CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-113788 Lagoon core ssh service vulnerable to remote code execution 21.10.2026 9.4
CVE-2026-111832 WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability 21.10.2026 10
CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability 21.10.2026 9.9
CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability 21.10.2026 9.3
CVE-2026-109619 RCE via stale global state 21.10.2026 9.2
CVE-2026-109618 RCE via OOM corruption 21.10.2026 9.2
CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load 21.10.2026 9.2
CVE-2026-87095 21.10.2026 9.1
CVE-2026-71195 21.10.2026 9.9
CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow 21.10.2026 10
CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 21.10.2026 9.3
CVE-2026-114053 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision 21.10.2026 9.2
CVE-2026-114087 Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 21.10.2026 9.2
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE 21.10.2026 9.3
CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential 21.10.2026 9.3
CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization 20.10.2026 10
CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure 20.10.2026 9.8
CVE-2026-101420 20.10.2026 9.6
CVE-2026-101446 20.10.2026 9.9
CVE-2026-101484 21.10.2026 9.8
CVE-2026-101499 21.10.2026 9.8
CVE-2026-101501 20.10.2026 9.9
CVE-2026-101503 20.10.2026 9.9
CVE-2026-101521 21.10.2026 9.8
CVE-2026-101528 20.10.2026 9.9
CVE-2026-101529 20.10.2026 9.9
CVE-2026-101537 21.10.2026 9.8
CVE-2026-101590 21.10.2026 9.1
CVE-2026-101634 20.10.2026 9.1
CVE-2026-101763 21.10.2026 9.8
CVE-2026-101765 21.10.2026 9.1
CVE-2026-101767 21.10.2026 9.8
CVE-2026-101808 21.10.2026 9.1
CVE-2026-101809 20.10.2026 10
CVE-2026-60432 21.10.2026 9.8
CVE-2026-83396 21.10.2026 9.8
CVE-2026-83397 21.10.2026 9.8
CVE-2026-83399 21.10.2026 9.8
CVE-2026-87251 21.10.2026 9.8
CVE-2026-87302 21.10.2026 9.1
CVE-2026-87337 20.10.2026 10
CVE-2026-87347 20.10.2026 9.6
CVE-2026-91214 21.10.2026 9.8
CVE-2026-91216 20.10.2026 10
CVE-2026-91218 20.10.2026 9.6
CVE-2026-91220 21.10.2026 9.8
CVE-2026-91221 20.10.2026 10
CVE-2026-91222 20.10.2026 9.9
CVE-2026-91224 20.10.2026 9.9
CVE-2026-91225 20.10.2026 9.1
CVE-2026-91230 20.10.2026 9.3
CVE-2026-91231 20.10.2026 10
CVE-2026-91232 20.10.2026 9.9
CVE-2026-91233 21.10.2026 9.8
CVE-2026-91234 21.10.2026 9.8
CVE-2026-91235 21.10.2026 9.8
CVE-2026-91236 21.10.2026 9.8
CVE-2026-91241 20.10.2026 9.1
CVE-2026-91243 20.10.2026 9.6
CVE-2026-91250 20.10.2026 9.9
CVE-2026-91251 20.10.2026 9.9
CVE-2026-91265 21.10.2026 9.1
CVE-2026-91299 20.10.2026 10
CVE-2026-91305 21.10.2026 9.1
CVE-2026-91323 21.10.2026 9.8
CVE-2026-91341 20.10.2026 9.1
CVE-2026-91354 20.10.2026 9.9
CVE-2026-91408 21.10.2026 9.8
CVE-2026-91490 21.10.2026 9.1
CVE-2026-91491 21.10.2026 9.8
CVE-2026-91495 21.10.2026 9.8
CVE-2026-91622 20.10.2026 9.3
CVE-2026-91624 21.10.2026 9.1
CVE-2026-91637 20.10.2026 9.9
CVE-2026-91638 20.10.2026 9.9
CVE-2026-91644 20.10.2026 9.3
CVE-2026-91655 20.10.2026 9.1
CVE-2026-91656 20.10.2026 9.1
CVE-2026-91658 20.10.2026 9.9
CVE-2026-91663 20.10.2026 9.9
CVE-2026-91665 21.10.2026 9.8
CVE-2026-112712 @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch 20.10.2026 9.1
CVE-2016-20101 Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php 20.10.2026 9.2
CVE-2026-10131 20.10.2026 9.1
CVE-2026-10132 20.10.2026 9.1
CVE-2026-10133 20.10.2026 9.1
CVE-2026-10135 20.10.2026 9.1
CVE-2026-10136 20.10.2026 9.1
CVE-2026-10137 20.10.2026 9.1
CVE-2026-10138 20.10.2026 9.1
CVE-2026-10139 20.10.2026 9.1
CVE-2026-10141 20.10.2026 9.1
CVE-2026-28763 20.10.2026 9.1
CVE-2026-33568 20.10.2026 9.1
CVE-2026-35499 20.10.2026 9.1
CVE-2026-40615 20.10.2026 9.1
CVE-2026-40627 20.10.2026 9.1
CVE-2026-41222 20.10.2026 9.1
CVE-2026-41223 20.10.2026 9.1
CVE-2026-42019 20.10.2026 9.1
CVE-2026-42020 20.10.2026 9.1
CVE-2026-42021 20.10.2026 9.1
CVE-2026-42022 20.10.2026 9.1
CVE-2026-42023 20.10.2026 9.1
CVE-2026-42024 20.10.2026 9.1
CVE-2026-42025 20.10.2026 9.1
CVE-2026-42026 20.10.2026 9.1
CVE-2026-9659 20.10.2026 9.1
CVE-2026-9660 20.10.2026 9.1
CVE-2026-9814 20.10.2026 9.1
CVE-2026-9817 20.10.2026 9.1
CVE-2026-9827 20.10.2026 9.1
CVE-2026-9869 20.10.2026 9.1
CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew 20.10.2026 9
CVE-2026-113708 Argo CD: A Kustomize remote ref can run commands in the repo-server 20.10.2026 9.9
CVE-2026-113709 Argo CD: A Kustomize Helm config home can run commands in the repo-server 21.10.2026 9.9
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server 20.10.2026 9.9
CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler 21.10.2026 9.3
CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId 20.10.2026 9.1
CVE-2026-113506 aaPanel File Manager common.py ExecShell os command injection 20.10.2026 9.4
CVE-2026-113703 SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing 20.10.2026 9.1
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin 21.10.2026 9.2
CVE-2026-113678 Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron 20.10.2026 9.4
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password 20.10.2026 9.1
CVE-2026-86471 Apache CouchDB: Admin credentials leading to code execution as operating system user 21.10.2026 9.3
