CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE 26.10.2026 9.3
CVE-2026-65184 Avocent ACS8000 wsserver command injection 26.10.2026 9.8
CVE-2026-77055 Improper Privilege Assignment in boneIO 26.10.2026 9.3
CVE-2026-93328 Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write 26.10.2026 9.3
CVE-2026-107656 26.10.2026 9.6
CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform 26.10.2026 9.3
CVE-2026-115188 26.10.2026 9.9
CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney 26.10.2026 9.1
CVE-2026-116214 MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code 26.10.2026 9.3
CVE-2026-116485 danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints 26.10.2026 9.3
CVE-2026-59106 Unauthenticated RCE Vulnerability in WolfProt interface implementation 26.10.2026 9.3
CVE-2026-59107 Shared SSH Authentication Key in vSolution Matrix File Sharing 26.10.2026 9.2
CVE-2026-116237 Oray Pugongying X5 Pro Dnsmasq crlf injection 26.10.2026 9.3
CVE-2026-116235 Oray Pugongying X5 Pro L2TP Authentication crlf injection 26.10.2026 9.4
CVE-2026-116233 Oray Pugongying X5 Pro Dnsmasq crlf injection 26.10.2026 9.4
CVE-2026-116234 Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection 26.10.2026 9.4
CVE-2026-116231 Oray Pugongying X5 Pro Ser2net crlf injection 26.10.2026 9.4
CVE-2026-116232 Oray Pugongying X5 Pro SNMP snmp_set crlf injection 26.10.2026 9.4
CVE-2026-116116 Yoosee GM8135S Camera Secure Boot signature verification 26.10.2026 9.3
CVE-2026-116163 Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses 25.10.2026 9.1
CVE-2026-116199 Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback 25.10.2026 9.2
CVE-2026-115995 Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection 24.10.2026 9.4
CVE-2026-114820 25.10.2026 9.1
CVE-2026-115557 Distrust compromised intermediate certificates in ssl module 26.10.2026 9.4
CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations 24.10.2026 9.9
CVE-2026-115932 Path traversal in post media lets any registered user read server files 24.10.2026 9.6
CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType 24.10.2026 9.2
CVE-2026-111402 WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability 24.10.2026 9.3
CVE-2026-112866 WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability 24.10.2026 9.3
CVE-2026-114196 WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-94075 WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-115806 Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace 24.10.2026 9.8
CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls 24.10.2026 9.9
CVE-2026-115889 Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation 23.10.2026 9.9
CVE-2026-115893 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction 23.10.2026 9.9
CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 23.10.2026 9.3
CVE-2026-46651 Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer 23.10.2026 9.8
CVE-2026-46652 Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer 23.10.2026 9.8
CVE-2026-53942 Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN 23.10.2026 9.9
CVE-2026-55486 Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS 23.10.2026 9.3
CVE-2026-114357 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) 23.10.2026 9.3
CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) 23.10.2026 9.8
CVE-2026-112846 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112847 WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112848 WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112851 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112853 WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-112854 WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112856 WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112857 WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-112858 WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112859 WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-99078 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 24.10.2026 9.8
CVE-2026-99079 net/mlx5e: Prevent stale XSK buffer release on refill retry 24.10.2026 9.8
CVE-2026-57116 PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation 23.10.2026 9.8
CVE-2026-98959 btrfs: fix xattr replace when multiple xattrs are packed in the same item 24.10.2026 9.8
CVE-2026-115727 AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server 23.10.2026 9.2
CVE-2026-107685 WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers 23.10.2026 9.1
CVE-2026-25784 bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop 23.10.2026 9.3
CVE-2025-30046 Remote Code Execution in CGM CLININET 23.10.2026 9
CVE-2025-30047 Remote Code Execution via Java Deserialization in CGM CLININET 23.10.2026 9.4
