microsoft Windows Overlay Filter remote code execution7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69940Microsoft Windows client for NFS information disclosure6.5CNA v3.10.9%2026-10-13Fix
CVE-2026-69935Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69934Microsoft Windows Spaceport.sys elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69931Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69926Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69923Microsoft Windows AI elevation of privilege7.8CNA v3.10.5%2026-10-13Fix
CVE-2026-69922Microsoft Office Excel information disclosure6.5CNA v3.10.8%2026-10-13Fix
CVE-2026-69919Microsoft Windows Cryptographic services information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69918Microsoft Windows Core Messaging elevation of privilege8.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69916Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69915Microsoft Windows NTFS elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69914Microsoft Windows AppX Deployment service information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69913Microsoft Windows TCP/IP remote code execution8.1CNA v3.10.5%2026-10-13Fix
CVE-2026-69909Microsoft COM for Windows elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69905Microsoft Windows AppX Deployment service tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-69902Microsoft Windows NTFS remote code execution6.7CNA v3.10.3%2026-10-13Fix
CVE-2026-69898Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69886Microsoft Windows Imaging component remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-69884Microsoft Windows GDI elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69883Microsoft Windows iSCSI remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-69882Microsoft Windows Update elevation of privilege7.8CNA v3.10.5%2026-10-13Fix
CVE-2026-69880Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69877Microsoft Azure DevOps information disclosure6.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69867Microsoft Windows SQLite elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69856Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69850Microsoft Windows Certificates elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69840Microsoft Windows Certificates elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69830Microsoft Windows DHCP server remote code execution8.1CNA v3.10.4%2026-10-13Fix
CVE-2026-69802Microsoft Windows network Device Enrollment Service (NDES) remote code execution8.1CNA v3.10.5%2026-10-13Fix
CVE-2026-69798Microsoft Windows Wired AutoConfig service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69795Microsoft Windows Clipboard Server elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69789Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution7.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69783Microsoft Windows Update elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69766Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69765Microsoft Windows Storport Miniport driver remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-69763Microsoft Windows Storage elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69743Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69736Microsoft Windows Credential Manager elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-69733Microsoft Windows Update elevation of privilege7.8CNA v3.10.4%2026-10-13Fix
CVE-2026-69721Microsoft Windows iSCSI information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69718Microsoft Windows Update elevation of privilege7.8CNA v3.11.0%2026-10-13Fix
CVE-2026-69705Microsoft Windows iSCSI remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-69675Microsoft Windows Network file system information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-69673Microsoft Windows Update elevation of privilege7.8CNA v3.10.5%2026-10-13Fix
CVE-2026-69651Microsoft .NET denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-69650Microsoft Windows Key Distribution Center elevation of privilege7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-69644Microsoft Windows iSCSI information disclosure5.5CNA v3.10.5%2026-10-13Fix
CVE-2026-69640Microsoft Windows Key Distribution Center security feature bypass5.3CNA v3.10.6%2026-10-13Fix
CVE-2026-69639Microsoft Windows libarchive remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-69635Microsoft Windows Installer elevation of privilege6.6CNA v3.10.4%2026-10-13Fix
CVE-2026-69634Microsoft Windows iSCSI remote code execution9.8CNA v3.10.8%2026-10-13Fix
CVE-2026-69633Microsoft Windows Update elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69596Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69577Microsoft Azure Attestation service and Device Health Attestation service information disclosure7.5CNA v3.11.0%2026-10-13Fix
CVE-2026-69521Microsoft Windows iSCSI remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-69506Microsoft Windows Key Storage Provider information disclosure4.7CNA v3.10.3%2026-10-13Fix
CVE-2026-69471Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69454Microsoft Azure Attestation service and Device Health Attestation service information disclosure7.5CNA v3.11.0%2026-10-13Fix
CVE-2026-69452Microsoft Windows Enterprise App Management elevation of privilege7.1CNA v3.10.6%2026-10-13Fix
CVE-2026-69387Microsoft Windows Error Reporting elevation of privilege7.0CNA v3.10.3%2026-10-13Fix
CVE-2026-69370Microsoft Visual Studio Code remote code execution8.8CNA v3.10.7%2026-10-13Fix
CVE-2026-69363Microsoft Windows Error Reporting elevation of privilege8.0CNA v3.10.6%2026-10-13Fix
CVE-2026-69354Microsoft Windows Error Reporting elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-69326Microsoft Windows graphic Fonts remote code execution8.8CNA v3.10.6%2026-10-13Fix
CVE-2026-69227Esri Portal for ArcGIS Portal Administrator API missing authentication9.8CNA v3.10.3%2026-10-13
CVE-2026-69226Esri Portal for ArcGIS sharing endpoint incorrect authorization6.5CNA v3.10.2%2026-10-13
CVE-2026-69150KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map4.3CNA v4.00.2%2026-10-13Fix
CVE-2026-68883Microsoft SQL server elevation of privilege8.5CNA v3.10.4%2026-10-13Fix
CVE-2026-68836Microsoft Windows kernel32.dll elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-67628Microsoft SQL server information disclosure4.9CNA v3.10.5%2026-10-13Fix
CVE-2026-67626Microsoft SQL server denial of service6.5CNA v3.10.6%2026-10-13Fix
CVE-2026-67625Microsoft SQL server remote code execution8.5CNA v3.10.4%2026-10-13Fix
CVE-2026-67456NVIDIA Warp heap-based buffer overflow4.4CNA v3.10.1%2026-10-13Fix
CVE-2026-67165HCL Connections is vulnerable to cross-site scripting (XSS)5.4CNA v3.10.2%2026-10-13
CVE-2026-66822Microsoft .NET information disclosure5.9CNA v3.10.7%2026-10-13Fix
CVE-2026-66057Frappe: Open redirect via Unsanitized OAuth State Param5.1CNA v4.00.4%2026-10-13Fix
CVE-2026-65674Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-10-13Fix
CVE-2026-65200Huawei openBMC device-management process vulnerability3.5CNA v3.10.1%2026-10-13
CVE-2026-65199Huawei openUBMC low-privilege SNMP to administrator privilege escalation5.4CNA v3.10.2%2026-10-13
CVE-2026-65198Huawei Default SNMPv3 USM key8.6CNA v3.10.2%2026-10-13
CVE-2026-65197H3C G3/G5 HDM Firmware Verification Key Replacement3.1CNA v3.10.1%2026-10-13
CVE-2026-65180NVIDIA Megatron-LM deserialization of untrusted data7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-65173NVIDIA AIStore framework missing authentication9.1CNA v3.10.5%2026-10-13Fix
CVE-2026-65172NVIDIA AIStore framework missing authorization8.6CNA v3.10.4%2026-10-13Fix
CVE-2026-65170NVIDIA AIStore framework server-side request forgery8.6CNA v3.10.4%2026-10-13Fix
CVE-2026-65164NVIDIA AIStore framework path traversal8.1CNA v3.10.8%2026-10-13Fix
CVE-2026-65162NVIDIA AIStore framework execution with unnecessary privileges10.0CNA v3.10.7%2026-10-13Fix
CVE-2026-65161NVIDIA AIStore framework path traversal7.5CNA v3.10.7%2026-10-13Fix
CVE-2026-65150NVIDIA DALI out-of-bounds read7.3CNA v3.10.1%2026-10-13Fix
CVE-2026-65149NVIDIA DALI out-of-bounds write7.3CNA v3.10.1%2026-10-13Fix
CVE-2026-65148NVIDIA DALI stack-based buffer overflow7.3CNA v3.10.1%2026-10-13Fix
CVE-2026-65147NVIDIA DALI out-of-bounds read7.3CNA v3.10.1%2026-10-13Fix
CVE-2026-65141NVIDIA Isaac Lab eval injection7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-65131NVIDIA NVSentinel missing authentication6.0CNA v3.10.1%2026-10-13Fix
CVE-2026-65110NVIDIA Megatron-LM deserialization of untrusted data7.8CNA v3.10.2%2026-10-13Fix
CVE-2026-65104NVIDIA Megatron-LM weak hash7.1CNA v3.10.1%2026-10-13Fix
CVE-2026-65103NVIDIA AIStore framework path traversal8.1CNA v3.10.9%2026-10-13Fix
CVE-2026-65101NVIDIA AIStore framework server-side request forgery8.6CNA v3.10.3%2026-10-13Fix
CVE-2026-63357Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting5.3CNA v4.00.3%2026-10-13
