CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-115995 Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection 24.10.2026 9.4
CVE-2026-114820 25.10.2026 9.1
CVE-2026-115557 Distrust compromised intermediate certificates in ssl module 25.10.2026 9.4
CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations 24.10.2026 9.9
CVE-2026-115932 Path traversal in post media lets any registered user read server files 24.10.2026 9.6
CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType 24.10.2026 9.2
CVE-2026-111402 WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability 24.10.2026 9.3
CVE-2026-112866 WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability 24.10.2026 9.3
CVE-2026-114196 WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-94075 WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-115806 Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace 24.10.2026 9.8
CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls 24.10.2026 9.9
CVE-2026-115889 Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation 23.10.2026 9.9
CVE-2026-115893 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction 23.10.2026 9.9
CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 23.10.2026 9.3
CVE-2026-46651 Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer 23.10.2026 9.8
CVE-2026-46652 Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer 23.10.2026 9.8
CVE-2026-53942 Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN 23.10.2026 9.9
CVE-2026-55486 Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS 23.10.2026 9.3
CVE-2026-114357 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) 23.10.2026 9.3
CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites) 23.10.2026 9.8
CVE-2026-112846 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112847 WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112848 WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112851 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112853 WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-112854 WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112856 WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112857 WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-112858 WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-112859 WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability 24.10.2026 9.8
CVE-2026-99078 net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 24.10.2026 9.8
CVE-2026-99079 net/mlx5e: Prevent stale XSK buffer release on refill retry 24.10.2026 9.8
CVE-2026-57116 PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation 23.10.2026 9.8
CVE-2026-98959 btrfs: fix xattr replace when multiple xattrs are packed in the same item 24.10.2026 9.8
CVE-2026-115727 AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server 23.10.2026 9.2
CVE-2026-107685 WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers 23.10.2026 9.1
CVE-2026-25784 bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop 23.10.2026 9.3
CVE-2025-30046 Remote Code Execution in CGM CLININET 23.10.2026 9
CVE-2025-30047 Remote Code Execution via Java Deserialization in CGM CLININET 23.10.2026 9.4
CVE-2025-30050 Remote Code Execution in CGM CLININET 23.10.2026 9.4
CVE-2025-30054 Local Privilege Escalation in CGM CLININET 23.10.2026 9.3
CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability 23.10.2026 9.3
CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability 23.10.2026 9.8
CVE-2026-63244 Authentication Bypass Vulnerability 23.10.2026 9.8
CVE-2026-55981 Firmware verification vulnerability 23.10.2026 9.6
CVE-2026-54630 Part-DB: Authenticated RCE via .phar attachment upload served from public/media 23.10.2026 9.6
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway 23.10.2026 9.1
CVE-2026-19677 Authentication Bypass Leading to Server-Side Command Execution 23.10.2026 9.3
CVE-2026-107861 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-110243 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-109122 Kiloview E3 NDI Encoder OS Command Injection 23.10.2026 9.4
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability 24.10.2026 9.1
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability 23.10.2026 10
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability 23.10.2026 10
CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability 23.10.2026 10
CVE-2026-111594 InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information 22.10.2026 9.2
CVE-2026-114625 Security Advisory 0199 24.10.2026 9.4
CVE-2022-51026 Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login 22.10.2026 9.3
CVE-2026-115353 Mistune before 3.3.0 Path Traversal via include Directive 22.10.2026 9.2
CVE-2026-115372 Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options 22.10.2026 9
CVE-2026-115375 Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes 22.10.2026 9.4
CVE-2026-115377 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream 22.10.2026 9.4
CVE-2026-115384 Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow 22.10.2026 9.4
