CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-109432 Camunda Expression Injection via orQueries RCE 19.10.2026 9.3
CVE-2026-112292 CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules 19.10.2026 9.3
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials 19.10.2026 9.3
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) 19.10.2026 10
CVE-2026-110887 WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability 19.10.2026 9.9
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability 19.10.2026 9.9
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-108983 GV-ASManager Web Server Command Injection Vulnerability 19.10.2026 9.8
CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway 18.10.2026 9.3
CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor 18.10.2026 9.2
CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability 19.10.2026 9.3
CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability 19.10.2026 9.8
CVE-2026-110886 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability 19.10.2026 9.8
CVE-2026-111911 phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection 19.10.2026 9.3
CVE-2026-104736 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter 18.10.2026 9.8
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter 18.10.2026 9.1
CVE-2026-111823 19.10.2026 9.8
CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution 16.10.2026 9.2
CVE-2026-102608 ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) 16.10.2026 9
CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret 16.10.2026 9.2
CVE-2026-111641 FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints 16.10.2026 9.3
CVE-2026-111643 Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback 16.10.2026 9.3
CVE-2026-111663 Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation 16.10.2026 9.2
CVE-2026-111673 IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints 16.10.2026 9.3
CVE-2026-111675 Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover 19.10.2026 9.1
CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint 16.10.2026 9.3
CVE-2026-111690 Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass 19.10.2026 9.3
CVE-2026-111691 WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header 16.10.2026 9.1
CVE-2026-111692 DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret 16.10.2026 9.3
CVE-2026-111693 DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials 16.10.2026 9.3
CVE-2026-111704 LangChat through commit 2a6285a Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111708 WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup 16.10.2026 9.3
CVE-2026-111711 Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() 16.10.2026 9.3
CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling 19.10.2026 9.2
CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel 16.10.2026 9.3
CVE-2026-109588 Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel 16.10.2026 9.3
CVE-2026-102692 RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access 16.10.2026 9.1
CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID 16.10.2026 9.6
CVE-2026-49868 RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read 16.10.2026 9.8
CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 16.10.2026 9.9
CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's 16.10.2026 9.9
CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 16.10.2026 9.9
CVE-2026-57169 Dockhand: Unauthenticated container exec via WebSocket upgrade 16.10.2026 9.6
CVE-2026-44977 countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context 16.10.2026 9
CVE-2026-105279 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 9.3
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 16.10.2026 9.3
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller 18.10.2026 9.6
CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter 16.10.2026 9.2
CVE-2026-111472 SQL injection in TSG Profleet 16.10.2026 9.3
CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability 16.10.2026 10
CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 16.10.2026 9.8
CVE-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 16.10.2026 9.8
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 16.10.2026 9.8
CVE-2026-104798 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute 16.10.2026 9.8
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 16.10.2026 9.8
CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter 16.10.2026 9.8
CVE-2026-111444 16.10.2026 9.8
CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials 15.10.2026 9.3
CVE-2026-111283 BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration 18.10.2026 9.5
CVE-2026-111312 OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route 15.10.2026 9.2
CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API 16.10.2026 9.3
CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console 16.10.2026 9.3
CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 16.10.2026 9.1
CVE-2026-105032 EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write 16.10.2026 9.1
CVE-2026-105037 EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read 16.10.2026 9.9
CVE-2026-105038 EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching 16.10.2026 9.8
CVE-2026-105039 EnergizeLab Station Middleware Admin APIs Missing Role Checks 16.10.2026 9.6
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 17.10.2026 9.3