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 20.10.2026 9.3
CVE-2026-113391 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection 20.10.2026 9.4
CVE-2026-113390 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection 20.10.2026 9.4
CVE-2026-113620 Eclipse ioFog operator WebSocket accepts an unverified JWT 20.10.2026 9.8
CVE-2026-113389 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection 20.10.2026 9.4
CVE-2026-105312 Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation 20.10.2026 9.9
CVE-2026-43844 20.10.2026 9.3
CVE-2026-43845 20.10.2026 9.2
CVE-2026-43836 20.10.2026 9.3
CVE-2026-43838 20.10.2026 9.2
CVE-2026-113380 20.10.2026 9.3
CVE-2026-109442 piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell 20.10.2026 9.3
CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint 20.10.2026 9.3
CVE-2026-77932 DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent 20.10.2026 9.3
CVE-2026-77933 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment 20.10.2026 9.3
CVE-2026-77936 Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access 20.10.2026 9.3
CVE-2026-112371 H3C Magic NX15 RPC esps write code injection 20.10.2026 9.4
CVE-2026-112370 H3C Magic NX15 usrlist sub_416874 os command injection 19.10.2026 9.4
CVE-2026-112900 Pillow: Argument Injection in Ghostscript call, potentially leading into RCE 20.10.2026 9.2
CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode 19.10.2026 9.2
CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution 19.10.2026 9.2
CVE-2026-112393 Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO 19.10.2026 9.2
CVE-2026-112776 Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations 20.10.2026 9.3
CVE-2026-112779 Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass 20.10.2026 9.3
CVE-2026-112780 Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@ 19.10.2026 9.3
CVE-2026-109437 Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend 20.10.2026 9.2
CVE-2026-112377 CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack 20.10.2026 9.1
CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution 20.10.2026 9.6
CVE-2026-111862 Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code 20.10.2026 9.8
CVE-2026-111057 Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass 19.10.2026 10
CVE-2026-111058 Mercury: Unauthenticated Remote Code Execution via /api/kernels 19.10.2026 9.8
CVE-2026-109432 Camunda Expression Injection via orQueries RCE 19.10.2026 9.3
CVE-2026-112292 CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules 19.10.2026 9.3
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials 19.10.2026 9.3
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) 20.10.2026 10
CVE-2026-110887 WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability 19.10.2026 9.9
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability 19.10.2026 9.9
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-108983 GV-ASManager Web Server Command Injection Vulnerability 19.10.2026 9.8
CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway 19.10.2026 9.3
CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor 18.10.2026 9.2
CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability 19.10.2026 9.3
CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability 19.10.2026 9.8
CVE-2026-110886 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability 19.10.2026 9.8
CVE-2026-111911 phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection 19.10.2026 9.3
CVE-2026-104736 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter 18.10.2026 9.8
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter 18.10.2026 9.1
CVE-2026-111823 19.10.2026 9.8
CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution 16.10.2026 9.2
CVE-2026-102608 ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) 19.10.2026 9
CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret 16.10.2026 9.2
CVE-2026-111641 FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints 16.10.2026 9.3
CVE-2026-111643 Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback 16.10.2026 9.3
CVE-2026-111663 Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation 16.10.2026 9.2
CVE-2026-111673 IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints 16.10.2026 9.3
CVE-2026-111675 Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover 19.10.2026 9.1
CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint 16.10.2026 9.3
CVE-2026-111690 Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass 19.10.2026 9.3
CVE-2026-111691 WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header 16.10.2026 9.1
CVE-2026-111692 DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret 16.10.2026 9.3
CVE-2026-111693 DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials 16.10.2026 9.3
CVE-2026-111704 LangChat through commit 2a6285a Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111708 WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup 16.10.2026 9.3
CVE-2026-111711 Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() 16.10.2026 9.3
CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling 19.10.2026 9.2
CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel 20.10.2026 9.3
CVE-2026-109588 Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel 20.10.2026 9.3
