CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-105279 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 9.3
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 16.10.2026 9.3
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller 16.10.2026 9.6
CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter 16.10.2026 9.2
CVE-2026-111472 SQL injection in TSG Profleet 16.10.2026 9.3
CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability 16.10.2026 10
CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 16.10.2026 9.8
CVE-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 16.10.2026 9.8
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 16.10.2026 9.8
CVE-2026-104798 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute 16.10.2026 9.8
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 16.10.2026 9.8
CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter 16.10.2026 9.8
CVE-2026-111444 16.10.2026 9.8
CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials 15.10.2026 9.3
CVE-2026-111283 BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration 15.10.2026 9.5
CVE-2026-111312 OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route 15.10.2026 9.2
CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API 15.10.2026 9.3
CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console 16.10.2026 9.3
CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 15.10.2026 9.1
CVE-2026-105032 EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write 15.10.2026 9.1
CVE-2026-105037 EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read 15.10.2026 9.9
CVE-2026-105038 EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching 15.10.2026 9.8
CVE-2026-105039 EnergizeLab Station Middleware Admin APIs Missing Role Checks 15.10.2026 9.6
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 15.10.2026 9.3
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method 15.10.2026 9.1
CVE-2026-57496 NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction 15.10.2026 9.6
CVE-2026-102946 joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 15.10.2026 9.1
CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox 15.10.2026 9.3
CVE-2026-55240 Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates 15.10.2026 9.1
CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS 15.10.2026 9.3
CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune 15.10.2026 9.4
CVE-2026-105474 15.10.2026 9.4
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026 10
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 15.10.2026 10
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 15.10.2026 9.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 16.10.2026 9.3
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-19863 15.10.2026 9.3
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026 9.3
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026 9.3
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026 9.4
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026 9.3
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026 9.3
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 16.10.2026 9.2
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 16.10.2026 9.4
CVE-2026-102469 15.10.2026 9.2
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-93483 15.10.2026 9.5
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110858 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 14.10.2026 9.2
CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link 15.10.2026 9.3
CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy 15.10.2026 9.1
CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 15.10.2026 9
CVE-2026-108336 Token Signing Key Allows Unauthenticated Administrative Access 14.10.2026 9.1
CVE-2026-108335 Password Reset Functionality Missing Brute-Force Protection 15.10.2026 9.1
CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php 15.10.2026 9.8
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter 15.10.2026 9.8
CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php 15.10.2026 9.8
CVE-2026-102748 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 15.10.2026 9.2
CVE-2026-110770 Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force 14.10.2026 9.2
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection 15.10.2026 10
CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2 15.10.2026 9.1
CVE-2026-102476 14.10.2026 9.1
CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username 14.10.2026 10
CVE-2026-55573 e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain 15.10.2026 9.8
CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 14.10.2026 9.3
CVE-2026-103415 14.10.2026 9.3
CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled 16.10.2026 9.3
CVE-2026-101982 Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used 16.10.2026 9.3
CVE-2026-101983 Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured 15.10.2026 9.3
CVE-2026-108390 HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking 14.10.2026 9.9
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub 14.10.2026 9.3
CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution 15.10.2026 9.3
CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service 15.10.2026 9.2
CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured 15.10.2026 9.3
CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled 15.10.2026 9.3
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled 16.10.2026 9.3
CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used 14.10.2026 9.2
CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used 16.10.2026 9.3
CVE-2026-102178 Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise 14.10.2026 9.3