CVE-2025-30050 Remote Code Execution in CGM CLININET 23.10.2026 9.4
CVE-2025-30054 Local Privilege Escalation in CGM CLININET 23.10.2026 9.3
CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability 23.10.2026 9.3
CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-63244 Authentication Bypass Vulnerability 23.10.2026 9.8
CVE-2026-55981 Firmware verification vulnerability 23.10.2026 9.6
CVE-2026-54630 Part-DB: Authenticated RCE via .phar attachment upload served from public/media 23.10.2026 9.6
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway 23.10.2026 9.1
CVE-2026-19677 Authentication Bypass Leading to Server-Side Command Execution 23.10.2026 9.3
CVE-2026-107861 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-110243 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-109122 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability 25.10.2026 9.1
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability 25.10.2026 10
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability 26.10.2026 10
CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability 26.10.2026 10
CVE-2026-111594 InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information 22.10.2026 9.2
CVE-2026-114625 Security Advisory 0199 24.10.2026 9.4
CVE-2022-51026 Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login 22.10.2026 9.3
CVE-2026-115353 Mistune before 3.3.0 Path Traversal via include Directive 22.10.2026 9.2
CVE-2026-115372 Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options 22.10.2026 9
CVE-2026-115375 Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes 22.10.2026 9.4
CVE-2026-115377 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream 22.10.2026 9.4
CVE-2026-115384 Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow 22.10.2026 9.4
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79846 Unauthenticated Command Injection Vulnerabilities in AOS-8 23.10.2026 10
CVE-2026-79847 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79848 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79850 Authentication Bypass Leading to Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79851 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface 24.10.2026 9.8
CVE-2026-79853 Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 23.10.2026 9.8
CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 24.10.2026 9.8
CVE-2026-79855 Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise 24.10.2026 9.8
CVE-2026-79856 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 24.10.2026 9.8
CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol 24.10.2026 9.8
CVE-2026-79858 Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 24.10.2026 9.8
CVE-2026-79859 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 23.10.2026 9.8
CVE-2026-79860 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 23.10.2026 9.8
CVE-2026-79861 Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 23.10.2026 9.8
CVE-2026-79862 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 23.10.2026 9.6
CVE-2026-79863 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 23.10.2026 9.6
CVE-2026-79864 Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 23.10.2026 9.6
CVE-2026-79865 Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 23.10.2026 9.6
CVE-2026-79866 Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 23.10.2026 9.6
CVE-2026-79867 Authentication Bypass Leading to Remote Code Execution in AOS-8 23.10.2026 9.6
CVE-2026-79868 Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 23.10.2026 9.6
CVE-2026-79869 Authentication Bypass Leading to Remote Code Execution in AOS-10 23.10.2026 9.6
CVE-2026-79870 Authentication Bypass leads to Unauthorized Access in AOS-8 23.10.2026 9.6
CVE-2026-79871 Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 23.10.2026 9.6
CVE-2026-79872 Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 23.10.2026 9.4
CVE-2026-79873 Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access 23.10.2026 9.3
CVE-2026-79874 Authentication Bypass in the API allows Administrative Access of AOS-10 23.10.2026 9.3
CVE-2026-79875 Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access 23.10.2026 9.3
CVE-2026-79876 Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing 23.10.2026 9.3
CVE-2026-114612 LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key 22.10.2026 9.9
CVE-2026-114611 OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack 22.10.2026 9.1
CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user 23.10.2026 9.1
CVE-2026-97631 Pre-boot RCE in EDK II PXE driver 22.10.2026 9.5
CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder 26.10.2026 9.2
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 22.10.2026 10
