CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-104736 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter 17.10.2026 9.8
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter 17.10.2026 9.1
CVE-2026-111823 16.10.2026 9.8
CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution 16.10.2026 9.2
CVE-2026-102608 ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) 16.10.2026 9
CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret 16.10.2026 9.2
CVE-2026-111641 FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints 16.10.2026 9.3
CVE-2026-111643 Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback 16.10.2026 9.3
CVE-2026-111663 Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation 16.10.2026 9.2
CVE-2026-111673 IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints 16.10.2026 9.3
CVE-2026-111675 Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover 16.10.2026 9.1
CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint 16.10.2026 9.3
CVE-2026-111690 Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass 16.10.2026 9.3
CVE-2026-111691 WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header 16.10.2026 9.1
CVE-2026-111692 DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret 16.10.2026 9.3
CVE-2026-111693 DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials 16.10.2026 9.3
CVE-2026-111704 LangChat through commit 2a6285a Missing Authentication on REST API Controllers 16.10.2026 9.3
CVE-2026-111708 WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup 16.10.2026 9.3
CVE-2026-111711 Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() 16.10.2026 9.3
CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling 16.10.2026 9.2
CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel 16.10.2026 9.3
CVE-2026-109588 Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel 16.10.2026 9.3
CVE-2026-102692 RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access 16.10.2026 9.1
CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID 16.10.2026 9.6
CVE-2026-49868 RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read 16.10.2026 9.8
CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 16.10.2026 9.9
CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's 16.10.2026 9.9
CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 16.10.2026 9.9
CVE-2026-57169 Dockhand: Unauthenticated container exec via WebSocket upgrade 16.10.2026 9.6
CVE-2026-44977 countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context 16.10.2026 9
CVE-2026-105279 J4Care dcm4che Missing Authentication for Critical Function 16.10.2026 9.3
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 16.10.2026 9.3
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller 16.10.2026 9.6
CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter 16.10.2026 9.2
CVE-2026-111472 SQL injection in TSG Profleet 16.10.2026 9.3
CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability 16.10.2026 10
CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 16.10.2026 9.8
CVE-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 16.10.2026 9.8
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 16.10.2026 9.8
CVE-2026-104798 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute 16.10.2026 9.8
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 16.10.2026 9.8
CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter 16.10.2026 9.8
CVE-2026-111444 16.10.2026 9.8
CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials 15.10.2026 9.3
CVE-2026-111283 BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration 16.10.2026 9.5
CVE-2026-111312 OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route 15.10.2026 9.2
CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API 16.10.2026 9.3
CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console 16.10.2026 9.3
CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 16.10.2026 9.1
CVE-2026-105032 EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write 16.10.2026 9.1
CVE-2026-105037 EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read 16.10.2026 9.9
CVE-2026-105038 EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching 16.10.2026 9.8
CVE-2026-105039 EnergizeLab Station Middleware Admin APIs Missing Role Checks 16.10.2026 9.6
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 17.10.2026 9.3
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method 16.10.2026 9.1
CVE-2026-57496 NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction 15.10.2026 9.6
CVE-2026-102946 joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 15.10.2026 9.1
CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox 15.10.2026 9.3
CVE-2026-55240 Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates 15.10.2026 9.1
CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS 15.10.2026 9.3
CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune 16.10.2026 9.4
CVE-2026-105474 15.10.2026 9.4
CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow 15.10.2026 10
CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer 15.10.2026 9.9
CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 15.10.2026 10
CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 15.10.2026 9.1
CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-99999 ipv4: validate checksum_start before completing checksum 17.10.2026 9.3
CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 15.10.2026 9.3
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 16.10.2026 9.3
CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 15.10.2026 9.8
CVE-2026-19863 15.10.2026 9.3
CVE-2026-34006 Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer 15.10.2026 9.3
CVE-2026-47786 Pre-Authentication Command Injection 15.10.2026 9.3