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79846 Unauthenticated Command Injection Vulnerabilities in AOS-8 23.10.2026 10
CVE-2026-79847 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79848 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79850 Authentication Bypass Leading to Remote Code Execution in AOS-8 23.10.2026 10
CVE-2026-79851 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 23.10.2026 10
CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface 24.10.2026 9.8
CVE-2026-79853 Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 23.10.2026 9.8
CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 24.10.2026 9.8
CVE-2026-79855 Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise 24.10.2026 9.8
CVE-2026-79856 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 24.10.2026 9.8
CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol 24.10.2026 9.8
CVE-2026-79858 Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 24.10.2026 9.8
CVE-2026-79859 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 23.10.2026 9.8
CVE-2026-79860 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 23.10.2026 9.8
CVE-2026-79861 Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 23.10.2026 9.8
CVE-2026-79862 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 23.10.2026 9.6
CVE-2026-79863 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 23.10.2026 9.6
CVE-2026-79864 Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 23.10.2026 9.6
CVE-2026-79865 Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 23.10.2026 9.6
CVE-2026-79866 Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 23.10.2026 9.6
CVE-2026-79867 Authentication Bypass Leading to Remote Code Execution in AOS-8 23.10.2026 9.6
CVE-2026-79868 Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 23.10.2026 9.6
CVE-2026-79869 Authentication Bypass Leading to Remote Code Execution in AOS-10 23.10.2026 9.6
CVE-2026-79870 Authentication Bypass leads to Unauthorized Access in AOS-8 23.10.2026 9.6
CVE-2026-79871 Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 23.10.2026 9.6
CVE-2026-79872 Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 23.10.2026 9.4
CVE-2026-79873 Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access 23.10.2026 9.3
CVE-2026-79874 Authentication Bypass in the API allows Administrative Access of AOS-10 23.10.2026 9.3
CVE-2026-79875 Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access 23.10.2026 9.3
CVE-2026-79876 Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing 23.10.2026 9.3
CVE-2026-114612 LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key 22.10.2026 9.9
CVE-2026-114611 OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack 22.10.2026 9.1
CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user 23.10.2026 9.1
CVE-2026-97631 Pre-boot RCE in EDK II PXE driver 22.10.2026 9.5
CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder 24.10.2026 9.2
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 22.10.2026 10
CVE-2026-112832 WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability 22.10.2026 9.8
CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer 23.10.2026 9.3
CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php 22.10.2026 9.3
CVE-2026-115324 mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store 22.10.2026 9.2
CVE-2026-112241 WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability 22.10.2026 9.8
CVE-2026-112327 WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability 22.10.2026 9.3
CVE-2026-114219 NewType Infortech｜NT OneAPP - Hard-coded Credentials 22.10.2026 9.1
CVE-2026-114220 NewType Infortech｜NT OneAPP - Improper Certificate Validation 22.10.2026 9.3
CVE-2026-114661 OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints 22.10.2026 9
CVE-2026-114575 TOTOLINK A950RG product.so UploadCustomModule command injection 22.10.2026 10
CVE-2026-110264 Integer Overflow or Wraparound in GitLab 22.10.2026 10
CVE-2026-114509 Laravel TokenGuard authentication bypass through non-string API credentials 21.10.2026 9.2
CVE-2026-114383 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow 21.10.2026 10
CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow 21.10.2026 10
CVE-2026-91403 24.10.2026 9.1
CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions 21.10.2026 9.8
CVE-2026-114139 Sentry-Javascript: Middleware Bypass when using Tunnel route 21.10.2026 9.1
CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() 21.10.2026 9.4
CVE-2026-111811 Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication 23.10.2026 9.4
CVE-2026-114268 Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow 21.10.2026 9.4
CVE-2026-111816 Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out 23.10.2026 9.2
CVE-2025-31699 Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling 23.10.2026 9.1
CVE-2026-105944 Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life 23.10.2026 10
CVE-2026-111813 Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration 23.10.2026 10
