{"items":[{"id":"CVE-2026-116768","published":"2026-11-02T20:27:51.649Z","updated":"2026-11-02T20:27:51.649Z","title":"Missing length validation in Absolute Secure Access","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":null},{"id":"CVE-2026-58977","published":"2026-11-02T20:26:00.147Z","updated":"2026-11-02T20:26:00.147Z","title":"In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-29508","published":"2026-11-02T20:25:11.729Z","updated":"2026-11-02T20:25:11.729Z","title":"ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser","severity":"HIGH","score":8.7,"vendor":"ReadyMedia","product":"ReadyMedia (MiniDLNA)","kev":false,"epss":null},{"id":"CVE-2026-116767","published":"2026-11-02T20:23:10.115Z","updated":"2026-11-02T20:23:10.115Z","title":"Improper input handling in Secure Access servers","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":null},{"id":"CVE-2026-58930","published":"2026-11-02T20:21:14.949Z","updated":"2026-11-02T20:21:14.949Z","title":"An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58927","published":"2026-11-02T20:21:13.927Z","updated":"2026-11-02T20:21:13.927Z","title":"The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58926","published":"2026-11-02T20:21:12.920Z","updated":"2026-11-02T20:21:12.920Z","title":"A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58925","published":"2026-11-02T20:21:11.897Z","updated":"2026-11-02T20:21:11.897Z","title":"The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58924","published":"2026-11-02T20:21:10.883Z","updated":"2026-11-02T20:21:10.883Z","title":"The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58915","published":"2026-11-02T20:21:09.862Z","updated":"2026-11-02T20:21:09.862Z","title":"A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49906","published":"2026-11-02T20:21:08.851Z","updated":"2026-11-02T20:21:08.851Z","title":"An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49903","published":"2026-11-02T20:21:07.826Z","updated":"2026-11-02T20:21:07.826Z","title":"The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-116766","published":"2026-11-02T20:16:26.614Z","updated":"2026-11-02T20:16:26.614Z","title":"Improper input handling in Secure Access server","severity":"HIGH","score":8.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":null},{"id":"CVE-2026-16305","published":"2026-11-02T20:13:26.876Z","updated":"2026-11-02T20:13:26.876Z","title":"CVE-2026-16305","severity":"UNKNOWN","score":null,"vendor":"INFINITT Healthcare","product":"System Manager","kev":false,"epss":null},{"id":"CVE-2026-91901","published":"2026-11-02T20:11:16.738Z","updated":"2026-11-02T20:11:16.738Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low…","severity":"LOW","score":3.5,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-91896","published":"2026-11-02T20:08:53.242Z","updated":"2026-11-02T20:08:53.242Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with…","severity":"LOW","score":3.9,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-86365","published":"2026-11-02T20:06:40.484Z","updated":"2026-11-02T20:06:40.484Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged attacker with local…","severity":"MEDIUM","score":4.2,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-116769","published":"2026-11-02T20:06:19.670Z","updated":"2026-11-02T20:06:19.670Z","title":"Authentication bypass in Secure Access Servers","severity":"CRITICAL","score":9.3,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":null},{"id":"CVE-2026-91900","published":"2026-11-02T20:04:48.691Z","updated":"2026-11-02T20:04:48.691Z","title":"Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme…","severity":"MEDIUM","score":5.8,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-91899","published":"2026-11-02T20:02:44.558Z","updated":"2026-11-02T20:02:44.558Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-91897","published":"2026-11-02T20:00:51.154Z","updated":"2026-11-02T20:00:51.154Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-97718","published":"2026-11-02T20:00:40.552Z","updated":"2026-11-02T20:00:40.552Z","title":"CSRF in Secure Access Server v14.60","severity":"CRITICAL","score":9.4,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":null},{"id":"CVE-2026-91894","published":"2026-11-02T19:58:54.956Z","updated":"2026-11-02T19:58:54.956Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-91895","published":"2026-11-02T19:56:54.693Z","updated":"2026-11-02T19:56:54.693Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-59048","published":"2026-11-02T19:55:14.970Z","updated":"2026-11-02T19:55:14.970Z","title":"In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59047","published":"2026-11-02T19:55:13.919Z","updated":"2026-11-02T19:55:13.919Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59046","published":"2026-11-02T19:55:12.892Z","updated":"2026-11-02T19:55:12.892Z","title":"In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59045","published":"2026-11-02T19:55:11.873Z","updated":"2026-11-02T19:55:11.873Z","title":"In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59044","published":"2026-11-02T19:55:10.869Z","updated":"2026-11-02T19:55:10.869Z","title":"In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59043","published":"2026-11-02T19:55:09.866Z","updated":"2026-11-02T19:55:09.866Z","title":"In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59042","published":"2026-11-02T19:55:08.840Z","updated":"2026-11-02T19:55:08.840Z","title":"In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59031","published":"2026-11-02T19:55:07.835Z","updated":"2026-11-02T19:55:07.835Z","title":"In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59028","published":"2026-11-02T19:55:06.818Z","updated":"2026-11-02T19:55:06.818Z","title":"In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59022","published":"2026-11-02T19:55:05.816Z","updated":"2026-11-02T19:55:05.816Z","title":"In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59021","published":"2026-11-02T19:55:04.792Z","updated":"2026-11-02T19:55:04.792Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59020","published":"2026-11-02T19:55:03.775Z","updated":"2026-11-02T19:55:03.775Z","title":"In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59016","published":"2026-11-02T19:55:02.708Z","updated":"2026-11-02T19:55:02.708Z","title":"In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59015","published":"2026-11-02T19:55:01.697Z","updated":"2026-11-02T19:55:01.697Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59014","published":"2026-11-02T19:55:00.687Z","updated":"2026-11-02T19:55:00.687Z","title":"In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59012","published":"2026-11-02T19:54:59.686Z","updated":"2026-11-02T19:54:59.686Z","title":"In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59011","published":"2026-11-02T19:54:58.682Z","updated":"2026-11-02T19:54:58.682Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-91898","published":"2026-11-02T19:54:58.490Z","updated":"2026-11-02T19:54:58.490Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An…","severity":"HIGH","score":8.1,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-59010","published":"2026-11-02T19:54:57.687Z","updated":"2026-11-02T19:54:57.687Z","title":"In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59008","published":"2026-11-02T19:54:56.672Z","updated":"2026-11-02T19:54:56.672Z","title":"In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59007","published":"2026-11-02T19:54:55.678Z","updated":"2026-11-02T19:54:55.678Z","title":"In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59006","published":"2026-11-02T19:54:54.656Z","updated":"2026-11-02T19:54:54.656Z","title":"In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59005","published":"2026-11-02T19:54:53.648Z","updated":"2026-11-02T19:54:53.648Z","title":"In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59004","published":"2026-11-02T19:54:52.641Z","updated":"2026-11-02T19:54:52.641Z","title":"In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59003","published":"2026-11-02T19:54:51.640Z","updated":"2026-11-02T19:54:51.640Z","title":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59002","published":"2026-11-02T19:54:50.626Z","updated":"2026-11-02T19:54:50.626Z","title":"In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59001","published":"2026-11-02T19:54:49.611Z","updated":"2026-11-02T19:54:49.611Z","title":"In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-59000","published":"2026-11-02T19:54:48.593Z","updated":"2026-11-02T19:54:48.593Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58997","published":"2026-11-02T19:54:47.598Z","updated":"2026-11-02T19:54:47.598Z","title":"In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58995","published":"2026-11-02T19:54:46.576Z","updated":"2026-11-02T19:54:46.576Z","title":"In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58994","published":"2026-11-02T19:54:45.547Z","updated":"2026-11-02T19:54:45.547Z","title":"In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58990","published":"2026-11-02T19:54:44.531Z","updated":"2026-11-02T19:54:44.531Z","title":"In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58989","published":"2026-11-02T19:54:43.516Z","updated":"2026-11-02T19:54:43.516Z","title":"In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58988","published":"2026-11-02T19:54:42.516Z","updated":"2026-11-02T19:54:42.516Z","title":"In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58986","published":"2026-11-02T19:54:41.503Z","updated":"2026-11-02T19:54:41.503Z","title":"In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58985","published":"2026-11-02T19:54:40.505Z","updated":"2026-11-02T19:54:40.505Z","title":"In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58984","published":"2026-11-02T19:54:39.440Z","updated":"2026-11-02T19:54:39.440Z","title":"In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58979","published":"2026-11-02T19:54:38.231Z","updated":"2026-11-02T19:54:38.231Z","title":"In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58978","published":"2026-11-02T19:54:37.215Z","updated":"2026-11-02T19:54:37.215Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58976","published":"2026-11-02T19:54:36.205Z","updated":"2026-11-02T19:54:36.205Z","title":"In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58975","published":"2026-11-02T19:54:35.189Z","updated":"2026-11-02T19:54:35.189Z","title":"In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58974","published":"2026-11-02T19:54:34.180Z","updated":"2026-11-02T19:54:34.180Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58971","published":"2026-11-02T19:54:33.149Z","updated":"2026-11-02T19:54:33.149Z","title":"In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58970","published":"2026-11-02T19:54:32.126Z","updated":"2026-11-02T19:54:32.126Z","title":"In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58969","published":"2026-11-02T19:54:31.107Z","updated":"2026-11-02T19:54:31.107Z","title":"In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58968","published":"2026-11-02T19:54:30.106Z","updated":"2026-11-02T19:54:30.106Z","title":"In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58966","published":"2026-11-02T19:54:29.096Z","updated":"2026-11-02T19:54:29.096Z","title":"In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58965","published":"2026-11-02T19:54:28.094Z","updated":"2026-11-02T19:54:28.094Z","title":"In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-119740","published":"2026-11-02T19:54:27.714Z","updated":"2026-11-02T19:54:27.714Z","title":"Nexbox A95X Amlogic S905X UART Unauthenticated Console