CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-105474 15.10.2026 9.4
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026 10
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 15.10.2026 10
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 15.10.2026 9.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 15.10.2026 9.3
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-19863 15.10.2026 9.3
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026 9.3
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026 9.3
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026 9.4
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026 9.3
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026 9.3
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 15.10.2026 9.2
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 15.10.2026 9.4
CVE-2026-102469 15.10.2026 9.2
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-93483 15.10.2026 9.5
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110858 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 14.10.2026 9.2
CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link 15.10.2026 9.3
CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy 15.10.2026 9.1
CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 15.10.2026 9
CVE-2026-108336 Token Signing Key Allows Unauthenticated Administrative Access 14.10.2026 9.1
CVE-2026-108335 Password Reset Functionality Missing Brute-Force Protection 15.10.2026 9.1
CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php 15.10.2026 9.8
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter 15.10.2026 9.8
CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php 15.10.2026 9.8
CVE-2026-102748 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 15.10.2026 9.2
CVE-2026-110770 Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force 14.10.2026 9.2
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection 15.10.2026 10
CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2 14.10.2026 9.1
CVE-2026-102476 14.10.2026 9.1
CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username 14.10.2026 10
CVE-2026-55573 e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain 15.10.2026 9.8
CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 14.10.2026 9.3
CVE-2026-103415 14.10.2026 9.3
CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled 14.10.2026 9.3
CVE-2026-101982 Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used 14.10.2026 9.3
CVE-2026-101983 Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured 15.10.2026 9.3
CVE-2026-108390 HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking 14.10.2026 9.9
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub 14.10.2026 9.3
CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution 15.10.2026 9.3
CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service 15.10.2026 9.2
CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured 15.10.2026 9.3
CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled 15.10.2026 9.3
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled 14.10.2026 9.3
CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used 14.10.2026 9.2
CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used 14.10.2026 9.3
CVE-2026-102178 Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise 14.10.2026 9.3
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 14.10.2026 9.3
CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled 14.10.2026 9.3
CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used 14.10.2026 9.2
CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised 14.10.2026 9.3
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication 14.10.2026 9.2
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used 15.10.2026 9.2
CVE-2026-101956 Junos OS: Unauthorized root command execution when J-Web is enabled 15.10.2026 9.3
CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used 15.10.2026 9.3
CVE-2026-101980 Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled 14.10.2026 9.3
CVE-2026-101986 Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution 15.10.2026 9.3
CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used 14.10.2026 9.2
CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used 14.10.2026 9.2
CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution 15.10.2026 9.2
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability 15.10.2026 9.8
CVE-2026-77524 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 14.10.2026 9.9
CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim 14.10.2026 9.1
CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS 14.10.2026 9
CVE-2026-91881 15.10.2026 9
CVE-2026-15176 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2026-93479 NGINX map directive and regex matching vulnerability 15.10.2026 9.2
CVE-2026-97205 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2020-37281 Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass 14.10.2026 9.2
CVE-2020-37282 office-converter through 1.0.2 OS Command Injection via fileName in generatePdf 14.10.2026 9.3
CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil 14.10.2026 9.3
CVE-2026-110616 NullHub through 2026.5.29 Missing Authentication for /api Management API 14.10.2026 9.2
CVE-2026-110628 Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment 14.10.2026 9.2
CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration 14.10.2026 9.3
CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE 14.10.2026 9.2
CVE-2026-110634 git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings 14.10.2026 9.3
CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options 14.10.2026 9.3
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths 14.10.2026 9.3
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path 14.10.2026 9.3
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir 14.10.2026 9.3
CVE-2026-110640 Whisper-node through 1.1.1 OS Command Injection via filePath and language 14.10.2026 9.3
CVE-2026-110643 transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath 14.10.2026 9.3
CVE-2026-110644 nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType 14.10.2026 9.3
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() 14.10.2026 9.3
CVE-2026-110646 Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl() 14.10.2026 9.2
CVE-2026-110649 Stills before 25.24.2 OS Command Injection via Media File Names 14.10.2026 9.3
CVE-2026-110650 Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths 14.10.2026 9.3
CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce 14.10.2026 9.8
CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability 14.10.2026 9.8
CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability 14.10.2026 9.8
CVE-2026-14851 Unauthorised disclosure of information on Copart’s online billing service 14.10.2026 9.2
CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register 14.10.2026 9.8
CVE-2026-89310 SQL Command Injection Vulnerability in JTL-WMS 14.10.2026 9.4
CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php 14.10.2026 9.8
CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method 14.10.2026 9.8
CVE-2026-110002 Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter 14.10.2026 9.8
CVE-2026-110447 14.10.2026 9.2
CVE-2026-97657 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 14.10.2026 9.8
CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 14.10.2026 9.8
CVE-2026-110392 Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning 14.10.2026 9.8
CVE-2026-92097 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 14.10.2026 9.1
CVE-2026-93388 Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url 14.10.2026 9.8
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins 13.10.2026 9.9
CVE-2026-106619 ColdFusion | Improper Input Validation (CWE-20) 14.10.2026 9
CVE-2026-106622 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 14.10.2026 10
CVE-2026-106624 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 10
CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 14.10.2026 10
CVE-2026-105903 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.9
CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-106620 ColdFusion | Incorrect Authorization (CWE-863) 15.10.2026 9.6
CVE-2026-106621 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.1
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool 14.10.2026 9.3
CVE-2026-75994 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.6
CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 14.10.2026 9.3
CVE-2026-93895 IBM WebSphere Application Server Liberty Improper Access Control 13.10.2026 9.1
CVE-2026-93909 IBM WebSphere Application Server Liberty is affected by an authentication bypass 14.10.2026 9.1
CVE-2026-63158 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies 14.10.2026 9.1
CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover 14.10.2026 9.1
CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage 14.10.2026 9.1
CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 14.10.2026 9.9
CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.9
CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.1
CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 13.10.2026 9.3
CVE-2026-106630 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-48383 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php 14.10.2026 9.3
CVE-2026-63149 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() 14.10.2026 9.1
CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-83662 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 14.10.2026 9.6
CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 10
CVE-2026-104252 Vitess vttablet /twopcz reflected XSS 15.10.2026 9.8
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability 14.10.2026 9.6
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-105008 Windows Schannel Spoofing Vulnerability 14.10.2026 9
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability 14.10.2026 9.8
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation 13.10.2026 9.2
CVE-2026-110130 Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check 14.10.2026 10
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability 14.10.2026 9.1
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability 14.10.2026 9.3
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-85818 Windows Schannel Spoofing Vulnerability 14.10.2026 9
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-88092 ASP.NET Core Tampering Vulnerability 14.10.2026 9.4
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability 14.10.2026 9.1
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability 15.10.2026 9.8
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability 15.10.2026 9.8
CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 14.10.2026 9.8
CVE-2026-100133 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 13.10.2026 9.3
CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 15.10.2026 10
CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 13.10.2026 9.3
CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20) 15.10.2026 9.1
CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863) 15.10.2026 9.8
CVE-2026-92892 Potential command execution on the host running JFrog CLI. 13.10.2026 9
CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user 13.10.2026 9.4
CVE-2026-106173 14.10.2026 9.4
CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 13.10.2026 10
CVE-2026-109412 14.10.2026 9.9
CVE-2026-54454 OpenCATS: Authenticated RCE in the Import module 13.10.2026 9.1
CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page 13.10.2026 9.6
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field 13.10.2026 9
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 14.10.2026 9.9
CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses 14.10.2026 9.3
CVE-2026-106042 14.10.2026 9.9
CVE-2026-69227 BUG-000187331 Portal for ArcGIS has a security vulnerability 14.10.2026 9.8
CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater 13.10.2026 9.1
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions 13.10.2026 9.3
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets 13.10.2026 10
CVE-2026-104192 DragonflyDB stream RDB deserialization double-free 13.10.2026 9.6
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 13.10.2026 9.8
CVE-2026-77099 CVFS Command Execution 14.10.2026 9.3
CVE-2026-109520 Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions 15.10.2026 9.3
CVE-2026-74040 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker 13.10.2026 9.4
CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch 14.10.2026 9.4
CVE-2026-65162 13.10.2026 10
CVE-2026-65173 13.10.2026 9.1
CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow 14.10.2026 9.4
CVE-2026-63350 13.10.2026 9.4
CVE-2026-63353 14.10.2026 9.4
CVE-2026-63354 13.10.2026 9.4
CVE-2026-89309 Missing Authentication Vulnerability in JTL-WMS 14.10.2026 10
CVE-2026-109110 Wavlink WL-WN592AX6 wmapd system os command injection 15.10.2026 10
CVE-2026-109109 Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow 14.10.2026 10
CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection 13.10.2026 9.4
CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification 14.10.2026 9.4
CVE-2026-109758 14.10.2026 9.3
CVE-2026-97229 Integer Overflow or Wraparound in GitLab 14.10.2026 10
CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 14.10.2026 9.8
CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 14.10.2026 9.9
CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 13.10.2026 9.1
CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer 14.10.2026 9.9
CVE-2026-89111 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 14.10.2026 10
CVE-2026-96119 IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI 14.10.2026 9.9
CVE-2026-109573 phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint 13.10.2026 9.2
CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure 13.10.2026 9.6
CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-44828 Qexo initialization endpoint can reset setup state and expose stored credentials 13.10.2026 9.3
CVE-2026-90920 Maximo AI Service Code Injection 13.10.2026 9.8
CVE-2020-37279 easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function 13.10.2026 9.2
CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py 13.10.2026 9.3
CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder 12.10.2026 9.3
CVE-2026-109569 sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace 13.10.2026 9.3
CVE-2026-53997 Netherman Portal del Hermano Account Takeover via Password Reset Oracle 15.10.2026 9.1
CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection 12.10.2026 9.4
CVE-2026-109422 NetEase Cloud Music RCE via os.navigateExternal IPC 12.10.2026 9.2
CVE-2026-109423 NetEase Cloud Music TLS Certificate Validation Bypass 15.10.2026 9.1
CVE-2026-109575 13.10.2026 9.8
CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation 13.10.2026 9.9
CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) 13.10.2026 9.1
CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 15.10.2026 9.8
CVE-2026-87744 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations 15.10.2026 9.1
CVE-2026-108918 Edimax BR-6208AC formWlanMP command injection 15.10.2026 10
CVE-2026-77366 obsidian-tc tokens can access arbitrary configured vaults 13.10.2026 9.9
CVE-2026-108917 Edimax BR-6208AC formAutoFWupgrade command injection 13.10.2026 10
CVE-2026-108915 Edimax BR-6208AC formWlanMP buffer overflow 13.10.2026 9.4
CVE-2026-108914 Edimax BR-6208AC formWlSiteSurvey buffer overflow 15.10.2026 9.4
CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication 13.10.2026 10
CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder 13.10.2026 9.2
CVE-2026-109321 Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass 12.10.2026 9.3
CVE-2026-109357 LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header 15.10.2026 9.2
CVE-2026-109372 ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion 13.10.2026 9.3
CVE-2026-109373 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 13.10.2026 9.2
CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in 14.10.2026 9.9
CVE-2026-85956 Improper privilege management in Progress MarkLogic Server backup and restore operations 14.10.2026 9.6
CVE-2026-85947 Improper privilege management in Progress MarkLogic Server forest operations 14.10.2026 9.9
CVE-2026-85948 Improper privilege management in Progress MarkLogic Server Management API 14.10.2026 9.9
CVE-2026-9191 Insufficient isolation of user-supplied code in Progress MarkLogic Server 14.10.2026 9.6
CVE-2026-109391 Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API 13.10.2026 9.2