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method 16.10.2026 9.1
CVE-2026-57496 NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction 15.10.2026 9.6
CVE-2026-102946 joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 15.10.2026 9.1
CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox 15.10.2026 9.3
CVE-2026-55240 Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates 15.10.2026 9.1
CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS 15.10.2026 9.3
CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune 16.10.2026 9.4
CVE-2026-105474 15.10.2026 9.4
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026 10
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 15.10.2026 10
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 15.10.2026 9.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 19.10.2026 9.3
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-19863 15.10.2026 9.3
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026 9.3
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026 9.3
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026 9.4
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026 9.3
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026 9.3
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 16.10.2026 9.2
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 16.10.2026 9.4
CVE-2026-102469 15.10.2026 9.2
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-93483 15.10.2026 9.5
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110858 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 16.10.2026 9.2
CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link 15.10.2026 9.3
CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy 15.10.2026 9.1
CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 15.10.2026 9
CVE-2026-108336 Token Signing Key Allows Unauthenticated Administrative Access 16.10.2026 9.1
CVE-2026-108335 Password Reset Functionality Missing Brute-Force Protection 15.10.2026 9.1
CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php 15.10.2026 9.8
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter 15.10.2026 9.8
CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php 15.10.2026 9.8
CVE-2026-102748 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 15.10.2026 9.2
CVE-2026-110770 Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force 14.10.2026 9.2
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection 15.10.2026 10
CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2 15.10.2026 9.1
CVE-2026-102476 16.10.2026 9.1
CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username 14.10.2026 10
CVE-2026-55573 e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain 15.10.2026 9.8
CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 14.10.2026 9.3
CVE-2026-103415 16.10.2026 9.3
CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled 16.10.2026 9.3
CVE-2026-101982 Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used 16.10.2026 9.3
CVE-2026-101983 Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured 15.10.2026 9.3
CVE-2026-108390 HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking 14.10.2026 9.9
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub 14.10.2026 9.3
CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution 15.10.2026 9.3
CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service 15.10.2026 9.2
CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured 15.10.2026 9.3
CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled 15.10.2026 9.3
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled 16.10.2026 9.3
CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used 16.10.2026 9.2
CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used 16.10.2026 9.3
CVE-2026-102178 Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise 16.10.2026 9.3
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 16.10.2026 9.3
CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled 17.10.2026 9.3
CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used 16.10.2026 9.2
CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised 16.10.2026 9.3
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication 16.10.2026 9.2
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used 15.10.2026 9.2
CVE-2026-101956 Junos OS: Unauthorized root command execution when J-Web is enabled 15.10.2026 9.3
CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used 15.10.2026 9.3
CVE-2026-101980 Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled 14.10.2026 9.3
CVE-2026-101986 Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution 15.10.2026 9.3
CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used 14.10.2026 9.2
CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used 14.10.2026 9.2
CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution 15.10.2026 9.2
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability 15.10.2026 9.8
CVE-2026-77524 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 14.10.2026 9.9
CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim 15.10.2026 9.1
CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS 14.10.2026 9
CVE-2026-91881 15.10.2026 9
CVE-2026-15176 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2026-93479 NGINX map directive and regex matching vulnerability 15.10.2026 9.2
CVE-2026-97205 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2020-37281 Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass 14.10.2026 9.2