CVE-2026-63356Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting5.3CNA v4.00.3%2026-10-13
CVE-2026-63355Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting5.3CNA v4.00.3%2026-10-13
CVE-2026-63354Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting9.4CNA v4.00.5%2026-10-13
CVE-2026-63353Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting9.4CNA v4.00.4%2026-10-13
CVE-2026-63352Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting5.3CNA v4.00.2%2026-10-13
CVE-2026-63351Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting5.3CNA v4.00.2%2026-10-13
CVE-2026-63350Siemens SIMATIC Drive Controller CPU 1504D TF eval injection9.4CNA v4.00.4%2026-10-13
CVE-2026-63316SQL injection in Payload CMS8.7CNA v4.00.3%2026-10-13Fix
CVE-2026-63174Omnispace Agora Project broken access control via spaceAffectList8.6CNA v4.00.2%2026-10-13Fix
CVE-2026-63172Omnispace Agora Project Broken Function-Level Authorization via User-Edit7.1CNA v4.00.2%2026-10-13Fix
CVE-2026-63171Omnispace Agora Project stored XSS via Category Description5.1CNA v4.00.2%2026-10-13Fix
CVE-2026-63169Omnispace Agora Project stored XSS via Messenger Iframe5.3CNA v4.00.3%2026-10-13Fix
CVE-2026-63168Omnispace Agora Project stored XSS via Nested POST Array Bypass5.1CNA v4.00.3%2026-10-13Fix
CVE-2026-63165Omnispace Agora Project SQL injection via sortEvents parameter8.6CNA v4.00.3%2026-10-13Fix
CVE-2026-63163Omnispace Agora Project broken access control via MobileFileDownload8.7CNA v4.00.4%2026-10-13Fix
CVE-2026-63162Omnispace Agora Project path traversal via tmpFolderName parameter8.7CNA v4.00.7%2026-10-13Fix
CVE-2026-63161Omnispace Agora Project session fixation via Authentication8.6CNA v4.00.4%2026-10-13Fix
CVE-2026-63160Omnispace Agora Project Insecure Remember-Me Token Storage9.1CNA v4.00.3%2026-10-13Fix
CVE-2026-63159Omnispace Agora Project Predictable Password-Reset Token account takeover9.1CNA v4.00.3%2026-10-13Fix
CVE-2026-63158Omnispace Agora Project Pass-the-Hash authentication bypass via Cookies9.1CNA v4.00.4%2026-10-13Fix
CVE-2026-63157Omnispace Agora Project stored XSS via Links module5.1CNA v4.00.2%2026-10-13Fix
CVE-2026-63156Omnispace Agora Project reflected XSS via visioUrl parameter5.1CNA v4.00.3%2026-10-13Fix
CVE-2026-63154Omnispace Agora Project SQL Identifier injection via agoraFields[]8.7CNA v4.00.4%2026-10-13Fix
CVE-2026-63153Omnispace Agora Project broken access control via setAffectations8.6CNA v4.00.3%2026-10-13Fix
CVE-2026-63152Omnispace Agora Project Second-order SQL injection via _idCategoryFilter8.6CNA v4.00.3%2026-10-13Fix
CVE-2026-63149Omnispace Agora Project Predictable default password via uniqid9.1CNA v4.00.4%2026-10-13Fix
CVE-2026-63148Omnispace Agora Project stored XSS via Poll-Response Attachment Filename5.1CNA v4.00.2%2026-10-13Fix
CVE-2026-63147Omnispace Agora Project stored XSS via Uploaded File Name5.1CNA v4.00.2%2026-10-13Fix
CVE-2026-63146Omnispace Agora Project PHP code injection via config.inc.php9.3CNA v4.00.7%2026-10-13Fix
CVE-2026-62879Microsoft Windows SmartScreen tampering5.5CNA v3.10.3%2026-10-13Fix
CVE-2026-62840Microsoft Linux Kernel elevation of privilege7.0CNA v3.10.2%2026-10-13Fix
CVE-2026-62687Microsoft Windows Backup Engine information disclosure5.5CNA v3.10.4%2026-10-13Fix
CVE-2026-61931Microsoft Windows Perception Simulation service elevation of privilege7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-61642Squid Request Smuggling in HTTP Transfer-Encoding7.7CNA v3.14.7%2026-10-13Fix
CVE-2026-59241Siemens SIMATIC WinCC incorrect privilege assignment8.7CNA v4.00.5%2026-10-13Fix
CVE-2026-59116Microsoft Windows Remote Desktop security feature bypass6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-58280Microsoft .NET denial of service7.5CNA v3.11.1%2026-10-13Fix
CVE-2026-58249Memory corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher7.5CNA v3.10.3%2026-10-13Fix
CVE-2026-58242Improper authorization check in SAP Cloud Connector3.5CNA v3.10.2%2026-10-13Fix
CVE-2026-56826shopperlabs shopper shopping privilege escalation5.4CNA v3.10.3%2026-10-13Fix
CVE-2026-55823Frappe: Possibility of SQL injection in reportview8.7CNA v4.00.4%2026-10-13Fix
CVE-2026-55695FearlessCMS: Remote code execution via Unvalidated Update Repository URL in System Updater9.1CNA v3.10.5%2026-10-13Fix
CVE-2026-55675saltyorg docs documentation workflow code injection10.0CNA v3.10.4%2026-10-13
CVE-2026-55601MultiTail: Shell injection in execute-on-match command handling7.3CNA v3.10.2%2026-10-13
CVE-2026-55562Cronicle: Stored XSS in admin Activity Log via account full_name field9.0CNA v3.10.4%2026-10-13Fix
CVE-2026-55376heym Python tool sandbox escape8.8CNA v3.10.4%2026-10-13Fix
CVE-2026-55183Zarestia-Dev rclone-manager rclone rcd service missing authentication9.6CNA v3.10.4%2026-10-13Fix
CVE-2026-54870Weaver Xtreme theme Support WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13
CVE-2026-54869IMPress for IDX Broker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13
CVE-2026-54868FV Simpler SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13Fix
CVE-2026-54867Responsive Slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-10-13
CVE-2026-54700ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation6.9CNA v4.00.4%2026-10-13Fix
CVE-2026-54697ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing6.7CNA v4.00.1%2026-10-13Fix
CVE-2026-54641OpenRemote: Cross-Realm User information disclosure in UserResourceImpl7.7CNA v3.10.3%2026-10-13Fix
CVE-2026-54640OpenRemote: XXE in KNXProtocol.startAssetImport allows arbitrary file read7.6CNA v3.10.2%2026-10-13Fix
CVE-2026-54454OpenCATS: Authenticated RCE in the Import module9.1CNA v3.10.4%2026-10-13Fix
CVE-2026-54086esa SLE API for Java ISP1 PDU handling path denial of service5.3CNA v3.10.5%2026-10-13Fix
CVE-2026-53711IBM mcp-context-forge Global Prompts stored cross-site scripting5.1CNA v4.00.4%2026-10-13Fix
CVE-2026-53709IBM mcp-context-forge mcpgateway/config.py hard-coded cryptographic key9.8CNA v3.10.6%2026-10-13Fix
CVE-2026-53564Citrix UniconOS arbitrary file read and write5.1CNA v4.00.3%2026-10-13Fix
CVE-2026-53563Citrix UniconOS persistent command execution6.9CNA v4.00.2%2026-10-13Fix
CVE-2026-53562Citrix UniconOS local privilege escalation8.5CNA v4.00.2%2026-10-13Fix
CVE-2026-53420Zoom Communications Zoom Workplace Zoom Phone feature buffer overflow8.0CNA v3.10.3%2026-10-13Fix
CVE-2026-53418Zoom Communications Zoom Workplace handler for Custom URL Scheme improper authorization8.1CNA v3.10.2%2026-10-13Fix
CVE-2026-52394DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.9.1CISA ADP v3.10.4%2026-10-13
CVE-2026-49950Xorbits Xoscar Unauthenticated deserialization RCE via Actor Pool9.3CNA v4.00.6%2026-10-13
CVE-2026-49785Microsoft Windows UEFI Secure Boot security feature bypass7.8CNA v3.10.3%2026-10-13Fix
CVE-2026-49265OAuthLib: Timing Attack vulnerability in PKCE code_verifier Comparison6.8CNA v3.10.4%2026-10-13Fix
CVE-2026-49264oauthlib RevocationEndpoint cross-site scripting6.1CNA v3.10.3%2026-10-13Fix
CVE-2026-48398Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-10-13Fix
CVE-2026-48383Adobe Experience Manager incorrect authorization10.0CNA v3.10.8%2026-10-13Fix
CVE-2026-48382Adobe Experience Manager incorrect authorization10.0CNA v3.10.8%2026-10-13Fix
CVE-2026-48378Adobe CAI Content Credentials improper input validation5.3CNA v3.10.4%2026-10-13Fix
CVE-2026-48377Adobe CAI Content Credentials improper input validation5.3CNA v3.10.4%2026-10-13Fix
CVE-2026-44415Siemens Industrial Edge Device Kit path traversal8.9CNA v4.00.5%2026-10-13Fix
CVE-2026-44414Siemens Industrial Edge Cloud Device (IECD) path traversal6.9CNA v4.00.5%2026-10-13Fix
CVE-2026-37107HTMLy admin.php get_feed function privilege escalation9.8CISA ADP v3.10.6%2026-10-13
CVE-2026-35001OpenS100 S-102 parser integer overflow heap buffer overflow7.1CNA v4.00.1%2026-10-13
CVE-2026-34634Adobe ColdFusion server-side request forgery (SSRF)8.6CNA v3.10.7%2026-10-13Fix
CVE-2026-34633Adobe ColdFusion server-side request forgery (SSRF)7.7CNA v3.10.7%2026-10-13Fix
CVE-2026-33374Grafana Enterprise unbounded memory allocation in the Prometheus rule conversion API6.5CNA v3.10.4%2026-10-13Fix
CVE-2026-23707Fortinet FortiManager Cloud SQL injection6.5CNA v3.10.3%2026-10-13Fix
CVE-2026-23706Fortinet FortiAnalyzer Cloud SQL injection5.9CNA v3.10.3%2026-10-13Fix
CVE-2026-23705Fortinet FortiAnalyzer SQL injection6.5CNA v3.10.3%2026-10-13Fix
CVE-2026-19940zephyrproject zephyr Bluetooth HFP AG use-after-free6.5CNA v3.10.2%2026-10-13
CVE-2026-19939zephyrproject zephyr Bluetooth Classic AVDTP signalling layer expired pointer dereference6.3CNA v3.10.2%2026-10-13
CVE-2026-19810Cross-site scripting (XSS) in Symantec Endpoint Detection and Response console5.4CNA v3.10.2%2026-10-13
CVE-2026-18228Commvault Cloud hyperscale path traversal7.1CNA v4.00.4%2026-10-13Fix
CVE-2026-16753Lowcoder library-query execution endpoint incorrect authorization8.8CISA ADP v3.10.4%2026-10-13Fix
CVE-2026-16301Incorrect authorization in GitLab8.5CNA v3.10.2%2026-10-13Fix