Access","severity":"HIGH","score":7,"vendor":"Nexbox","product":"A95X","kev":false,"epss":null},{"id":"CVE-2026-58964","published":"2026-11-02T19:54:27.072Z","updated":"2026-11-02T19:54:27.072Z","title":"In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58963","published":"2026-11-02T19:54:26.076Z","updated":"2026-11-02T19:54:26.076Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58962","published":"2026-11-02T19:54:25.071Z","updated":"2026-11-02T19:54:25.071Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58961","published":"2026-11-02T19:54:24.077Z","updated":"2026-11-02T19:54:24.077Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58957","published":"2026-11-02T19:54:23.071Z","updated":"2026-11-02T19:54:23.071Z","title":"In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58956","published":"2026-11-02T19:54:22.071Z","updated":"2026-11-02T19:54:22.071Z","title":"In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58955","published":"2026-11-02T19:54:21.056Z","updated":"2026-11-02T19:54:21.056Z","title":"In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58953","published":"2026-11-02T19:54:20.049Z","updated":"2026-11-02T19:54:20.049Z","title":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58951","published":"2026-11-02T19:54:19.029Z","updated":"2026-11-02T19:54:19.029Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58949","published":"2026-11-02T19:54:18.025Z","updated":"2026-11-02T19:54:18.025Z","title":"In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58946","published":"2026-11-02T19:54:17.003Z","updated":"2026-11-02T19:54:17.003Z","title":"In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58945","published":"2026-11-02T19:54:15.999Z","updated":"2026-11-02T19:54:15.999Z","title":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58944","published":"2026-11-02T19:54:14.972Z","updated":"2026-11-02T19:54:14.972Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58943","published":"2026-11-02T19:54:13.976Z","updated":"2026-11-02T19:54:13.976Z","title":"In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58942","published":"2026-11-02T19:54:12.961Z","updated":"2026-11-02T19:54:12.961Z","title":"In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58938","published":"2026-11-02T19:54:11.944Z","updated":"2026-11-02T19:54:11.944Z","title":"In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58937","published":"2026-11-02T19:54:10.926Z","updated":"2026-11-02T19:54:10.926Z","title":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58936","published":"2026-11-02T19:54:09.925Z","updated":"2026-11-02T19:54:09.925Z","title":"In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58934","published":"2026-11-02T19:54:08.906Z","updated":"2026-11-02T19:54:08.906Z","title":"In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58933","published":"2026-11-02T19:54:07.883Z","updated":"2026-11-02T19:54:07.883Z","title":"In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58886","published":"2026-11-02T19:54:06.870Z","updated":"2026-11-02T19:54:06.870Z","title":"In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58885","published":"2026-11-02T19:54:05.863Z","updated":"2026-11-02T19:54:05.863Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58884","published":"2026-11-02T19:54:04.844Z","updated":"2026-11-02T19:54:04.844Z","title":"In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58883","published":"2026-11-02T19:54:03.835Z","updated":"2026-11-02T19:54:03.835Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58882","published":"2026-11-02T19:54:02.807Z","updated":"2026-11-02T19:54:02.807Z","title":"In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58879","published":"2026-11-02T19:54:01.812Z","updated":"2026-11-02T19:54:01.812Z","title":"In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58877","published":"2026-11-02T19:54:00.796Z","updated":"2026-11-02T19:54:00.796Z","title":"In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58876","published":"2026-11-02T19:53:59.795Z","updated":"2026-11-02T19:53:59.795Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58875","published":"2026-11-02T19:53:58.780Z","updated":"2026-11-02T19:53:58.780Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58871","published":"2026-11-02T19:53:57.779Z","updated":"2026-11-02T19:53:57.779Z","title":"In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58870","published":"2026-11-02T19:53:56.762Z","updated":"2026-11-02T19:53:56.762Z","title":"In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58868","published":"2026-11-02T19:53:55.761Z","updated":"2026-11-02T19:53:55.761Z","title":"In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58867","published":"2026-11-02T19:53:54.748Z","updated":"2026-11-02T19:53:54.748Z","title":"In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58866","published":"2026-11-02T19:53:53.745Z","updated":"2026-11-02T19:53:53.745Z","title":"In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58857","published":"2026-11-02T19:53:52.716Z","updated":"2026-11-02T19:53:52.716Z","title":"In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58853","published":"2026-11-02T19:53:51.705Z","updated":"2026-11-02T19:53:51.705Z","title":"In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58847","published":"2026-11-02T19:53:50.693Z","updated":"2026-11-02T19:53:50.693Z","title":"In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58845","published":"2026-11-02T19:53:49.583Z","updated":"2026-11-02T19:53:49.583Z","title":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58844","published":"2026-11-02T19:53:48.564Z","updated":"2026-11-02T19:53:48.564Z","title":"In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58838","published":"2026-11-02T19:53:47.583Z","updated":"2026-11-02T19:53:47.583Z","title":"In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58837","published":"2026-11-02T19:53:46.574Z","updated":"2026-11-02T19:53:46.574Z","title":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58836","published":"2026-11-02T19:53:45.561Z","updated":"2026-11-02T19:53:45.561Z","title":"In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58829","published":"2026-11-02T19:53:44.559Z","updated":"2026-11-02T19:53:44.559Z","title":"In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58828","published":"2026-11-02T19:53:43.553Z","updated":"2026-11-02T19:53:43.553Z","title":"In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58827","published":"2026-11-02T19:53:42.548Z","updated":"2026-11-02T19:53:42.548Z","title":"In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58826","published":"2026-11-02T19:53:41.509Z","updated":"2026-11-02T19:53:41.509Z","title":"In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58825","published":"2026-11-02T19:53:40.443Z","updated":"2026-11-02T19:53:40.443Z","title":"In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58824","published":"2026-11-02T19:53:39.431Z","updated":"2026-11-02T19:53:39.431Z","title":"In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58821","published":"2026-11-02T19:53:38.418Z","updated":"2026-11-02T19:53:38.418Z","title":"In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58817","published":"2026-11-02T19:53:36.244Z","updated":"2026-11-02T19:53:36.244Z","title":"In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-58814","published":"2026-11-02T19:53:35.219Z","updated":"2026-11-02T19:53:35.219Z","title":"In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55292","published":"2026-11-02T19:53:34.198Z","updated":"2026-11-02T19:53:34.198Z","title":"In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55289","published":"2026-11-02T19:53:33.194Z","updated":"2026-11-02T19:53:33.194Z","title":"In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55288","published":"2026-11-02T19:53:32.189Z","updated":"2026-11-02T19:53:32.189Z","title":"In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55287","published":"2026-11-02T19:53:31.185Z","updated":"2026-11-02T19:53:31.185Z","title":"In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55283","published":"2026-11-02T19:53:30.160Z","updated":"2026-11-02T19:53:30.160Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55275","published":"2026-11-02T19:53:29.148Z","updated":"2026-11-02T19:53:29.148Z","title":"In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55272","published":"2026-11-02T19:53:28.115Z","updated":"2026-11-02T19:53:28.115Z","title":"In multiple places, there is a possible permission bypass due to resource exhaustion. This could lead to local denial of service with no additional execution…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55271","published":"2026-11-02T19:53:27.111Z","updated":"2026-11-02T20:22:38.102Z","title":"In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55264","published":"2026-11-02T19:53:26.090Z","updated":"2026-11-02T19:53:26.090Z","title":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55263","published":"2026-11-02T19:53:25.067Z","updated":"2026-11-02T19:53:25.067Z","title":"In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55262","published":"2026-11-02T19:53:24.053Z","updated":"2026-11-02T19:53:24.053Z","title":"In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55261","published":"2026-11-02T19:53:23.051Z","updated":"2026-11-02T19:53:23.051Z","title":"In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-55257","published":"2026-11-02T19:53:22.010Z","updated":"2026-11-02T20:20:50.648Z","title":"In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49935","published":"2026-11-02T19:53:20.997Z","updated":"2026-11-02T19:53:20.997Z","title":"In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49934","published":"2026-11-02T19:53:19.976Z","updated":"2026-11-02T19:53:19.976Z","title":"In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49931","published":"2026-11-02T19:53:15.500Z","updated":"2026-11-02T19:53:15.500Z","title":"In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49924","published":"2026-11-02T19:53:14.294Z","updated":"2026-11-02T19:53:14.294Z","title":"In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49923","published":"2026-11-02T19:53:13.253Z","updated":"2026-11-02T20:19:50.028Z","title":"In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49922","published":"2026-11-02T19:53:12.211Z","updated":"2026-11-02T19:53:12.211Z","title":"In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-49912","published":"2026-11-02T19:53:11.174Z","updated":"2026-11-02T19:53:11.174Z","title":"In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-45514","published":"2026-11-02T19:53:10.139Z","updated":"2026-11-02T20:16:26.629Z","title":"In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28665","published":"2026-11-02T19:53:09.105Z","updated":"2026-11-02T19:53:09.105Z","title":"In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28645","published":"2026-11-02T19:53:08.064Z","updated":"2026-11-02T20:14:58.061Z","title":"In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28643","published":"2026-11-02T19:53:07.037Z","updated":"2026-11-02T19:53:07.037Z","title":"In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28632","published":"2026-11-02T19:53:05.999Z","updated":"2026-11-02T19:53:05.999Z","title":"In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28621","published":"2026-11-02T19:53:04.987Z","updated":"2026-11-02T19:53:04.987Z","title":"In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28597","published":"2026-11-02T19:53:03.955Z","updated":"2026-11-02T20:13:06.979Z","title":"In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-28588","published":"2026-11-02T19:53:02.890Z","updated":"2026-11-02T20:11:40.640Z","title":"In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-0053","published":"2026-11-02T19:52:57.757Z","updated":"2026-11-02T19:52:57.757Z","title":"In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2025-26433","published":"2026-11-02T19:52:54.690Z","updated":"2026-11-02T19:52:54.690Z","title":"In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2025-22436","published":"2026-11-02T19:52:51.620Z","updated":"2026-11-02T19:52:51.620Z","title":"In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":null},{"id":"CVE-2026-91893","published":"2026-11-02T19:50:01.895Z","updated":"2026-11-02T19:50:01.895Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":null},{"id":"CVE-2026-119739","published":"2026-11-02T19:46:38.599Z","updated":"2026-11-02T19:46:38.599Z","title":"Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR","severity":"MEDIUM","score":6.9,"vendor":"Nexbox","product":"A95X","kev":false,"epss":null},{"id":"CVE-2026-119738","published":"2026-11-02T19:44:54.168Z","updated":"2026-11-02T19:46:51.695Z","title":"Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()","severity":"MEDIUM","score":6.9,"vendor":"Nexbox","product":"A95X","kev":false,"epss":null},{"id":"CVE-2026-119737","published":"2026-11-02T19:42:49.394Z","updated":"2026-11-02T19:47:01.697Z","title":"Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket","severity":"HIGH","score":8.5,"vendor":"Nexbox","product":"A95X","kev":false,"epss":null},{"id":"CVE-2026-120689","published":"2026-11-02T19:39:28.327Z","updated":"2026-11-02T19:52:35.578Z","title":"Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File","severity":"MEDIUM","score":4.3,"vendor":"The