CVE-2026-50612 Import Symlink Following Remote Code Execution Vulnerability in QuMagie 15.10.2026 9.4
CVE-2026-50619 Unauthenticated remote code execution vulnerability 15.10.2026 9.3
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking 15.10.2026 9.3
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 16.10.2026 9.2
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 16.10.2026 9.4
CVE-2026-102469 15.10.2026 9.2
CVE-2026-108587 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 15.10.2026 9.8
CVE-2026-93483 15.10.2026 9.5
CVE-2026-110911 15.10.2026 9.8
CVE-2026-110858 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 16.10.2026 9.2
CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link 15.10.2026 9.3
CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy 15.10.2026 9.1
CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 15.10.2026 9
CVE-2026-108336 Token Signing Key Allows Unauthenticated Administrative Access 16.10.2026 9.1
CVE-2026-108335 Password Reset Functionality Missing Brute-Force Protection 15.10.2026 9.1
CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php 15.10.2026 9.8
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter 15.10.2026 9.8
CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php 15.10.2026 9.8
CVE-2026-102748 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 15.10.2026 9.2
CVE-2026-110770 Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force 14.10.2026 9.2
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection 15.10.2026 10
CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2 15.10.2026 9.1
CVE-2026-102476 16.10.2026 9.1
CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username 14.10.2026 10
CVE-2026-55573 e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain 15.10.2026 9.8
CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 14.10.2026 9.3
CVE-2026-103415 16.10.2026 9.3
CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled 16.10.2026 9.3
CVE-2026-101982 Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used 16.10.2026 9.3
CVE-2026-101983 Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured 15.10.2026 9.3
CVE-2026-108390 HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking 14.10.2026 9.9
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub 14.10.2026 9.3
CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution 15.10.2026 9.3
CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service 15.10.2026 9.2
CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured 15.10.2026 9.3
CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled 15.10.2026 9.3
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled 16.10.2026 9.3
CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used 16.10.2026 9.2
CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used 16.10.2026 9.3
CVE-2026-102178 Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise 16.10.2026 9.3
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 16.10.2026 9.3
CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled 17.10.2026 9.3
CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used 16.10.2026 9.2
CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised 16.10.2026 9.3
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication 16.10.2026 9.2
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used 15.10.2026 9.2
CVE-2026-101956 Junos OS: Unauthorized root command execution when J-Web is enabled 15.10.2026 9.3
CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used 15.10.2026 9.3
CVE-2026-101980 Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled 14.10.2026 9.3
CVE-2026-101986 Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution 15.10.2026 9.3
CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used 14.10.2026 9.2
CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used 14.10.2026 9.2
CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution 15.10.2026 9.2
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability 15.10.2026 9.8
CVE-2026-77524 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 14.10.2026 9.9
CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim 15.10.2026 9.1
CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS 14.10.2026 9
CVE-2026-91881 15.10.2026 9
CVE-2026-15176 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2026-93479 NGINX map directive and regex matching vulnerability 15.10.2026 9.2
CVE-2026-97205 NGINX ngx_http_core_module vulnerability 15.10.2026 9.2
CVE-2020-37281 Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass 14.10.2026 9.2
CVE-2020-37282 office-converter through 1.0.2 OS Command Injection via fileName in generatePdf 14.10.2026 9.3
CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil 14.10.2026 9.3
CVE-2026-110616 NullHub through 2026.5.29 Missing Authentication for /api Management API 14.10.2026 9.2
CVE-2026-110628 Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment 16.10.2026 9.2
CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration 16.10.2026 9.3
CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE 14.10.2026 9.2
CVE-2026-110634 git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings 14.10.2026 9.3
CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options 14.10.2026 9.3
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths 14.10.2026 9.3
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path 16.10.2026 9.3
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir 14.10.2026 9.3
CVE-2026-110640 Whisper-node through 1.1.1 OS Command Injection via filePath and language 14.10.2026 9.3
CVE-2026-110643 transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath 16.10.2026 9.3
CVE-2026-110644 nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType 14.10.2026 9.3
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() 14.10.2026 9.3