CVE-2026-16275Incorrect authorization in GitLab5.3CNA v3.10.3%2026-10-13Fix
CVE-2026-15577Grafana Enterprise git Sync connection configuration can be modified with read-only access6.5CNA v3.10.3%2026-10-13Fix
CVE-2026-15468HYPR Passwordless insecure direct object reference6.9CNA v4.00.1%2026-10-13Fix
CVE-2026-15399Animated Number Counters WordPress plugin SQL injection4.9CNA v3.10.4%2026-10-13Fix
CVE-2026-14909IBM WebSphere Application Server Liberty information disclosure6.5CNA v3.10.3%2026-10-13Fix
CVE-2026-14814Permissive Regular Expression in GitLab8.2CNA v3.10.2%2026-10-13Fix
CVE-2026-14552Incorrect authorization in GitLab4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-14532IBM WebSphere Application Server Liberty integer overflow4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-14308Zoho ManageEngine Malware Protection Plus insufficient signature validation4.9CNA v3.10.4%2026-10-13
CVE-2026-14210Insufficient granularity of access control in GitLab4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-13138Improper authorization in Divasoft Software's Biletiva Ticketing Platform8.6CNA v3.10.2%2026-10-13
CVE-2026-12656Rockwell Automation 1732E ArmorBlock® I/O affected product and version denial of service8.7CNA v4.00.3%2026-10-13
CVE-2026-12655Rockwell Automation 1732E ArmorBlock I/O webserver vulnerability8.8CNA v4.00.3%2026-10-13
CVE-2026-11732NETGEAR CAX30 website blocking feature improper input validation6.3CNA v4.00.2%2026-10-13Fix
CVE-2026-11731Authentication bypass vulnerability in certain NETGEAR RAX Series Models6.3CNA v4.00.3%2026-10-13Fix
CVE-2026-11730Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models2.1CNA v4.00.2%2026-10-13Fix
CVE-2026-11713IBM WebSphere Application Server Liberty incorrect authorization5.4CNA v3.10.2%2026-10-13Fix
CVE-2026-10759Esri Portal for ArcGIS LDAP injection5.5CNA v3.10.2%2026-10-13
CVE-2026-9268Incorrect authorization in GitLab2.7CNA v3.10.2%2026-10-13Fix
CVE-2026-9218Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access4.3CNA v4.00.2%2026-10-13Fix
CVE-2026-7767URL redirection to untrusted site (open redirect) in GitLab5.8CNA v3.10.3%2026-10-13Fix
CVE-2026-6567Incorrect authorization in GitLab4.3CNA v3.10.2%2026-10-13Fix
CVE-2026-5954Incorrect authorization in GitLab4.2CNA v3.10.2%2026-10-13Fix
CVE-2026-4869Potential privilege escalation in InstallShield5.4CNA v4.00.1%2026-10-13
CVE-2026-0893AMI AptioV Uncleared Password Keystrokes vulnerability5.8CNA v4.00.1%2026-10-13Fix
CVE-2026-109675Frappe Suite before commit 2697564 broken access control in Mail Mailbox and Quota APIs5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109674Frappe ERPNext SQL injection via Missing Input Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109673Frappe ERPNext stored XSS via Crafted Record Names8.5CNA v4.00.2%2026-10-12Fix
CVE-2026-109672Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109671Frappe ERPNext stored XSS via Profile field in portal pages8.5CNA v4.00.2%2026-10-12Fix
CVE-2026-109670Frappe ERPNext stored XSS via Item Record Name5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109669Frappe ERPNext missing authorization allows Unauthorized Status Modification5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109668Frappe ERPNext missing authorization in Party Record endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109667Frappe ERPNext privilege escalation via Unauthorized Record Creation8.7CNA v4.00.2%2026-10-12Fix
CVE-2026-109666Frappe ERPNext missing authorization in Inventory Record endpoints7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109665Frappe ERPNext missing authorization allows Master Record Deactivation5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109664Frappe ERPNext missing authorization allows arbitrary Record Modification5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109663Frappe ERPNext SQL injection via Unvalidated endpoint parameters7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109662Frappe ERPNext stored XSS via Public portal form5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109661Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109660Frappe ERPNext missing authorization in Production Record endpoints7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109659Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109658Frappe ERPNext missing authorization on endpoints7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109657Frappe ERPNext stored XSS via Unescaped Record Name5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109656Frappe ERPNext Unauthorized Item Master Data Access7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109655Frappe ERPNext missing authorization in Inventory endpoints7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109654Frappe ERPNext missing authorization in Transactional Email endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109653Frappe ERPNext stored XSS leading to account takeover8.5CNA v4.00.2%2026-10-12Fix
CVE-2026-109652Frappe ERPNext server-side template injection via message fields8.7CNA v4.00.3%2026-10-12Fix
CVE-2026-109651Frappe ERPNext server-side request forgery via Configuration field5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109650Frappe ERPNext missing authorization exposes Personal Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109649Frappe ERPNext SQL injection via Unvalidated endpoint requests7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109648Frappe ERPNext SQL injection via Missing Input Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109647Frappe ERPNext SQL injection via Missing Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109646Frappe ERPNext SQL injection via Missing Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109645Frappe ERPNext Unauthorized Record Creation via missing authorization7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109644Frappe ERPNext unauthorized access to Valuation Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109643Frappe ERPNext missing authorization exposes Project Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109642Frappe ERPNext missing authorization in certain endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109641Frappe ERPNext missing authorization in Record Creation endpoints6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109640Frappe ERPNext missing authorization allows Unauthorized Record Modification7.2CNA v4.00.2%2026-10-12Fix
CVE-2026-109639Frappe ERPNext SQL injection via Unvalidated endpoint requests7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109638Frappe ERPNext SQL injection via Missing Input Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109637Frappe ERPNext missing authorization allows Master Data Modification7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109636Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109635Frappe ERPNext missing authorization in Document Creation endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109634Frappe ERPNext SQL injection via Unvalidated endpoints6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109633Frappe ERPNext stored XSS via Public Booking page8.6CNA v4.00.2%2026-10-12Fix
CVE-2026-109632Frappe ERPNext missing authorization on certain endpoints7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109631Frappe ERPNext SQL injection via Missing Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109630Frappe ERPNext missing authorization in endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109629Frappe ERPNext missing authorization in Transactional Email endpoint5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109628Frappe ERPNext Unauthorized Status Modification via missing authorization7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109627Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109626Frappe ERPNext SQL injection via multiple endpoints7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109625Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109624Frappe ERPNext missing authorization exposes Personal Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109623Frappe ERPNext Unauthorized Document Modification via missing authorization5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109622Frappe ERPNext Unauthorized Document Modification via missing authorization5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109621Frappe ERPNext Unauthorized Party Record Access via permission bypass7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109617Frappe ERPNext missing authorization in Record Creation endpoints7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109616Frappe ERPNext missing authorization allows unauthorized data modification7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109615Frappe ERPNext missing authorization in Document Creation endpoints7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109614Frappe ERPNext missing authorization exposes Financial Data7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109613Frappe ERPNext missing authorization allows Unauthorized Status Modification7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109612Frappe ERPNext stored XSS via Report view8.5CNA v4.00.2%2026-10-12Fix