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 14.10.2026 9.3
CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled 16.10.2026 9.3
CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used 16.10.2026 9.2
CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised 16.10.2026 9.3
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication 16.10.2026 9.2
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used 15.10.2026 9.2
CVE-2026-101956 Junos OS: Unauthorized root command execution when J-Web is enabled 15.10.2026 9.3
CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used 15.10.2026 9.3
CVE-2026-101980 Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled 14.10.2026 9.3
CVE-2026-101986 Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution 15.10.2026 9.3
CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used 14.10.2026 9.2
CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used 14.10.2026 9.2
CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution 15.10.2026 9.2
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability 15.10.2026 9.8
CVE-2026-77524 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 14.10.2026 9.9
CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim 15.10.2026 9.1
CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS 14.10.2026 9
CVE-2026-91881 15.10.2026 9
CVE-2026-15176 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2026-93479 NGINX map directive and regex matching vulnerability 15.10.2026 9.2
CVE-2026-97205 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2020-37281 Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass 14.10.2026 9.2
CVE-2020-37282 office-converter through 1.0.2 OS Command Injection via fileName in generatePdf 14.10.2026 9.3
CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil 14.10.2026 9.3
CVE-2026-110616 NullHub through 2026.5.29 Missing Authentication for /api Management API 14.10.2026 9.2
CVE-2026-110628 Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment 14.10.2026 9.2
CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration 16.10.2026 9.3
CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE 14.10.2026 9.2
CVE-2026-110634 git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings 14.10.2026 9.3
CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options 14.10.2026 9.3
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths 14.10.2026 9.3
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path 14.10.2026 9.3
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir 14.10.2026 9.3
CVE-2026-110640 Whisper-node through 1.1.1 OS Command Injection via filePath and language 14.10.2026 9.3
CVE-2026-110643 transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath 14.10.2026 9.3
CVE-2026-110644 nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType 14.10.2026 9.3
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() 14.10.2026 9.3
CVE-2026-110646 Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl() 14.10.2026 9.2
CVE-2026-110649 Stills before 25.24.2 OS Command Injection via Media File Names 14.10.2026 9.3
CVE-2026-110650 Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths 14.10.2026 9.3
CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce 14.10.2026 9.8
CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability 14.10.2026 9.8
CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-14851 Unauthorised disclosure of information on Copart’s online billing service 14.10.2026 9.2
CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register 15.10.2026 9.8
CVE-2026-89310 SQL Command Injection Vulnerability in JTL-WMS 14.10.2026 9.4
CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php 15.10.2026 9.8
CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method 14.10.2026 9.8
CVE-2026-110002 Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter 15.10.2026 9.8
CVE-2026-110447 14.10.2026 9.2
CVE-2026-97657 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 14.10.2026 9.8
CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 15.10.2026 9.8
CVE-2026-110392 Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning 14.10.2026 9.8
CVE-2026-92097 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 15.10.2026 9.1
CVE-2026-93388 Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url 14.10.2026 9.8
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins 13.10.2026 9.9
CVE-2026-106619 ColdFusion | Improper Input Validation (CWE-20) 14.10.2026 9
CVE-2026-106622 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 14.10.2026 10
CVE-2026-106624 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 10
CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 14.10.2026 10
CVE-2026-105903 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.9
CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-106620 ColdFusion | Incorrect Authorization (CWE-863) 15.10.2026 9.6
CVE-2026-106621 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.1
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool 16.10.2026 9.3
CVE-2026-75994 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.6
CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 14.10.2026 9.3
CVE-2026-93895 IBM WebSphere Application Server Liberty Improper Access Control 13.10.2026 9.1
CVE-2026-93909 IBM WebSphere Application Server Liberty is affected by an authentication bypass 14.10.2026 9.1
CVE-2026-63158 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies 14.10.2026 9.1
CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover 14.10.2026 9.1
CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage 14.10.2026 9.1
CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 14.10.2026 9.9
CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.9
CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.1
CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 13.10.2026 9.3
CVE-2026-106630 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-48383 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php 14.10.2026 9.3
CVE-2026-63149 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() 14.10.2026 9.1
CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-83662 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 14.10.2026 9.6
CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 10
CVE-2026-104252 Vitess vttablet /twopcz reflected XSS 15.10.2026 9.8
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability 16.10.2026 9.6
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-105008 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability 16.10.2026 9.8
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation 13.10.2026 9.2
CVE-2026-110130 Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check 14.10.2026 10
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability 16.10.2026 9.1
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability 16.10.2026 9.3
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85818 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88092 ASP.NET Core Tampering Vulnerability 16.10.2026 9.4
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability 16.10.2026 9.1
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100133 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 13.10.2026 9.3
CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 15.10.2026 10
CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 16.10.2026 9.3
CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20) 15.10.2026 9.1
CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863) 15.10.2026 9.8
CVE-2026-92892 Potential command execution on the host running JFrog CLI. 16.10.2026 9
CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user 13.10.2026 9.4
CVE-2026-106173 14.10.2026 9.4
CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 13.10.2026 10
CVE-2026-109412 14.10.2026 9.9
CVE-2026-54454 OpenCATS: Authenticated RCE in the Import module 13.10.2026 9.1
CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page 13.10.2026 9.6
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field 13.10.2026 9
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 14.10.2026 9.9
CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses 14.10.2026 9.3
CVE-2026-106042 14.10.2026 9.9
CVE-2026-69227 BUG-000187331 Portal for ArcGIS has a security vulnerability 14.10.2026 9.8
CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater 13.10.2026 9.1
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions 13.10.2026 9.3
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets 13.10.2026 10
CVE-2026-104192 DragonflyDB stream RDB deserialization double-free 13.10.2026 9.6
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 13.10.2026 9.8
CVE-2026-77099 CVFS Command Execution 14.10.2026 9.3
CVE-2026-109520 Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions 15.10.2026 9.3
CVE-2026-74040 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker 13.10.2026 9.4
CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch 14.10.2026 9.4
CVE-2026-65162 13.10.2026 10
CVE-2026-65173 13.10.2026 9.1
CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow 14.10.2026 9.4
CVE-2026-63350 13.10.2026 9.4
CVE-2026-63353 14.10.2026 9.4
CVE-2026-63354 13.10.2026 9.4
CVE-2026-89309 Missing Authentication Vulnerability in JTL-WMS 14.10.2026 10
CVE-2026-109110 Wavlink WL-WN592AX6 wmapd system os command injection 15.10.2026 10
CVE-2026-109109 Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow 14.10.2026 10
CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection 13.10.2026 9.4
CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification 14.10.2026 9.4
CVE-2026-109758 15.10.2026 9.3
CVE-2026-97229 Integer Overflow or Wraparound in GitLab 14.10.2026 10
CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 14.10.2026 9.8
CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 14.10.2026 9.9
CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 13.10.2026 9.1
CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer 14.10.2026 9.9
CVE-2026-89111 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 14.10.2026 10
CVE-2026-96119 IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI 14.10.2026 9.9
CVE-2026-109573 phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint 13.10.2026 9.2
CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure 13.10.2026 9.6
CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-44828 Qexo initialization endpoint can reset setup state and expose stored credentials 13.10.2026 9.3
CVE-2026-90920 Maximo AI Service Code Injection 13.10.2026 9.8
CVE-2020-37279 easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function 13.10.2026 9.2
CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py 13.10.2026 9.3
CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder 12.10.2026 9.3
CVE-2026-109569 sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace 13.10.2026 9.3
CVE-2026-53997 Netherman Portal del Hermano Account Takeover via Password Reset Oracle 15.10.2026 9.1
CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection 12.10.2026 9.4
CVE-2026-109422 NetEase Cloud Music RCE via os.navigateExternal IPC 12.10.2026 9.2
CVE-2026-109423 NetEase Cloud Music TLS Certificate Validation Bypass 15.10.2026 9.1
CVE-2026-109575 13.10.2026 9.8
CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation 13.10.2026 9.9
CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) 13.10.2026 9.1
CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 15.10.2026 9.8