CVE-2026-110646 Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl() 14.10.2026 9.2
CVE-2026-110649 Stills before 25.24.2 OS Command Injection via Media File Names 14.10.2026 9.3
CVE-2026-110650 Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths 14.10.2026 9.3
CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce 14.10.2026 9.8
CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP 14.10.2026 9.8
CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability 14.10.2026 9.8
CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability 15.10.2026 9.8
CVE-2026-14851 Unauthorised disclosure of information on Copart’s online billing service 14.10.2026 9.2
CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register 15.10.2026 9.8
CVE-2026-89310 SQL Command Injection Vulnerability in JTL-WMS 14.10.2026 9.4
CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php 15.10.2026 9.8
CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method 14.10.2026 9.8
CVE-2026-110002 Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter 15.10.2026 9.8
CVE-2026-110447 14.10.2026 9.2
CVE-2026-97657 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 14.10.2026 9.8
CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 15.10.2026 9.8
CVE-2026-110392 Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning 14.10.2026 9.8
CVE-2026-92097 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 15.10.2026 9.1
CVE-2026-93388 Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url 14.10.2026 9.8
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins 17.10.2026 9.9
CVE-2026-106619 ColdFusion | Improper Input Validation (CWE-20) 14.10.2026 9
CVE-2026-106622 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 14.10.2026 10
CVE-2026-106624 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 10
CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 14.10.2026 10
CVE-2026-105903 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.9
CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-106620 ColdFusion | Incorrect Authorization (CWE-863) 15.10.2026 9.6
CVE-2026-106621 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 14.10.2026 9.1
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool 16.10.2026 9.3
CVE-2026-75994 ColdFusion | Incorrect Authorization (CWE-863) 14.10.2026 9.6
CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 14.10.2026 9.3
CVE-2026-93895 IBM WebSphere Application Server Liberty Improper Access Control 17.10.2026 9.1
CVE-2026-93909 IBM WebSphere Application Server Liberty is affected by an authentication bypass 14.10.2026 9.1
CVE-2026-63158 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies 14.10.2026 9.1
CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover 14.10.2026 9.1
CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage 14.10.2026 9.1
CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 14.10.2026 9.9
CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.9
CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20) 14.10.2026 9.1
CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 17.10.2026 9.3
CVE-2026-106630 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-48383 Adobe Experience Manager | Incorrect Authorization (CWE-863) 15.10.2026 10
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php 17.10.2026 9.3
CVE-2026-63149 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() 14.10.2026 9.1
CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 9.9
CVE-2026-83662 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 14.10.2026 9.6
CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863) 14.10.2026 10
CVE-2026-104252 Vitess vttablet /twopcz reflected XSS 15.10.2026 9.8
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability 16.10.2026 9.6
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-105008 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability 16.10.2026 9.8
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation 17.10.2026 9.2
CVE-2026-110130 Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check 14.10.2026 10
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability 16.10.2026 9.1
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability 16.10.2026 9.3
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-85818 Windows Schannel Spoofing Vulnerability 16.10.2026 9
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88092 ASP.NET Core Tampering Vulnerability 16.10.2026 9.4
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability 16.10.2026 9.1
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 16.10.2026 9.8
CVE-2026-100133 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 16.10.2026 9.3
CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 15.10.2026 10
CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 16.10.2026 9.3
CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 14.10.2026 9.3
CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20) 15.10.2026 9.1
CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863) 15.10.2026 9.8
CVE-2026-92892 Potential command execution on the host running JFrog CLI. 16.10.2026 9
CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user 13.10.2026 9.4
CVE-2026-106173 14.10.2026 9.4
CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 13.10.2026 10
CVE-2026-109412 14.10.2026 9.9
CVE-2026-54454 OpenCATS: Authenticated RCE in the Import module 13.10.2026 9.1
CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page 13.10.2026 9.6
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field 16.10.2026 9
CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 14.10.2026 9.9
CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses 14.10.2026 9.3
CVE-2026-106042 14.10.2026 9.9