CVE-2026-109611Frappe ERPNext missing authorization in certain endpoints5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109610Frappe ERPNext missing authorization allows Unauthorized Document Modification7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109609Frappe ERPNext SQL injection via Missing Input Validation7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109608Frappe ERPNext SQL injection via Unvalidated Endpoint Input8.7CNA v4.00.3%2026-10-12Fix
CVE-2026-109604ERPNext stored XSS via tool View Record Names8.5CNA v4.00.2%2026-10-12Fix
CVE-2026-109603Frappe Framework Authenticated SSRF and LFI via pdfkit4.8CNA v4.00.2%2026-10-12Fix
CVE-2026-109602Frappe stored XSS via Dashboard Chart Filters5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109601Frappe Framework arbitrary file read via Outgoing Email HTML7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109600Frappe improper access control in Document Follow Notifications6.9CNA v4.00.2%2026-10-12Fix
CVE-2026-109599Frappe missing authorization allows Unauthorized Record Modification5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109598Frappe Broken Authorization via send_sms endpoint5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109597Hugo stored XSS via Table of Contents Heading IDs5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109596Hugo from Symlink File Disclosure via Nested Mount Ancestor6.7CNA v4.00.1%2026-10-12Fix
CVE-2026-109595Hugo path traversal via js.Build ESBuild Resolver6.7CNA v4.00.1%2026-10-12Fix
CVE-2026-109575HAProxy Data Plane API EE missing authentication9.8CNA v3.10.4%2026-10-12Fix
CVE-2026-109574Hugo path traversal via css.Sass Import Fallback6.7CNA v4.00.1%2026-10-12Fix
CVE-2026-109573phpMyFAQ SQL injection via API/autocomplete Search endpoint9.2CNA v4.00.3%2026-10-12Fix
CVE-2026-109572open-webui Open WebUI privilege escalation via Terminal Proxy7.2CNA v4.00.3%2026-10-12Fix
CVE-2026-109571Fire-Boltt BSW013 firmware Unauthenticated Heart Rate Disclosure via BLE2.3CNA v4.00.2%2026-10-12
CVE-2026-109570Fire-Boltt BSW013 Unauthenticated BLE Notification injection5.3CNA v4.00.2%2026-10-12
CVE-2026-109569sandboxed.sh Container Escape via nsenter Missing Root Namespace9.3CNA v4.00.1%2026-10-12
CVE-2026-109568Shaark missing authorization via API Update and Delete Routes7.1CNA v4.00.2%2026-10-12
CVE-2026-109567zofe rapyd-admin rapyd Admin from privilege escalation via UsersEdit component8.6CNA v4.00.3%2026-10-12Fix
CVE-2026-109566zofe rapyd-admin Rapyd Admin Hard-Coded Super-Admin Credentials via AuthSeeder9.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109565zofe rapyd-admin rapyd Admin stored XSS via select-list component5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109564LearnHouse missing authorization via Playground Duplicate endpoint2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109563N3.js ReDoS via N3Lexer Numeric-Literal Regex8.7CNA v4.00.4%2026-10-12Fix
CVE-2026-109562SnapOtter missing authorization via upload and Preview API5.3CNA v4.00.2%2026-10-12
CVE-2026-109561goose from Manual Approval Bypass via Read-Only Tool Annotations2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109560Continue CLI Bash Permission Rule Bypass via Command Chaining7.7CNA v4.00.4%2026-10-12
CVE-2026-109559EdgeEver Desktop Navigation Allowlist Bypass via will-navigate8.4CNA v4.00.3%2026-10-12
CVE-2026-109558EdgeEver stored XSS via TemplatesPane Template Preview8.5CNA v4.00.3%2026-10-12
CVE-2026-109557EdgeEver stored XSS via setMemoDragPreview Drag Preview8.4CNA v4.00.3%2026-10-12
CVE-2026-109556EdgeEver Desktop Local Program Execution via ACP IPC7.3CNA v4.00.5%2026-10-12
CVE-2026-109448psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters5.9CNA v3.10.2%2026-10-12Fix
CVE-2026-109427Telegram-Stremio Broken Object Authorization via Stream IDs7.1CNA v4.00.2%2026-10-12
CVE-2026-109426Telegram-Stremio Insecure Session Storage via encode_string8.2CNA v4.00.1%2026-10-12
CVE-2026-109425Tink-go Keyset Validation Bypass via NewHandleWithNoSecrets6.9CNA v4.00.2%2026-10-12
CVE-2026-109424NetEase Cloud Music weak encryption via eapi/xeapi8.2CNA v4.00.2%2026-10-12
CVE-2026-109423NetEase Cloud Music TLS certificate validation bypass9.1CNA v4.00.2%2026-10-12
CVE-2026-109422NetEase Cloud Music RCE via os.navigateExternal IPC9.2CNA v4.00.5%2026-10-12
CVE-2026-109399SWUpdate CMS signature verification Bypass via Embedded Intermediates9.2CNA v4.00.2%2026-10-12Fix
CVE-2026-109398Gumlet php-image-resize denial of service via Decompression Bombs8.7CNA v4.00.5%2026-10-12Fix
CVE-2026-109397Thelia and.x file upload RCE via Filename Trailing Space8.6CNA v4.00.4%2026-10-12Fix
CVE-2026-109396Thelia and.x CSV formula injection via Exports2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109394Thirty bees account takeover via PasswordController Guest Checkout9.1CNA v4.00.3%2026-10-12
CVE-2026-109393QloApps insecure direct object reference in Back-Office AJAX Handlers5.3CNA v4.00.2%2026-10-12
CVE-2026-109392Pimcore stored XSS via ExternalImage Field Version Preview5.1CNA v4.00.2%2026-10-12
CVE-2026-109391Square Squash through commit e73f280 Unauthenticated YAML deserialization via Symbolication API9.2CNA v4.00.5%2026-10-12
CVE-2026-109390AnyDesk improper length parameter handling9.8CNA v3.11.6%2026-10-12Fix
CVE-2026-109380modern-tar memory exhaustion via Malformed Octal Size field8.7CNA v4.00.4%2026-10-12
CVE-2026-109379Cockpit CMS Account Enumeration via Timing Discrepancy in /auth/check6.9CNA v4.00.3%2026-10-12
CVE-2026-109378SPIP SSRF via HTTP Redirects in recuperer_url5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109377ERPNext missing authorization in Batch Lookup Methods5.3CNA v4.00.3%2026-10-12
CVE-2026-109376ERPNext incorrect authorization via get_timesheet_html5.3CNA v4.00.3%2026-10-12
CVE-2026-109375Vercel deepsec arbitrary file write via Symlink in Sandbox Tarball Extraction4.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109374ZITADEL privilege escalation via OIDC Token Exchange Impersonation5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109373ZITADEL account takeover via Unsigned Login V2 Session Cookie9.2CNA v4.00.4%2026-10-12Fix
CVE-2026-109372ZITADEL account takeover via SAML Identity-Provider Confusion9.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109371ZITADEL Unauthenticated Username Change via Login V18.8CNA v4.00.4%2026-10-12Fix
CVE-2026-109366Zebra Gossiped Block Drop via Forged Coinbase scriptSig Height6.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109365Zebra denial of service via Same-Hash Forged Block Bodies6.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109364Zebra Peer Ban Bypass via Exact-IP Keying6.9CNA v4.00.2%2026-10-12Fix
CVE-2026-109363Zebra denial of service via Malformed v6 Transaction8.7CNA v4.00.4%2026-10-12Fix
CVE-2026-109362Heym broken access control via Workflow Execution Tokens5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109361MONAI insecure deserialization RCE via nnUNetV2Runner postprocessing_file Path7.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109360MONAI RCE via SENet Pretrained Weights over Plaintext HTTP7.7CNA v4.00.5%2026-10-12Fix
CVE-2026-109359Contrast Mesh CA Key Cross-Manifest Exposure via Peer Recovery8.7CNA v4.00.1%2026-10-12Fix
CVE-2026-109358Edgeless Systems Contrast World-Writable Containerd Config privilege escalation8.5CNA v4.00.1%2026-10-12Fix
CVE-2026-109357LibreNMS LDAP Filter injection authentication bypass via Authorization header9.2CNA v4.00.5%2026-10-12Fix
CVE-2026-109356LibreNMS missing authorization in Port Purge via PortsController5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109355LibreNMS stored XSS via Tools Oxidized Node List5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109354LibreNMS path traversal via NFSen channel parameter5.3CNA v4.00.3%2026-10-12Fix
CVE-2026-109353LibreNMS SQL injection via notification_id in notifications.inc.php7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109352LibreNMS stored XSS via wireless sensor description5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109351Gitoxide gix-pack denial of service via Pack header Object Count7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109350Gitoxide gix-pack denial of service via OFS_DELTA Base Distance7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109349GitoxideLabs gix-pack pack header decoder denial of service7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109348Gitoxide gix-mailmap CPU denial of service via .mailmap Parsing5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109347Adminer RCE via UTF-8 BOM SQLite ATTACH Bypass8.6CNA v4.00.6%2026-10-12Fix
CVE-2026-109346better-auth Device Authorization Phishing via /device8.5CNA v4.00.3%2026-10-12Fix