CVE-2026-102692 RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access 16.10.2026 9.1
CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID 16.10.2026 9.6
CVE-2026-49868 RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read 21.10.2026 9.8
CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 16.10.2026 9.9
CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's 16.10.2026 9.9
CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 21.10.2026 9.9
CVE-2026-57169 Dockhand: Unauthenticated container exec via WebSocket upgrade 16.10.2026 9.6
CVE-2026-44977 countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context 21.10.2026 9
CVE-2026-105279 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 9.3
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 16.10.2026 9.3
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller 18.10.2026 9.6
CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter 16.10.2026 9.2
CVE-2026-111472 SQL injection in TSG Profleet 16.10.2026 9.3
CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability 16.10.2026 10
CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 16.10.2026 9.8
CVE-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 16.10.2026 9.8
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 16.10.2026 9.8
CVE-2026-104798 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute 16.10.2026 9.8
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 16.10.2026 9.8
CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter 16.10.2026 9.8
CVE-2026-111444 16.10.2026 9.8
CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials 21.10.2026 9.3
CVE-2026-111283 BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration 20.10.2026 9.5
CVE-2026-111312 OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route 15.10.2026 9.2
CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API 16.10.2026 9.3
CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console 16.10.2026 9.3
CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 16.10.2026 9.1
CVE-2026-105032 EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write 16.10.2026 9.1
CVE-2026-105037 EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read 16.10.2026 9.9
CVE-2026-105038 EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching 16.10.2026 9.8
CVE-2026-105039 EnergizeLab Station Middleware Admin APIs Missing Role Checks 16.10.2026 9.6
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 17.10.2026 9.3
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method 16.10.2026 9.1
CVE-2026-57496 NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction 21.10.2026 9.6
CVE-2026-102946 joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 15.10.2026 9.1
CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox 15.10.2026 9.3
CVE-2026-55240 Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates 15.10.2026 9.1
CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS 15.10.2026 9.3
CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune 16.10.2026 9.4
CVE-2026-105474 15.10.2026 9.4
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026 10
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 20.10.2026 10
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 20.10.2026 9.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 19.10.2026 9.3
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-19863 15.10.2026 9.3
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026 9.3
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026 9.3
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026 9.4
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026 9.3
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026 9.3
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 16.10.2026 9.2
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 16.10.2026 9.4
CVE-2026-102469 15.10.2026 9.2
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-93483 19.10.2026 9.5
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110858 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 16.10.2026 9.2
CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link 15.10.2026 9.3
CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy 15.10.2026 9.1
CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 15.10.2026 9
CVE-2026-108336 Token Signing Key Allows Unauthenticated Administrative Access 16.10.2026 9.1
CVE-2026-108335 Password Reset Functionality Missing Brute-Force Protection 15.10.2026 9.1

Latest Updates

CVE Title Updated Score
CVE-2026-102536 21.10.2026
CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields 21.10.2026
CVE-2026-113790 pypdf: Possible large memory usage when parsing arrays and dictionaries 21.10.2026
CVE-2026-113791 pypdf: Possible large memory usage when parsing content streams 21.10.2026
CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection 21.10.2026
CVE-2026-114489 Missing Authorization in hMailServer 21.10.2026 8.1
CVE-2026-114490 Incorrect Authorization in hMailServer 21.10.2026 7.8
CVE-2026-113787 odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values 21.10.2026 6.1
CVE-2026-113788 Lagoon core ssh service vulnerable to remote code execution 21.10.2026
CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection 21.10.2026
CVE-2025-60469 21.10.2026
CVE-2025-60476 21.10.2026
CVE-2026-102483 Reachable Assertion in ntpsec 21.10.2026 7.5