CVE-2026-87744 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations 15.10.2026 9.1
CVE-2026-108918 Edimax BR-6208AC formWlanMP command injection 15.10.2026 10
CVE-2026-77366 obsidian-tc tokens can access arbitrary configured vaults 13.10.2026 9.9
CVE-2026-108917 Edimax BR-6208AC formAutoFWupgrade command injection 13.10.2026 10
CVE-2026-108915 Edimax BR-6208AC formWlanMP buffer overflow 13.10.2026 9.4
CVE-2026-108914 Edimax BR-6208AC formWlSiteSurvey buffer overflow 15.10.2026 9.4
CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication 13.10.2026 10
CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder 13.10.2026 9.2
CVE-2026-109321 Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass 12.10.2026 9.3
CVE-2026-109357 LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header 15.10.2026 9.2
CVE-2026-109372 ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion 13.10.2026 9.3
CVE-2026-109373 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 13.10.2026 9.2
CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in 14.10.2026 9.9
CVE-2026-85956 Improper privilege management in Progress MarkLogic Server backup and restore operations 14.10.2026 9.6
CVE-2026-85947 Improper privilege management in Progress MarkLogic Server forest operations 14.10.2026 9.9
CVE-2026-85948 Improper privilege management in Progress MarkLogic Server Management API 14.10.2026 9.9
CVE-2026-9191 Insufficient isolation of user-supplied code in Progress MarkLogic Server 14.10.2026 9.6
CVE-2026-109391 Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API 13.10.2026 9.2
CVE-2026-109394 Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout 15.10.2026 9.1
CVE-2026-109399 SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 12.10.2026 9.2
CVE-2026-92681 @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields 12.10.2026 9.3
CVE-2026-109390 13.10.2026 9.8
CVE-2026-108895 Linksys E1700 setDMZ os command injection 13.10.2026 9.4
CVE-2026-108896 Linksys E1700 setLinksysIpv6 os command injection 15.10.2026 9.4
CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection 14.10.2026 9.4
CVE-2026-108892 Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow 15.10.2026 10
CVE-2026-108893 Linksys E1700 setVlan stack-based overflow 13.10.2026 9.4
CVE-2026-78357 Insufficient Session Revocation for JWT Authentication 15.10.2026 9.1
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication 15.10.2026 9.4
CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection 15.10.2026 10
CVE-2026-108860 BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key 14.10.2026 9.3
CVE-2026-108576 TOZED X300 IPPingDiagnostics process_ping os command injection 13.10.2026 10
CVE-2026-108753 Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose 13.10.2026 9.3
CVE-2026-108540 OpenSpug File Transfer transfer os command injection 14.10.2026 9.4
CVE-2026-108707 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect 11.10.2026 9.3
CVE-2026-39801 WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability 13.10.2026 10
CVE-2026-42716 WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42718 WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42719 WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-42723 WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-62024 WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability 11.10.2026 9.9
CVE-2026-62025 WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability 11.10.2026 9
CVE-2026-62031 WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-62032 WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability 11.10.2026 9.8
CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62051 WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62052 WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62053 WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62054 WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62077 WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62087 WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62090 WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62120 WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62123 WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62124 WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62125 WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability 11.10.2026 9.9
CVE-2026-66482 WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66483 WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66563 WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66564 WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66565 WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66567 WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66568 WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-66569 WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78529 WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78531 WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78533 WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-78535 WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-108598 Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates 13.10.2026 9.3
CVE-2026-105892 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability 11.10.2026 9.8
CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability 11.10.2026 9.8
CVE-2026-104398 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability 11.10.2026 9.3
CVE-2026-108549 cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing 13.10.2026 9.2
CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates 13.10.2026 9.3
CVE-2026-104803 WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback 11.10.2026 9.8