CVE-2026-109394 Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout 15.10.2026 9.1
CVE-2026-109399 SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 12.10.2026 9.2
CVE-2026-92681 @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields 12.10.2026 9.3
CVE-2026-109390 13.10.2026 9.8
CVE-2026-108895 Linksys E1700 setDMZ os command injection 13.10.2026 9.4
CVE-2026-108896 Linksys E1700 setLinksysIpv6 os command injection 15.10.2026 9.4
CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection 14.10.2026 9.4
CVE-2026-108892 Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow 15.10.2026 10
CVE-2026-108893 Linksys E1700 setVlan stack-based overflow 13.10.2026 9.4
CVE-2026-78357 Insufficient Session Revocation for JWT Authentication 12.10.2026 9.1
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication 12.10.2026 9.4
CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection 15.10.2026 10
CVE-2026-108860 BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key 14.10.2026 9.3
CVE-2026-108576 TOZED X300 IPPingDiagnostics process_ping os command injection 13.10.2026 10
CVE-2026-108753 Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose 13.10.2026 9.3
CVE-2026-108540 OpenSpug File Transfer transfer os command injection 14.10.2026 9.4
CVE-2026-108707 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect 11.10.2026 9.3
CVE-2026-39801 WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability 13.10.2026 10
CVE-2026-42716 WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42718 WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42719 WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42723 WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-62024 WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability 11.10.2026 9.9
CVE-2026-62025 WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability 11.10.2026 9
CVE-2026-62031 WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-62032 WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability 11.10.2026 9.8
CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62051 WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62052 WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62053 WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62054 WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62077 WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62087 WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62090 WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62120 WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62123 WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62124 WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62125 WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability 11.10.2026 9.9
CVE-2026-66482 WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66483 WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66563 WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66564 WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66565 WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66567 WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66568 WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66569 WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78529 WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78531 WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78533 WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78535 WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-108598 Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates 13.10.2026 9.3
CVE-2026-105892 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability 11.10.2026 9.8
CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-104398 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-108549 cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing 13.10.2026 9.2
CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates 13.10.2026 9.3
CVE-2026-104803 WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback 11.10.2026 9.8
CVE-2026-62045 WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62046 WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93927 WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93929 WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93930 WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93931 WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93932 WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93933 WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93934 WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93936 WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93937 WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93940 WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93941 WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93942 WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93943 WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93944 WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93945 WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter 11.10.2026 9.1
CVE-2026-103889 3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter 11.10.2026 9.8
CVE-2026-97670 Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field 11.10.2026 9.1
CVE-2026-104732 Advanced IP Blocker <= 8.13.13 - Unauthenticated Authentication Bypass via Missing Step-1 Binding to 2FA Login Handler 11.10.2026 9.8
CVE-2026-107645 Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter 11.10.2026 9.1
CVE-2026-94589 Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload 11.10.2026 9.8