CVE-2026-109345DOMPurify XSS via IN_PLACE Returned Rawtext Root5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109344DOMPurify from DOM XSS via IN_PLACE afterSanitize Hooks5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109343SurrealDB Cross-Tenant Access via use Statement8.6CNA v4.00.3%2026-10-12Fix
CVE-2026-109342SurrealDB missing authentication in revoke RPC method5.3CNA v4.00.3%2026-10-12Fix
CVE-2026-109341SurrealDB field permission bypass via PATCH copy/move/test Operations7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109340SurrealDB authorization bypass via REFERENCE ON delete CASCADE5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109339SurrealDB memory exhaustion via Surrealism Module Output Buffering6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109338SurrealDB denial of service via Headers Non-ASCII Values7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109337SurrealDB field permission bypass via LIVE SELECT WHERE Clause5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109336SurrealDB field permission bypass via LIVE SELECT $before/$after5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109335SurrealDB information disclosure via COMPUTED fields7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109334SurrealDB Cross-Tenant Access via Surreal-NS/Surreal-DB headers and RPC use8.6CNA v4.00.3%2026-10-12Fix
CVE-2026-109333SurrealDB Cross-Tenant Record Read via RETURN FETCH7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109332Network-AI CORS origin validation error in MCP SSE Transport2.3CNA v4.00.1%2026-10-12Fix
CVE-2026-109331Network-AI Deny Pattern Bypass via ClaudeHookBridge extractFullTarget7.5CNA v4.00.1%2026-10-12Fix
CVE-2026-109330Network-AI Cross-Site WebSocket Hijacking via DashboardServer5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109329Admidio and Cross-Organization Access Control Bypass via members_assignment.php8.5CNA v4.00.3%2026-10-12Fix
CVE-2026-109328Admidio Unauthenticated stored XSS via Registration Name5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109327Admidio and reflected XSS via system/redirect.php5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109326Grav information disclosure via Nested .git Directories8.7CNA v4.00.3%2026-10-12Fix
CVE-2026-109325Grav from Clockwork Profiler authentication bypass via Proxy8.7CNA v4.00.4%2026-10-12Fix
CVE-2026-109324Grav memory exhaustion via Oversized Image Transforms7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109323getgrav grav-plugin-star-ratings Grav Star Ratings Missing Server-Side vote_access Authorization6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109322getgrav grav-plugin-guestbook Grav Guestbook stored XSS via AJAX Pagination and Admin Views5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109321getgrav Grav Login OAuth plugin authentication bypass9.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109320getgrav grav-plugin-api Grav API Plugin Disabled Account Session Access Bypass5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109319getgrav grav-plugin-guestbook grav Guestbook plugin and missing authorization and CSRF in Moderation5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109318Trilby Media grav-plugin-git-sync Grav Git Sync command injection via Commit Author8.7CNA v4.01.2%2026-10-12Fix
CVE-2026-109317getgrav grav-plugin-api grav API plugin privilege escalation via Scalar Access Grants8.6CNA v4.00.4%2026-10-12Fix
CVE-2026-109316getgrav grav-plugin-data-manager Grav Data Manager Unauthenticated file deletion via Admin6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109315Grav Clockwork Debugger token disclosure via Twig Sandbox7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109314getgrav grav-plugin-login Grav Login Plugin Password Reset token disclosure via Reset page8.5CNA v4.00.3%2026-10-12Fix
CVE-2026-109313getgrav grav-plugin-login Grav Login plugin 2FA Bypass via Remember-Me Cookie8.6CNA v4.00.4%2026-10-12Fix
CVE-2026-109312getgrav grav-plugin-login Grav Login plugin 2FA Bypass via Profile Update form8.6CNA v4.00.4%2026-10-12Fix
CVE-2026-109311vLLM heap overflow DoS via IAMF Audio Transcription upload7.1CNA v4.00.4%2026-10-12Fix
CVE-2026-109310SiYuan denial of service via getDynamicIcon template7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109309SiYuan arbitrary file read via Plugin ResponseFile.Path6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109308Craft CMS and RCE via actionCacheUpdates Behavior injection8.7CNA v4.00.5%2026-10-12Fix
CVE-2026-109307Craft CMS DOM XSS via returnUrl in 2FA Verification2.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109306Craft CMS missing authorization via app/switch-to-licensed-edition6.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109305Craft CMS Twig sandbox bypass RCE via has some/has every8.7CNA v4.00.5%2026-10-12Fix
CVE-2026-109304Craft CMS and arbitrary file read via Twig create DOMDocument6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109303parse-community parse-server Parse Server and protectedFields Bypass via Relation Count Query5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109302parse-community parse-server Parse Server and GraphQL Schema Disclosure via Persisted Queries6.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109301parse-community parse-server Parse Server and denial of service via File Pointer without URL8.2CNA v4.00.3%2026-10-12Fix
CVE-2026-109300open-webui Open WebUI stored XSS via Tool-Call Embeds5.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109299open-webui Open WebUI denial of service via Recurrence Rule Validation7.1CNA v4.00.4%2026-10-12Fix
CVE-2026-109298open-webui Open WebUI memory exhaustion via Knowledge Search Regex7.1CNA v4.00.4%2026-10-12Fix
CVE-2026-109297open-webui Open WebUI denial of service via Automation Recurrence Rules7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109296open-webui Open WebUI missing authorization via Backend Index on Model Routes5.3CNA v4.00.3%2026-10-12Fix
CVE-2026-109295open-webui Open WebUI ReDoS via grep_knowledge_files Event Loop5.3CNA v4.00.3%2026-10-12Fix
CVE-2026-109294open-webui Open WebUI memory exhaustion via Compressed Remote Image7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109293open-webui Open WebUI Tool Source Disclosure via Tool Export endpoint7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109292open-webui Open WebUI Session token disclosure via OAuth-Mode Connections7.6CNA v4.00.3%2026-10-12Fix
CVE-2026-109291open-webui Open WebUI stored XSS via Citation embed_url8.5CNA v4.00.3%2026-10-12Fix
CVE-2026-109290open-webui Open WebUI stored XSS via DOCX Preview8.4CNA v4.00.3%2026-10-12Fix
CVE-2026-109289open-webui Open WebUI Improper Session Revocation via Terminal WebSocket5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109288open-webui Open WebUI stored XSS via javascript: URLs in Markdown Links7.2CNA v4.00.2%2026-10-12Fix
CVE-2026-109287open-webui Open WebUI information disclosure via Unscoped Directory ID5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109286open-webui Open WebUI Session Token Theft via SyncStatsModal8.6CNA v4.00.1%2026-10-12Fix
CVE-2026-109285open-webui open WebUI improper access control via Stale File Metadata2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109284open-webui open WebUI improper authorization via Chat Fork endpoint5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109283open-webui Open WebUI authorization bypass via OAuth Token Exchange5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109282ImageMagick and undefined behavior in INFO, JSON and YAML Encoders2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-109281ImageMagick heap buffer over-read via -fx option4.8CNA v4.00.1%2026-10-12Fix
CVE-2026-109280ImageMagick use-after-free via -fx option2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-109279ImageMagick and heap buffer overflow via Concurrent Security Policy Access2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-109278ImageMagick and memory leak in Wavelet-Denoise Operation6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109277ImageMagick Policy Bypass via -script Operation4.8CNA v4.00.1%2026-10-12Fix
CVE-2026-109276ImageMagick and Temporary file leak in JNG Decoder6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109275ImageMagick and code injection via MVG Decoder6.3CNA v4.00.3%2026-10-12Fix
CVE-2026-109274ImageMagick TOCTOU Symlink Race Path Policy Bypass via magick script2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-109273ImageMagick and information disclosure in PostScript Decoder6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109272ImageMagick null pointer dereference in PostScript Decoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109271ImageMagick use-after-free in WBINFO Decoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109270ImageMagick memory leak via -process option4.8CNA v4.00.1%2026-10-12Fix