CVE-2026-102484 Heap-based Buffer Overflow in ntpsec 21.10.2026 6.4
CVE-2026-102485 Out-of-bounds Read in ntpsec 21.10.2026 5.2
CVE-2026-102486 Out-of-bounds Read in ntpsec 21.10.2026 7.5
CVE-2026-114253 oretnom23 file-management-system-php index.php include file inclusion 21.10.2026
CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection 21.10.2026
CVE-2026-114370 Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal 21.10.2026
CVE-2026-114462 Arbitrary File Read via Symlink in Velneo vServer HTTP Server 21.10.2026
CVE-2026-114463 CVE-2026-114463 21.10.2026
CVE-2026-114470 Cross-Site Request Forgery (CSRF) in hMailServer 21.10.2026 5.3
CVE-2026-114471 Insertion of Sensitive Information into Log File in hMailServer 21.10.2026 4.7
CVE-2026-114472 Insufficient Resource Pool in hMailServer 21.10.2026 3.7
CVE-2026-114473 Incorrect Authorization in hMailServer 21.10.2026 5
CVE-2026-114474 Use of Less Trusted Source in hMailServer 21.10.2026 5.9
CVE-2026-114475 Missing Authorization in hMailServer 21.10.2026 6.5
CVE-2026-114476 Incorrect Authorization in hMailServer 21.10.2026 7.5
CVE-2026-114477 Missing Authorization in hMailServer 21.10.2026 4.3
CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer 21.10.2026 5.9
CVE-2026-114479 Not Failing Securely ('Failing Open') in hMailServer 21.10.2026 5.8
CVE-2023-7356 Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID 21.10.2026
CVE-2026-98869 bpf: Infer zext_dst based on static register liveness analysis 21.10.2026
CVE-2025-60478 21.10.2026
CVE-2025-60487 21.10.2026
CVE-2025-60490 21.10.2026
CVE-2025-60492 21.10.2026
CVE-2026-113786 pypdf: Unvalidated JPEG image data loading 21.10.2026
CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection 21.10.2026
CVE-2025-60493 21.10.2026
CVE-2025-60497 21.10.2026
CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection 21.10.2026
CVE-2025-60491 21.10.2026
CVE-2026-111832 WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability 21.10.2026 10
CVE-2026-111833 WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability 21.10.2026 7.5
CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability 21.10.2026 9.9
CVE-2026-111835 WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability 21.10.2026 6.5
CVE-2026-111837 WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerability 21.10.2026 6.5
CVE-2026-111838 WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-111840 WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability 21.10.2026 9.3
CVE-2026-112221 WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-113779 pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission 21.10.2026 8.8
CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection 21.10.2026
CVE-2024-6423 Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage 21.10.2026 4
CVE-2025-60489 21.10.2026
CVE-2025-71438 21.10.2026
CVE-2026-104948 21.10.2026
CVE-2026-104949 21.10.2026
CVE-2026-109619 RCE via stale global state 21.10.2026
CVE-2024-7478 Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery 21.10.2026 5.8
CVE-2025-0326 Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access 21.10.2026
CVE-2025-60479 21.10.2026
CVE-2026-104947 21.10.2026
CVE-2026-109618 RCE via OOM corruption 21.10.2026
CVE-2026-114437 Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-For 21.10.2026 4.8
CVE-2024-4989 Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks 21.10.2026 5.4
CVE-2024-5139 Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection 21.10.2026 6.1
CVE-2024-5563 Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks 21.10.2026 4.8
CVE-2026-114249 dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization 21.10.2026
CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability 21.10.2026 5.3
CVE-2026-114248 dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication 21.10.2026
CVE-2026-97313 Specific RPZ configurations and query patterns may result in an unexpected exit 21.10.2026 7.5
CVE-2026-114120 SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action 21.10.2026
CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization 21.10.2026
CVE-2026-114386 Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code 21.10.2026
CVE-2026-114387 Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components 21.10.2026
CVE-2026-114388 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController 21.10.2026
CVE-2026-114389 Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade 21.10.2026
CVE-2026-114390 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers 21.10.2026
CVE-2026-114391 ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods 21.10.2026
CVE-2026-114392 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid 21.10.2026
CVE-2026-114393 Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints 21.10.2026
CVE-2026-114394 Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs 21.10.2026
CVE-2026-114395 Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send 21.10.2026
CVE-2026-114396 Trudesk through 1.2.11 MongoDB $where Injection via tickets search API 21.10.2026
CVE-2026-114397 Trudesk through 1.2.11 Missing Authentication on Debug Routes 21.10.2026
CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo 21.10.2026
CVE-2026-114399 Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API 21.10.2026