CVE-2026-108474 12.10.2026 9.8
CVE-2026-108267 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 13.10.2026 9.1
CVE-2026-108268 enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session 13.10.2026 9.1
CVE-2026-108269 ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session 13.10.2026 9.1
CVE-2026-108266 Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 14.10.2026 9.1
CVE-2026-108264 Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE) 13.10.2026 9.1
CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session 13.10.2026 9.1
CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment 13.10.2026 9.3
CVE-2026-108263 Astron Agent: Unsandboxed code-node leads to cross-tenant RCE 13.10.2026 9.9
CVE-2026-107845 Contao: Cross-site scripting in the comments bundle 09.10.2026 9.3
CVE-2026-107824 x64dbg-MCP Server exposes debugger operations to unauthenticated network clients 14.10.2026 9.3
CVE-2026-108157 Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking 09.10.2026 9.2
CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite 14.10.2026 9.4
CVE-2026-15340 Savannah lwIP SMTP client Classic Buffer Overflow 11.10.2026 9.3
CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php 09.10.2026 9.3
CVE-2026-108109 PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code 09.10.2026 9.3
CVE-2026-28745 Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format 11.10.2026 9.3
CVE-2026-33367 Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function 11.10.2026 9.3
CVE-2026-39460 Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials 12.10.2026 9.3
CVE-2026-105278 Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials 11.10.2026 9.3
CVE-2026-32645 Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials 12.10.2026 9.2
CVE-2026-100730 Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted Data 11.10.2026 9.3
CVE-2026-86405 Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop 12.10.2026 9.8
CVE-2026-85531 Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x 12.10.2026 9.8
CVE-2026-93947 WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability 09.10.2026 9.3
CVE-2026-94503 WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability 12.10.2026 10
CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability 09.10.2026 9.3
CVE-2026-96328 WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability 09.10.2026 9.3
CVE-2026-96330 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-96331 WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability 09.10.2026 9.3
CVE-2026-96809 WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-107935 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose 12.10.2026 9.3
CVE-2026-107908 Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message 15.10.2026 9.3
CVE-2026-107910 Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling 09.10.2026 9.2
CVE-2026-5759 Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB 13.10.2026 9.3
CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB 09.10.2026 9.2

Latest Updates

CVE Title Updated Score
CVE-2026-100352 kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path 15.10.2026 7.5
CVE-2026-100349 kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content 15.10.2026
CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion 15.10.2026 7.4
CVE-2026-100347 kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path 15.10.2026 5.3
CVE-2026-100350 kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression 15.10.2026 5.3
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection 15.10.2026
CVE-2026-97665 Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload 15.10.2026
CVE-2026-97666 Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint 15.10.2026
CVE-2026-97667 Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI 15.10.2026
CVE-2026-97712 Nexus Repository 3 - Privilege Escalation via Role Management 15.10.2026
CVE-2026-100348 kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) 15.10.2026 5.3
CVE-2026-105474 15.10.2026
CVE-2026-109449 Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process 15.10.2026
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026
CVE-2026-111091 15.10.2026 7.8
CVE-2026-111092 15.10.2026 6.5
CVE-2026-111093 15.10.2026 7.5
CVE-2026-111094 15.10.2026 8.1
CVE-2026-111095 15.10.2026 8
CVE-2026-111096 15.10.2026 6.7
CVE-2026-45449 Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 15.10.2026 8.3
CVE-2026-45450 Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 15.10.2026 8.3
CVE-2026-45451 Unitronics - CWE-287: Improper Authentication 15.10.2026 8.3
CVE-2026-45452 Unitronics - CWE-134 Use of Externally-Controlled format string 15.10.2026 8.3
CVE-2026-58390 OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views 15.10.2026 8
CVE-2026-58392 OPNsense: Stored XSS in Services: NTP GPS 15.10.2026 5.4
CVE-2026-58394 OPNsense: Stored XSS in Administration Settings via Certificate Description 15.10.2026 5.2
CVE-2026-63442 OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking 15.10.2026 8.1
CVE-2026-71490 OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection 15.10.2026 7.1
CVE-2026-88753 15.10.2026
CVE-2026-97394 kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items 15.10.2026 7.5
CVE-2026-52167 15.10.2026
CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml 15.10.2026 7.1
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-58391 OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout 15.10.2026 5.4
CVE-2026-58393 OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files 15.10.2026 5.9