CVE-2026-62045 WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-62046 WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93927 WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93929 WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93930 WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93931 WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93932 WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93933 WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93934 WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93936 WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93937 WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93940 WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93941 WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93942 WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93943 WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93944 WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-93945 WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability 11.10.2026 9.8
CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter 11.10.2026 9.1
CVE-2026-103889 3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter 11.10.2026 9.8
CVE-2026-97670 Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field 11.10.2026 9.1
CVE-2026-104732 Advanced IP Blocker <= 8.13.13 - Unauthenticated Authentication Bypass via Missing Step-1 Binding to 2FA Login Handler 11.10.2026 9.8
CVE-2026-107645 Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter 11.10.2026 9.1
CVE-2026-94589 Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload 11.10.2026 9.8
CVE-2026-108474 12.10.2026 9.8

Latest Updates

CVE Title Updated Score
CVE-2026-102923 SparkyFitness: SSRF via unvalidated custom_url in AI service settings 16.10.2026 5.4
CVE-2026-46471 16.10.2026
CVE-2026-46472 16.10.2026
CVE-2026-48503 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead 16.10.2026 7.5
CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS 16.10.2026 7.5
CVE-2026-57446 libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle 16.10.2026 5.3
CVE-2026-68906 libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU 16.10.2026
CVE-2026-68907 libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments 16.10.2026
CVE-2026-68908 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path 16.10.2026 5.3
CVE-2026-92263 SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore 16.10.2026 7.2
CVE-2026-102941 gomarkdown/markdown IsSafeURL panics on short URLs 16.10.2026 7.5
CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method 16.10.2026
CVE-2026-26846 16.10.2026
CVE-2026-57488 pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling 16.10.2026 7.1
CVE-2026-77630 pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing 16.10.2026 7.5
CVE-2026-96424 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager 16.10.2026 7.8
CVE-2026-96425 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager 16.10.2026 5.5
CVE-2026-55543 TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file 16.10.2026
CVE-2026-55862 pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow 16.10.2026 6.5
CVE-2026-57447 Discourse Doc Categories: Doc category index refresh leaks private topic titles 16.10.2026 4.3
CVE-2026-57486 pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes 16.10.2026 7.5
CVE-2026-57487 libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered 16.10.2026 7.5
CVE-2026-54657 Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token 16.10.2026 6.5
CVE-2026-55836 Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad) 16.10.2026 6.8
CVE-2026-95859 libp2p-rust: Gossipsub GRAFT topics unbounded growth 16.10.2026
CVE-2026-106705 16.10.2026 8.8
CVE-2026-111728 Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings 16.10.2026
CVE-2025-52097 16.10.2026
CVE-2026-88755 16.10.2026
CVE-2026-105279 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 9.1
CVE-2026-105667 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 7.5
CVE-2026-107777 Thermo Fisher Torrent Suite Software Path Traversal 16.10.2026 6.5
CVE-2026-95182 16.10.2026
CVE-2026-101021 J4Care dcm4che Inefficient Algorithmic Complexity 16.10.2026 7.5
CVE-2026-105273 J4Care dcm4che Loop with Unreachable Exit Condition 16.10.2026 7.5
CVE-2026-107621 J4Care dcm4che Loop with Unreachable Exit Condition 16.10.2026 7.5
CVE-2026-95183 16.10.2026
CVE-2026-97851 J4Care dcm4che Missing Authorization 16.10.2026 9.1
CVE-2026-105664 Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy 16.10.2026 5.3
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 16.10.2026 9.8
CVE-2026-97858 Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes 16.10.2026 5.3
CVE-2026-110804 16.10.2026
CVE-2026-110805 16.10.2026
CVE-2026-110287 16.10.2026
CVE-2026-110806 16.10.2026
CVE-2026-111593 16.10.2026
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller 16.10.2026 9.6
CVE-2026-90821 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller 16.10.2026 5.4
CVE-2026-97470 Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role 16.10.2026 6.4
CVE-2026-111413 WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability 16.10.2026 8.8
CVE-2026-107564 gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption 16.10.2026
CVE-2026-110896 WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability 16.10.2026 5.3
CVE-2026-110903 WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability 16.10.2026 6.5
CVE-2026-111396 WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability 16.10.2026 7.1
CVE-2026-111400 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability 16.10.2026 6.5
CVE-2026-111409 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability 16.10.2026 5.3
CVE-2026-110900 WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability 16.10.2026 5.3