HDF Group","product":"HDF5","kev":false,"epss":null},{"id":"CVE-2026-102435","published":"2026-11-02T19:31:31.082Z","updated":"2026-11-02T19:31:31.082Z","title":"Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field","severity":"CRITICAL","score":9.8,"vendor":"themefic","product":"Ultra Addons for Contact Form 7","kev":false,"epss":null},{"id":"CVE-2026-120067","published":"2026-11-02T19:09:15.519Z","updated":"2026-11-02T19:33:08.506Z","title":"psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120066","published":"2026-11-02T19:09:14.964Z","updated":"2026-11-02T19:37:32.927Z","title":"psqlODBC log files are created with default permissions at a predictable path and follow symbolic links","severity":"MEDIUM","score":5.3,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120065","published":"2026-11-02T19:09:14.045Z","updated":"2026-11-02T19:36:42.876Z","title":"psqlODBC does not escape a server-supplied column name in its updatable-cursor queries","severity":"HIGH","score":7.1,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120064","published":"2026-11-02T19:09:13.482Z","updated":"2026-11-02T19:36:58.409Z","title":"psqlODBC does not validate column numbers and row indexes in binding and descriptor functions","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120063","published":"2026-11-02T19:09:12.867Z","updated":"2026-11-02T19:36:16.948Z","title":"psqlODBC stack buffer overflow when quoting long schema and table names","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120062","published":"2026-11-02T19:09:12.214Z","updated":"2026-11-02T19:35:38.418Z","title":"psqlODBC SQL injection through SQLSpecialColumns table and schema names","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120061","published":"2026-11-02T19:09:11.590Z","updated":"2026-11-02T19:35:04.484Z","title":"psqlODBC ODBC escape parser stack buffer overflow","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120060","published":"2026-11-02T19:09:10.912Z","updated":"2026-11-02T19:43:04.278Z","title":"psqlODBC does not validate server-supplied counts and lengths","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120059","published":"2026-11-02T19:09:10.340Z","updated":"2026-11-02T19:34:22.575Z","title":"psqlODBC uses a server-supplied column name as a format string","severity":"MEDIUM","score":6.8,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120058","published":"2026-11-02T19:09:09.747Z","updated":"2026-11-02T19:33:49.913Z","title":"psqlODBC row cache overflow when a later FETCH changes the column count","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120057","published":"2026-11-02T19:09:09.117Z","updated":"2026-11-02T19:43:04.416Z","title":"psqlODBC large-object read overflows the application buffer","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":null},{"id":"CVE-2026-120497","published":"2026-11-02T19:06:10.254Z","updated":"2026-11-02T19:38:18.703Z","title":"Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","severity":"MEDIUM","score":4.6,"vendor":"AWS","product":"aidlc-traceability","kev":false,"epss":null},{"id":"CVE-2026-119736","published":"2026-11-02T19:02:59.651Z","updated":"2026-11-02T19:02:59.651Z","title":"Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials","severity":"HIGH","score":8.8,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-105606","published":"2026-11-02T19:01:44.851Z","updated":"2026-11-02T19:51:57.098Z","title":"Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8","severity":"CRITICAL","score":9.5,"vendor":"joomlaboat.com","product":"Custom Tables extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-119735","published":"2026-11-02T19:00:05.857Z","updated":"2026-11-02T19:00:05.857Z","title":"Munshi XSS via Purchase Inquiry Thread Rendering","severity":"MEDIUM","score":5.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-119734","published":"2026-11-02T18:58:31.208Z","updated":"2026-11-02T18:58:31.208Z","title":"Munshi IDOR via Purchase Inquiry Thread Endpoint","severity":"HIGH","score":7.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-119733","published":"2026-11-02T18:57:18.344Z","updated":"2026-11-02T19:50:35.888Z","title":"Munshi Missing Authorization in Company Deletion API","severity":"HIGH","score":7.2,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-119732","published":"2026-11-02T18:56:12.509Z","updated":"2026-11-02T18:56:12.509Z","title":"Munshi Broken Object Level Authorization via Invoice Deletion API","severity":"HIGH","score":7.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-119731","published":"2026-11-02T18:54:28.988Z","updated":"2026-11-02T18:54:28.988Z","title":"Munshi Payment Bypass via Unauthenticated Webhook Endpoint","severity":"HIGH","score":8.7,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":null},{"id":"CVE-2026-120656","published":"2026-11-02T18:44:34.399Z","updated":"2026-11-02T18:44:34.399Z","title":"CVE-2026-120656","severity":"UNKNOWN","score":null,"vendor":"OpenKruise","product":"kruise-manager","kev":false,"epss":null},{"id":"CVE-2026-105605","published":"2026-11-02T18:28:53.114Z","updated":"2026-11-02T18:58:17.092Z","title":"Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3","severity":"MEDIUM","score":5.3,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-105604","published":"2026-11-02T18:27:14.810Z","updated":"2026-11-02T19:46:57.619Z","title":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3","severity":"CRITICAL","score":9.3,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-105603","published":"2026-11-02T18:25:29.193Z","updated":"2026-11-02T19:45:12.491Z","title":"Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3","severity":"CRITICAL","score":9.4,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-81938","published":"2026-11-02T18:23:43.604Z","updated":"2026-11-02T19:06:58.641Z","title":"Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Enterprise Metrics (GEM)","kev":false,"epss":null},{"id":"CVE-2026-120416","published":"2026-11-02T18:00:24.234Z","updated":"2026-11-02T18:00:24.234Z","title":"AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"AndyFactory","product":"newspaper4k","kev":false,"epss":null},{"id":"CVE-2026-111048","published":"2026-11-02T17:46:11.754Z","updated":"2026-11-02T17:46:11.754Z","title":"FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes","severity":"HIGH","score":8.4,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":null},{"id":"CVE-2026-119085","published":"2026-11-02T17:37:08.585Z","updated":"2026-11-02T19:08:55.777Z","title":"Template injection in the publishing component of awslabs Virtual Engineering Workbench","severity":"CRITICAL","score":9.4,"vendor":"AWS","product":"virtual-engineering-workbench","kev":false,"epss":null},{"id":"CVE-2026-120630","published":"2026-11-02T17:37:05.324Z","updated":"2026-11-02T17:37:52.704Z","title":"CVE-2026-120630","severity":"UNKNOWN","score":null,"vendor":"CrewAI","product":"CrewAI","kev":false,"epss":null},{"id":"CVE-2024-12139","published":"2026-11-02T17:34:20.302Z","updated":"2026-11-02T19:10:02.263Z","title":"Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks","severity":"MEDIUM","score":4.3,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-120627","published":"2026-11-02T17:32:34.968Z","updated":"2026-11-02T17:33:53.840Z","title":"CVE-2026-120627","severity":"UNKNOWN","score":null,"vendor":"Private Internet Access","product":"Firefox extension","kev":false,"epss":null},{"id":"CVE-2026-120596","published":"2026-11-02T17:04:18.611Z","updated":"2026-11-02T17:17:35.066Z","title":"CVE-2026-120596","severity":"HIGH","score":7.5,"vendor":"Ethernut / egnite GmbH","product":"Nut/Net TCP/IP Stack","kev":false,"epss":null},{"id":"CVE-2026-65059","published":"2026-11-02T17:01:28.306Z","updated":"2026-11-02T20:05:19.980Z","title":"Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses","severity":"UNKNOWN","score":null,"vendor":null,"product":"Furl","kev":false,"epss":null},{"id":"CVE-2026-105769","published":"2026-11-02T16:49:24.557Z","updated":"2026-11-02T18:27:36.537Z","title":"kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts","severity":"CRITICAL","score":9.3,"vendor":"chainguard","product":"kaniko","kev":false,"epss":null},{"id":"CVE-2026-88811","published":"2026-11-02T16:48:44.799Z","updated":"2026-11-02T17:13:34.998Z","title":"Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy","severity":"CRITICAL","score":9.1,"vendor":"SUSE","product":"Rancher","kev":false,"epss":null},{"id":"CVE-2026-119301","published":"2026-11-02T16:34:53.183Z","updated":"2026-11-02T17:16:16.937Z","title":"Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas","severity":"MEDIUM","score":5,"vendor":"AWS","product":"aws-sdk-pandas","kev":false,"epss":null},{"id":"CVE-2026-88810","published":"2026-11-02T16:29:46.733Z","updated":"2026-11-02T18:54:31.754Z","title":"Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules","severity":"HIGH","score":7.2,"vendor":"SUSE","product":"Rancher","kev":false,"epss":null},{"id":"CVE-2026-99242","published":"2026-11-02T16:06:44.590Z","updated":"2026-11-02T16:06:44.590Z","title":"ntfs: fix race between fallocate and mmap reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99241","published":"2026-11-02T16:06:44.163Z","updated":"2026-11-02T16:06:44.163Z","title":"ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99240","published":"2026-11-02T16:06:43.703Z","updated":"2026-11-02T16:06:43.703Z","title":"mm/damon/core: error damos_commit_quota_goal() for zero target_value","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99239","published":"2026-11-02T16:06:43.262Z","updated":"2026-11-02T16:06:43.262Z","title":"Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99238","published":"2026-11-02T16:06:42.810Z","updated":"2026-11-02T16:06:42.810Z","title":"tracing: Hold trace_types_lock when updating modules in persistent instances","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99237","published":"2026-11-02T16:06:42.386Z","updated":"2026-11-02T16:06:42.386Z","title":"tracing: Hold trace_types_lock when resetting last boot data from readers","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99236","published":"2026-11-02T16:06:41.950Z","updated":"2026-11-02T16:06:41.950Z","title":"tracing: Reject incomplete event filter expressions","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99235","published":"2026-11-02T16:06:41.510Z","updated":"2026-11-02T16:06:41.510Z","title":"tracing: Save the event file instead of the compatible histogram","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99234","published":"2026-11-02T16:06:41.083Z","updated":"2026-11-02T16:06:41.083Z","title":"tracing: Unregister field variable histograms when the command fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99233","published":"2026-11-02T16:06:40.643Z","updated":"2026-11-02T16:06:40.643Z","title":"tracing/histograms: Verify event_call identity when updating synth_event refcount","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99232","published":"2026-11-02T16:06:39.212Z","updated":"2026-11-02T16:06:39.212Z","title":"tracing/syscalls: Use copy_from_user for the faultable syscall buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99231","published":"2026-11-02T16:06:38.553Z","updated":"2026-11-02T16:06:38.553Z","title":"io_uring/waitid: own the request before clearing ->head","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99230","published":"2026-11-02T16:06:37.984Z","updated":"2026-11-02T16:06:37.984Z","title":"io_uring/cmd: don't leave list poison in ->hash_node","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99229","published":"2026-11-02T16:06:37.423Z","updated":"2026-11-02T16:06:37.423Z","title":"io_uring/wait: don't spin on a stuck overflow list","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99228","published":"2026-11-02T16:06:36.680Z","updated":"2026-11-02T16:06:36.680Z","title":"io_uring/io-wq: don't lose the signal that ends work","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99227","published":"2026-11-02T16:06:36.101Z","updated":"2026-11-02T16:06:36.101Z","title":"io_uring/waitid: prevent cancel reference wrap","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99226","published":"2026-11-02T16:06:35.362Z","updated":"2026-11-02T16:06:35.362Z","title":"keys: Avoid the owner account dereference in named keyring lookup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99225","published":"2026-11-02T16:06:34.759Z","updated":"2026-11-02T16:06:34.759Z","title":"keys: Check the authorization payload in process keyring searches","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99224","published":"2026-11-02T16:06:34.014Z","updated":"2026-11-02T16:06:34.014Z","title":"keys: Protect the type name while describing a key","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99223","published":"2026-11-02T16:06:33.408Z","updated":"2026-11-02T16:06:33.408Z","title":"keys: make keyring indexes independent of kernel addresses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99222","published":"2026-11-02T16:06:32.844Z","updated":"2026-11-02T16:06:32.844Z","title":"keys: Protect the read method check against type removal","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99221","published":"2026-11-02T16:06:32.409Z","updated":"2026-11-02T16:06:32.409Z","title":"keys/trusted_keys: return immediately after TPM unseal failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99220","published":"2026-11-02T16:06:31.966Z","updated":"2026-11-02T16:06:31.966Z","title":"asymmetric_keys: reject trust keys without IDs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99219","published":"2026-11-02T16:06:31.529Z","updated":"2026-11-02T16:06:31.529Z","title":"ftrace: Initialize modname and offset in print_rec()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99218","published":"2026-11-02T16:06:31.088Z","updated":"2026-11-02T16:06:31.088Z","title":"coredump: hold RCU while releasing parked threads","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-99217","published":"2026-11-02T16:06:30.653Z","updated":"2026-11-02T16:06:30.653Z","title":"fork: release the files of a failed fork after sched_cancel_fork()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":null},{"id":"CVE-2026-88809","published":"2026-11-02T16:03:20.465Z","updated":"2026-11-02T18:55:21.073Z","title":"Rancher meta proxy allowlist bypass leading to server-side request forgery","severity":"HIGH","score":7.6,"vendor":"SUSE","product":"Rancher","kev":false,"epss":null},{"id":"CVE-2026-109142","published":"2026-11-02T15:42:13.364Z","updated":"2026-11-02T16:10:56.242Z","title":"Krill treats a \"local parent\" as already-authenticated, letting a CA operator act as any child of any CA on the same server","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":null},{"id":"CVE-2026-109141","published":"2026-11-02T15:42:05.616Z","updated":"2026-11-02T16:11:53.977Z","title":"Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":null},{"id":"CVE-2026-109140","published":"2026-11-02T15:41:58.436Z","updated":"2026-11-02T16:12:58.713Z","title":"Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an \"admin\" token","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":null},{"id":"CVE-2026-16306","published":"2026-11-02T15:38:11.487Z","updated":"2026-11-02T15:38:11.487Z","title":"CVE-2026-16306","severity":"UNKNOWN","score":null,"vendor":"INFINITT Healthcare","product":"System Manager","kev":false,"epss":null},{"id":"CVE-2026-120501","published":"2026-11-02T15:31:37.074Z","updated":"2026-11-02T15:31:37.074Z","title":"An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src","severity":"MEDIUM","score":6.9,"vendor":"redimp","product":"otterwiki","kev":false,"epss":null},{"id":"CVE-2026-120500","published":"2026-11-02T15:31:36.427Z","updated":"2026-11-02T16:05:16.864Z","title":"An Otter Wiki before 2.26.2 Stored XSS via Math Code Block","severity":"MEDIUM","score":5.3,"vendor":"redimp","product":"otterwiki","kev":false,"epss":null},{"id":"CVE-2026-94290","published":"2026-11-02T15:29:41.052Z","updated":"2026-11-02T16:13:40.826Z","title":"Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller","severity":"CRITICAL","score":9.1,"vendor":"SUSE","product":"Rancher","kev":false,"epss":null},{"id":"CVE-2026-2102","published":"2026-11-02T15:26:54.677Z","updated":"2026-11-02T16:14:41.537Z","title":"XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter","severity":"MEDIUM","score":6.1,"vendor":"Wren Security","product":"wrensec-commons","kev":false,"epss":null},{"id":"CVE-2026-104080","published":"2026-11-02T15:22:17.516Z","updated":"2026-11-02T15:36:24.077Z","title":"Control Web Panel (CWP) < 1.30 OS Command Injection via valid_token","severity":"HIGH","score":8.6,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77881","published":"2026-11-02T15:21:39.746Z","updated":"2026-11-02T17:29:43.974Z","title":"Control Web Panel (CWP) < 1.30 Blind SQL Injection via user Parameter","severity":"MEDIUM","score":6.9,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77880","published":"2026-11-02T15:21:08.652Z","updated":"2026-11-02T15:35:36.852Z","title":"Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/","severity":"HIGH","score":8.6,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77879","published":"2026-11-02T15:20:40.321Z","updated":"2026-11-02T15:37:40.949Z","title":"Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API","severity":"HIGH","score":8.5,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77878","published":"2026-11-02T15:19:59.230Z","updated":"2026-11-02T15:50:10.367Z","title":"Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase API","severity":"HIGH","score":8.6,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77877","published":"2026-11-02T15:19:26.464Z","updated":"2026-11-02T17:29:52.113Z","title":"Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root Access","severity":"HIGH","score":8.6,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-77876","published":"2026-11-02T15:18:18.530Z","updated":"2026-11-02T15:39:37.659Z","title":"Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory","severity":"CRITICAL","score":9.3,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-115654","published":"2026-11-02T15:15:38.606Z","updated":"2026-11-02T16:15:53.201Z","title":"User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":null},{"id":"CVE-2026-115653","published":"2026-11-02T15:10:18.233Z","updated":"2026-11-02T16:17:31.540Z","title":"Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":null},{"id":"CVE-2026-114408","published":"2026-11-02T15:04:39.505Z","updated":"2026-11-02T16:18:51.305Z","title":"NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":null},{"id":"CVE-2026-118052","published":"2026-11-02T14:57:27.483Z","updated":"2026-11-02T16:19:56.290Z","title":"Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":null},{"id":"CVE-2026-73697","published":"2026-11-02T14:53:27.789Z","updated":"2026-11-02T15:49:23.228Z","title":"Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor","severity":"HIGH","score":8.7,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-73696","published":"2026-11-02T14:52:29.886Z","updated":"2026-11-02T17:30:37.671Z","title":"Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex","severity":"CRITICAL","score":9.3,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-73695","published":"2026-11-02T14:51:47.891Z","updated":"2026-11-02T15:14:58.156Z","title":"Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php","severity":"HIGH","score":8.7,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":null},{"id":"CVE-2026-120492","published":"2026-11-02T14:29:20.711Z","updated":"2026-11-02T14:29:20.711Z","title":"Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls","severity":"MEDIUM","score":6.3,"vendor":"Chainlit","product":"Chainlit","kev":false,"epss":null},{"id":"CVE-2026-120491","published":"2026-11-02T14:29:20.004Z","updated":"2026-11-02T15:48:56.716Z","title":"Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page","severity":"MEDIUM","score":5.1,"vendor":"Wing FTP Software","product":"Wing FTP Server","kev":false,"epss":null},{"id":"CVE-2026-120489","published":"2026-11-02T14:29:19.300Z","updated":"2026-11-02T17:30:46.661Z","title":"Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft","severity":"MEDIUM","score":5.3,"vendor":"Outline","product":"Outline","kev":false,"epss":null},{"id":"CVE-2026-120488","published":"2026-11-02T14:29:18.584Z","updated":"2026-11-02T14:29:18.584Z","title":"LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content","severity":"MEDIUM","score":5.1,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":null},{"id":"CVE-2026-120487","published":"2026-11-02T14:29:17.874Z","updated":"2026-11-02T14:29:17.874Z","title":"LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades","severity":"HIGH","score":8.6,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":null},{"id":"CVE-2026-120461","published":"2026-11-02T14:29:17.145Z","updated":"2026-11-02T15:47:46.214Z","title":"Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch","severity":"HIGH","score":8.7,"vendor":"dromara","product":"Jpom","kev":false,"epss":null},{"id":"CVE-2026-120460","published":"2026-11-02T14:29:16.470Z","updated":"2026-11-02T17:31:18.564Z","title":"Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers","severity":"HIGH","score":8.7,"vendor":"dromara","product":"Jpom","kev":false,"epss":null},{"id":"CVE-2026-120459","published":"2026-11-02T14:29:15.767Z","updated":"2026-11-02T14:29:15.767Z","title":"python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key","severity":"CRITICAL","score":9.1,"vendor":"mpdavis","product":"python-jose","kev":false,"epss":null},{"id":"CVE-2026-120458","published":"2026-11-02T14:29:15.073Z","updated":"2026-11-02T14:29:15.073Z","title":"Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser","severity":"MEDIUM","score":6.8,"vendor":"Ultra Video Group","product":"Kvazaar","kev":false,"epss":null},{"id":"CVE-2026-120457","published":"2026-11-02T14:29:13.799Z","updated":"2026-11-02T15:46:06.742Z","title":"libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder","severity":"MEDIUM","score":5.8,"vendor":"Deutsches Klimarechenzentrum","product":"libaec","kev":false,"epss":null},{"id":"CVE-2026-120456","published":"2026-11-02T14:29:13.071Z","updated":"2026-11-02T17:31:43.292Z","title":"L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes","severity":"MEDIUM","score":6.9,"vendor":"L-SMASH","product":"L-SMASH","kev":false,"epss":null},{"id":"CVE-2026-120455","published":"2026-11-02T14:29:12.335Z","updated":"2026-11-02T14:29:12.335Z","title":"rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()","severity":"MEDIUM","score":6.9,"vendor":"biojppm","product":"rapidyaml","kev":false,"epss":null},{"id":"CVE-2026-120454","published":"2026-11-02T14:29:11.639Z","updated":"2026-11-02T14:29:11.639Z","title":"The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression","severity":"MEDIUM","score":6.8,"vendor":"The Sleuth Kit","product":"The Sleuth Kit","kev":false,"epss":null},{"id":"CVE-2026-120453","published":"2026-11-02T14:29:10.953Z","updated":"2026-11-02T15:44:48.397Z","title":"The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header","severity":"MEDIUM","score":4.8,"vendor":"The Sleuth Kit","product":"The Sleuth Kit","kev":false,"epss":null},{"id":"CVE-2026-120452","published":"2026-11-02T14:29:10.220Z","updated":"2026-11-02T17:32:13.589Z","title":"libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion","severity":"MEDIUM","score":5.2,"vendor":"gPhoto","product":"libgphoto2","kev":false,"epss":null},{"id":"CVE-2026-120451","published":"2026-11-02T14:29:09.529Z","updated":"2026-11-02T14:29:09.529Z","title":"libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver","severity":"HIGH","score":7,"vendor":"gPhoto","product":"libgphoto2","kev":false,"epss":null},{"id":"CVE-2026-120450","published":"2026-11-02T14:29:08.850Z","updated":"2026-11-02T14:29:08.850Z","title":"LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool","severity":"MEDIUM","score":5.3,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":null},{"id":"CVE-2026-120449","published":"2026-11-02T14:29:08.144Z","updated":"2026-11-02T15:43:10.300Z","title":"Outline before 1.12.0 Improper Access Control via Public Document