CVE-2026-69227 BUG-000187331 Portal for ArcGIS has a security vulnerability 14.10.2026 9.8
CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater 13.10.2026 9.1
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions 13.10.2026 9.3
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets 13.10.2026 10
CVE-2026-104192 DragonflyDB stream RDB deserialization double-free 13.10.2026 9.6
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 16.10.2026 9.8
CVE-2026-77099 CVFS Command Execution 14.10.2026 9.3
CVE-2026-109520 Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions 15.10.2026 9.3
CVE-2026-74040 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker 16.10.2026 9.4
CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch 14.10.2026 9.4
CVE-2026-65162 13.10.2026 10
CVE-2026-65173 13.10.2026 9.1
CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow 14.10.2026 9.4
CVE-2026-63350 13.10.2026 9.4
CVE-2026-63353 14.10.2026 9.4
CVE-2026-63354 16.10.2026 9.4
CVE-2026-89309 Missing Authentication Vulnerability in JTL-WMS 16.10.2026 10
CVE-2026-109110 Wavlink WL-WN592AX6 wmapd system os command injection 15.10.2026 10
CVE-2026-109109 Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow 14.10.2026 10
CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection 16.10.2026 9.4
CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification 14.10.2026 9.4
CVE-2026-109758 15.10.2026 9.3
CVE-2026-97229 Integer Overflow or Wraparound in GitLab 14.10.2026 10
CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 14.10.2026 9.8
CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 14.10.2026 9.9
CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 13.10.2026 9.1
CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer 14.10.2026 9.9
CVE-2026-89111 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 14.10.2026 10
CVE-2026-96119 IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI 14.10.2026 9.9
CVE-2026-109573 phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint 13.10.2026 9.2
CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure 13.10.2026 9.6
CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal 12.10.2026 9.6
CVE-2026-44828 Qexo initialization endpoint can reset setup state and expose stored credentials 13.10.2026 9.3
CVE-2026-90920 Maximo AI Service Code Injection 13.10.2026 9.8
CVE-2020-37279 easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function 13.10.2026 9.2
CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py 13.10.2026 9.3
CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder 12.10.2026 9.3
CVE-2026-109569 sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace 13.10.2026 9.3
CVE-2026-53997 Netherman Portal del Hermano Account Takeover via Password Reset Oracle 15.10.2026 9.1
CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection 16.10.2026 9.4
CVE-2026-109422 NetEase Cloud Music RCE via os.navigateExternal IPC 12.10.2026 9.2
CVE-2026-109423 NetEase Cloud Music TLS Certificate Validation Bypass 15.10.2026 9.1
CVE-2026-109575 13.10.2026 9.8
CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation 13.10.2026 9.9
CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) 13.10.2026 9.1
CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 15.10.2026 9.8
CVE-2026-87744 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations 15.10.2026 9.1
CVE-2026-108918 Edimax BR-6208AC formWlanMP command injection 15.10.2026 10
CVE-2026-77366 obsidian-tc tokens can access arbitrary configured vaults 13.10.2026 9.9
CVE-2026-108917 Edimax BR-6208AC formAutoFWupgrade command injection 13.10.2026 10
CVE-2026-108915 Edimax BR-6208AC formWlanMP buffer overflow 13.10.2026 9.4
CVE-2026-108914 Edimax BR-6208AC formWlSiteSurvey buffer overflow 15.10.2026 9.4
CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication 13.10.2026 10
CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder 13.10.2026 9.2
CVE-2026-109321 Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass 12.10.2026 9.3
CVE-2026-109357 LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header 15.10.2026 9.2
CVE-2026-109372 ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion 13.10.2026 9.3
CVE-2026-109373 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 13.10.2026 9.2
CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in 14.10.2026 9.9
CVE-2026-85956 Improper privilege management in Progress MarkLogic Server backup and restore operations 14.10.2026 9.6
CVE-2026-85947 Improper privilege management in Progress MarkLogic Server forest operations 14.10.2026 9.9
CVE-2026-85948 Improper privilege management in Progress MarkLogic Server Management API 14.10.2026 9.9
CVE-2026-9191 Insufficient isolation of user-supplied code in Progress MarkLogic Server 14.10.2026 9.6
CVE-2026-109391 Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API 13.10.2026 9.2
CVE-2026-109394 Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout 15.10.2026 9.1
CVE-2026-109399 SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 12.10.2026 9.2
CVE-2026-92681 @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields 16.10.2026 9.3
CVE-2026-109390 13.10.2026 9.8
CVE-2026-108895 Linksys E1700 setDMZ os command injection 13.10.2026 9.4
CVE-2026-108896 Linksys E1700 setLinksysIpv6 os command injection 15.10.2026 9.4
CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection 14.10.2026 9.4
CVE-2026-108892 Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow 15.10.2026 10
CVE-2026-108893 Linksys E1700 setVlan stack-based overflow 13.10.2026 9.4
CVE-2026-78357 Insufficient Session Revocation for JWT Authentication 15.10.2026 9.1
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication 15.10.2026 9.4
CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection 15.10.2026 10