CVE-2026-105869 Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role 21.10.2026 9.2
CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects 21.10.2026 9.2
CVE-2026-111183 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability 23.10.2026 9.8
CVE-2026-89035 MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass 21.10.2026 9.1
CVE-2026-20043 Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 22.10.2026 9
CVE-2026-76466 Cisco Expressway Series Remote Code Execution Vulnerability 22.10.2026 9.8
CVE-2026-76473 Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. 22.10.2026 9.8
CVE-2026-76474 Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities 22.10.2026 9.8
CVE-2026-76475 Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities 22.10.2026 9.3
CVE-2026-113788 Lagoon core ssh service vulnerable to remote code execution 23.10.2026 9.4
CVE-2026-111832 WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability 21.10.2026 10
CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability 21.10.2026 9.9
CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability 21.10.2026 9.3
CVE-2026-109619 RCE via stale global state 23.10.2026 9.2
CVE-2026-109618 RCE via OOM corruption 23.10.2026 9.2
CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load 21.10.2026 9.2
CVE-2026-87095 21.10.2026 9.1
CVE-2026-71195 21.10.2026 9.9
CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow 21.10.2026 10
CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 21.10.2026 9.3
CVE-2026-114053 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision 21.10.2026 9.2
CVE-2026-114087 Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 22.10.2026 9.2
CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE 21.10.2026 9.3
CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential 21.10.2026 9.3
CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization 20.10.2026 10
CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure 23.10.2026 9.8
CVE-2026-101420 23.10.2026 9.6
CVE-2026-101446 20.10.2026 9.9
CVE-2026-101484 22.10.2026 9.8
CVE-2026-101499 21.10.2026 9.8
CVE-2026-101501 20.10.2026 9.9
CVE-2026-101503 20.10.2026 9.9
CVE-2026-101521 22.10.2026 9.8
CVE-2026-101528 20.10.2026 9.9
CVE-2026-101529 20.10.2026 9.9
CVE-2026-101537 21.10.2026 9.8
CVE-2026-101590 22.10.2026 9.1
CVE-2026-101634 21.10.2026 9.1
CVE-2026-101763 21.10.2026 9.8
CVE-2026-101765 21.10.2026 9.1
CVE-2026-101767 21.10.2026 9.8
CVE-2026-101808 21.10.2026 9.1
CVE-2026-101809 24.10.2026 10
CVE-2026-60432 21.10.2026 9.8
CVE-2026-83396 21.10.2026 9.8
CVE-2026-83397 21.10.2026 9.8
CVE-2026-83399 21.10.2026 9.8
CVE-2026-87251 21.10.2026 9.8
CVE-2026-87302 21.10.2026 9.1
CVE-2026-87337 20.10.2026 10
CVE-2026-87347 20.10.2026 9.6
CVE-2026-91214 21.10.2026 9.8
CVE-2026-91216 20.10.2026 10
CVE-2026-91218 20.10.2026 9.6
CVE-2026-91220 21.10.2026 9.8
CVE-2026-91221 20.10.2026 10
CVE-2026-91222 20.10.2026 9.9
CVE-2026-91224 20.10.2026 9.9
CVE-2026-91225 20.10.2026 9.1
CVE-2026-91230 20.10.2026 9.3
CVE-2026-91231 20.10.2026 10
CVE-2026-91232 20.10.2026 9.9
CVE-2026-91233 21.10.2026 9.8
CVE-2026-91234 21.10.2026 9.8
CVE-2026-91235 21.10.2026 9.8
CVE-2026-91236 21.10.2026 9.8
CVE-2026-91241 20.10.2026 9.1
CVE-2026-91243 20.10.2026 9.6
CVE-2026-91250 20.10.2026 9.9
CVE-2026-91251 20.10.2026 9.9
CVE-2026-91265 22.10.2026 9.1
CVE-2026-91299 23.10.2026 10
CVE-2026-91305 22.10.2026 9.1
CVE-2026-91323 21.10.2026 9.8
CVE-2026-91341 20.10.2026 9.1
CVE-2026-91354 20.10.2026 9.9
CVE-2026-91408 21.10.2026 9.8
CVE-2026-91490 21.10.2026 9.1
CVE-2026-91491 21.10.2026 9.8
CVE-2026-91495 21.10.2026 9.8
CVE-2026-91622 20.10.2026 9.3
CVE-2026-91624 21.10.2026 9.1
CVE-2026-91637 23.10.2026 9.9
CVE-2026-91638 23.10.2026 9.9
CVE-2026-91644 20.10.2026 9.3
CVE-2026-91655 20.10.2026 9.1
CVE-2026-91656 20.10.2026 9.1
CVE-2026-91658 23.10.2026 9.9
CVE-2026-91663 23.10.2026 9.9
CVE-2026-91665 22.10.2026 9.8
CVE-2026-112712 @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch 20.10.2026 9.1
CVE-2016-20101 Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php 20.10.2026 9.2
CVE-2026-10131 23.10.2026 9.1
CVE-2026-10132 23.10.2026 9.1
CVE-2026-10133 23.10.2026 9.1
CVE-2026-10135 23.10.2026 9.1
CVE-2026-10136 23.10.2026 9.1
CVE-2026-10137 23.10.2026 9.1
CVE-2026-10138 23.10.2026 9.1
CVE-2026-10139 23.10.2026 9.1
CVE-2026-10141 23.10.2026 9.1
CVE-2026-28763 20.10.2026 9.1
CVE-2026-33568 20.10.2026 9.1
CVE-2026-35499 23.10.2026 9.1
CVE-2026-40615 20.10.2026 9.1
CVE-2026-40627 20.10.2026 9.1
CVE-2026-41222 20.10.2026 9.1
CVE-2026-41223 20.10.2026 9.1
CVE-2026-42019 20.10.2026 9.1
CVE-2026-42020 20.10.2026 9.1
CVE-2026-42021 23.10.2026 9.1
CVE-2026-42022 23.10.2026 9.1
CVE-2026-42023 23.10.2026 9.1
CVE-2026-42024 23.10.2026 9.1
CVE-2026-42025 23.10.2026 9.1
CVE-2026-42026 23.10.2026 9.1
CVE-2026-9659 20.10.2026 9.1
CVE-2026-9660 23.10.2026 9.1
CVE-2026-9814 23.10.2026 9.1
CVE-2026-9817 23.10.2026 9.1
CVE-2026-9827 23.10.2026 9.1
CVE-2026-9869 23.10.2026 9.1
CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew 20.10.2026 9