CVE-2026-112832 WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability 22.10.2026 9.8
CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer 23.10.2026 9.3
CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php 22.10.2026 9.3
CVE-2026-115324 mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store 22.10.2026 9.2
CVE-2026-112241 WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability 22.10.2026 9.8
CVE-2026-112327 WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability 22.10.2026 9.3
CVE-2026-114219 NewType Infortech｜NT OneAPP - Hard-coded Credentials 22.10.2026 9.1
CVE-2026-114220 NewType Infortech｜NT OneAPP - Improper Certificate Validation 22.10.2026 9.3
CVE-2026-114661 OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints 22.10.2026 9
CVE-2026-114575 TOTOLINK A950RG product.so UploadCustomModule command injection 22.10.2026 10
CVE-2026-110264 Integer Overflow or Wraparound in GitLab 22.10.2026 10
CVE-2026-114509 Laravel TokenGuard authentication bypass through non-string API credentials 21.10.2026 9.2
CVE-2026-114383 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow 21.10.2026 10
CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow 21.10.2026 10
CVE-2026-91403 24.10.2026 9.1
CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions 21.10.2026 9.8
CVE-2026-114139 Sentry-Javascript: Middleware Bypass when using Tunnel route 21.10.2026 9.1
CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() 21.10.2026 9.4
CVE-2026-111811 Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication 23.10.2026 9.4
CVE-2026-114268 Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow 21.10.2026 9.4
CVE-2026-111816 Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out 23.10.2026 9.2
CVE-2025-31699 Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling 23.10.2026 9.1
CVE-2026-105944 Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life 23.10.2026 10
CVE-2026-111813 Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration 23.10.2026 10
CVE-2026-105869 Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role 21.10.2026 9.2
CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects 21.10.2026 9.2
CVE-2026-111183 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability 23.10.2026 9.8
CVE-2026-89035 MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass 21.10.2026 9.1
CVE-2026-20043 Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 22.10.2026 9
CVE-2026-76466 Cisco Expressway Series Remote Code Execution Vulnerability 22.10.2026 9.8
CVE-2026-76473 Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. 22.10.2026 9.8
CVE-2026-76474 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities 22.10.2026 9.8
CVE-2026-76475 Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities 22.10.2026 9.3
CVE-2026-113788 Lagoon core ssh service vulnerable to remote code execution 23.10.2026 9.4
CVE-2026-111832 WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability 21.10.2026 10
CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability 21.10.2026 9.9
CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability 21.10.2026 9.3
CVE-2026-109619 RCE via stale global state 23.10.2026 9.2
CVE-2026-109618 RCE via OOM corruption 23.10.2026 9.2
CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load 21.10.2026 9.2
CVE-2026-87095 21.10.2026 9.1
CVE-2026-71195 21.10.2026 9.9
CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow 21.10.2026 10
CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 21.10.2026 9.3
CVE-2026-114053 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision 21.10.2026 9.2
CVE-2026-114087 Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 22.10.2026 9.2
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE 21.10.2026 9.3
CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential 21.10.2026 9.3
CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization 20.10.2026 10
CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure 23.10.2026 9.8
CVE-2026-101420 23.10.2026 9.6
CVE-2026-101446 20.10.2026 9.9
CVE-2026-101484 22.10.2026 9.8
CVE-2026-101499 21.10.2026 9.8
CVE-2026-101501 20.10.2026 9.9
CVE-2026-101503 20.10.2026 9.9
CVE-2026-101521 22.10.2026 9.8
CVE-2026-101528 20.10.2026 9.9
CVE-2026-101529 20.10.2026 9.9
CVE-2026-101537 21.10.2026 9.8
CVE-2026-101590 22.10.2026 9.1
CVE-2026-101634 21.10.2026 9.1
CVE-2026-101763 21.10.2026 9.8
CVE-2026-101765 21.10.2026 9.1
CVE-2026-101767 21.10.2026 9.8
CVE-2026-101808 21.10.2026 9.1
CVE-2026-101809 24.10.2026 10
CVE-2026-60432 21.10.2026 9.8
CVE-2026-83396 21.10.2026 9.8
CVE-2026-83397 21.10.2026 9.8
CVE-2026-83399 21.10.2026 9.8
CVE-2026-87251 21.10.2026 9.8
CVE-2026-87302 21.10.2026 9.1