CVE-2026-114400 Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads 21.10.2026
CVE-2026-114401 Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login 21.10.2026
CVE-2026-114402 Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload 21.10.2026
CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load 21.10.2026
CVE-2026-114404 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions 21.10.2026
CVE-2026-114405 Denial of Service via Malformed VATP Packet in Velneo vServer 21.10.2026
CVE-2026-19630 Amplified resource exhaustion in inbound message processing 21.10.2026 7.5
CVE-2026-94300 Concurrent GSS-TSIG messages corrupt memory 21.10.2026 8.1
CVE-2026-96888 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization 21.10.2026 7.5
CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection 21.10.2026
CVE-2026-114407 e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter 21.10.2026
CVE-2026-82210 Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames 21.10.2026
CVE-2026-82230 Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser 21.10.2026
CVE-2026-82231 Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client 21.10.2026
CVE-2026-82425 Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service 21.10.2026
CVE-2026-82942 Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service 21.10.2026
CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service 21.10.2026
CVE-2026-84727 Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message 21.10.2026
CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments 21.10.2026
CVE-2026-84748 Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration 21.10.2026
CVE-2026-86146 Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing 21.10.2026
CVE-2026-86147 Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof 21.10.2026
CVE-2026-86249 Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth 21.10.2026
CVE-2026-87849 Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing 21.10.2026
CVE-2026-90484 Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash 21.10.2026
CVE-2026-78334 Apache bRPC: Missing Authentication for Streaming RPC Frames 21.10.2026
CVE-2026-79704 Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling 21.10.2026
CVE-2026-80463 Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly 21.10.2026
CVE-2026-81755 Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request 21.10.2026
CVE-2026-74757 Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count 21.10.2026
CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling 21.10.2026
CVE-2026-78048 Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder 21.10.2026
CVE-2026-78058 Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path 21.10.2026
CVE-2026-78066 Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes 21.10.2026
CVE-2026-114242 dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection 21.10.2026
CVE-2026-54427 Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser 21.10.2026
CVE-2026-56386 Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser 21.10.2026
CVE-2026-56387 Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser 21.10.2026
CVE-2026-56388 Apache bRPC: Out-of-Bounds Write in Redis Command Parser 21.10.2026
CVE-2026-58064 Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation 21.10.2026
CVE-2026-61902 Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits 21.10.2026
CVE-2026-61916 Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms 21.10.2026
CVE-2026-66392 Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names 21.10.2026
CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service 21.10.2026
CVE-2026-48830 Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests 21.10.2026
CVE-2026-54425 Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding 21.10.2026
CVE-2026-54426 Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser 21.10.2026
CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation 21.10.2026
CVE-2026-59562 Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC 21.10.2026
CVE-2026-41114 Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver 21.10.2026
CVE-2026-58663 Apache IoTDB: Auth Bypass in pipeTransfer() interface 21.10.2026
CVE-2026-87095 21.10.2026
CVE-2026-87096 21.10.2026
CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage 21.10.2026
CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability 21.10.2026 8.8
CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability 21.10.2026 8.8
CVE-2026-110884 WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-70387 OnePlus OxygenOS exposed dangerous method vulnerability 21.10.2026
CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service. 21.10.2026 5.3
CVE-2026-97206 DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. 21.10.2026 7.5
CVE-2026-109125 Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' 21.10.2026 5.3
CVE-2026-35501 Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. 21.10.2026 3.7
CVE-2026-50106 Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. 21.10.2026 6.5
CVE-2026-70386 OnePlus OxygenOS improper neutralization of special elements vulnerability 21.10.2026
CVE-2026-101138 CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist 21.10.2026 5.3