CVE-2026-109269ImageMagick and information disclosure via JPEG Decoder6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109268ImageMagick and use-after-free in PDF Writer via JPEG20006.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109267ImageMagick and stack overflow in MSL Decoder6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109266ImageMagick and code injection via CIP Encoder6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109265ImageMagick heap buffer over-read via XMP Profile6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109264ImageMagick and stack overflow in MVG Decoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109263ImageMagick and memory leak in YUV Encoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109262ImageMagick and memory leak in SVG Encoder6.9CNA v4.00.4%2026-10-12Fix
CVE-2026-109261ImageMagick and memory leak in GIF Encoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109260ImageMagick and memory leak in PNG Encoder6.3CNA v4.00.4%2026-10-12Fix
CVE-2026-109259ImageMagick and information disclosure in TGA Decoder6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109258ImageMagick Invalid Memory Free in FX Operation2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-109257FreeRDP double free via NSCodec plane growth failure8.2CNA v4.00.3%2026-10-12Fix
CVE-2026-109256FreeRDP heap buffer overflow in WinPR PNG Conversion6.0CNA v4.00.3%2026-10-12Fix
CVE-2026-109255FreeRDP heap buffer overflow via license_check_stream_length6.1CNA v4.00.5%2026-10-12Fix
CVE-2026-109254FreeRDP use-after-free via rdpsnd Disconnect Path6.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109253FreeRDP RDPEAR NDR Scalar out-of-bounds read6.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109252FreeRDP from RDPEAR null pointer dereference via KERB_RPC_INTERNAL_NAME6.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109251FreeRDP out-of-bounds write via MS-RDPEGT Video Geometry6.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109250FreeRDP heap buffer overflow via PKCS#11 collect_keys7.0CNA v4.00.2%2026-10-12Fix
CVE-2026-109249FreeRDP heap out-of-bounds read via Remote Assistance File Parsing6.8CNA v4.00.1%2026-10-12Fix
CVE-2026-109248FreeRDP heap out-of-bounds read via WinPR Clipboard cFileName6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109247FreeRDP path traversal via Clipboard cFileName2.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109246FreeRDP Shadow Server divide-by-zero via Frame Acknowledge PDU7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-109245FreeRDP improper certificate validation in freerdp_http_request7.4CNA v4.00.2%2026-10-12Fix
CVE-2026-109244FreeRDP Insecure Private Key Permissions in winpr-makecert6.8CNA v4.00.1%2026-10-12Fix
CVE-2026-109243FreeRDP insecure permissions on Soft-Smartcard Private Key file4.1CNA v4.00.1%2026-10-12Fix
CVE-2026-109242FreeRDP and uninitialized heap Disclosure via Progressive Codec Tile Upgrade7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-109241FreeRDP null dereference in Video Redirection Channel2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109240FreeRDP reachable assertion DoS via urb_isoch_transfer2.3CNA v4.00.2%2026-10-12Fix
CVE-2026-109239Crawl4AI blind SSRF via RobotsParser.can_fetch robots.txt Fetch6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-109238Crawl4AI SSRF via link_preview_config URL Seeder9.2CNA v4.00.3%2026-10-12Fix
CVE-2026-109237Crawl4AI Untrusted Config Gate Bypass leaks Environment variables8.6CNA v4.00.3%2026-10-12Fix
CVE-2026-109229SGLang decompression bomb DoS via NanoNemotronVLImageProcessor8.7CNA v4.00.4%2026-10-12
CVE-2026-109228SGLang Resource Budget Bypass via GLM-V Video parameters8.7CNA v4.00.5%2026-10-12
CVE-2026-109227SGLang memory exhaustion DoS via Qwen-VL Video Preprocessing8.7CNA v4.00.4%2026-10-12
CVE-2026-109226SGLang Audio Decompression Amplification via load_audio8.7CNA v4.00.5%2026-10-12
CVE-2026-109225SGLang memory exhaustion DoS via /v1/audio/transcriptions upload8.7CNA v4.00.4%2026-10-12
CVE-2026-109206LogicalDOC Community Edition Username Enumeration via AvatarServlet6.9CNA v4.00.2%2026-10-12
CVE-2026-109205LogicalDOC Community Edition Unauthenticated Upload Disk Exhaustion via UploadServlet8.7CNA v4.00.4%2026-10-12
CVE-2026-109204LogicalDOC Community Edition PswRecovery servlet improper authorization5.3CNA v4.00.2%2026-10-12
CVE-2026-109203LogicalDOC Community Edition missing authorization via ConvertPdf Servlet7.1CNA v4.00.2%2026-10-12
CVE-2026-109202LogicalDOC Community Edition missing authorization via zip-export Servlet7.1CNA v4.00.3%2026-10-12
CVE-2026-109201LogicalDOC Community Edition missing authorization in DocumentService8.7CNA v4.00.3%2026-10-12
CVE-2026-109200LogicalDOC Community Edition SSRF via XMLConverter xml-stylesheet href5.3CNA v4.00.2%2026-10-12
CVE-2026-109199LogicalDOC Community Edition code injection via Velocity sendAsEmail template8.7CNA v4.00.4%2026-10-12
CVE-2026-109195Quay: Repository auto-prune policy uuid IDOR in quay API3.1CNA v3.10.2%2026-10-12
CVE-2026-109194Quay: Build trigger uuid IDOR in quay API6.4CNA v3.10.2%2026-10-12
CVE-2026-109188jshERP missing authorization in Master Data Add and Import endpoints5.3CNA v4.00.3%2026-10-12
CVE-2026-109187jshERP information disclosure via /platformConfig/getInfoByKey7.1CNA v4.00.2%2026-10-12
CVE-2026-109186jshERP mass assignment via PUT /user/update8.7CNA v4.00.4%2026-10-12
CVE-2026-109185jshERP privilege escalation via PUT /user/updateUser8.7CNA v4.00.3%2026-10-12
CVE-2026-109184jshERP Data Scope Bypass via /account/findAccountInOutList5.3CNA v4.00.2%2026-10-12
CVE-2026-109183jshERP Approval Bypass via addDepotHeadAndDetail Status parameter5.3CNA v4.00.2%2026-10-12
CVE-2026-109182jshERP incorrect authorization via /supplier/exportExcel5.3CNA v4.00.2%2026-10-12
CVE-2026-109181jshERP authorization bypass via purchaseStatus in /depotHead/list5.3CNA v4.00.2%2026-10-12
CVE-2026-109180jshERP authorization bypass via User-Controlled Warehouse IDs5.3CNA v4.00.2%2026-10-12
CVE-2026-109179jshERP missing authorization via /log/list and /log/info5.3CNA v4.00.2%2026-10-12
CVE-2026-109178jshERP missing authorization via /log Audit endpoints5.3CNA v4.00.2%2026-10-12
CVE-2026-109177MoguBlog broken access control via networkDisk moveFile and edit5.3CNA v4.00.2%2026-10-12
CVE-2026-109176MoguBlog IDOR allows Deleting other Administrators' Network-Disk files5.3CNA v4.00.2%2026-10-12
CVE-2026-109175MoguBlog broken access control via /networkDisk/getFileList5.3CNA v4.00.2%2026-10-12
CVE-2026-109174MoguBlog credential disclosure via /oauth/getSystemConfig7.1CNA v4.00.2%2026-10-12
CVE-2026-109173yshop-crm missing authorization via invoice check endpoint5.3CNA v4.00.2%2026-10-12
CVE-2026-109172yshop-crm missing authorization via contract-receivables check endpoint5.3CNA v4.00.2%2026-10-12
CVE-2026-109171yshop-crm missing authorization via /admin-api/crm/contract/check5.3CNA v4.00.2%2026-10-12
CVE-2026-109170LogicalDOC Community Edition HQL injection via documents.xml indexed parameter7.1CNA v4.00.3%2026-10-12
CVE-2026-109169LogicalDOC Community Edition SQL injection via tags.xml firstLetter7.1CNA v4.00.3%2026-10-12
CVE-2026-109168lamp-cloud IDOR via /anyone/appendix/listFileByBizId7.1CNA v4.00.2%2026-10-12
CVE-2026-109167TDuckCloud tduck-survey-form TDuck survey form authorization bypass5.3CNA v4.00.2%2026-10-12
CVE-2026-109166lamp-cloud IDOR via /anyone/file/findUrlById7.1CNA v4.00.2%2026-10-12
CVE-2026-109165TDuckCloud tduck-survey-form TDuck survey form authorization bypass5.3CNA v4.00.2%2026-10-12
CVE-2026-109164TDuckCloud tduck-survey-form TDuck survey form authorization bypass7.1CNA v4.00.3%2026-10-12
CVE-2026-109082Red Hat Keycloak keycloak-services CIBA implementation improper authentication6.8CNA v3.10.2%2026-10-12
CVE-2026-109080SQL injection in Night Shift bulk license plate search allows cross-organization data access7.1CNA v4.00.2%2026-10-12Fix
CVE-2026-108985sahlberg libnfs out-of-bounds write7.1CNA v3.10.2%2026-10-12
CVE-2026-108982IDRIX VeraCrypt incomplete cleanup7.2CNA v4.00.1%2026-10-12
CVE-2026-108981denji ngx_cache_purge symlink following3.6CNA v3.10.1%2026-10-12Fix
CVE-2026-108980Blinko path traversal8.8CNA v3.11.1%2026-10-12
CVE-2026-108953mac-shell-mcp OS command injection via execute_command arguments8.5CNA v4.00.7%2026-10-12Fix
CVE-2026-108952RT-Thread memory corruption via USB CDC VCOM driver5.1CNA v4.00.2%2026-10-12
CVE-2026-108951LavaLite CMS authorization bypass via User Update API7.1CNA v4.00.3%2026-10-12
CVE-2026-108950opensource-socialnetwork Open Source Social Network missing authorization6.9CNA v4.00.3%2026-10-12
CVE-2026-108941Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection2.4CNA v4.00.1%2026-10-12
CVE-2026-108940EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal6.9CNA v4.00.6%2026-10-12Fix
CVE-2026-108939EricLBuehler Mistral.rs media_source.rs is_global_ip server-side request forgery6.9CNA v4.00.5%2026-10-12Fix