CVE-2026-108860 BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key 14.10.2026 9.3
CVE-2026-108576 TOZED X300 IPPingDiagnostics process_ping os command injection 13.10.2026 10
CVE-2026-108753 Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose 13.10.2026 9.3
CVE-2026-108540 OpenSpug File Transfer transfer os command injection 14.10.2026 9.4
CVE-2026-108707 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect 11.10.2026 9.3

Latest Updates

CVE Title Updated Score
CVE-2026-110889 WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability 17.10.2026 7.5
CVE-2026-100316 European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header 17.10.2026 7.2
CVE-2026-109983 YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' Parameter 17.10.2026 6.4
CVE-2026-110253 weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter 17.10.2026 5.4
CVE-2026-111110 Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter 17.10.2026 7.2
CVE-2026-110384 WordPress Fancy Comments WordPress plugin <= 1.2.21 - Cross Site Scripting (XSS) vulnerability 17.10.2026 7.1
CVE-2026-103376 PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check 17.10.2026
CVE-2026-104122 Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name 17.10.2026
CVE-2026-104246 Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments 17.10.2026
CVE-2026-106470 WP Data Access < 5.5.88 - Subscriber+ SSRF 17.10.2026
CVE-2026-110527 WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass 17.10.2026
CVE-2026-81343 Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission 17.10.2026
CVE-2026-81344 Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection 17.10.2026
CVE-2026-91074 BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute 17.10.2026
CVE-2026-92431 Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration 17.10.2026
CVE-2026-92432 Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter 17.10.2026
CVE-2026-92433 Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF 17.10.2026
CVE-2026-97314 ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection 17.10.2026
CVE-2026-103899 EU VAT Assistant for WooCommerce <= 2.1.30.260413 - Unauthenticated Stored Cross-Site Scripting via 'vat_number' Parameter 17.10.2026 7.2
CVE-2026-104736 LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter 17.10.2026 9.8
CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action 17.10.2026 6.5
CVE-2026-107752 Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie 17.10.2026 4.9
CVE-2026-108123 WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action 17.10.2026 7.5
CVE-2026-109368 WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action 17.10.2026 6.5
CVE-2026-109369 WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce Reuse 17.10.2026 6.8
CVE-2026-109985 xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter 17.10.2026 6.4
CVE-2026-109989 Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter 17.10.2026 6.4
CVE-2026-110268 Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter 17.10.2026 4.9
CVE-2026-111726 Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute 17.10.2026 6.4
CVE-2026-92715 Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' Parameter 17.10.2026 4.3
CVE-2026-92798 User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag 17.10.2026 8.1
CVE-2026-92978 User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action() 17.10.2026 4.3
CVE-2026-96660 User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value 17.10.2026 7.2
CVE-2026-104734 Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Object Injection via Deserialization of Untrusted Input via ZIP Template Import 17.10.2026 7.2
CVE-2026-107762 Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' Parameter 17.10.2026 7.5
CVE-2026-107763 Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update Hook 17.10.2026 4.3
CVE-2026-109208 LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters 17.10.2026 7.2
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter 17.10.2026 9.1
CVE-2026-111601 Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter 17.10.2026 6.1
CVE-2026-111602 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameter 17.10.2026 3.7
CVE-2026-111853 17.10.2026 8.8
CVE-2026-111854 17.10.2026 8.1
CVE-2026-111855 17.10.2026 7.5
CVE-2026-111823 16.10.2026 9.8
CVE-2026-89085 Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image 16.10.2026
CVE-2026-89088 Parted: parted: denial of service via heap buffer overflow during fat16 resize 16.10.2026
CVE-2026-89096 Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd 16.10.2026
CVE-2026-106549 16.10.2026
CVE-2026-107346 16.10.2026
CVE-2026-110752 Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment 16.10.2026
CVE-2026-110753 Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline 16.10.2026
CVE-2026-110754 Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline 16.10.2026
CVE-2026-110755 Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline 16.10.2026
CVE-2026-110756 Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print 16.10.2026
CVE-2026-110757 Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine 16.10.2026
CVE-2026-110758 Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace 16.10.2026
CVE-2026-110759 Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse 16.10.2026
CVE-2026-111802 Nautilus: nautilus: arbitrary file deletion via trash symlink 16.10.2026
CVE-2026-17591 Libarchive: libarchive: use-after-free via aliased mac metadata copy 16.10.2026
CVE-2026-111044 Disabled Sunshine clients can bypass revocation with a derived client certificate 16.10.2026 7.6
CVE-2026-62438 Gimp: gimp: paa integer overflow out-of-bounds read 16.10.2026
CVE-2026-62439 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability 16.10.2026