CVE-2026-103301 Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret 21.10.2026 5.3
CVE-2026-104641 Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient 21.10.2026 5.3
CVE-2026-104642 Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass 21.10.2026 2.7
CVE-2026-105256 LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter 21.10.2026 5.3
CVE-2026-107447 Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity 21.10.2026 5.3
CVE-2026-14556 HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer 21.10.2026 5.4
CVE-2026-85683 Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL 21.10.2026 8.8
CVE-2026-110938 JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing 21.10.2026
CVE-2026-114236 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 21.10.2026
CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-110899 WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability 21.10.2026 7.1
CVE-2026-111074 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() 21.10.2026
CVE-2026-111075 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization 21.10.2026
CVE-2026-17557 Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding 21.10.2026
CVE-2026-100145 Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST Route 21.10.2026
CVE-2026-102499 Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action 21.10.2026
CVE-2026-103302 Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret 21.10.2026
CVE-2026-105257 LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR 21.10.2026
CVE-2026-105262 Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translation 21.10.2026
CVE-2026-105992 Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass 21.10.2026
CVE-2026-105996 Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token 21.10.2026
CVE-2026-105998 Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization 21.10.2026
CVE-2026-105999 Booking Package < 1.7.31 - Unauthenticated Calendar Account Information Disclosure 21.10.2026
CVE-2026-106932 Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice 21.10.2026
CVE-2026-107127 Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF 21.10.2026
CVE-2026-107128 Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization 21.10.2026
CVE-2026-107237 Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live 21.10.2026
CVE-2026-107506 Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting 21.10.2026
CVE-2026-107788 SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion 21.10.2026
CVE-2026-107789 SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR 21.10.2026
CVE-2026-107790 WP Job Openings < 4.1.1 - Author+ Stored XSS via Job Title 21.10.2026
CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter 21.10.2026
CVE-2026-109147 WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter 21.10.2026
CVE-2026-109926 Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin Activation 21.10.2026
CVE-2026-110514 WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR 21.10.2026
CVE-2026-110523 WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect 21.10.2026
CVE-2026-110651 Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer 21.10.2026
CVE-2026-110982 AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt 21.10.2026
CVE-2026-111574 Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox 21.10.2026
CVE-2026-111596 Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR 21.10.2026
CVE-2026-111947 Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication 21.10.2026
CVE-2026-111948 Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions 21.10.2026
CVE-2026-111949 miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding 21.10.2026
CVE-2026-111955 WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass 21.10.2026
CVE-2026-111956 WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure 21.10.2026
CVE-2026-111957 SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback 21.10.2026
CVE-2026-15261 TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key 21.10.2026
CVE-2026-79627 Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass 21.10.2026
CVE-2026-81812 Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload 21.10.2026
CVE-2026-81813 Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass 21.10.2026
CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS 21.10.2026
CVE-2026-86611 Download Manager (Free & Pro) - Privacy Settings Update via CSRF 21.10.2026
CVE-2026-87837 Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook 21.10.2026
CVE-2026-87838 Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook 21.10.2026
CVE-2026-88784 Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting 21.10.2026
CVE-2026-92997 Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter 21.10.2026
CVE-2026-92998 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters 21.10.2026
CVE-2026-92999 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action 21.10.2026
CVE-2026-96901 Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token 21.10.2026
CVE-2026-93856 21.10.2026 4.3
CVE-2026-71195 21.10.2026 9.9
CVE-2026-82819 Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server 21.10.2026
CVE-2026-114040 DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal 21.10.2026
CVE-2026-114039 projectworlds Advanced Library Management System report_search.php mysqli_query sql injection 21.10.2026