Shares","severity":"MEDIUM","score":6.9,"vendor":"Outline","product":"Outline","kev":false,"epss":null},{"id":"CVE-2026-120448","published":"2026-11-02T14:29:07.455Z","updated":"2026-11-02T17:32:38.885Z","title":"DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint","severity":"HIGH","score":8.6,"vendor":"doramart","product":"DoraCMS","kev":false,"epss":null},{"id":"CVE-2026-120447","published":"2026-11-02T14:29:06.746Z","updated":"2026-11-02T14:29:06.746Z","title":"HotGo through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code","severity":"CRITICAL","score":9.2,"vendor":"bufanyun","product":"HotGo","kev":false,"epss":null},{"id":"CVE-2026-120446","published":"2026-11-02T14:29:06.068Z","updated":"2026-11-02T14:29:06.068Z","title":"madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API","severity":"HIGH","score":8.8,"vendor":"madong-code","product":"madong-admin-saas","kev":false,"epss":null},{"id":"CVE-2026-120445","published":"2026-11-02T14:29:05.412Z","updated":"2026-11-02T15:54:37.704Z","title":"madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware","severity":"HIGH","score":8.7,"vendor":"madong-code","product":"madong-admin-saas","kev":false,"epss":null},{"id":"CVE-2026-120444","published":"2026-11-02T14:29:04.766Z","updated":"2026-11-02T17:33:03.578Z","title":"GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop","severity":"HIGH","score":7.2,"vendor":"sea-team","product":"GoFound","kev":false,"epss":null},{"id":"CVE-2026-120443","published":"2026-11-02T14:29:04.097Z","updated":"2026-11-02T14:29:04.097Z","title":"GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Results","severity":"MEDIUM","score":5.1,"vendor":"sea-team","product":"GoFound","kev":false,"epss":null},{"id":"CVE-2026-120442","published":"2026-11-02T14:29:03.407Z","updated":"2026-11-02T14:29:03.407Z","title":"ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass","severity":"CRITICAL","score":9.3,"vendor":"xianhc","product":"ape-volo-admin","kev":false,"epss":null},{"id":"CVE-2026-120441","published":"2026-11-02T14:29:02.755Z","updated":"2026-11-02T15:59:31.837Z","title":"OwnTone Server through 29.3 SQL Injection via MPD sticker find Command","severity":"MEDIUM","score":6.9,"vendor":"OwnTone","product":"OwnTone Server","kev":false,"epss":null},{"id":"CVE-2026-120440","published":"2026-11-02T14:29:02.038Z","updated":"2026-11-02T17:33:29.004Z","title":"QuickJS-NG before 0.16.0 Memory Leak via Atomics.store","severity":"MEDIUM","score":6.9,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":null},{"id":"CVE-2026-120439","published":"2026-11-02T14:29:01.345Z","updated":"2026-11-02T14:29:01.345Z","title":"QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort","severity":"HIGH","score":8.3,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":null},{"id":"CVE-2026-120438","published":"2026-11-02T14:29:00.633Z","updated":"2026-11-02T14:29:00.633Z","title":"QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration","severity":"HIGH","score":8.5,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":null},{"id":"CVE-2026-120437","published":"2026-11-02T14:28:59.914Z","updated":"2026-11-02T16:00:26.610Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppm","severity":"MEDIUM","score":6.9,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120436","published":"2026-11-02T14:28:59.204Z","updated":"2026-11-02T17:34:08.399Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120435","published":"2026-11-02T14:28:58.499Z","updated":"2026-11-02T14:28:58.499Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppm","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120434","published":"2026-11-02T14:28:57.796Z","updated":"2026-11-02T14:28:57.796Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPoly","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120433","published":"2026-11-02T14:28:57.113Z","updated":"2026-11-02T16:05:59.533Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120432","published":"2026-11-02T14:28:56.422Z","updated":"2026-11-02T17:34:33.382Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120431","published":"2026-11-02T14:28:55.731Z","updated":"2026-11-02T14:28:55.731Z","title":"Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer Overflow","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":null},{"id":"CVE-2026-120430","published":"2026-11-02T14:28:55.035Z","updated":"2026-11-02T14:28:55.035Z","title":"Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController","severity":"MEDIUM","score":5.3,"vendor":"owen2345","product":"Camaleon CMS","kev":false,"epss":null},{"id":"CVE-2026-120429","published":"2026-11-02T14:28:54.340Z","updated":"2026-11-02T15:51:20.616Z","title":"Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController","severity":"HIGH","score":7.1,"vendor":"owen2345","product":"Camaleon CMS","kev":false,"epss":null},{"id":"CVE-2026-120428","published":"2026-11-02T14:28:53.641Z","updated":"2026-11-02T17:34:57.661Z","title":"PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass","severity":"MEDIUM","score":5.1,"vendor":"Chaitin","product":"PandaWiki","kev":false,"epss":null},{"id":"CVE-2026-120427","published":"2026-11-02T14:28:52.958Z","updated":"2026-11-02T14:28:52.958Z","title":"MrDoc through 1.1.1 Missing Authorization via get_doctemp Template Read","severity":"MEDIUM","score":5.3,"vendor":"zmister2016","product":"MrDoc","kev":false,"epss":null},{"id":"CVE-2026-120426","published":"2026-11-02T14:28:52.258Z","updated":"2026-11-02T14:28:52.258Z","title":"OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route","severity":"HIGH","score":8.7,"vendor":"OpenCSG","product":"CSGHub","kev":false,"epss":null},{"id":"CVE-2026-120425","published":"2026-11-02T14:28:51.583Z","updated":"2026-11-02T15:52:24.365Z","title":"Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint","severity":"HIGH","score":7.1,"vendor":"munafio","product":"Chatify","kev":false,"epss":null},{"id":"CVE-2026-120318","published":"2026-11-02T14:28:50.874Z","updated":"2026-11-02T17:35:32.561Z","title":"Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX","severity":"HIGH","score":8.6,"vendor":"Codeixer","product":"Product Gallery Slider & Additional Variation Images for WooCommerce","kev":false,"epss":null},{"id":"CVE-2025-71450","published":"2026-11-02T14:28:50.157Z","updated":"2026-11-02T14:28:50.157Z","title":"inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop","severity":"MEDIUM","score":4.8,"vendor":"benhoyt","product":"inih","kev":false,"epss":null},{"id":"CVE-2026-74993","published":"2026-11-02T13:37:17.005Z","updated":"2026-11-02T16:20:26.474Z","title":"SQL Injection in Starnet Computer Systems' Inventory Tracking Application","severity":"HIGH","score":7.5,"vendor":"Starnet Computer and Network Systems","product":"Inventory Tracking Application","kev":false,"epss":null},{"id":"CVE-2026-111959","published":"2026-11-02T13:34:17.835Z","updated":"2026-11-02T20:05:09.522Z","title":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Arrow Rust","kev":false,"epss":null},{"id":"CVE-2026-102802","published":"2026-11-02T13:29:10.784Z","updated":"2026-11-02T19:02:34.402Z","title":"Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1","severity":"HIGH","score":8.9,"vendor":"regularlabs.com","product":"Sourcerer Free extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-103419","published":"2026-11-02T13:24:53.833Z","updated":"2026-11-02T18:58:08.296Z","title":"Joomla Extension - joomshaper.com -  Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.","severity":"HIGH","score":8.6,"vendor":"joomshaper.com","product":"Helix Ultimate extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-103420","published":"2026-11-02T13:24:37.765Z","updated":"2026-11-02T18:57:51.480Z","title":"Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"HIGH","score":7.2,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-105600","published":"2026-11-02T13:23:25.475Z","updated":"2026-11-02T18:56:36.731Z","title":"Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"HIGH","score":8.6,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-105601","published":"2026-11-02T13:20:51.381Z","updated":"2026-11-02T18:54:01.075Z","title":"Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"MEDIUM","score":5.3,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-105602","published":"2026-11-02T13:19:43.732Z","updated":"2026-11-02T18:52:54.188Z","title":"Joomla Extension - joomshaper.com -  Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.","severity":"HIGH","score":8.6,"vendor":"joomshaper.com","product":"Helix Ultimate extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-102801","published":"2026-11-02T13:18:50.171Z","updated":"2026-11-02T18:51:59.416Z","title":"Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1","severity":"MEDIUM","score":5.1,"vendor":"regularlabs.com","product":"Users Anywhere (Free, Pro) extension for Joomla","kev":false,"epss":null},{"id":"CVE-2026-114364","published":"2026-11-02T13:12:27.512Z","updated":"2026-11-02T13:12:27.512Z","title":"Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":null},{"id":"CVE-2026-113687","published":"2026-11-02T13:10:11.700Z","updated":"2026-11-02T13:10:11.700Z","title":"Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":null},{"id":"CVE-2026-113511","published":"2026-11-02T13:08:12.025Z","updated":"2026-11-02T13:08:12.025Z","title":"Apache Syncope: Delegated administration boundaries can be bypassed for Realm update","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":null},{"id":"CVE-2026-120463","published":"2026-11-02T13:08:06.278Z","updated":"2026-11-02T13:08:06.278Z","title":"Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linking","severity":"MEDIUM","score":6,"vendor":"sassanix","product":"Warracker","kev":false,"epss":null},{"id":"CVE-2026-110535","published":"2026-11-02T13:06:00.159Z","updated":"2026-11-02T13:06:00.159Z","title":"Apache Syncope: AuthProfile value escalation via self-service update","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":null},{"id":"CVE-2026-109083","published":"2026-11-02T13:04:15.094Z","updated":"2026-11-02T13:04:15.094Z","title":"Apache Syncope: Remote Code Execution via Flowable JUEL expression","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":null},{"id":"CVE-2026-116606","published":"2026-11-02T12:59:11.278Z","updated":"2026-11-02T19:43:04.702Z","title":"Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway","severity":"CRITICAL","score":9.3,"vendor":"Barracuda Networks","product":"Barracuda Email Security Gateway (ESG)","kev":false,"epss":null},{"id":"CVE-2026-111560","published":"2026-11-02T12:59:03.673Z","updated":"2026-11-02T19:43:04.842Z","title":"OS Command Injection in Barracuda Appliances","severity":"HIGH","score":8.6,"vendor":"Barracuda Networks","product":"Barracuda Email Security Gateway (ESG)","kev":false,"epss":null},{"id":"CVE-2026-91903","published":"2026-11-02T12:46:10.470Z","updated":"2026-11-02T12:46:10.470Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":6.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-92886","published":"2026-11-02T12:45:23.938Z","updated":"2026-11-02T16:53:46.465Z","title":"Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register","severity":"HIGH","score":7.8,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"eta-register","kev":false,"epss":null},{"id":"CVE-2026-91904","published":"2026-11-02T12:42:31.793Z","updated":"2026-11-02T12:42:31.793Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91905","published":"2026-11-02T12:38:01.557Z","updated":"2026-11-02T12:38:01.557Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91906","published":"2026-11-02T12:34:11.814Z","updated":"2026-11-02T14:06:37.163Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-94349","published":"2026-11-02T12:30:49.216Z","updated":"2026-11-02T17:36:01.517Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91907","published":"2026-11-02T12:27:32.480Z","updated":"2026-11-02T12:27:32.480Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2024-12141","published":"2026-11-02T12:24:55.834Z","updated":"2026-11-02T16:54:16.889Z","title":"Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks","severity":"MEDIUM","score":4.3,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":null},{"id":"CVE-2026-91908","published":"2026-11-02T12:23:17.524Z","updated":"2026-11-02T12:23:17.524Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker…","severity":"MEDIUM","score":5.