CVE-2020-37282 office-converter through 1.0.2 OS Command Injection via fileName in generatePdf 14.10.2026 9.3
CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil 14.10.2026 9.3
CVE-2026-110616 NullHub through 2026.5.29 Missing Authentication for /api Management API 14.10.2026 9.2
CVE-2026-110628 Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment 16.10.2026 9.2
CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration 16.10.2026 9.3
CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE 14.10.2026 9.2
CVE-2026-110634 git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings 14.10.2026 9.3
CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options 14.10.2026 9.3
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths 14.10.2026 9.3
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path 16.10.2026 9.3
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir 14.10.2026 9.3
CVE-2026-110640 Whisper-node through 1.1.1 OS Command Injection via filePath and language 14.10.2026 9.3
CVE-2026-110643 transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath 16.10.2026 9.3
CVE-2026-110644 nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType 14.10.2026 9.3
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() 14.10.2026 9.3
CVE-2026-110646 Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl() 14.10.2026 9.2
CVE-2026-110649 Stills before 25.24.2 OS Command Injection via Media File Names 14.10.2026 9.3
CVE-2026-110650 Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths 14.10.2026 9.3
CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce 14.10.2026 9.8
CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability 14.10.2026 9.8
CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-14851 Unauthorised disclosure of information on Copart’s online billing service 14.10.2026 9.2
CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register 15.10.2026 9.8
CVE-2026-89310 SQL Command Injection Vulnerability in JTL-WMS 14.10.2026 9.4
CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php 15.10.2026 9.8
CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method 14.10.2026 9.8
CVE-2026-110002 Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter 15.10.2026 9.8
CVE-2026-110447 14.10.2026 9.2
CVE-2026-97657 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 14.10.2026 9.8
CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 15.10.2026 9.8
CVE-2026-110392 Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning 14.10.2026 9.8
CVE-2026-92097 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 15.10.2026 9.1
CVE-2026-93388 Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url 14.10.2026 9.8
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins 17.10.2026 9.9
CVE-2026-106619 ColdFusion | Improper Input Validation (CWE-20) 14.10.2026 9
CVE-2026-106622 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 14.10.2026 10
CVE-2026-106624 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 10
CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 14.10.2026 10
CVE-2026-105903 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.9
CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-106620 ColdFusion | Incorrect Authorization (CWE-863) 15.10.2026 9.6
CVE-2026-106621 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.1
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool 16.10.2026 9.3
CVE-2026-75994 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.6
CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 14.10.2026 9.3
CVE-2026-93895 IBM WebSphere Application Server Liberty Improper Access Control 17.10.2026 9.1
CVE-2026-93909 IBM WebSphere Application Server Liberty is affected by an authentication bypass 14.10.2026 9.1
CVE-2026-63158 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies 14.10.2026 9.1
CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover 14.10.2026 9.1
CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage 18.10.2026 9.1
CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 14.10.2026 9.9
CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.9
CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.1
CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 17.10.2026 9.3
CVE-2026-106630 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-48383 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php 17.10.2026 9.3
CVE-2026-63149 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() 14.10.2026 9.1
CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-83662 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 14.10.2026 9.6
CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 10
CVE-2026-104252 Vitess vttablet /twopcz reflected XSS 15.10.2026 9.8
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability 16.10.2026 9.6
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-105008 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability 16.10.2026 9.8
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation 17.10.2026 9.2
CVE-2026-110130 Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check 14.10.2026 10
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability 16.10.2026 9.1
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability 16.10.2026 9.3
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85818 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88092 ASP.NET Core Tampering Vulnerability 16.10.2026 9.4