CVE-2026-87337 20.10.2026 10
CVE-2026-87347 20.10.2026 9.6
CVE-2026-91214 21.10.2026 9.8
CVE-2026-91216 20.10.2026 10
CVE-2026-91218 20.10.2026 9.6
CVE-2026-91220 21.10.2026 9.8
CVE-2026-91221 20.10.2026 10
CVE-2026-91222 20.10.2026 9.9
CVE-2026-91224 20.10.2026 9.9
CVE-2026-91225 20.10.2026 9.1
CVE-2026-91230 20.10.2026 9.3
CVE-2026-91231 20.10.2026 10
CVE-2026-91232 20.10.2026 9.9
CVE-2026-91233 21.10.2026 9.8
CVE-2026-91234 21.10.2026 9.8
CVE-2026-91235 21.10.2026 9.8
CVE-2026-91236 21.10.2026 9.8
CVE-2026-91241 20.10.2026 9.1
CVE-2026-91243 20.10.2026 9.6
CVE-2026-91250 20.10.2026 9.9
CVE-2026-91251 20.10.2026 9.9
CVE-2026-91265 22.10.2026 9.1
CVE-2026-91299 23.10.2026 10
CVE-2026-91305 22.10.2026 9.1
CVE-2026-91323 21.10.2026 9.8
CVE-2026-91341 20.10.2026 9.1
CVE-2026-91354 20.10.2026 9.9
CVE-2026-91408 21.10.2026 9.8
CVE-2026-91490 21.10.2026 9.1
CVE-2026-91491 21.10.2026 9.8
CVE-2026-91495 21.10.2026 9.8
CVE-2026-91622 20.10.2026 9.3
CVE-2026-91624 21.10.2026 9.1
CVE-2026-91637 23.10.2026 9.9
CVE-2026-91638 23.10.2026 9.9
CVE-2026-91644 20.10.2026 9.3
CVE-2026-91655 20.10.2026 9.1
CVE-2026-91656 20.10.2026 9.1
CVE-2026-91658 23.10.2026 9.9
CVE-2026-91663 23.10.2026 9.9
CVE-2026-91665 22.10.2026 9.8
CVE-2026-112712 @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch 20.10.2026 9.1
CVE-2016-20101 Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php 20.10.2026 9.2
CVE-2026-10131 23.10.2026 9.1
CVE-2026-10132 23.10.2026 9.1
CVE-2026-10133 23.10.2026 9.1
CVE-2026-10135 23.10.2026 9.1
CVE-2026-10136 23.10.2026 9.1
CVE-2026-10137 23.10.2026 9.1
CVE-2026-10138 23.10.2026 9.1
CVE-2026-10139 23.10.2026 9.1
CVE-2026-10141 23.10.2026 9.1
CVE-2026-28763 20.10.2026 9.1
CVE-2026-33568 20.10.2026 9.1
CVE-2026-35499 23.10.2026 9.1
CVE-2026-40615 20.10.2026 9.1
CVE-2026-40627 20.10.2026 9.1
CVE-2026-41222 20.10.2026 9.1
CVE-2026-41223 20.10.2026 9.1
CVE-2026-42019 20.10.2026 9.1
CVE-2026-42020 20.10.2026 9.1
CVE-2026-42021 23.10.2026 9.1
CVE-2026-42022 23.10.2026 9.1
CVE-2026-42023 23.10.2026 9.1
CVE-2026-42024 23.10.2026 9.1
CVE-2026-42025 23.10.2026 9.1
CVE-2026-42026 23.10.2026 9.1
CVE-2026-9659 20.10.2026 9.1
CVE-2026-9660 23.10.2026 9.1
CVE-2026-9814 23.10.2026 9.1
CVE-2026-9817 23.10.2026 9.1
CVE-2026-9827 23.10.2026 9.1
CVE-2026-9869 23.10.2026 9.1
CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew 20.10.2026 9
CVE-2026-113708 Argo CD: A Kustomize remote ref can run commands in the repo-server 20.10.2026 9.9
CVE-2026-113709 Argo CD: A Kustomize Helm config home can run commands in the repo-server 21.10.2026 9.9
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server 20.10.2026 9.9
CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler 21.10.2026 9.3
CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId 20.10.2026 9.1
CVE-2026-113506 aaPanel File Manager common.py ExecShell os command injection 20.10.2026 9.4
CVE-2026-113703 SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing 23.10.2026 9.1
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin 21.10.2026 9.2
CVE-2026-113678 Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron 23.10.2026 9.4
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password 23.10.2026 9.1
CVE-2026-86471 Apache CouchDB: Admin credentials leading to code execution as operating system user 21.10.2026 9.3
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 20.10.2026 9.3
CVE-2026-113391 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection 20.10.2026 9.4
CVE-2026-113390 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection 22.10.2026 9.4
CVE-2026-113620 Eclipse ioFog operator WebSocket accepts an unverified JWT 20.10.2026 9.8
CVE-2026-113389 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection 20.10.2026 9.4
CVE-2026-105312 Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation 20.10.2026 9.9
CVE-2026-43844 20.10.2026 9.3
CVE-2026-43845 20.10.2026 9.2
CVE-2026-43836 20.10.2026 9.3
CVE-2026-43838 20.10.2026 9.2

Latest Updates

CVE Title Updated Score
CVE-2026-107080 26.10.2026
CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE 26.10.2026
CVE-2026-115678 26.10.2026
CVE-2026-115679 26.10.2026
CVE-2026-116367 DeepSeek Harness sandbox.ts createContext 26.10.2026
CVE-2026-116368 DeepSeek Harness Browser Auth browser-auth.ts improper authorization 26.10.2026
CVE-2026-65202 26.10.2026
CVE-2026-65203 26.10.2026
CVE-2026-65212 26.10.2026
CVE-2026-65214 26.10.2026
CVE-2026-65215 26.10.2026
CVE-2026-65216 26.10.2026
CVE-2026-65217 26.10.2026
CVE-2026-65218 26.10.2026
CVE-2026-65221 26.10.2026
CVE-2026-65222 26.10.2026
CVE-2026-107090 26.10.2026
CVE-2026-115721 Apache Vysper: Unbounded allocation 26.10.2026
CVE-2026-115748 Apache Vysper: Authorization bypass 26.10.2026 8.8