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91909","published":"2026-11-02T12:19:52.880Z","updated":"2026-11-02T17:36:25.893Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…","severity":"MEDIUM","score":4.6,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91910","published":"2026-11-02T12:16:37.710Z","updated":"2026-11-02T12:16:37.710Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":5.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-91911","published":"2026-11-02T12:12:24.224Z","updated":"2026-11-02T14:07:08.556Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":6.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":null},{"id":"CVE-2026-100140","published":"2026-11-02T11:44:37.391Z","updated":"2026-11-02T16:55:00.571Z","title":"Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt","severity":"LOW","score":1.9,"vendor":"qt","product":"qt","kev":false,"epss":null},{"id":"CVE-2024-9517","published":"2026-11-02T11:30:15.562Z","updated":"2026-11-02T16:55:34.062Z","title":"Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts","severity":"MEDIUM","score":4.9,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-120216","published":"2026-11-02T11:08:00.038Z","updated":"2026-11-02T16:56:16.784Z","title":"fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses","severity":"MEDIUM","score":5.9,"vendor":"fastify","product":"fastify","kev":false,"epss":null},{"id":"CVE-2024-2372","published":"2026-11-02T11:00:23.105Z","updated":"2026-11-02T16:57:01.300Z","title":"Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks","severity":"MEDIUM","score":5.4,"vendor":"WSO2","product":"WSO2 Open Banking AM","kev":false,"epss":null},{"id":"CVE-2026-117518","published":"2026-11-02T10:39:22.468Z","updated":"2026-11-02T16:58:04.730Z","title":"@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape","severity":"HIGH","score":8.2,"vendor":"@fastify/reply-from","product":"@fastify/reply-from","kev":false,"epss":null},{"id":"CVE-2026-8923","published":"2026-11-02T10:32:55.049Z","updated":"2026-11-02T19:19:00.936Z","title":"Remote Code Execution","severity":"HIGH","score":8.7,"vendor":"Zohocorp","product":"ManageEngine Eventlog Analyzer","kev":false,"epss":null},{"id":"CVE-2026-117531","published":"2026-11-02T10:32:38.867Z","updated":"2026-11-02T16:58:46.632Z","title":"@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers","severity":"MEDIUM","score":5.9,"vendor":"@fastify/multipart","product":"@fastify/multipart","kev":false,"epss":null},{"id":"CVE-2026-117549","published":"2026-11-02T10:26:30.731Z","updated":"2026-11-02T16:59:17.224Z","title":"@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal","severity":"MEDIUM","score":4.2,"vendor":"@fastify/secure-session","product":"@fastify/secure-session","kev":false,"epss":null},{"id":"CVE-2025-12544","published":"2026-11-02T10:23:49.448Z","updated":"2026-11-02T17:01:07.435Z","title":"Stored Cross-Site Scripting in Multiple WSO2 Products","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-120215","published":"2026-11-02T10:20:47.667Z","updated":"2026-11-02T17:04:11.417Z","title":"@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook","severity":"LOW","score":3.7,"vendor":"@fastify/cors","product":"@fastify/cors","kev":false,"epss":null},{"id":"CVE-2026-120213","published":"2026-11-02T10:15:08.777Z","updated":"2026-11-02T17:05:17.281Z","title":"@fastify/http-proxy vulnerable to prefix escape via decoded route parameters","severity":"CRITICAL","score":9.1,"vendor":"@fastify/http-proxy","product":"@fastify/http-proxy","kev":false,"epss":null},{"id":"CVE-2026-2613","published":"2026-11-02T10:11:53.060Z","updated":"2026-11-02T17:08:53.729Z","title":"SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption","severity":"HIGH","score":8.7,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-120214","published":"2026-11-02T10:07:08.695Z","updated":"2026-11-02T17:09:29.705Z","title":"@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments","severity":"MEDIUM","score":5.9,"vendor":"@fastify/http-proxy","product":"@fastify/http-proxy","kev":false,"epss":null},{"id":"CVE-2026-18800","published":"2026-11-02T09:59:26.522Z","updated":"2026-11-02T17:10:08.615Z","title":"Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data","severity":"MEDIUM","score":4.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-118871","published":"2026-11-02T09:35:55.196Z","updated":"2026-11-02T19:19:47.800Z","title":"SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product","severity":"MEDIUM","score":6.5,"vendor":"ZTE","product":"ElasticNet RNIA R18 NGI","kev":false,"epss":null},{"id":"CVE-2025-13647","published":"2026-11-02T09:20:52.186Z","updated":"2026-11-02T19:20:26.022Z","title":"Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths","severity":"MEDIUM","score":5.8,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":null},{"id":"CVE-2024-7075","published":"2026-11-02T09:11:32.705Z","updated":"2026-11-02T19:39:08.410Z","title":"Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products","severity":"MEDIUM","score":4.6,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":null},{"id":"CVE-2026-107457","published":"2026-11-02T08:38:12.500Z","updated":"2026-11-02T19:21:56.150Z","title":"Memory corruption vulnerability in QMqttClient impacts Qt MQTT","severity":"LOW","score":2.3,"vendor":"qt","product":"Qt","kev":false,"epss":null},{"id":"CVE-2026-18199","published":"2026-11-02T07:43:59.702Z","updated":"2026-11-02T19:43:04.977Z","title":"Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Zohocorp","product":"ManageEngine Password Manager Pro","kev":false,"epss":null},{"id":"CVE-2026-101184","published":"2026-11-02T07:15:36.380Z","updated":"2026-11-02T19:24:34.890Z","title":"Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101178","published":"2026-11-02T07:13:44.178Z","updated":"2026-11-02T19:32:21.371Z","title":"Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":6.6,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-103310","published":"2026-11-02T07:10:35.208Z","updated":"2026-11-02T07:10:35.208Z","title":"PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PayHere Payment Gateway","kev":false,"epss":null},{"id":"CVE-2026-101177","published":"2026-11-02T07:02:14.455Z","updated":"2026-11-02T19:31:47.596Z","title":"Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"LOW","score":3.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101174","published":"2026-11-02T07:00:03.083Z","updated":"2026-11-02T19:31:15.956Z","title":"DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101173","published":"2026-11-02T06:56:24.366Z","updated":"2026-11-02T19:30:47.754Z","title":"DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":6.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101176","published":"2026-11-02T06:51:51.232Z","updated":"2026-11-02T19:30:21.088Z","title":"Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service…","severity":"HIGH","score":7.1,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101186","published":"2026-11-02T06:48:33.382Z","updated":"2026-11-02T19:29:45.482Z","title":"DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"HIGH","score":7.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101185","published":"2026-11-02T06:47:09.371Z","updated":"2026-11-02T19:29:16.368Z","title":"OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101183","published":"2026-11-02T06:46:03.784Z","updated":"2026-11-02T19:28:45.857Z","title":"UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101182","published":"2026-11-02T06:44:20.820Z","updated":"2026-11-02T19:39:35.920Z","title":"Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101181","published":"2026-11-02T06:40:15.892Z","updated":"2026-11-02T19:28:18.188Z","title":"Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":5.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101180","published":"2026-11-02T06:37:11.827Z","updated":"2026-11-02T19:27:51.729Z","title":"DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.3,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101179","published":"2026-11-02T06:34:13.134Z","updated":"2026-11-02T19:27:24.536Z","title":"Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101175","published":"2026-11-02T06:27:22.556Z","updated":"2026-11-02T19:26:48.922Z","title":"Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.3,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101171","published":"2026-11-02T06:21:32.906Z","updated":"2026-11-02T19:26:19.691Z","title":"Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.","severity":"LOW","score":3.6,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101170","published":"2026-11-02T06:18:40.155Z","updated":"2026-11-02T19:25:40.674Z","title":"DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-101172","published":"2026-11-02T06:17:13.037Z","updated":"2026-11-02T19:25:18.608Z","title":"Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.","severity":"MEDIUM","score":6.2,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":null},{"id":"CVE-2026-120349","published":"2026-11-02T06:00:13.945Z","updated":"2026-11-02T14:07:50.233Z","title":"dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":null},{"id":"CVE-2024-5617","published":"2026-11-02T05:57:28.711Z","updated":"2026-11-02T19:40:18.967Z","title":"Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2025-11969","published":"2026-11-02T05:53:51.375Z","updated":"2026-11-02T19:41:15.316Z","title":"Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions","severity":"CRITICAL","score":9.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":null},{"id":"CVE-2026-120348","published":"2026-11-02T05:45:11.809Z","updated":"2026-11-02T17:36:53.597Z","title":"dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":null},{"id":"CVE-2026-120347","published":"2026-11-02T05:30:30.380Z","updated":"2026-11-02T05:30:30.380Z","title":"dayrui XunRuiCMS Member View.php View sql injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":null},{"id":"CVE-2026-120345","published":"2026-11-02T05:15:16.333Z","updated":"2026-11-02T05:15:16.333Z","title":"WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN551X3-A","kev":false,"epss":null},{"id":"CVE-2026-120344","published":"2026-11-02T05:00:18.872Z","updated":"2026-11-02T14:08:34.826Z","title":"WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN551X3-A","kev":false,"epss":null},{"id":"CVE-2026-120343","published":"2026-11-02T04:45:16.931Z","updated":"2026-11-02T17:37:24.447Z","title":"mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":null},{"id":"CVE-2026-120342","published":"2026-11-02T04:30:15.935Z","updated":"2026-11-02T04:30:15.935Z","title":"mathurvishal CloudClassroom-PHP-Project viewquery.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":null},{"id":"CVE-2026-120341","published":"2026-11-02T04:15:14.428Z","updated":"2026-11-02T04:15:14.428Z","title":"mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect","severity":"MEDIUM","score":6.9,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":null},{"id":"CVE-2026-120340","published":"2026-11-02T04:00:20.951Z","updated":"2026-11-02T14:19:13.457Z","title":"mathurvishal CloudClassroom-PHP-Project Global Session session expiration","severity":"MEDIUM","score":6.