CVE-2026-110901 WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability 16.10.2026 5.4
CVE-2026-105958 Spice-server: spice: heap oob read/write via unchecked migration data offsets 16.10.2026
CVE-2026-110380 WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability 16.10.2026 5.3
CVE-2026-111397 WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability 16.10.2026 5.3
CVE-2026-111399 WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability 16.10.2026 8.5
CVE-2026-111405 WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability 16.10.2026 6.5
CVE-2026-111555 Luksmeta: missing slot-range validation permits out-of-gap device i/o 16.10.2026
CVE-2026-63618 Apache Kylin: Low-Privilege Config Exposure 16.10.2026
CVE-2026-63619 Apache Kylin: Missing authorization and path-confinement on system meta dump 16.10.2026
CVE-2026-64610 Apache Kylin: Redis unsafe Java deserialization 16.10.2026
CVE-2026-64959 Apache Kylin: Missing authentication on certain cache API endpoints 16.10.2026
CVE-2026-68571 Apache Kylin: JDBC URL Whitelist Verification Bypass 16.10.2026
CVE-2026-105959 Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation 16.10.2026
CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API 16.10.2026
CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter 16.10.2026
CVE-2026-107648 WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter 16.10.2026 7.2
CVE-2026-109930 MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key 16.10.2026 5.3
CVE-2026-110029 Squeeze < 1.8.1 - Subscriber+ Missing Authorization via squeeze_restore_attachment 16.10.2026 5.4
CVE-2026-109118 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb 16.10.2026 4.6
CVE-2026-109119 Missing Authorization in rdiffweb 16.10.2026 8.8
CVE-2026-14452 Open redirect and XSS via reset_url parameter 16.10.2026
CVE-2026-106030 Missing Authorization in NordVPN for Windows 16.10.2026
CVE-2026-107649 Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter 16.10.2026 5.4
CVE-2026-110703 GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute 16.10.2026 6.4
CVE-2026-96768 GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Body 16.10.2026 7.2
CVE-2026-101300 Server-Side Request Forgery in Wegow PDF export 16.10.2026
CVE-2026-111472 SQL injection in TSG Profleet 16.10.2026
CVE-2026-15219 IDOR in SFM Software's Costifier 16.10.2026 6.5
CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier 16.10.2026 5.3
CVE-2026-104003 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Comment Content Rendered on ProfilePress User Profile 'Comments' Tab 16.10.2026 5.4
CVE-2026-104726 Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dir' Shortcode Attribute 16.10.2026 6.4
CVE-2026-109224 SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment 16.10.2026 7.2
CVE-2026-111311 DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint 16.10.2026 8.8
CVE-2026-14177 User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure 16.10.2026 7.5
CVE-2026-92766 Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter 16.10.2026 7.5
CVE-2026-93681 Tutor LMS <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name Parameter 16.10.2026 6.4
CVE-2026-100106 FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter 16.10.2026 6.4
CVE-2026-100108 Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting 16.10.2026 6.4
CVE-2026-75903 Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentials 16.10.2026 8.1
CVE-2026-87111 User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header 16.10.2026 7.2
CVE-2026-96870 SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter 16.10.2026 6.4
CVE-2026-16251 Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering 16.10.2026 6.5
CVE-2026-16453 Mattermost SAML RelayState forgery allows unauthorized team membership 16.10.2026 7.1
CVE-2026-18223 Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access 16.10.2026 5
CVE-2026-18256 Private team metadata disclosure via the team search API 16.10.2026 4.3
CVE-2026-18560 Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status 16.10.2026 4.3
CVE-2026-18799 Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users 16.10.2026 4.3
CVE-2026-19076 Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token 16.10.2026 4.4
CVE-2026-19600 Mattermost logs plaintext authentication tokens in debug-level server logs on failed auth attempts 16.10.2026 4.5
CVE-2026-19621 Mattermost leaks interactive-message integration secrets to non-admin users via post-deletion events and thread reads 16.10.2026 6.5
CVE-2026-110366 WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability 16.10.2026 5.3
CVE-2026-18551 Mattermost guest account privilege escalation via member roles API 16.10.2026 6.5
CVE-2026-18795 Missing server side validation allowed user to quarantine a DM and GM post 16.10.2026 6.4
CVE-2026-19541 Outgoing OAuth connection client secret exposure during connection validation 16.10.2026 6.5
CVE-2026-19601 Disclosure of AD/LDAP bind password via Test Connection 16.10.2026 4.9
CVE-2026-19603 Private channel ID disclosure via user status endpoints 16.10.2026 4.3
CVE-2026-19867 Uncapped mention keys in user notification properties allow CPU exhaustion during post processing 16.10.2026 4.3
CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability 16.10.2026 10
CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-96339 WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability 16.10.2026 7.1
CVE-2026-97296 WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerability 16.10.2026 8.1
CVE-2026-104715 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 16.10.2026
CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 16.10.2026 9.8