CVE-2026-58395 OPNsense: XPath injection in MVC safe-delete 15.10.2026 4.3
CVE-2026-75505 EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment 15.10.2026
CVE-2026-95155 15.10.2026
CVE-2026-109413 Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process 15.10.2026
CVE-2026-63130 EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete 15.10.2026 5.5
CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields 15.10.2026 6.5
CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability 15.10.2026 6.5
CVE-2026-95179 15.10.2026
CVE-2026-108082 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header 15.10.2026
CVE-2026-53574 EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression 15.10.2026 7.6
CVE-2026-53575 EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user 15.10.2026 2.7
CVE-2026-55154 EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export 15.10.2026 5.4
CVE-2026-55184 EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled 15.10.2026 3.5
CVE-2026-59994 EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received 15.10.2026 4.3
CVE-2026-95180 15.10.2026
CVE-2026-103509 Credential Disclosure in P4 Search Configuration API 15.10.2026
CVE-2026-104586 15.10.2026
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 15.10.2026
CVE-2026-46691 EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users 15.10.2026 6.5
CVE-2026-46694 EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes 15.10.2026 6.5
CVE-2026-46708 EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record 15.10.2026 4.3
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 15.10.2026 9.1
CVE-2026-79840 HPE NonStop XABroker - Memory corruption vulnerability 15.10.2026 7.3
CVE-2026-79841 HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability 15.10.2026 5.8
CVE-2026-79838 HPE NonStop ODBC/MX Services - Memory corruption vulnerability 15.10.2026 7.3
CVE-2026-79839 HPE NonStop ODBC/MX Server - Memory corruption vulnerability 15.10.2026 7.3
CVE-2026-103508 Path traversal via logging configuration in P4Search 15.10.2026
CVE-2026-106149 Cross-site Scripting (XSS) in Kendo UI for jQuery Menu 15.10.2026 5.4
CVE-2026-106150 Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip 15.10.2026 5.4
CVE-2026-106151 Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery 15.10.2026 5.4
CVE-2026-106153 Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar 15.10.2026 5.4
CVE-2026-108116 MDX and SOAP Injection in Kendo UI for jQuery 15.10.2026 7.5
CVE-2026-110746 CVE-2026-110746 15.10.2026
CVE-2026-110936 15.10.2026 6.7
CVE-2026-9703 Viewer role can create, modify and delete Loki alerting rules 15.10.2026 7.1
CVE-2026-104024 Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation 15.10.2026
CVE-2026-106147 Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery 15.10.2026 5.4
CVE-2026-106148 Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery 15.10.2026 5.4
CVE-2026-106157 Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery 15.10.2026 4.7
CVE-2026-106158 Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery 15.10.2026 4.7
CVE-2026-106159 Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery 15.10.2026 4.7
CVE-2026-106160 Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery 15.10.2026 5.4
CVE-2026-106161 Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery 15.10.2026 5.4
CVE-2026-93649 15.10.2026
CVE-2026-106162 Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery 15.10.2026 4.7
CVE-2026-106163 Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser 15.10.2026 6.5
CVE-2026-110924 Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication 15.10.2026
CVE-2026-110927 Openssh: openssh: a compressed payload can expand past the maximum packet size 15.10.2026
CVE-2026-102389 WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability 15.10.2026 6.5
CVE-2026-105882 WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability 15.10.2026 6.5
CVE-2026-107416 WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability 15.10.2026 7.5
CVE-2026-109685 WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability 15.10.2026 7.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109702 WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability 15.10.2026 7.1
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-88794 XML External Entity injection in Sparx Enterprise Architect 15.10.2026
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 15.10.2026 9.3
CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name 15.10.2026
CVE-2026-109692 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability 15.10.2026 7.1
CVE-2026-109693 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 8.8
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-110723 15.10.2026
CVE-2026-110724 15.10.2026
CVE-2026-79837 HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability 15.10.2026 7.3
CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period 15.10.2026
CVE-2026-110726 15.10.2026
CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability 15.10.2026 6.4
CVE-2026-79835 HPE Nonstop KMS Server - Buffer overflow vulnerability 15.10.2026 2.8
CVE-2026-8145 WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration' 15.10.2026 5.4
CVE-2026-79834 HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability 15.10.2026 7.4
CVE-2026-108491 WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability 15.10.2026 7.1
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108498 WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability 15.10.2026 7.1