CVE-2026-113708 Argo CD: A Kustomize remote ref can run commands in the repo-server 20.10.2026 9.9
CVE-2026-113709 Argo CD: A Kustomize Helm config home can run commands in the repo-server 21.10.2026 9.9
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server 20.10.2026 9.9
CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler 21.10.2026 9.3
CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId 20.10.2026 9.1
CVE-2026-113506 aaPanel File Manager common.py ExecShell os command injection 20.10.2026 9.4
CVE-2026-113703 SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing 23.10.2026 9.1
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin 21.10.2026 9.2
CVE-2026-113678 Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron 23.10.2026 9.4
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password 23.10.2026 9.1
CVE-2026-86471 Apache CouchDB: Admin credentials leading to code execution as operating system user 21.10.2026 9.3
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 20.10.2026 9.3
CVE-2026-113391 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection 20.10.2026 9.4
CVE-2026-113390 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection 22.10.2026 9.4
CVE-2026-113620 Eclipse ioFog operator WebSocket accepts an unverified JWT 20.10.2026 9.8
CVE-2026-113389 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection 20.10.2026 9.4
CVE-2026-105312 Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation 20.10.2026 9.9
CVE-2026-43844 20.10.2026 9.3
CVE-2026-43845 20.10.2026 9.2
CVE-2026-43836 20.10.2026 9.3
CVE-2026-43838 20.10.2026 9.2
CVE-2026-113380 20.10.2026 9.3
CVE-2026-109442 piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell 20.10.2026 9.3
CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection 22.10.2026 9.3
CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint 20.10.2026 9.3
CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents 22.10.2026 9.3
CVE-2026-77932 DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent 20.10.2026 9.3
CVE-2026-77933 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment 20.10.2026 9.3
CVE-2026-77936 Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access 20.10.2026 9.3
CVE-2026-112371 H3C Magic NX15 RPC esps write code injection 20.10.2026 9.4
CVE-2026-112370 H3C Magic NX15 usrlist sub_416874 os command injection 22.10.2026 9.4
CVE-2026-112900 Pillow: Argument Injection in Ghostscript call, potentially leading into RCE 20.10.2026 9.2
CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode 22.10.2026 9.2
CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution 22.10.2026 9.2
CVE-2026-112393 Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO 19.10.2026 9.2
CVE-2026-112776 Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations 20.10.2026 9.3
CVE-2026-112779 Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass 20.10.2026 9.3
CVE-2026-112780 Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@ 22.10.2026 9.3
CVE-2026-109437 Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend 23.10.2026 9.2
CVE-2026-112377 CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack 20.10.2026 9.1
CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution 20.10.2026 9.6
CVE-2026-111862 Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code 20.10.2026 9.8
CVE-2026-111057 Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass 19.10.2026 10
CVE-2026-111058 Mercury: Unauthenticated Remote Code Execution via /api/kernels 19.10.2026 9.8
CVE-2026-109432 Camunda Expression Injection via orQueries RCE 19.10.2026 9.3
CVE-2026-112292 CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules 19.10.2026 9.3
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials 19.10.2026 9.3
CVE-2026-78162 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) 20.10.2026 10
CVE-2026-110887 WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability 19.10.2026 9.9
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability 19.10.2026 9.9
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) 19.10.2026 9.3
CVE-2026-108983 GV-ASManager Web Server Command Injection Vulnerability 19.10.2026 9.8
CVE-2026-98548 sctp: discard the rest of the packet on a stale-cookie error 24.10.2026 9.8
CVE-2026-98549 tcp: prevent collapsing skbs across boundary in rtx queue 24.10.2026 9.1
CVE-2026-98464 RISC-V: KVM: Synchronize hrtimer callback during teardown 24.10.2026 9.3
CVE-2026-98490 net: openvswitch: conntrack: fix helper UAF due to extensions realloc 24.10.2026 9.8
CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway 19.10.2026 9.3
CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor 22.10.2026 9.2
CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability 19.10.2026 9.3
CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability 19.10.2026 9.8
CVE-2026-110886 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability 19.10.2026 9.8

Latest Updates

CVE Title Updated Score
CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting 25.10.2026