CVE-2026-116489 Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes 26.10.2026
CVE-2026-116538 HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes 26.10.2026
CVE-2026-116539 Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO 26.10.2026
CVE-2026-116540 netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback 26.10.2026
CVE-2026-116541 netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount 26.10.2026
CVE-2026-116542 Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding 26.10.2026
CVE-2026-116543 Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser 26.10.2026
CVE-2026-116544 Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output 26.10.2026
CVE-2026-65226 26.10.2026
CVE-2026-85297 Bucket Squatting in Cloud Run MCP leads to Service Account Takeover 26.10.2026
CVE-2026-106781 26.10.2026
CVE-2026-110733 Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store 26.10.2026
CVE-2026-110748 Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files 26.10.2026
CVE-2026-112345 TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure 26.10.2026
CVE-2026-115930 MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs 26.10.2026
CVE-2026-116284 Kameleo Local API user-info information disclosure 26.10.2026
CVE-2026-116339 iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist 26.10.2026
CVE-2026-116340 iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization 26.10.2026
CVE-2026-116497 Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon 26.10.2026
CVE-2026-31158 26.10.2026
CVE-2026-36698 26.10.2026
CVE-2026-3322 Privilege escalation via request replaying in Lobster_pro 26.10.2026
CVE-2026-65184 Avocent ACS8000 wsserver command injection 26.10.2026 9.8
CVE-2026-77052 Missing Authentication for Node-RED in boneIO 26.10.2026
CVE-2026-77053 Missing Authentication in Default Configuration in boneIO 26.10.2026
CVE-2026-77054 Cleartext Storage of Sensitive Information in boneIO 26.10.2026
CVE-2026-77055 Improper Privilege Assignment in boneIO 26.10.2026
CVE-2026-77056 Use of Default Credentials in boneIO 26.10.2026
CVE-2026-77057 Improper Restriction of Excessive Authentication Attempts in boneIO 26.10.2026
CVE-2026-77058 Cross-Site Request Forgery (CSRF) in boneIO 26.10.2026
CVE-2026-77059 TOCTOU Race Condition in boneIO 26.10.2026
CVE-2026-77060 Incorrect Permission Assignment for Critical Resource in boneIO 26.10.2026
CVE-2026-77061 Missing Authentication for Critical Function in boneIO 26.10.2026
CVE-2026-77062 Clickjacking in boneIO 26.10.2026
CVE-2026-90885 Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved 26.10.2026 7.5
CVE-2026-92171 Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store 26.10.2026
CVE-2026-93328 Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write 26.10.2026
CVE-2026-93847 Improper post type validation on scheduled post endpoints 26.10.2026 3.5
CVE-2026-93848 Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator 26.10.2026 2.7
CVE-2026-93849 Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames 26.10.2026 6.5
CVE-2026-93850 Unbounded memory consumption during PDF text extraction 26.10.2026 6.5
CVE-2026-94386 Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache 26.10.2026 4.8
CVE-2026-99088 net: openvswitch: validate transport header presence in set_ipv6_addr 26.10.2026
CVE-2026-99089 ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM 26.10.2026
CVE-2026-99090 drm/amdgpu: serialize vblank counter reads against GPU reset 26.10.2026
CVE-2026-99091 Bluetooth: MGMT: Fix status of pending commands flushed on power off 26.10.2026
CVE-2026-99092 riscv: patch: fix handling of bpf-jit execmem addresses 26.10.2026
CVE-2026-99093 mm: don't schedule deferred kernel page table freeing while booting 26.10.2026
CVE-2026-99094 Bluetooth: btintel_pcie: fix TX descriptor bounds check 26.10.2026
CVE-2026-99095 drm/vc4: drain the hangcheck timer and works on V3D unbind 26.10.2026
CVE-2026-99096 io_uring/register: don't exempt disabled rings from task restrictions 26.10.2026
CVE-2026-99097 tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 26.10.2026
CVE-2026-99098 dm-integrity: fix buffer overflow in inline mode with large tag size 26.10.2026
CVE-2026-99099 x86/CPU/AMD: Fix AMD TLBI Erratum #1718 26.10.2026
CVE-2026-107092 26.10.2026
CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework 26.10.2026
CVE-2026-107656 26.10.2026 9.6
CVE-2026-108525 HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit 26.10.2026
CVE-2026-108529 SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit 26.10.2026
CVE-2026-109584 HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit 26.10.2026
CVE-2026-110314 WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit 26.10.2026