CVE-2026-108938code-projects Matrimonial System matrimony.sql file access6.9CNA v4.00.3%2026-10-12
CVE-2026-108937code-projects Online Ticket Reservation System medallion.sql file information disclosure6.9CNA v4.00.3%2026-10-12
CVE-2026-108936Edimax BR-6208AC QoS page formQoS cross-site scripting4.8CNA v4.00.2%2026-10-12
CVE-2026-108935Edimax BR-6208AC Port Forwarding formPortFw cross-site scripting4.8CNA v4.00.3%2026-10-12
CVE-2026-108934Edimax BR-6208AC HTTP Blocking formUrlb cross-site scripting4.8CNA v4.00.2%2026-10-12
CVE-2026-108933Edimax BR-6208AC formFilter cross-site scripting4.8CNA v4.00.2%2026-10-12
CVE-2026-108932Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross-site scripting5.3CNA v4.00.3%2026-10-12
CVE-2026-108931Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross-site scripting5.3CNA v4.00.3%2026-10-12
CVE-2026-108930Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure5.1CNA v4.00.3%2026-10-12
CVE-2026-108929Netcore NR268 DDNS DDNSset.cgi execvp argument injection9.4CNA v4.00.4%2026-10-12
CVE-2026-108928itsourcecode Online Admission System sum.php SQL injection5.3CNA v4.00.3%2026-10-12
CVE-2026-108927itsourcecode Baptism Information Management System pbaptism.php SQL injection5.3CNA v4.00.3%2026-10-12
CVE-2026-108926itsourcecode Baptism Information Management System ebaptism.php SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108924getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization5.3CNA v4.00.4%2026-10-12Exploit codeFix
CVE-2026-1089231024-lab smart-admin Support Config Query queryByKey access control5.3CNA v4.00.4%2026-10-12
CVE-2026-108922KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload5.3CNA v4.00.3%2026-10-12
CVE-2026-108921KusalkaSilva Learning-Management-System missing authentication6.9CNA v4.00.7%2026-10-12
CVE-2026-108920SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross-site scripting5.3CNA v4.00.3%2026-10-12
CVE-2026-108919SourceCodester Drug Recommendation System Student Registration add_student.php cross-site scripting5.3CNA v4.00.3%2026-10-12
CVE-2026-108918Edimax BR-6208AC formWlanMP command injection10.0CNA v4.02.0%2026-10-12
CVE-2026-108917Edimax BR-6208AC formAutoFWupgrade command injection10.0CNA v4.02.0%2026-10-12
CVE-2026-108916Edimax BR-6208AC formAccept command injection6.9CNA v4.01.7%2026-10-12
CVE-2026-108915Edimax BR-6208AC formWlanMP buffer overflow9.4CNA v4.00.4%2026-10-12
CVE-2026-108914Edimax BR-6208AC formWlSiteSurvey buffer overflow9.4CNA v4.00.6%2026-10-12
CVE-2026-108909Netcore NR268 CGI endpoint cross-site request forgery5.3CNA v4.00.2%2026-10-12
CVE-2026-108908Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross-site scripting4.8CNA v4.00.3%2026-10-12
CVE-2026-108907Netcore NR268 CGI Execution user_ok improper authentication10.0CNA v4.01.2%2026-10-12
CVE-2026-108906Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds8.6CNA v4.00.4%2026-10-12
CVE-2026-108901Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering UI layer5.1CNA v4.00.3%2026-10-12
CVE-2026-108900Exponent CMS XML-RPC xmlrpc.php userLogin SQL injection6.9CNA v4.00.4%2026-10-12
CVE-2026-108899tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization6.9CNA v4.00.6%2026-10-12Fix
CVE-2026-108898Netis WF2409E Wireless settings cross-site scripting5.1CNA v4.00.2%2026-10-12
CVE-2026-108897Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine6.9CNA v4.00.3%2026-10-12
CVE-2026-108896Linksys E1700 setLinksysIpv6 os command injection9.4CNA v4.02.2%2026-10-12
CVE-2026-108895Linksys E1700 setDMZ os command injection9.4CNA v4.02.2%2026-10-12
CVE-2026-108894Linksys E1700 Static route addStaticRoute os command injection9.4CNA v4.02.2%2026-10-12
CVE-2026-108893Linksys E1700 setVlan stack-based overflow9.4CNA v4.00.5%2026-10-12
CVE-2026-108892Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow10.0CNA v4.00.6%2026-10-12
CVE-2026-108890BlackBeltTechnology pi-agent-dashboard Terminal Handler improper authorization5.3CNA v4.00.5%2026-10-12
CVE-2026-108889Yungengxin Cloud Billing exposed IOCTL without access control4.8CNA v4.00.2%2026-10-12
CVE-2026-108836Ollama Pull API name.go IsValid server-side request forgery6.9CNA v4.00.5%2026-10-12Fix
CVE-2026-108835Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges management4.8CNA v4.00.1%2026-10-12
CVE-2026-108834Cairo-dock Glx-Dock Query parameter ww_page.php cross-site scripting5.3CNA v4.00.4%2026-10-12
CVE-2026-108831meetecho janus-gateway Admin API admin.js hard-coded credentials5.3CNA v4.00.3%2026-10-12
CVE-2026-108830meetecho janus-gateway VideoRoom janus_videoroom.c race condition2.3CNA v4.00.2%2026-10-12
CVE-2026-108829Zen Cart Module Configuration modules.php SQL injection5.1CNA v4.00.3%2026-10-12
CVE-2026-108828Zen Cart Admin Panel configuration.php eval SQL injection2.1CNA v4.00.3%2026-10-12
CVE-2026-108827Zen Cart Administrative Module Management general.php zen_call_function code injection2.1CNA v4.00.3%2026-10-12
CVE-2026-108826Zen Cart PayPal IPN paypaldp.php zen_db_perform SQL injection6.9CNA v4.00.4%2026-10-12
CVE-2026-108825yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management5.3CNA v4.00.4%2026-10-12
CVE-2026-108824DataEase Utils.java Utils.buildCalcField SQL injection5.3CNA v4.00.4%2026-10-12
CVE-2026-108822Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflow6.9CNA v4.00.8%2026-10-12Fix
CVE-2026-108821Tencent WeKnora SQL Validator inject.go validateSubquery SQL injection5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-108820agno-agi agno Delegation feature _default_tools.py member_agent.run unnecessary privileges5.3CNA v4.00.3%2026-10-12
CVE-2026-108819agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources6.9CNA v4.00.3%2026-10-12
CVE-2026-108818agno-agi agno auth.py get_authentication_dependency missing authentication6.9CNA v4.00.5%2026-10-12
CVE-2026-108817agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection5.1CNA v4.01.1%2026-10-12Fix
CVE-2026-108816agno-agi agno PythonTools python.py run_python_code code injection5.3CNA v4.00.3%2026-10-12
CVE-2026-108815idcCMS member_deal.php cross-site scripting5.1CNA v4.00.2%2026-10-12
CVE-2026-108814SEMCMS SEMCMS_Banner.php SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108813SEMCMS SEMCMS_Download.php SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108812SEMCMS SEMCMS_User.php user improper authorization6.9CNA v4.00.3%2026-10-12
CVE-2026-108811WMCMS index.php information disclosure5.3CNA v4.00.2%2026-10-12
CVE-2026-108810tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-108809Eleveo Call Recording Software logout session expiration5.1CNA v4.00.2%2026-10-12
CVE-2026-108808Eleveo Call Recording Software JWT Token logout get request method with sensitive query strings2.1CNA v4.00.2%2026-10-12
CVE-2026-108807krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query SQL injection6.9CNA v4.00.3%2026-10-12
CVE-2026-108806krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query SQL injection6.9CNA v4.00.3%2026-10-12
CVE-2026-108805krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query SQL injection6.9CNA v4.00.3%2026-10-12
CVE-2026-108804TRENDnet TEW-751DR, TEW-752DRU and TEW733GR os command injection10.0CNA v4.02.4%2026-10-12
CVE-2026-108803y_project RuoYi Disable API add changeStatus session expiration5.3CNA v4.00.2%2026-10-12
CVE-2026-108802y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross-site scripting5.1CNA v4.00.2%2026-10-12
CVE-2026-108801prasathmani TinyFileManager TinyFileManager.php move_uploaded_file unrestricted upload5.3CNA v4.00.3%2026-10-12
CVE-2026-108800yangzongzhuan RuoYi cross-site request forgery5.3CNA v4.00.2%2026-10-12
CVE-2026-108799jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail SQL injection6.9CNA v4.00.4%2026-10-12
CVE-2026-108798ZKTeco BioTime hard-coded key6.9CNA v4.00.3%2026-10-12Fix
CVE-2026-108797ZKTeco BioTime Employee REST API employees authorization5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-108796ZKTeco BioTime Biometric Data endpoint finger_data authorization5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-108795ZKTeco BioTime System Settings API systemSettings access control5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-108794ZKTeco BioTime Database Migration Functionality db_migrate_setting SQL injection5.3CNA v4.00.2%2026-10-12Fix
CVE-2026-108791westboy CicadasCMS Template Management input TemplateController.input path traversal5.3CNA v4.00.4%2026-10-12
CVE-2026-108790westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal5.1CNA v4.00.5%2026-10-12
CVE-2026-108789deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow5.1CNA v4.00.2%2026-10-12
CVE-2026-108788deepseek-ai deepseek-harness Sandbox spawn sandbox4.8CNA v4.00.1%2026-10-12
CVE-2026-108787houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery5.3CNA v4.00.2%2026-10-12
CVE-2026-108786houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery5.3CNA v4.00.2%2026-10-12
CVE-2026-108785macrozheng mall JwtAuthenticationTokenFilter insufficient session expiration5.3CNA v4.00.3%2026-10-12