CVE-2026-92822 Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml 21.10.2026
CVE-2026-92823 Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml 21.10.2026
CVE-2026-92824 Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts 21.10.2026
CVE-2026-113743 Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal 21.10.2026
CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow 21.10.2026
CVE-2026-82814 Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection 21.10.2026 8.8
CVE-2026-105044 OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox 21.10.2026
CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 21.10.2026
CVE-2026-113740 itsourcecode Online Cake Ordering System deletecustomer.php sql injection 21.10.2026
CVE-2026-113741 itsourcecode Online Cake Ordering System 404.php cross site scripting 21.10.2026
CVE-2020-37286 Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls 21.10.2026
CVE-2020-37287 Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments 21.10.2026
CVE-2020-37288 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops 21.10.2026
CVE-2020-37289 Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values 21.10.2026
CVE-2021-48018 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator 21.10.2026
CVE-2021-48019 Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies 21.10.2026
CVE-2021-48020 Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays 21.10.2026
CVE-2025-71437 Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction 21.10.2026
CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 21.10.2026
CVE-2026-113737 R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal 21.10.2026
CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal 21.10.2026
CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string 21.10.2026
CVE-2026-114041 FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message 21.10.2026
CVE-2026-114042 FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU 21.10.2026
CVE-2026-114043 Vulnerability in FreeRDP 21.10.2026
CVE-2026-114044 FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline 21.10.2026
CVE-2026-114045 FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format 21.10.2026
CVE-2026-114046 FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard 21.10.2026
CVE-2026-114047 FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation 21.10.2026
CVE-2026-114048 WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints 21.10.2026
CVE-2026-114049 vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense 21.10.2026
CVE-2026-114050 vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID 21.10.2026
CVE-2026-114051 vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate 21.10.2026
CVE-2026-114052 vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs 21.10.2026
CVE-2026-114053 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision 21.10.2026
CVE-2026-114054 vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys 21.10.2026
CVE-2026-114055 vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs 21.10.2026
CVE-2026-114056 ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH 21.10.2026
CVE-2026-114057 ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure 21.10.2026
CVE-2026-114058 ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol 21.10.2026
CVE-2026-114059 ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization 21.10.2026
CVE-2026-114060 SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions 21.10.2026
CVE-2026-114061 SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages 21.10.2026
CVE-2026-114062 SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks 21.10.2026
CVE-2026-114063 SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows 21.10.2026
CVE-2026-114064 Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint 21.10.2026
CVE-2026-114065 Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholders 21.10.2026
CVE-2026-114066 Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints 21.10.2026
CVE-2026-114067 Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route 21.10.2026
CVE-2026-114068 Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint 21.10.2026
CVE-2026-114069 Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint 21.10.2026
CVE-2026-114070 Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records 21.10.2026
CVE-2026-114071 Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route 21.10.2026
CVE-2026-114072 Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback State 21.10.2026
CVE-2026-114073 Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs 21.10.2026
CVE-2026-114074 Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range 21.10.2026
CVE-2026-114075 Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API 21.10.2026
CVE-2026-114076 Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL 21.10.2026
CVE-2026-114077 Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4 21.10.2026
CVE-2026-114078 Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup 21.10.2026
CVE-2026-114079 Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint 21.10.2026
CVE-2026-114080 Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URL 21.10.2026
CVE-2026-114081 Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name 21.10.2026