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability 16.10.2026 9.1
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100133 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 16.10.2026 9.3
CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 19.10.2026 10
CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 16.10.2026 9.3
CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20) 15.10.2026 9.1
CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863) 15.10.2026 9.8
CVE-2026-92892 Potential command execution on the host running JFrog CLI. 16.10.2026 9
CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user 19.10.2026 9.4
CVE-2026-106173 14.10.2026 9.4
CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 13.10.2026 10
CVE-2026-109412 14.10.2026 9.9
CVE-2026-54454 OpenCATS: Authenticated RCE in the Import module 13.10.2026 9.1
CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page 13.10.2026 9.6
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field 16.10.2026 9
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 14.10.2026 9.9
CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses 14.10.2026 9.3
CVE-2026-106042 14.10.2026 9.9
CVE-2026-69227 BUG-000187331 Portal for ArcGIS has a security vulnerability 14.10.2026 9.8
CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater 13.10.2026 9.1
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions 13.10.2026 9.3
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets 13.10.2026 10
CVE-2026-104192 DragonflyDB stream RDB deserialization double-free 13.10.2026 9.6
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 16.10.2026 9.8
CVE-2026-77099 CVFS Command Execution 14.10.2026 9.3
CVE-2026-109520 Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions 15.10.2026 9.3
CVE-2026-74040 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker 16.10.2026 9.4
CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch 14.10.2026 9.4
CVE-2026-65162 13.10.2026 10
CVE-2026-65173 13.10.2026 9.1
CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow 14.10.2026 9.4
CVE-2026-63350 13.10.2026 9.4
CVE-2026-63353 14.10.2026 9.4
CVE-2026-63354 16.10.2026 9.4
CVE-2026-89309 Missing Authentication Vulnerability in JTL-WMS 16.10.2026 10
CVE-2026-109110 Wavlink WL-WN592AX6 wmapd system os command injection 15.10.2026 10
CVE-2026-109109 Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow 14.10.2026 10
CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection 16.10.2026 9.4
CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification 14.10.2026 9.4
CVE-2026-109758 15.10.2026 9.3
CVE-2026-97229 Integer Overflow or Wraparound in GitLab 14.10.2026 10
CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 14.10.2026 9.8
CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 14.10.2026 9.9
CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 13.10.2026 9.1
CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer 14.10.2026 9.9
CVE-2026-89111 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 14.10.2026 10
CVE-2026-96119 IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI 14.10.2026 9.9
CVE-2026-109573 phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint 13.10.2026 9.2
CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure 13.10.2026 9.6
CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-44828 Qexo initialization endpoint can reset setup state and expose stored credentials 13.10.2026 9.3
CVE-2026-90920 Maximo AI Service Code Injection 13.10.2026 9.8

Latest Updates

CVE Title Updated Score
CVE-2026-107081 19.10.2026
CVE-2026-111053 FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists 19.10.2026
CVE-2026-111046 FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions 19.10.2026
CVE-2026-112157 MemTensor memmy-agent Memory Service http.ts requireAdminWrite resource consumption 19.10.2026
CVE-2026-112368 Unbounded Recursion in phongo_bson_visit_document/visit_array: 19.10.2026
CVE-2026-107566 Missing Authorization in hMailServer 19.10.2026 6.5
CVE-2026-107567 Use of Less Trusted Source in hMailServer 19.10.2026 7.5
CVE-2026-107568 Missing Authorization in hMailServer 19.10.2026 6.5
CVE-2026-107569 Unchecked Input for Loop Condition in hMailServer 19.10.2026 7.5
CVE-2026-107571 Incorrect Default Permissions in hMailServer 19.10.2026 7.8
CVE-2026-111045 CLI Bridge: High-severity sandbox escape via dangling symlink 19.10.2026 7.5
CVE-2026-12254 Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue 19.10.2026
CVE-2026-112153 vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection 19.10.2026
CVE-2026-112303 GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs 19.10.2026
CVE-2026-112304 docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params() 19.10.2026
CVE-2026-112305 Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override 19.10.2026
CVE-2026-112306 NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields 19.10.2026
CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php' 19.10.2026
CVE-2026-112308 crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool 19.10.2026
CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods 19.10.2026
CVE-2026-112310 docling-core through 2.102.0 Local File Disclosure via Plain Path ImageRef 19.10.2026
CVE-2026-112363 Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo 19.10.2026
CVE-2026-112366 Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns 19.10.2026