CVE-2026-110474 Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application 26.10.2026
CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform 26.10.2026
CVE-2026-110499 Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit 26.10.2026
CVE-2026-111101 HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit 26.10.2026
CVE-2026-111103 HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit 26.10.2026
CVE-2026-111590 SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services 26.10.2026
CVE-2026-112880 CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney 26.10.2026
CVE-2026-113436 Quadratic bignum parsing of Content-Length and Host port values in Bandit 26.10.2026
CVE-2026-113440 HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney 26.10.2026
CVE-2026-114213 WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit 26.10.2026
CVE-2026-114216 Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit 26.10.2026
CVE-2026-115188 26.10.2026 9.9
CVE-2026-115189 26.10.2026 8.8
CVE-2026-115190 26.10.2026 8
CVE-2026-115191 26.10.2026 7.1
CVE-2026-115192 26.10.2026 7.1
CVE-2026-115193 26.10.2026 8.2
CVE-2026-115194 26.10.2026 6.5
CVE-2026-115195 26.10.2026 6.5
CVE-2026-115196 26.10.2026 5.4
CVE-2026-115269 HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit 26.10.2026
CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney 26.10.2026
CVE-2026-115700 SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney 26.10.2026
CVE-2026-116210 Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions 26.10.2026
CVE-2026-116212 Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL 26.10.2026
CVE-2026-116213 Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks 26.10.2026
CVE-2026-116214 MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code 26.10.2026
CVE-2026-116215 MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption 26.10.2026
CVE-2026-116216 MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment 26.10.2026
CVE-2026-116217 RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php 26.10.2026
CVE-2026-116218 Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field 26.10.2026
CVE-2026-116219 Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter 26.10.2026
CVE-2026-116274 JIZHICMS Front-end Order OrderController.php pay improper authorization 26.10.2026
CVE-2026-116275 AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection 26.10.2026
CVE-2026-116280 Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery 26.10.2026
CVE-2026-116281 Kameleo Profile Controller t.cs ListProfiles information disclosure 26.10.2026
CVE-2026-116282 Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure 26.10.2026
CVE-2026-116283 Kameleo Local API profiles information disclosure 26.10.2026
CVE-2026-116485 danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints 26.10.2026
CVE-2026-116486 Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache 26.10.2026
CVE-2026-116487 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read 26.10.2026
CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers 26.10.2026
CVE-2026-116492 Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API 26.10.2026
CVE-2026-116516 Insufficient length validation when parsing Zoom chat transcriptions 26.10.2026 6.5
CVE-2026-59106 Unauthenticated RCE Vulnerability in WolfProt interface implementation 26.10.2026
CVE-2026-59107 Shared SSH Authentication Key in vSolution Matrix File Sharing 26.10.2026
CVE-2026-97200 Unbounded response body buffering and decompression in hackney 26.10.2026
CVE-2026-105947 Arbitrary File Read in Innotim Software's Logsign SIEM 26.10.2026 6.5
CVE-2026-115717 Frappe Builder before 1.36.1 SSRF via convert_to_webp 26.10.2026
CVE-2026-115718 Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt 26.10.2026
CVE-2026-115720 Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect 26.10.2026
CVE-2026-116262 libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow 26.10.2026
CVE-2026-116263 HaschekSolutions PictShare File Upload core.php architect race condition 26.10.2026
CVE-2012-20006 26.10.2026
CVE-2026-116261 libimobiledevice AFC File afc.c afc_file_open out-of-bounds 26.10.2026
CVE-2026-96432 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt 26.10.2026
CVE-2026-116260 libimobiledevice AFC Service afc.c service_receive double free 26.10.2026
CVE-2026-94380 Host Header Injection in HAVELSAN's Liman MYS 26.10.2026 8.1
CVE-2026-116259 libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption 26.10.2026
CVE-2026-116258 libimobiledevice AFC afc.c heap-based overflow 26.10.2026
CVE-2026-114708 WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115595 WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability 26.10.2026 5.3