CVE-2026-114082 Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials 21.10.2026
CVE-2026-114083 Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints 21.10.2026
CVE-2026-114084 Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API 21.10.2026
CVE-2026-114085 Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API 21.10.2026
CVE-2026-114086 Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint 21.10.2026
CVE-2026-114087 Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 21.10.2026
CVE-2026-114088 Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO 21.10.2026
CVE-2026-114089 Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover 21.10.2026
CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server 21.10.2026
CVE-2026-114091 Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route 21.10.2026
CVE-2026-114092 Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action 21.10.2026
CVE-2026-114093 Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint 21.10.2026
CVE-2026-114094 Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths 21.10.2026
CVE-2026-114095 Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object 21.10.2026
CVE-2026-114096 Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths 21.10.2026
CVE-2026-114097 Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter 21.10.2026
CVE-2026-114098 Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks 21.10.2026
CVE-2026-114099 Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision 21.10.2026
CVE-2026-114100 Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type 21.10.2026
CVE-2026-114101 Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass 21.10.2026
CVE-2026-114102 adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event 21.10.2026
CVE-2026-114103 adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() 21.10.2026
CVE-2026-114104 adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass 21.10.2026
CVE-2026-114105 Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits 21.10.2026
CVE-2026-114106 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path 21.10.2026
CVE-2026-114107 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool 21.10.2026
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE 21.10.2026
CVE-2026-114109 uv before 0.11.15 Arbitrary File Write via Entry Point Names 21.10.2026
CVE-2026-114110 Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries 21.10.2026
CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability 21.10.2026
CVE-2026-114112 Sharp before 0.35.4 RCE via bundled libheif AVIF decoding 21.10.2026
CVE-2026-114113 Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders 21.10.2026
CVE-2026-114114 Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters 21.10.2026
CVE-2026-114115 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection 21.10.2026
CVE-2026-114116 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators 21.10.2026
CVE-2026-114117 Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches 21.10.2026
CVE-2026-114118 Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound 21.10.2026
CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential 21.10.2026
CVE-2026-114197 Deserialization of untrusted data in capa 21.10.2026
CVE-2026-114198 Deserialization of untrusted data in floss 21.10.2026
CVE-2026-113735 D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials 21.10.2026
CVE-2026-113707 a2aproject a2a-rs inmemory.rs update race condition 20.10.2026
CVE-2026-109681 Metasploit Framework FTP PASV Response SSRF 20.10.2026 4.7
CVE-2026-109682 Metasploit Framework HTTP Redirect Server-Side Request Forgery 20.10.2026 4.7
CVE-2026-113706 a2aproject a2a-rs inmemory.rs information disclosure 20.10.2026
CVE-2026-113705 a2aproject a2a-rs error.rs information exposure 20.10.2026
CVE-2026-112202 Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images 21.10.2026
CVE-2026-6945 20.10.2026
CVE-2026-113704 a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery 21.10.2026
CVE-2026-113726 virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST 20.10.2026 7.8
CVE-2026-113732 virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote 20.10.2026 7.8
CVE-2026-113776 virtualenv activation scripts run code from a path that contains a placeholder name 20.10.2026 7.8
CVE-2026-76587 IBM Planning Analytics Buffer Overflow 20.10.2026 8.8
CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization 20.10.2026 10
CVE-2026-9825 IBM Cyber Fraud Reachable Assertion 21.10.2026 3.7
CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability 20.10.2026 8.1
CVE-2026-87800 IBM Cyber Fraud includes components with multiple known vulnerabilities 21.10.2026 6.8
CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure 20.10.2026 9.8
CVE-2026-93441 IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service 20.10.2026 8.6
CVE-2026-93442 IBM QRadar SIEM Out-of-bounds Read 21.10.2026 8.2
CVE-2026-93744 IBM i Improper Authentication 21.10.2026 6.5
CVE-2025-60475 20.10.2026
CVE-2026-113731 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool 20.10.2026 3.3
CVE-2026-93888 IBM Sterling Connect:Direct for Unix Buffer Overflow 21.10.2026 7.8
CVE-2026-94402 IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation 20.10.2026 6.1
CVE-2026-85783 Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key 21.10.2026