CVE-2026-104755 WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint 16.10.2026 4.8
CVE-2026-107646 HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script 16.10.2026 5.3
CVE-2026-107768 TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers 16.10.2026 7.2
CVE-2026-107770 Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' action 16.10.2026 6.8
CVE-2026-109193 HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value 16.10.2026 7.2
CVE-2026-109382 WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure via Broken Access Control to 'wsp_get_posts' MCP Tool 16.10.2026 6.5
CVE-2026-109388 HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode 16.10.2026 6.4
CVE-2026-109401 WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email 16.10.2026 2.7
CVE-2026-110252 WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import 16.10.2026 5.4
CVE-2026-110290 WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute 16.10.2026 6.4
CVE-2026-110664 Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes 16.10.2026 6.4
CVE-2026-110701 CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter 16.10.2026 7.2
CVE-2026-111069 GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field 16.10.2026 6.4
CVE-2026-111178 WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter 16.10.2026 4.9
CVE-2026-15222 User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name 16.10.2026 5.4
CVE-2026-19798 WP Map Block <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints 16.10.2026 4.3
CVE-2026-92115 WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action 16.10.2026 8.8
CVE-2026-92553 YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension 16.10.2026 8.8
CVE-2026-97640 WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) 16.10.2026 7.2
CVE-2026-103696 Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter 16.10.2026
CVE-2026-105973 Visual Form Builder <= 3.1 - Subscriber+ Arbitrary Form Field Reordering via Missing Authorization 16.10.2026
CVE-2026-105974 Visual Form Builder <= 3.1 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget 16.10.2026
CVE-2026-109982 MB Custom Post Types & Custom Taxonomies < 2.12.2 - Subscriber+ Missing Authorization via CPT UI Migration 16.10.2026
CVE-2026-110012 Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming 16.10.2026
CVE-2026-110013 Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token 16.10.2026
CVE-2026-110014 Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status 16.10.2026
CVE-2026-110015 Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF 16.10.2026
CVE-2026-110039 Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite 16.10.2026
CVE-2026-110135 OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force 16.10.2026
CVE-2026-110179 affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter 16.10.2026
CVE-2026-110191 Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions 16.10.2026
CVE-2026-74923 Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons 16.10.2026
CVE-2026-91830 Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie 16.10.2026
CVE-2026-91833 WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter 16.10.2026
CVE-2026-92427 Coinsnap Bitcoin Crowdfunding <= 1.2.0 - Unauthenticated Payment Record Forgery via Webhook Secret Disclosure 16.10.2026
CVE-2026-100158 SQL Chart Builder <= 3.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SQL Chart Label (X-axis) via Stored User Field 16.10.2026 6.4
CVE-2026-100186 User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field 16.10.2026 7.2
CVE-2026-103480 Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute 16.10.2026 6.4
CVE-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 16.10.2026 9.8
CVE-2026-103896 10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path 16.10.2026 7.5
CVE-2026-103999 Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File Upload 16.10.2026 7.2
CVE-2026-104000 Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id} 16.10.2026 7.2
CVE-2026-104001 Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta 16.10.2026 5.4
CVE-2026-104932 Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption 16.10.2026 8
CVE-2026-107748 User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter 16.10.2026 6.4
CVE-2026-107764 SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink 16.10.2026 7.2
CVE-2026-109232 Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX 16.10.2026 7.2
CVE-2026-109414 Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator 16.10.2026 6.5
CVE-2026-109447 User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register] 16.10.2026 8.1
CVE-2026-109513 NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route 16.10.2026 7.2
CVE-2026-110017 Quick PayPal Payments: Payment Button & Form <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute 16.10.2026 6.4
CVE-2026-111122 SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector 16.10.2026 7.2
CVE-2026-111458 ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting 16.10.2026
CVE-2026-12272 Lightweight Cookie Notice <= 1.19 - Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant 16.10.2026 5.3
CVE-2026-85659 PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter 16.10.2026 8.8
CVE-2026-88963 Tutor LMS <= 4.0.8 - Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting via 'redirect_url' Parameter 16.10.2026 6.1
CVE-2026-89051 Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Content 16.10.2026 7.2
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 16.10.2026 9.8
CVE-2026-93767 Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter 16.10.2026 6.5
CVE-2026-95686 Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter 16.10.2026 7.2
CVE-2026-95809 Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter 16.10.2026 7.2