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-109695 WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability 15.10.2026 7.5
CVE-2026-79833 HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability 15.10.2026 7.5
CVE-2026-79832 HPE NonStop SQL/MX Executor - Buffer overflow vulnerability 15.10.2026 7.6
CVE-2026-79831 HPE NonStop Posix User Threads - Heap buffer overflow vulnerability 15.10.2026 6.6
CVE-2026-17525 My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion 15.10.2026 5.2
CVE-2026-79830 HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability 15.10.2026 6.6
CVE-2026-79829 HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability 15.10.2026 8.2
CVE-2026-79828 HPE NonStop Debug Utilities - Heap buffer overflow vulnerability 15.10.2026 7.1
CVE-2026-18659 Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 15.10.2026
CVE-2026-18662 15.10.2026
CVE-2026-19863 15.10.2026
CVE-2026-19864 15.10.2026
CVE-2026-79826 HPE NonStop OCAX - Heap buffer overflow vulnerability 15.10.2026 7.1
CVE-2026-79827 HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability 15.10.2026 7.1
CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames 15.10.2026
CVE-2026-26243 Arbitrary Folder Deletion in Qsync Central 5.0.0.5 15.10.2026
CVE-2026-26244 SQLi#1 SQL Injection in class_videos.php _getFilters 15.10.2026
CVE-2026-26245 SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset 15.10.2026
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026
CVE-2026-34007 **RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()` 15.10.2026
CVE-2026-34008 **Privilege Escalation** World-writable crontab path monitored and executed by root-owned process 15.10.2026
CVE-2026-34009 **Container Escape** Host user home directory mounted with write access into application container 15.10.2026
CVE-2026-34014 ds-move-files.sh is writable and executed as root 15.10.2026
CVE-2026-34015 Remote Code Execution in upload.php of Video Station 15.10.2026
CVE-2026-39989 SSRF in QNAP Download Station 15.10.2026
CVE-2026-39991 Stored Cross-Site Scripting (XSS) in Note Station file upload functionality 15.10.2026
CVE-2026-39997 Unauthenticated Remote Input Injection in QNAP HD Station's remotepad 15.10.2026
CVE-2026-41541 Symlink creation in qsyncsrv.cgi 15.10.2026
CVE-2026-41545 WebSocket timelapse path traversal and command injection 15.10.2026
CVE-2026-44084 Access Code Forgery in Video Station leading to unauthorized media access 15.10.2026
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026
CVE-2026-47790 Privilege Escalation via QuFTP Log-based XSS 15.10.2026
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026
CVE-2026-53882 Path Traversal in Virtualization Station VM Import 15.10.2026
CVE-2026-79824 HPE NonStop Python 3.x - Directory traversal vulnerability 15.10.2026 8
CVE-2026-79825 HPE NonStop NDSREST - Heap buffer overflow vulnerability 15.10.2026 7.1
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026
CVE-2026-18661 15.10.2026
CVE-2026-35088 Inadequate Encryption Strength in Slican telephone exchanges 15.10.2026
CVE-2026-63314 SQL Injection in WebCTI 15.10.2026
CVE-2026-63315 Plaintext storage of a password in WebCTI 15.10.2026
CVE-2026-79823 HPE NonStop EMS Distributor - Buffer Overflow vulnerability 15.10.2026 4
CVE-2026-101290 CVE-2026-101290 15.10.2026 7.5
CVE-2026-76184 15.10.2026
CVE-2026-77711 15.10.2026
CVE-2026-104617 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 15.10.2026 5.1
CVE-2026-104618 sdbootutil: world-readable debug log 15.10.2026 6.2
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 15.10.2026
CVE-2026-16437 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 15.10.2026
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 15.10.2026
CVE-2026-72528 15.10.2026
CVE-2026-76182 15.10.2026
CVE-2023-32198 Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks 15.10.2026 8
CVE-2024-22031 Rancher users who can create Projects can gain access to arbitrary projects 15.10.2026 8.5
CVE-2025-23390 Fleet doesn’t validate a server’s certificate when connecting through SSH 15.10.2026 6.3
CVE-2026-102461 15.10.2026
CVE-2026-102462 15.10.2026
CVE-2026-102463 15.10.2026
CVE-2026-102464 15.10.2026
CVE-2026-102466 15.10.2026
CVE-2026-102469 15.10.2026
CVE-2026-102477 15.10.2026
CVE-2026-103223 15.10.2026
CVE-2026-103224 15.10.2026
CVE-2026-105271 15.10.2026
CVE-2026-109855 undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake 15.10.2026 7.5
CVE-2026-75559 15.10.2026
CVE-2026-96614 15.10.2026
CVE-2026-108092 Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure 15.10.2026 4.3
CVE-2026-101309 Multiple vulnerabilities in bhyve device models 15.10.2026
CVE-2026-101310 Multiple vulnerabilities in bhyve device models 15.10.2026
CVE-2026-101311 Multiple vulnerabilities in bhyve device models 15.10.2026
CVE-2026-102465 15.10.2026
CVE-2026-102467 15.10.2026
CVE-2026-102475 15.10.2026
CVE-2025-29896 NULL Pointer Dereference in qsyncsrv.cgi 15.10.2026
CVE-2025-29897 Stack-based Buffer Overflow in qsyncsrv.cgi 15.10.2026
CVE-2025-66272 Arbitrary file deletion and remote code execution 15.10.2026
CVE-2025-66275 Remote code execution via command injection 15.10.2026
CVE-2025-68403 Inadequate Steps to Confirm Vulnerability in QuRouter 15.10.2026
CVE-2025-68404 vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface 15.10.2026
CVE-2026-101303 IPv6 UDP sendto(2) bypasses jail loopback restriction 15.10.2026
CVE-2026-101307 Remotely triggerable buffer overflow in tcp_rack 15.10.2026
CVE-2026-101308 TOCTOU race between sound(4) buffer resizing and mmap 15.10.2026