CVE-2026-108784macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error6.9CNA v4.00.6%2026-10-12
CVE-2026-108783PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials6.9CNA v4.00.4%2026-10-12
CVE-2026-108782erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108781erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108779erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list SQL injection5.3CNA v4.00.2%2026-10-12
CVE-2026-108486Forminator WordPress plugin broken access control5.3CNA v3.10.2%2026-10-12Fix
CVE-2026-108482Premium Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-108481Patreon WordPress plugin cross-site request forgery (CSRF)7.4CNA v3.10.1%2026-10-12Fix
CVE-2026-108479Patreon WordPress plugin cross-site request forgery (CSRF)8.1CNA v3.10.1%2026-10-12Fix
CVE-2026-108478Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-108477Booktics WordPress plugin broken access control5.3CNA v3.10.2%2026-10-12Fix
CVE-2026-108476Paid Videochat Turnkey Site WordPress plugin broken access control5.0CNA v3.10.2%2026-10-12Fix
CVE-2026-108475Broadcast Live Video WordPress plugin broken access control4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-108362Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)9.1CNA v4.00.2%2026-10-12Fix
CVE-2026-108361Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks7.2CNA v4.00.1%2026-10-12Fix
CVE-2026-108168Custom Query Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-108094Red Hat Enterprise Linux 10 use-after-free7.8CNA v3.10.1%2026-10-12Fix
CVE-2026-107869Flexible Subscriptions WordPress plugin broken access control4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-107866JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-107865JetMenu WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-107864Ad Inserter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-107863Products Restricted Users for WooCommerce WordPress plugin broken access control5.3CNA v3.10.2%2026-10-12Fix
CVE-2026-107862Quiz And Survey Master WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-107791WP Comment Cleaner - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment6.5CISA ADP v3.10.2%2026-10-12Fix
CVE-2026-107437Plaintext Database password exposure in GV-E-Map Server6.2CNA v3.10.1%2026-10-12Fix
CVE-2026-107432Event post WordPress plugin broken access control5.4CNA v3.10.1%2026-10-12Fix
CVE-2026-107430VideoWhisper Site Manager for ChatGPT, Claude, Codex WordPress plugin broken access control5.4CNA v3.10.1%2026-10-12Fix
CVE-2026-107429Paid Videochat Turnkey Site WordPress plugin Other vulnerability type vulnerability4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-107427Event post WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.2%2026-10-12Fix
CVE-2026-107423WP User Manager WordPress plugin broken access control4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-107418Booktics WordPress plugin broken access control5.4CNA v3.10.2%2026-10-12Fix
CVE-2026-107248Thelia Email/Messages feature server-side template injection8.8CISA ADP v3.10.4%2026-10-12Fix
CVE-2026-107226async-http-client ThreadSafeCookieStore session fixation6.8CNA v3.10.4%2026-10-12Fix
CVE-2026-107203Red Hat Satellite 6 foreman: Domain and subnet interface API skips host search filters5.4CNA v3.10.2%2026-10-12
CVE-2026-107193Red Hat Satellite 6 foreman: Api filter lookup ignores a search-limited filter permission6.5CNA v3.10.2%2026-10-12
CVE-2026-106605Flexible Quantity WordPress plugin Input vulnerability in WP Desk improper input validation5.3CNA v3.10.2%2026-10-12Fix
CVE-2026-106495Backstage: Improper access control in backend action invocation4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-105668Hex release-age cooldown is lifted package-wide when the locked release is retired7.1CNA v4.00.3%2026-10-12Fix
CVE-2026-105466IBM Db2 XML columns denial of service6.5CNA v3.10.4%2026-10-12Fix
CVE-2026-105465IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the Db2 instance8.8CNA v3.10.1%2026-10-12Fix
CVE-2026-105464IBM Db2 privilege escalation8.8CNA v3.10.1%2026-10-12Fix
CVE-2026-105412SQL injection vulnerability affecting Tuleap Enterprise Edition7.1CNA v3.10.2%2026-10-12
CVE-2026-105411Dassault Systèmes Tuleap Enterprise Edition authorization bypass8.1CNA v3.10.2%2026-10-12
CVE-2026-105410Stored cross-site scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from8.7CNA v3.10.2%2026-10-12
CVE-2026-105409Stored cross-site scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from8.7CNA v3.10.2%2026-10-12
CVE-2026-105408Stored cross-site scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from8.7CNA v3.10.2%2026-10-12
CVE-2026-105407OS command injection vulnerability affecting Tuleap Enterprise Edition from8.8CNA v3.11.8%2026-10-12
CVE-2026-105283ash-project ash_typescript internal error terms inspected into AshTypescript RPC error responses6.3CNA v4.00.3%2026-10-12Fix
CVE-2026-105280Hex writes unverified package tarballs to standard output in mix hex.package fetch6.9CNA v4.00.2%2026-10-12Fix
CVE-2026-105274hex_core decompresses registry and Erlang term API responses without size limits2.1CNA v4.00.4%2026-10-12Fix
CVE-2026-105081ImageMagick Policy Bypass via Symlink in IsRightsAuthorizedByName2.0CNA v4.00.1%2026-10-12Fix
CVE-2026-105052IBM Maximo Application Suite information disclosure7.5CNA v3.10.6%2026-10-12Fix
CVE-2026-104774OWASP Coraza WAF: JsDecode off-by-one in Octal Escape Handling enables WAF Bypass5.8CNA v3.10.4%2026-10-12Fix
CVE-2026-104364IBM® Db2® denial of service3.3CNA v3.10.1%2026-10-12Fix
CVE-2026-104355Temporal Server incorrect authorization7.0CNA v4.00.4%2026-10-12Fix
CVE-2026-104332IBM® Db2® denial of service5.5CNA v3.10.1%2026-10-12Fix
CVE-2026-104140QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values6.1CNA v3.10.2%2026-10-12Fix
CVE-2026-104102copyparty FTP: Upload outside defined volumes (limited path traversal)5.3CNA v4.00.3%2026-10-12Fix
CVE-2026-103903MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation8.7CNA v4.00.4%2026-10-12Fix
CVE-2026-103902DigiDoc improper signature verification7.5CNA v3.10.1%2026-10-12Fix
CVE-2026-103658GNU Aspell heap-based buffer overflow5.9CNA v3.10.2%2026-10-12Fix
CVE-2026-103537Thelia Smarty template handling absolute path traversal5.4CISA ADP v3.10.6%2026-10-12Fix
CVE-2026-103535Thelia translation editor vulnerability8.8CISA ADP v3.11.1%2026-10-12Fix
CVE-2026-103529Thelia ZIP upload function remote code execution5.4CISA ADP v3.10.2%2026-10-12Fix
CVE-2026-103528Thelia email templates vulnerability5.4CISA ADP v3.10.4%2026-10-12Fix
CVE-2026-103527Thelia Smarty templates cross-site scripting6.1CISA ADP v3.10.1%2026-10-12Fix
CVE-2026-103526Thelia administrative login and forgotten password endpoints vulnerability3.7CISA ADP v3.10.2%2026-10-12Fix
CVE-2026-103524Thelia administrative interface stored cross-site scripting4.8CISA ADP v3.10.2%2026-10-12Fix
CVE-2026-103523Thelia address creation workflow open redirect6.1CISA ADP v3.10.2%2026-10-12Fix
CVE-2026-103522Thelia store banner upload feature remote code execution7.2CISA ADP v3.10.4%2026-10-12Fix
CVE-2026-103521Thelia document update endpoint unrestricted file upload7.2CISA ADP v3.10.5%2026-10-12Fix
CVE-2026-103503Hex trusts its bundled CA certificates when cacerts_path is set5.9CNA v4.00.2%2026-10-12Fix
CVE-2026-103502Hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 255.9CNA v4.00.2%2026-10-12Fix
CVE-2026-103356TMDS WordPress plugin broken access control5.4CNA v3.10.2%2026-10-12Fix
CVE-2026-103080Salevo WordPress plugin broken access control5.3CNA v3.10.2%2026-10-12Fix
CVE-2026-103061Path traversal in Gleam via unvalidated package application names5.9CNA v4.00.4%2026-10-12Fix
CVE-2026-103060Path traversal in rebar3 via unvalidated dependency app names7.5CNA v4.00.4%2026-10-12Fix
CVE-2026-102663OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-102627Security vulnerability identified in IBM TRIRIGA Zip Slip8.8CNA v3.10.5%2026-10-12Fix
CVE-2026-102596Nango: Production flow RBAC bypass on private flow-read routes4.3CNA v3.10.2%2026-10-12Fix
CVE-2026-102539super-productivity SuperSync E2EE setup cleartext storage of sensitive information5.7CNA v4.00.1%2026-10-12Fix
CVE-2026-98385Linux kernel sched/cache use-after-free–0.1%2026-10-12Exploit codeFix
CVE-2026-97691get-convex convex-backend convex: Unauthorized data access4.3CNA v3.10.2%2026-10-12
CVE-2026-96618Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirror2.1CNA v4.00.3%2026-10-12Fix
CVE-2026-96612Path traversal in Hex via unvalidated dependency app names7.5CNA v4.00.4%2026-10-12Fix
CVE-2026-96266IBM Power Systems firmware buffer overflow8.2CNA v3.10.2%2026-10-12Fix
CVE-2026-96265IBM Power Systems Firmware Improper Memory Buffer Restriction8.2CNA v3.10.2%2026-10-12Fix
CVE-2026-96264IBM Power Systems firmware buffer overflow8.2CNA v3.10.2%2026-10-12Fix
CVE-2026-96263IBM Power Systems firmware buffer overflow8.2CNA v3.10.2%2026-10-12Fix
CVE-2026-96262IBM Power Systems firmware buffer overflow8.2CNA v3.10.2%2026-10-12Fix