CVE-2026-96570 Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter 16.10.2026 7.2
CVE-2026-101335 Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 'User-Agent' Header and 'referer_url' Parameter via Quiz Notification Merge Tags 16.10.2026 6.5
CVE-2026-103481 Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scripting via 'permalink' Parameter 16.10.2026 6.1
CVE-2026-103525 FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters 16.10.2026 7.5
CVE-2026-103895 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State 16.10.2026 8.1
CVE-2026-103911 Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter and Anonymous Comment via render_block 16.10.2026 6.5
CVE-2026-104798 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute 16.10.2026 9.8
CVE-2026-107659 Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT 16.10.2026 7.5
CVE-2026-107746 FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter 16.10.2026 7.5
CVE-2026-109191 Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML 16.10.2026 4.3
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 16.10.2026 9.8
CVE-2026-109221 Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping 16.10.2026 8.1
CVE-2026-109400 InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting 16.10.2026 7.5
CVE-2026-109512 Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter 16.10.2026 6.4
CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter 16.10.2026 9.8
CVE-2026-109998 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX 16.10.2026 7.2
CVE-2026-110019 Bulk Page Generator <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion via 'authorize' Parameter / Suite OAuth Flow 16.10.2026 4.3
CVE-2026-110590 Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint 16.10.2026 7.5
CVE-2026-110721 NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route 16.10.2026 5.3
CVE-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter 16.10.2026 6.5
CVE-2026-111114 Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter 16.10.2026 7.5
CVE-2026-96562 Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback 16.10.2026 6.5
CVE-2026-111451 16.10.2026 7.8
CVE-2026-103518 FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys 16.10.2026 4.9
CVE-2026-104745 Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter 16.10.2026 8.1
CVE-2026-104769 Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link> 16.10.2026 5.9
CVE-2026-107758 Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments 16.10.2026 7.2
CVE-2026-109207 RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL 16.10.2026 7.2
CVE-2026-109990 Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content 16.10.2026 7.2
CVE-2026-111445 16.10.2026 8.1
CVE-2026-111446 16.10.2026 8.6
CVE-2026-111447 16.10.2026 8.1
CVE-2026-111448 16.10.2026 3.7
CVE-2026-111449 16.10.2026 5.9
CVE-2026-111450 16.10.2026 5.9
CVE-2026-77829 Cooked <= 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content 16.10.2026 6.4
CVE-2026-89280 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id} 16.10.2026 4.3
CVE-2026-93535 WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute 16.10.2026 6.4
CVE-2026-93953 Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation 16.10.2026 8
CVE-2026-97339 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter 16.10.2026 7.2
CVE-2026-111443 16.10.2026 6.5
CVE-2026-111444 16.10.2026 9.8
CVE-2026-111442 16.10.2026
CVE-2026-109812 Missing Authorization on Secret Endpoints 16.10.2026
CVE-2026-109813 Shared Hard-coded Root CA Private Key 16.10.2026
CVE-2026-100159 Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers 16.10.2026 4.8
CVE-2026-105227 ISPSoft Out-of-Bounds Read Vulnerability 16.10.2026
CVE-2026-105228 ISPSoft Out-of-Bounds Read Vulnerability 16.10.2026
CVE-2026-111373 FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping 16.10.2026
CVE-2026-111374 FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest 16.10.2026
CVE-2026-111375 FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title 16.10.2026
CVE-2026-111376 FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE 16.10.2026
CVE-2026-111377 FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly 16.10.2026
CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser 16.10.2026
CVE-2026-111379 FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 16.10.2026
CVE-2026-111380 FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends 16.10.2026
CVE-2026-111381 FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser 16.10.2026
CVE-2026-111382 FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine 16.10.2026
CVE-2026-111383 Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket 16.10.2026
CVE-2026-111384 Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket 16.10.2026
CVE-2026-111385 Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools 16.10.2026
CVE-2026-111386 Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig 16.10.2026
CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint 16.10.2026
CVE-2026-111388 Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth Authentication 16.10.2026
CVE-2026-111389 Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation 16.10.2026
CVE-2026-111237 Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection 16.10.2026
CVE-2026-111212 ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection 16.10.2026
CVE-2026-111210 bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery 16.10.2026
CVE-2026-84823 Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role 15.10.2026
CVE-2026-16754 16.10.2026
CVE-2026-16755 16.10.2026
CVE-2026-75941 16.10.2026
CVE-2026-89057 15.10.2026
CVE-2026-89062 16.10.2026
CVE-2026-92629 16.10.2026
CVE-2026-92777 15.10.2026