CVE-2026-115955 WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115956 WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115959 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability 26.10.2026 5.3
CVE-2026-115960 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability 26.10.2026 4.3
CVE-2026-115961 WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-116257 BillaBear Installation InstallController.php processInstall missing authentication 26.10.2026
CVE-2026-116469 MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding 26.10.2026
CVE-2026-89209 26.10.2026 6.8
CVE-2026-114707 WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115594 WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability 26.10.2026 6.5
CVE-2026-115608 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability 26.10.2026 8.5
CVE-2026-115948 WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability 26.10.2026 8.5
CVE-2026-115950 WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115951 WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115953 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115954 WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability 26.10.2026 5.4
CVE-2026-116256 geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgery 26.10.2026
CVE-2026-110377 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability 26.10.2026 5.3
CVE-2026-112865 WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-114709 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115602 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115614 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability 26.10.2026 5.3
CVE-2026-115949 WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability 26.10.2026 6.5
CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal 26.10.2026
CVE-2026-97254 WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-97255 WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability 26.10.2026 5.3
CVE-2026-97295 WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability 26.10.2026 4.3
CVE-2026-112250 Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files 26.10.2026 4.4
CVE-2026-115613 WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability 26.10.2026 6.5
CVE-2026-115958 WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability 26.10.2026 5.3
CVE-2026-116254 rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation 26.10.2026
CVE-2026-4316 Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio 26.10.2026
CVE-2026-103377 Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha 26.10.2026
CVE-2026-116237 Oray Pugongying X5 Pro Dnsmasq crlf injection 26.10.2026
CVE-2026-116253 DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection 26.10.2026
CVE-2026-113438 26.10.2026
CVE-2026-116236 Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload 26.10.2026
CVE-2026-82947 Multiple Out-of-Bounds Reads in Frame Processing 26.10.2026 7.1
CVE-2026-101259 Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions 26.10.2026 5.3
CVE-2026-110376 WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability 26.10.2026 4.3
CVE-2026-111841 WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability 26.10.2026 8.8
CVE-2026-112828 WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability 26.10.2026 4.3
CVE-2026-116235 Oray Pugongying X5 Pro L2TP Authentication crlf injection 26.10.2026
CVE-2026-116372 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules 26.10.2026
CVE-2026-82943 Out-of-Bounds Read via Unchecked Length Values 26.10.2026 6.5
CVE-2026-82944 Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers 26.10.2026 8.8
CVE-2026-82945 Memory Corruption via FMMU Configuration Table Overflow 26.10.2026 6.5
CVE-2026-82946 Null Pointer Dereference in Mailbox Error Handling 26.10.2026 6.5
CVE-2026-95628 Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047) 26.10.2026 5.4
CVE-2026-95629 Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory 26.10.2026 5.4
CVE-2026-95663 Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry 26.10.2026 4.8
CVE-2026-95664 Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions 26.10.2026 5.4
CVE-2026-115425 Multiple cross-site scripting (XSS) in OPNsense 26.10.2026
CVE-2026-116233 Oray Pugongying X5 Pro Dnsmasq crlf injection 26.10.2026
CVE-2026-116234 Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection 26.10.2026
CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation 26.10.2026 8.3
CVE-2026-116231 Oray Pugongying X5 Pro Ser2net crlf injection 26.10.2026
CVE-2026-116232 Oray Pugongying X5 Pro SNMP snmp_set crlf injection 26.10.2026
CVE-2026-116230 Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization 26.10.2026