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":null},{"id":"CVE-2026-120339","published":"2026-11-02T03:45:08.325Z","updated":"2026-11-02T17:37:48.387Z","title":"mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":null},{"id":"CVE-2026-120337","published":"2026-11-02T03:30:15.575Z","updated":"2026-11-02T03:30:15.575Z","title":"VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free","severity":"MEDIUM","score":6.9,"vendor":"VStarcam","product":"O-KAM SuperIPCam","kev":false,"epss":null},{"id":"CVE-2026-120336","published":"2026-11-02T03:15:18.679Z","updated":"2026-11-02T03:15:18.679Z","title":"VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow","severity":"MEDIUM","score":6.9,"vendor":"VStarcam","product":"O-KAM Client","kev":false,"epss":null},{"id":"CVE-2026-120335","published":"2026-11-02T03:00:13.656Z","updated":"2026-11-02T14:18:36.449Z","title":"deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal","severity":"LOW","score":2.4,"vendor":"deepset-ai","product":"farm","kev":false,"epss":null},{"id":"CVE-2026-120334","published":"2026-11-02T02:45:23.719Z","updated":"2026-11-02T17:38:13.316Z","title":"deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal","severity":"MEDIUM","score":5.3,"vendor":"deepset-ai","product":"farm","kev":false,"epss":null},{"id":"CVE-2026-68591","published":"2026-11-02T02:34:24.893Z","updated":"2026-11-02T14:47:28.332Z","title":"In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-68590","published":"2026-11-02T02:34:23.504Z","updated":"2026-11-02T14:47:56.265Z","title":"In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-68589","published":"2026-11-02T02:34:22.143Z","updated":"2026-11-02T14:53:34.476Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-68588","published":"2026-11-02T02:34:20.729Z","updated":"2026-11-02T14:54:14.325Z","title":"In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20600","published":"2026-11-02T02:34:19.287Z","updated":"2026-11-02T14:55:17.977Z","title":"In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20599","published":"2026-11-02T02:34:17.868Z","updated":"2026-11-02T14:56:52.686Z","title":"In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20598","published":"2026-11-02T02:34:16.442Z","updated":"2026-11-02T15:00:46.609Z","title":"In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20597","published":"2026-11-02T02:34:15.063Z","updated":"2026-11-02T15:00:46.747Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20596","published":"2026-11-02T02:34:13.692Z","updated":"2026-11-02T15:00:46.924Z","title":"In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20595","published":"2026-11-02T02:34:12.308Z","updated":"2026-11-02T15:10:49.650Z","title":"In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20594","published":"2026-11-02T02:34:10.799Z","updated":"2026-11-02T15:00:47.062Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20593","published":"2026-11-02T02:34:09.264Z","updated":"2026-11-02T15:00:47.214Z","title":"In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20592","published":"2026-11-02T02:34:07.808Z","updated":"2026-11-02T15:10:50.092Z","title":"In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious…","severity":"MEDIUM","score":4.1,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20591","published":"2026-11-02T02:34:06.353Z","updated":"2026-11-02T16:44:01.093Z","title":"In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20590","published":"2026-11-02T02:34:04.797Z","updated":"2026-11-02T16:44:34.210Z","title":"In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20585","published":"2026-11-02T02:34:03.343Z","updated":"2026-11-02T15:06:37.896Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20584","published":"2026-11-02T02:34:01.708Z","updated":"2026-11-02T15:10:49.784Z","title":"In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20583","published":"2026-11-02T02:34:00.276Z","updated":"2026-11-02T16:45:01.649Z","title":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20582","published":"2026-11-02T02:33:58.733Z","updated":"2026-11-02T15:10:49.923Z","title":"In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20581","published":"2026-11-02T02:33:57.386Z","updated":"2026-11-02T15:10:50.057Z","title":"In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20580","published":"2026-11-02T02:33:56.033Z","updated":"2026-11-02T16:46:09.428Z","title":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20578","published":"2026-11-02T02:33:54.647Z","updated":"2026-11-02T15:00:47.380Z","title":"In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20577","published":"2026-11-02T02:33:52.575Z","updated":"2026-11-02T16:45:37.422Z","title":"In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20576","published":"2026-11-02T02:33:50.202Z","updated":"2026-11-02T15:10:50.199Z","title":"In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20575","published":"2026-11-02T02:33:48.831Z","updated":"2026-11-02T15:10:50.364Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20574","published":"2026-11-02T02:33:45.237Z","updated":"2026-11-02T15:10:50.521Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20573","published":"2026-11-02T02:33:43.886Z","updated":"2026-11-02T15:10:50.672Z","title":"In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20572","published":"2026-11-02T02:33:42.547Z","updated":"2026-11-02T15:10:50.817Z","title":"In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20571","published":"2026-11-02T02:33:41.182Z","updated":"2026-11-02T15:10:50.963Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20570","published":"2026-11-02T02:33:39.820Z","updated":"2026-11-02T15:10:51.119Z","title":"In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20569","published":"2026-11-02T02:33:38.453Z","updated":"2026-11-02T15:10:51.259Z","title":"In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20568","published":"2026-11-02T02:33:37.071Z","updated":"2026-11-02T15:10:51.423Z","title":"In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20567","published":"2026-11-02T02:33:35.650Z","updated":"2026-11-02T15:10:51.577Z","title":"In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20566","published":"2026-11-02T02:33:34.280Z","updated":"2026-11-02T17:11:43.367Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":4.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20565","published":"2026-11-02T02:33:32.905Z","updated":"2026-11-02T16:48:24.189Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20564","published":"2026-11-02T02:33:31.221Z","updated":"2026-11-02T16:47:42.258Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":6.2,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20563","published":"2026-11-02T02:33:29.062Z","updated":"2026-11-02T15:00:47.522Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20562","published":"2026-11-02T02:33:27.757Z","updated":"2026-11-02T15:00:47.692Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20561","published":"2026-11-02T02:33:26.379Z","updated":"2026-11-02T15:00:47.862Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20560","published":"2026-11-02T02:33:23.538Z","updated":"2026-11-02T15:00:48.018Z","title":"In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20559","published":"2026-11-02T02:33:21.198Z","updated":"2026-11-02T16:50:23.587Z","title":"In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges…","severity":"HIGH","score":7.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20558","published":"2026-11-02T02:33:19.620Z","updated":"2026-11-02T16:51:55.013Z","title":"In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20557","published":"2026-11-02T02:33:18.187Z","updated":"2026-11-02T15:10:51.736Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20556","published":"2026-11-02T02:33:16.848Z","updated":"2026-11-02T15:10:51.888Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20555","published":"2026-11-02T02:33:15.546Z","updated":"2026-11-02T15:00:48.188Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20554","published":"2026-11-02T02:33:14.203Z","updated":"2026-11-02T17:09:51.315Z","title":"In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue…","severity":"HIGH","score":7.1,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20553","published":"2026-11-02T02:33:12.875Z","updated":"2026-11-02T17:02:59.660Z","title":"In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…","severity":"MEDIUM","score":6.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20552","published":"2026-11-02T02:33:10.723Z","updated":"2026-11-02T17:04:57.604Z","title":"In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20551","published":"2026-11-02T02:33:09.368Z","updated":"2026-11-02T17:06:23.384Z","title":"In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20550","published":"2026-11-02T02:33:08.072Z","updated":"2026-11-02T17:10:44.297Z","title":"In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":6.2,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20549","published":"2026-11-02T02:33:06.759Z","updated":"2026-11-02T15:10:52.212Z","title":"In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20548","published":"2026-11-02T02:33:05.476Z","updated":"2026-11-02T15:10:52.351Z","title":"In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20547","published":"2026-11-02T02:33:04.198Z","updated":"2026-11-02T15:10:52.484Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20546","published":"2026-11-02T02:33:02.918Z","updated":"2026-11-02T15:10:52.620Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20545","published":"2026-11-02T02:33:01.082Z","updated":"2026-11-02T15:10:52.758Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-20499","published":"2026-11-02T02:32:59.691Z","updated":"2026-11-02T15:10:52.898Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":null},{"id":"CVE-2026-120325","published":"2026-11-02T02:30:24.273Z","updated":"2026-11-02T02:30:24.273Z","title":"Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal","severity":"MEDIUM","score":5.3,"vendor":"Webpro-nl","product":"Knip","kev":false,"epss":null},{"id":"CVE-2026-120324","published":"2026-11-02T02:15:22.746Z","updated":"2026-11-02T02:15:22.746Z","title":"Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal","severity":"MEDIUM","score":6.9,"vendor":"Aklivity","product":"Zilla","kev":false,"epss":null},{"id":"CVE-2026-120317","published":"2026-11-02T02:01:15.054Z","updated":"2026-11-02T14:17:50.535Z","title":"http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity","severity":"HIGH","score":8.2,"vendor":"http4k","product":"http4k","kev":false,"epss":null},{"id":"CVE-2026-120316","published":"2026-11-02T02:01:14.357Z","updated":"2026-11-02T17:38:29.758Z","title":"http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution","severity":"HIGH","score":8.2,"vendor":"http4k","product":"http4k","kev":false,"epss":null},{"id":"CVE-2026-120315","published":"2026-11-02T02:01:13.641Z","updated":"2026-11-02T02:01:13.641Z","title":"LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile","severity":"HIGH","score":8.7,"vendor":"lobehub","product":"chat","kev":false,"epss":null},{"id":"CVE-2026-120314","published":"2026-11-02T02:01:12.990Z","updated":"2026-11-02T02:01:12.990Z","title":"Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations","severity":"MEDIUM","score":6.9,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":null},{"id":"CVE-2026-120313","published":"2026-11-02T02:01:12.302Z","updated":"2026-11-02T14:09:32.221Z","title":"Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":null},{"id":"CVE-2026-120312","published":"2026-11-02T02:01:11.626Z","updated":"2026-11-02T17:39:06.709Z","title":"Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":null},{"id":"CVE-2026-120311","published":"2026-11-02T02:01:10.936Z","updated":"2026-11-02T02:01:10.936Z","title":"Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":null},{"id":"CVE-2026-120310","published":"2026-11-02T02:01:10.250Z","updated":"2026-11-02T02:01:10.250Z","title":"Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":null},{"id":"CVE-2026-120309","published":"2026-11-02T02:01:09.557Z","updated":"2026-11-02T14:21:44.137Z","title":"Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam","severity":"MEDIUM","score":6.