CVE-2026-109431 Camunda Missing Authorization in Task Sub-Resources 19.10.2026
CVE-2026-109432 Camunda Expression Injection via orQueries RCE 19.10.2026
CVE-2026-109433 Camunda Broken Access Control via Cockpit 19.10.2026
CVE-2026-112152 vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection 19.10.2026
CVE-2026-77225 19.10.2026
CVE-2026-77227 19.10.2026
CVE-2026-77228 19.10.2026
CVE-2026-112151 vraj404 Criminal Management System Submission Form home.php sql injection 19.10.2026
CVE-2026-86375 19.10.2026 6.2
CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection 19.10.2026
CVE-2026-112328 Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX 19.10.2026
CVE-2026-112329 Sensei LMS 4.26.4 Broken Access Control via save_new_message 19.10.2026
CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload 19.10.2026
CVE-2026-112147 ai-genius-automations octoally index.ts information disclosure 19.10.2026
CVE-2026-112146 D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials 19.10.2026
CVE-2026-112278 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache 19.10.2026
CVE-2026-112279 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_bmpcache2 19.10.2026
CVE-2026-112280 libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflow via parse_data_unit_statement_body 19.10.2026
CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi 19.10.2026
CVE-2026-112282 VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point 19.10.2026
CVE-2026-112283 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points 19.10.2026
CVE-2026-112284 libaribcaption 1.1.0 through 1.1.2 Out-of-Bounds Read via DecoderImpl::HandleGLGR 19.10.2026
CVE-2026-112285 Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders 19.10.2026
CVE-2026-112286 Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints 19.10.2026
CVE-2026-112287 Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module 19.10.2026
CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding 19.10.2026
CVE-2026-112289 Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin 19.10.2026
CVE-2026-112290 MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item 19.10.2026
CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API 19.10.2026
CVE-2026-112292 CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules 19.10.2026
CVE-2026-112293 BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment API 19.10.2026
CVE-2026-112294 FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint 19.10.2026
CVE-2026-112295 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update 19.10.2026
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials 19.10.2026
CVE-2026-111883 Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset 19.10.2026
CVE-2026-111899 KitchenOwl through 0.7.10 SSRF via Recipe Import scrapeKitchenOwl Fetch 19.10.2026
CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint 19.10.2026
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup 19.10.2026
CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis 19.10.2026
CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands 19.10.2026
CVE-2026-111937 Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records 19.10.2026
CVE-2026-111938 Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log 19.10.2026
CVE-2026-111939 Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation 19.10.2026
CVE-2026-112145 speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code 19.10.2026
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors 19.10.2026
CVE-2026-112263 Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting 19.10.2026
CVE-2026-112264 BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys 19.10.2026
CVE-2026-112265 LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification 19.10.2026
CVE-2026-112266 SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching 19.10.2026
CVE-2026-112267 SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker 19.10.2026
CVE-2026-112268 sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes 19.10.2026
CVE-2026-112269 SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations 19.10.2026
CVE-2026-112270 SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx 19.10.2026
CVE-2026-112271 libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser 19.10.2026
CVE-2026-112272 libdisplay-info 0.4.0 Heap Out-of-Bounds Read via DisplayID v2 Parser 19.10.2026
CVE-2026-112273 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name 19.10.2026
CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init 19.10.2026
CVE-2026-112275 Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image 19.10.2026
CVE-2026-112276 Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap 19.10.2026
CVE-2026-112277 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_plane 19.10.2026
CVE-2026-111828 WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability 19.10.2026 4.3
CVE-2026-111829 WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability 19.10.2026 6.5
CVE-2026-112144 satya-vinay Events-Management-System project.sql file access 19.10.2026
CVE-2026-112222 WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability 19.10.2026 5.4
CVE-2026-110008 @fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback 19.10.2026 4.2
CVE-2026-110902 WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability 19.10.2026 4.3
CVE-2026-112143 satya-vinay Events-Management-System missing authentication 19.10.2026