CVE-2026-116046 eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal 25.10.2026
CVE-2026-116045 1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal 25.10.2026
CVE-2025-15705 Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS 25.10.2026
CVE-2026-110285 WP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Webhook Signing Secret 25.10.2026
CVE-2026-111976 GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route 25.10.2026
CVE-2026-111978 GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import 25.10.2026
CVE-2026-111979 GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color 25.10.2026
CVE-2026-111980 GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant 25.10.2026
CVE-2026-111981 GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses 25.10.2026
CVE-2026-114740 WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard 25.10.2026
CVE-2026-114741 WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR 25.10.2026
CVE-2026-114742 WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR 25.10.2026
CVE-2026-114743 InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings 25.10.2026
CVE-2026-115183 Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget 25.10.2026
CVE-2026-115214 Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers 25.10.2026
CVE-2026-115251 Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade 25.10.2026
CVE-2026-94295 Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature 25.10.2026
CVE-2026-116044 prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload 25.10.2026
CVE-2026-116006 YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication 25.10.2026
CVE-2026-116007 YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication 25.10.2026
CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery 25.10.2026
CVE-2026-116004 onyx-dot-app Onyx PreviewTab.tsx cross site scripting 25.10.2026
CVE-2026-115999 mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection 25.10.2026
CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection 24.10.2026
CVE-2026-115996 Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation 24.10.2026
CVE-2026-109111 24.10.2026
CVE-2026-111326 24.10.2026
CVE-2026-89284 24.10.2026
CVE-2026-115995 Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection 24.10.2026
CVE-2026-115982 phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting 24.10.2026
CVE-2026-115981 phpIPAM index.php cross site scripting 24.10.2026
CVE-2026-114820 25.10.2026 9.1
CVE-2026-115973 FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery 24.10.2026
CVE-2026-115972 FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization 24.10.2026
CVE-2026-115971 Travisun Opptrix preParsing handler webhook Buffer.concat denial of service 24.10.2026
CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection 24.10.2026
CVE-2026-115969 Travisun Opptrix Schedule API setup command injection 24.10.2026
CVE-2026-115557 Distrust compromised intermediate certificates in ssl module 25.10.2026
CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations 24.10.2026 9.9
CVE-2026-114191 WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability 24.10.2026 7.5
CVE-2026-114192 WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability 24.10.2026 6.5
CVE-2026-114704 WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability 24.10.2026 7.2
CVE-2026-114629 Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters 24.10.2026
CVE-2026-115932 Path traversal in post media lets any registered user read server files 24.10.2026 9.6
CVE-2026-116008 DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign 24.10.2026
CVE-2026-116009 Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action 24.10.2026
CVE-2026-116010 RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers 24.10.2026
CVE-2026-116011 Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load() 24.10.2026
CVE-2026-116012 Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser 24.10.2026
CVE-2026-116013 OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing 24.10.2026
CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType 24.10.2026
CVE-2026-116015 yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint 24.10.2026
CVE-2026-116016 yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header 24.10.2026
CVE-2026-116017 Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint 24.10.2026
CVE-2026-116018 ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint 24.10.2026
CVE-2026-116019 Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives 24.10.2026
CVE-2026-116020 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages 24.10.2026
CVE-2026-110018 aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute 24.10.2026 8.8
CVE-2026-114705 WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability 24.10.2026 6.5
CVE-2026-115998 IDOR: User reads and modifies findings from other people's projects 24.10.2026 4.3
CVE-2026-114194 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability 24.10.2026 6.5
CVE-2026-115994 BOLA Allows Cross-Project Target Tampering 24.10.2026 5.4