CVE-2026-19377 Improper certificate validation in Cato Client tunnel handshake 15.10.2026
CVE-2026-22896 Stored XSS via Interface Name in Network & Virtual Switch App 15.10.2026
CVE-2026-24715 Lack of Reproducible Vulnerability Evidence in QNAP Report 15.10.2026
CVE-2026-24718 Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi 15.10.2026
CVE-2026-24721 Null Pointer Dereference in File Station 5 15.10.2026
CVE-2026-24722 Null Pointer Dereference in File Station 5 15.10.2026
CVE-2026-24723 NULL Pointer Dereference in utilRequest.cgi 15.10.2026
CVE-2026-39993 Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter 15.10.2026
CVE-2026-41544 Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint 15.10.2026
CVE-2025-29895 NULL Pointer Dereference in qsyncsrv.cgi 15.10.2026
CVE-2026-101302 Remote DoS via receive-side kernel TLS 15.10.2026
CVE-2026-101304 Multiple jail filesystem root escapes 15.10.2026
CVE-2026-101305 Multiple jail filesystem root escapes 15.10.2026
CVE-2026-101306 Multiple jail filesystem root escapes 15.10.2026
CVE-2026-103324 Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret 15.10.2026 5.3
CVE-2026-110933 15.10.2026 4.4
CVE-2026-110934 15.10.2026 4.4
CVE-2026-11905 Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters 15.10.2026 4.3
CVE-2026-76668 HPE NonStop Kernel - Access to unmapped or privileged data 15.10.2026 6.3
CVE-2026-79821 HPE NonStop SOAP 4.0 - Memory corruption 15.10.2026 8.2
CVE-2026-79822 HPE NonStop TNS/X Native Inspect - Execution flow vulnerability 15.10.2026 7.1
CVE-2026-81534 Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter 15.10.2026 8.8
CVE-2026-92428 Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook 15.10.2026 5.3
CVE-2026-92429 Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook 15.10.2026 5.3
CVE-2026-103304 eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update 15.10.2026
CVE-2026-104643 Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite 15.10.2026
CVE-2026-106031 Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result 15.10.2026
CVE-2026-109145 User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler 15.10.2026
CVE-2026-58098 Heap out-of-bounds access in semop(2) 15.10.2026
CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation 15.10.2026
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation 15.10.2026
CVE-2026-74920 Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute 15.10.2026
CVE-2026-96537 Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite 15.10.2026
CVE-2026-110923 Openssh: openssh: sftp can write outside the destination directory from a server-supplied path 15.10.2026
CVE-2026-110925 Openssh: openssh: '$' and '\' in a command-line username expand through %u 15.10.2026
CVE-2026-110926 Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels 15.10.2026
CVE-2026-15090 Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter 15.10.2026 7.5
CVE-2026-15180 Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages' 15.10.2026 6.1
CVE-2026-17001 Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields 15.10.2026 6.4
CVE-2026-17031 Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID 15.10.2026 8.1
CVE-2026-18548 Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter 15.10.2026 7.2
CVE-2026-18557 Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter 15.10.2026 6.1
CVE-2026-18586 Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email' 15.10.2026 7.2
CVE-2026-78001 Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute 15.10.2026 6.4
CVE-2026-78087 VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Feature 15.10.2026 6.4
CVE-2026-86803 Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template 15.10.2026 6.5
CVE-2026-88043 Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter 15.10.2026 7.2
CVE-2026-76666 HPE NonStop EXPAND - Out-of-Bounds memory read 15.10.2026 4.7
CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability 15.10.2026 5.7
CVE-2026-76665 HPE NonStop EXPAND - Buffer Overflow vulnerability 15.10.2026 7.1
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-14572 Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content 15.10.2026 6.4
CVE-2026-3712 PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter 15.10.2026 7.3
CVE-2026-76664 HPE NonStop EXPAND - Out-of-Bounds memory read/write 15.10.2026 6.4
CVE-2026-93483 15.10.2026
CVE-2026-93484 15.10.2026
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110912 15.10.2026
CVE-2026-110909 15.10.2026 5
CVE-2026-110907 15.10.2026 7.5
CVE-2026-110908 15.10.2026 8.8
CVE-2026-76662 HPE NonStop TELSERV - Memory corruption vulnerability 15.10.2026 5.9
CVE-2026-76663 HPE NonStop TELSERV - Memory corruption vulnerability 15.10.2026 7.5
CVE-2026-76660 HPE NonStop CIPSAM - Memory corruption vulnerability 15.10.2026 8.7
CVE-2026-76661 HPE NonStop QIOMON - Memory corruption vulnerability 15.10.2026 7.6
CVE-2026-109430 Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection 15.10.2026
CVE-2026-76066 IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode 15.10.2026
CVE-2026-76659 HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability 15.10.2026 7.5
CVE-2026-110904 15.10.2026 5.3
CVE-2026-73799 HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability 15.10.2026 7.5
CVE-2026-76656 HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability 15.10.2026 5.3
CVE-2026-77931 MoviePilot 3.1.5 Command Injection via ExecuteCommandTool 15.10.2026
CVE-2026-0993 SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser 15.10.2026
CVE-2026-110810 ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds 15.10.2026