CVE-2026-8168 Denial-of-service vulnerability in the SVG parser and renderer impacts Qt 19.10.2026
CVE-2026-112142 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection 19.10.2026
CVE-2026-111845 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability 19.10.2026 5.3
CVE-2026-38671 19.10.2026
CVE-2026-103314 Stackrox: stackrox: saml response replay allows multiple central authentication tokens 19.10.2026
CVE-2026-110363 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability 19.10.2026 5.4
CVE-2026-111410 WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerability 19.10.2026 6.5
CVE-2026-111414 WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability 19.10.2026 6.5
CVE-2026-111831 WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability 19.10.2026 5.3
CVE-2026-111836 WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability 19.10.2026 4.3
CVE-2026-111839 WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability 19.10.2026 5.3
CVE-2026-112141 satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection 19.10.2026
CVE-2026-112199 WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability 19.10.2026 6.5
CVE-2026-112214 Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser 19.10.2026
CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection 19.10.2026
CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection 19.10.2026
CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal 19.10.2026
CVE-2026-112210 Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service 19.10.2026
CVE-2026-112108 ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow 19.10.2026
CVE-2026-112107 ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow 19.10.2026
CVE-2026-88900 Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution 19.10.2026 8.8
CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present 19.10.2026 6.5
CVE-2026-112106 TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation 19.10.2026
CVE-2026-71253 Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON 19.10.2026
CVE-2026-85247 Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore 19.10.2026 5.9
CVE-2026-85248 Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance 19.10.2026 5.9
CVE-2026-85249 Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata 19.10.2026 6.5
CVE-2026-85250 Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option 19.10.2026 7.5
CVE-2026-85251 Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets 19.10.2026 7.5
CVE-2026-85254 Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing 19.10.2026 6.5
CVE-2026-85257 Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions 19.10.2026 5.3
CVE-2026-85260 Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default 19.10.2026 5.5
CVE-2026-85296 Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State 19.10.2026 6.5
CVE-2026-85300 Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions 19.10.2026 5.5
CVE-2026-85301 Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim 19.10.2026 4.8
CVE-2026-85312 Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header 19.10.2026 4.8
CVE-2026-85313 Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set 19.10.2026 4.3
CVE-2026-85314 Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584) 19.10.2026 6.5
CVE-2026-85315 Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions 19.10.2026 5.3
CVE-2026-85316 Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching 19.10.2026 4.8
CVE-2026-85317 Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache 19.10.2026 4.8
CVE-2026-88901 Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default 19.10.2026 8.2
CVE-2026-112105 GlitterWare Passy TLS main.dart MyHttpOverrides certificate validation 19.10.2026
CVE-2026-79986 Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 19.10.2026 7.4
CVE-2026-80312 Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors 19.10.2026 8.2
CVE-2026-80343 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching 19.10.2026 8.2
CVE-2026-80344 Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address 19.10.2026 8.2
CVE-2026-83531 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages 19.10.2026 8.8
CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection 19.10.2026 6.5
CVE-2026-84178 Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow 19.10.2026 6.1
CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions 19.10.2026 5.3
CVE-2026-84181 Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse 19.10.2026 5.9
CVE-2026-85243 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure 19.10.2026 5.9
CVE-2026-85245 Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target 19.10.2026 5.9
CVE-2026-85246 Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions 19.10.2026 5.3
CVE-2026-112103 f3-factory fatfree-core HTTP Client web.php _curl certificate validation 19.10.2026
CVE-2026-112104 eremef bandcamp-player Remote Control Server database.ts missing authentication 19.10.2026
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) 19.10.2026
CVE-2026-78163 Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure 19.10.2026 5.9
CVE-2026-78164 Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers 19.10.2026 8.2
CVE-2026-78165 Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads 19.10.2026 8.8
CVE-2026-79983 Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 19.10.2026 7.4
CVE-2026-79984 Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 19.10.2026 7.4
CVE-2026-79985 Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 19.10.2026 7.4
CVE-2026-112102 AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection 19.10.2026
CVE-2026-76994 Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles 19.10.2026
CVE-2026-79613 Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles 19.10.2026
CVE-2026-79620 Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata 19.10.2026
CVE-2026-79624 Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation 19.10.2026
CVE-2026-79633 Apache Answer: Missing Authorization Allows Mutations of Non-Public Content 19.10.2026
CVE-2026-86589 Apache Answer: User Center integration does not revoke first-login sessions after central account suspension 19.10.2026
CVE-2026-90910 Apache Answer: Reaction API authorization bypass for restricted content 19.10.2026
CVE-2026-108762 Apache Kylin: delete metadata backup path-confinement bypass 19.10.2026
CVE-2026-108764 Apache Kylin: job-driver UI proxy SSRF 19.10.2026
CVE-2026-108766 Apache Kylin: missing JDBC-config authorization 19.10.2026
CVE-2026-108771 Apache Kylin: unauthenticated broadcast API and polymorphic deserialization 19.10.2026
CVE-2026-108776 Apache Kylin: tables/names SparkSQL injection 19.10.2026
CVE-2026-108780 Apache Kylin: Potential JDBC source configuration validation issue 19.10.2026
CVE-2026-108823 Apache Kylin: Potential unauthenticated job metadata replacement 19.10.2026
CVE-2026-108833 Apache Kylin: default startup profile miss security settings 19.10.2026
CVE-2026-108837 Apache Kylin: Potential computed-column resource exhaustion 19.10.2026
CVE-2026-110379 WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability 19.10.2026 7.1
CVE-2026-110887 WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability 19.10.2026 9.9
CVE-2026-110898 WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability 19.10.2026 6.4
CVE-2026-111398 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability 19.10.2026 7.7
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability 19.10.2026 9.9
CVE-2026-111407 WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability 19.10.2026 6.5
CVE-2026-111408 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability 19.10.2026 8.8
CVE-2026-112100 DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection 19.10.2026
CVE-2026-112101 BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation 19.10.2026
CVE-2026-112183 MISP CSS Injection via Remote Tag Colour in Event Preview 19.10.2026
CVE-2026-112184 MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels 19.10.2026
CVE-2026-112188 MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution 19.10.2026
CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings 19.10.2026
CVE-2026-64943 Apache Answer: API keys logged in plaintext during authentication 19.10.2026
CVE-2026-64944 Apache Answer: Stored XSS via unsanitized HTML in imported question content 19.10.2026
CVE-2026-64945 Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions 19.10.2026
CVE-2026-67249 Apache Answer: Email Code Purpose Confusion May Allow Account Takeover 19.10.2026
CVE-2026-68482 Apache Answer: Improper Authorization in Question Invite User Lookup 19.10.2026
CVE-2026-71563 Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions 19.10.2026
CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection 19.10.2026
CVE-2026-112179 MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances 19.10.2026
CVE-2026-112180 MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records 19.10.2026
CVE-2026-112097 SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting 19.10.2026
CVE-2026-112178 MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control 19.10.2026
CVE-2026-13695 SQL Injection in the Integratec Application 19.10.2026
CVE-2026-104679 19.10.2026 7.1
CVE-2026-111438 check_hba_replication 认证与访问控制绕过 19.10.2026 6.5
CVE-2026-112095 SourceCodester Inventory System Product Management products_handler.php save cross site scripting 19.10.2026
CVE-2026-112096 SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting 19.10.2026
CVE-2026-112161 Lack of integrity checks in Mobatek’s MobaXterm 19.10.2026
CVE-2026-111439 pg_read_binary_file_blocks 缺少初始用户权限校验，普通用户可读取 relation 文件块 19.10.2026 4.3
CVE-2026-112093 subhajitkhan online-clinic-management-system feedback.php cross site scripting 19.10.2026
CVE-2026-112094 michaelrsweet mxml mxml-file.c mxml_load_data use after free 19.10.2026
CVE-2026-112091 Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure 19.10.2026
CVE-2026-112092 subhajitkhan online-clinic-management-system Doctor Registration doctorregistration.php echo cross site scripting 19.10.2026
CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection 19.10.2026
CVE-2026-103311 Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret 19.10.2026 5.3
CVE-2026-106010 BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery 19.10.2026 5.3
CVE-2026-110034 Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code 19.10.2026 3.7
CVE-2026-112087 itsourcecode Online Cake Ordering System confirm.php sql injection 19.10.2026
CVE-2026-112088 Dav-ee dairy-management-system add.php mysqli_query sql injection 19.10.2026
CVE-2026-112089 Dav-ee dairy-management-system delete.php mysqli_query sql injection 19.10.2026
CVE-2026-16460 Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization 19.10.2026
CVE-2026-74921 Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes 19.10.2026 6.8
CVE-2026-74922 Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass 19.10.2026 5.3
CVE-2026-76740 HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability 19.10.2026 7.2
CVE-2026-86791 iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery 19.10.2026 5.3
CVE-2026-91831 Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting 19.10.2026 3.8
CVE-2026-94228 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data 19.10.2026 5.3
CVE-2026-94229 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter 19.10.2026 5.3
CVE-2026-94230 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions 19.10.2026 5.3
CVE-2026-94231 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification 19.10.2026 5.3
CVE-2026-94272 Snap Finance 1.0.8 - 3.11.0 - Unauthenticated Arbitrary Order Status Change via Multiple AJAX Actions 19.10.2026 5.3
CVE-2026-94294 App Builder 3.8.4 - 5.7.0 - Unauthenticated Option Write and Redirect via includes/pure.php 19.10.2026 5.3
CVE-2026-106014 Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery 19.10.2026
CVE-2026-106028 ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation 19.10.2026
CVE-2026-106933 Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload 19.10.2026
CVE-2026-112086 ESPnet Inference Model inference_model.py build_model deserialization 19.10.2026
CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File 19.10.2026
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization 19.10.2026
CVE-2026-91047 ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter 19.10.2026
CVE-2026-94273 Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment 19.10.2026
CVE-2026-76739 HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification 19.10.2026 4.3
CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service 19.10.2026
CVE-2026-112082 sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service 19.10.2026
CVE-2026-16487 Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy 19.10.2026
CVE-2026-108120 path traversal inKoozali - SME Server 19.10.2026
CVE-2026-108121 Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service 19.10.2026
CVE-2026-112081 hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization 19.10.2026
CVE-2026-112080 LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection 19.10.2026
CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization 19.10.2026
CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection 19.10.2026
CVE-2026-112077 radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism 19.10.2026
CVE-2026-111440 JDBC LogFactory 任意类加载/构造导致潜在 RCE 19.10.2026 7
CVE-2026-112076 alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.__write_feed_metadata_sync server-side request forgery 19.10.2026
CVE-2026-112075 unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code 19.10.2026
CVE-2026-112074 Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow 19.10.2026
CVE-2026-112045 donetick History Deletion model.go CanDeleteHistory improper authorization 19.10.2026
CVE-2026-112073 Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds 19.10.2026
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication 19.10.2026
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) 19.10.2026
CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) 19.10.2026
CVE-2026-111441 HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写 19.10.2026 8.1
CVE-2026-112042 diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting 19.10.2026
CVE-2026-112043 calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization 19.10.2026
CVE-2026-112040 diem-project diem Sign-In BasedmUserActions.class.php redirect 19.10.2026
CVE-2026-112041 diem-project diem dmString.php random weak prng 19.10.2026
CVE-2026-112039 diem-project diem Administrative Console actions.class.php append cross site scripting 19.10.2026
CVE-2026-108983 GV-ASManager Web Server Command Injection Vulnerability 19.10.2026 9.8
CVE-2026-108984 GV-ASManager Web Server Buffer Overflow Vulnerability 19.10.2026 7.5
CVE-2026-112037 diem-project diem Google Analytics Client gapi.class.php certificate validation 19.10.2026
CVE-2026-112038 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting 19.10.2026
CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery 19.10.2026
CVE-2026-112034 aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect 19.10.2026
CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery 19.10.2026
CVE-2026-112036 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free 19.10.2026
CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection 18.10.2026
CVE-2026-112031 Chamilo LMS Ticket TicketManager.php addProject cross site scripting 18.10.2026
CVE-2026-112030 diem-project diem dmDataLoad.php default password 18.10.2026
CVE-2026-112029 diem-project diem SHA1 PluginDmUser.class.php weak password hash 18.10.2026
CVE-2026-112112 18.10.2026
CVE-2026-112028 light0011 cms Vote VoteController.class.php logic error 18.10.2026
CVE-2026-112111 18.10.2026
CVE-2026-112027 light0011 cms Uploadify check-exists.php file_exists file information disclosure 18.10.2026
CVE-2026-108519 18.10.2026
CVE-2026-112026 light0011 cms UserModel.class.php sha1 weak password hash 18.10.2026
CVE-2026-112025 light0011 cms Captcha Validation UserController.class.php access control 18.10.2026