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":null},{"id":"CVE-2026-120323","published":"2026-11-02T02:00:22.478Z","updated":"2026-11-02T14:23:13.148Z","title":"samanhappy MCPHub passthroughHeaders.ts information disclosure","severity":"MEDIUM","score":5.3,"vendor":"samanhappy","product":"MCPHub","kev":false,"epss":null},{"id":"CVE-2026-120322","published":"2026-11-02T01:45:41.924Z","updated":"2026-11-02T17:39:30.581Z","title":"Termix-SSH Termix transferToHost path traversal","severity":"CRITICAL","score":9.4,"vendor":"Termix-SSH","product":"Termix","kev":false,"epss":null},{"id":"CVE-2026-120320","published":"2026-11-02T01:30:30.012Z","updated":"2026-11-02T01:30:30.012Z","title":"jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization","severity":"MEDIUM","score":5.1,"vendor":"jxxghp","product":"MoviePilot","kev":false,"epss":null},{"id":"CVE-2026-120319","published":"2026-11-02T01:15:23.883Z","updated":"2026-11-02T01:15:23.883Z","title":"Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization","severity":"MEDIUM","score":5.3,"vendor":"Sanluan","product":"PublicCMS","kev":false,"epss":null},{"id":"CVE-2026-120283","published":"2026-11-02T01:00:22.303Z","updated":"2026-11-02T14:24:28.643Z","title":"Linksys E8450 portal.cgi strcpy stack-based overflow","severity":"CRITICAL","score":10,"vendor":"Linksys","product":"E8450","kev":false,"epss":null},{"id":"CVE-2026-120282","published":"2026-11-02T00:45:25.930Z","updated":"2026-11-02T17:40:00.155Z","title":"WAVLINK WN536AX6-A protocol.csp host_black os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120281","published":"2026-11-02T00:30:18.106Z","updated":"2026-11-02T00:30:18.106Z","title":"WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120280","published":"2026-11-02T00:15:22.183Z","updated":"2026-11-02T00:15:22.183Z","title":"WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120279","published":"2026-11-02T00:00:18.775Z","updated":"2026-11-02T14:29:01.188Z","title":"WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-117127","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T19:00:11.049Z","title":"Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-117082","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T19:24:42.448Z","title":"An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-117069","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T18:51:32.795Z","title":"An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-117068","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T17:24:23.856Z","title":"An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-117067","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T17:28:31.881Z","title":"An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106808","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T19:05:07.660Z","title":"OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoint. The…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106807","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T16:15:23.096Z","title":"A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106806","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T17:44:51.954Z","title":"A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106805","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T16:32:24.655Z","title":"A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106804","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T18:55:18.235Z","title":"A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function copies the attacker-controlled…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-106803","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T17:09:06.900Z","title":"A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2025-62819","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T14:35:31.782Z","title":"Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration Authority) User…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":null},{"id":"CVE-2026-120278","published":"2026-11-01T23:45:16.567Z","updated":"2026-11-02T17:40:30.120Z","title":"WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication","severity":"MEDIUM","score":6.9,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120277","published":"2026-11-01T23:30:19.046Z","updated":"2026-11-01T23:30:19.046Z","title":"WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120276","published":"2026-11-01T23:15:12.335Z","updated":"2026-11-01T23:15:12.335Z","title":"WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":null},{"id":"CVE-2026-120275","published":"2026-11-01T23:00:36.369Z","updated":"2026-11-02T14:29:53.950Z","title":"Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection","severity":"MEDIUM","score":5.1,"vendor":"Shanghai Xi Yu Ji Zhi Technology","product":"Minimax Code","kev":false,"epss":null},{"id":"CVE-2026-111089","published":"2026-11-01T22:32:09.104Z","updated":"2026-11-01T22:32:09.104Z","title":"Apache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markup","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-95863","published":"2026-11-01T22:30:47.259Z","updated":"2026-11-01T22:30:47.259Z","title":"Apache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markup","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-87718","published":"2026-11-01T22:28:35.032Z","updated":"2026-11-01T22:28:35.032Z","title":"Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegates","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-84231","published":"2026-11-01T22:26:18.525Z","updated":"2026-11-01T22:26:18.525Z","title":"Apache Wicket: XSS in ExternalLink via the model URL when the component is bound to a non-anchor tag","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-84177","published":"2026-11-01T22:25:22.130Z","updated":"2026-11-01T22:25:22.130Z","title":"Apache Wicket: A component's markup is served as a package resource when its class name contains an underscore","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-84172","published":"2026-11-01T22:24:14.937Z","updated":"2026-11-01T22:24:14.937Z","title":"Apache Wicket: Component markup is served as a package resource when wicket-core has its own class loader","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-84170","published":"2026-11-01T22:22:48.811Z","updated":"2026-11-01T22:22:48.811Z","title":"Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource","severity":"HIGH","score":8.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-83594","published":"2026-11-01T22:21:13.833Z","updated":"2026-11-01T22:21:13.833Z","title":"Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names","severity":"HIGH","score":8.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-83559","published":"2026-11-01T22:19:47.951Z","updated":"2026-11-01T22:19:47.951Z","title":"Apache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literal","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-83539","published":"2026-11-01T22:18:13.427Z","updated":"2026-11-01T22:18:13.427Z","title":"Apache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model data","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82956","published":"2026-11-01T22:16:45.576Z","updated":"2026-11-01T22:16:45.576Z","title":"Apache Wicket: XSS in AjaxNewWindowNotifyingBehavior via the client-supplied window name","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82898","published":"2026-11-01T22:14:06.838Z","updated":"2026-11-01T22:14:06.838Z","title":"Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in","severity":"LOW","score":2.1,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82840","published":"2026-11-01T22:05:07.392Z","updated":"2026-11-01T22:05:07.392Z","title":"Apache Wicket: The session id is renewed only on the first sign in, not on re-authentication","severity":"HIGH","score":7.2,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82705","published":"2026-11-01T22:03:23.040Z","updated":"2026-11-01T22:03:23.040Z","title":"Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82704","published":"2026-11-01T22:01:51.169Z","updated":"2026-11-01T22:01:51.169Z","title":"Apache Wicket: A listener is invoked on a page instance the request itself created and never configured","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82559","published":"2026-11-01T22:00:24.598Z","updated":"2026-11-01T22:00:24.598Z","title":"Apache Wicket: WebSocket messages are processed against an HTTP session snapshot that survives invalidation","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82558","published":"2026-11-01T21:58:28.610Z","updated":"2026-11-01T21:58:28.610Z","title":"Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invoke","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82557","published":"2026-11-01T21:56:01.071Z","updated":"2026-11-01T21:56:01.071Z","title":"Apache Wicket: A disabled or invisible form submitting component is still invoked on a plain form submission","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-82115","published":"2026-11-01T21:42:45.222Z","updated":"2026-11-01T21:42:45.222Z","title":"Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":null},{"id":"CVE-2026-120274","published":"2026-11-01T21:00:27.286Z","updated":"2026-11-02T17:40:53.356Z","title":"beecue FastBee Groovy Script Executor script code injection","severity":"MEDIUM","score":5.1,"vendor":"beecue","product":"FastBee","kev":false,"epss":0.00248},{"id":"CVE-2026-120242","published":"2026-11-01T19:00:20.951Z","updated":"2026-11-01T19:00:20.951Z","title":"Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"Ruijie","product":"RG-ES205GC","kev":false,"epss":0.00202},{"id":"CVE-2026-120241","published":"2026-11-01T18:45:15.676Z","updated":"2026-11-01T18:45:15.676Z","title":"Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow","severity":"HIGH","score":8.7,"vendor":"Ruijie","product":"RG-ES205GC","kev":false,"epss":0.00619},{"id":"CVE-2026-120240","published":"2026-11-01T18:30:11.233Z","updated":"2026-11-02T14:30:33.865Z","title":"WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687},{"id":"CVE-2026-120239","published":"2026-11-01T18:00:18.146Z","updated":"2026-11-02T17:41:18.797Z","title":"WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687},{"id":"CVE-2026-120238","published":"2026-11-01T17:45:17.440Z","updated":"2026-11-01T17:45:17.440Z","title":"WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687},{"id":"CVE-2026-120237","published":"2026-11-01T17:30:17.707Z","updated":"2026-11-01T17:30:17.707Z","title":"ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00407},{"id":"CVE-2026-120236","published":"2026-11-01T16:45:17.616Z","updated":"2026-11-02T14:31:08.462Z","title":"ag-ui-protocol ag-ui Transport Decoder input validation","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00267},{"id":"CVE-2026-74760","published":"2026-11-01T16:43:34.512Z","updated":"2026-11-01T16:43:34.512Z","title":"Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state","severity":"UNKNOWN","score":null,"vendor":null,"product":"Google-Auth","kev":false,"epss":0.00124},{"id":"CVE-2026-74759","published":"2026-11-01T16:43:14.737Z","updated":"2026-11-01T16:43:14.737Z","title":"Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials","severity":"UNKNOWN","score":null,"vendor":null,"product":"Google-Auth","kev":false,"epss":0.00177},{"id":"CVE-2026-120235","published":"2026-11-01T16:00:21.124Z","updated":"2026-11-02T17:41:44.705Z","title":"ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00354},{"id":"CVE-2026-66570","published":"2026-11-01T16:00:09.605Z","updated":"2026-11-01T17:37:10.026Z","title":"WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Nickboss","product":"WordPress File Upload","kev":false,"epss":0.00201},{"id":"CVE-2026-119480","published":"2026-11-01T16:00:09.213Z","updated":"2026-11-01T17:37:19.222Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00405},{"id":"CVE-2026-62048","published":"2026-11-01T16:00:09.158Z","updated":"2026-11-01T17:37:28.623Z","title":"WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Liquid Web / StellarWP","product":"BookIt","kev":false,"epss":0.00342},{"id":"CVE-2026-120234","published":"2026-11-01T15:30:16.548Z","updated":"2026-11-01T15:30:16.548Z","title":"ag-ui-protocol ag-ui HTTP Transport e.text resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00303},{"id":"CVE-2026-120338","published":"2026-11-01T15:24:54.158Z","updated":"2026-11-02T19:42:56.540Z","title":"Prefab UI Pyodide sandbox escape to host RCE","severity":"CRITICAL","score":10,"vendor":"PrefectHQ","product":"prefab-ui","kev":false,"epss":0.00771},{"id":"CVE-2026-120233","published":"2026-11-01T15:15:19.413Z","updated":"2026-11-01T15:15:19.413Z","title":"ag-ui-protocol ag-ui HttpAgent http.ts information disclosure","severity":"MEDIUM","score":6.9,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00414},{"id":"CVE-2026-120232","published":"2026-11-01T15:00:14.474Z","updated":"2026-11-02T14:31:53.615Z","title":"Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption","severity":"CRITICAL","score":9.3,"vendor":"Horizon DataSys","product":"Reboot Restore Standard","kev":false,"epss":0.0023},{"id":"CVE-2026-120231","published":"2026-11-01T14:45:17.308Z","updated":"2026-11-02T17:42:12.121Z","title":"WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687},{"id":"CVE-2026-120230","published":"2026-11-01T14:15:16.021Z","updated":"2026-11-01T14:15:16.021Z","title":"WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN701AE","kev":false,"epss":0.02211},{"id":"CVE-2026-120229","published":"2026-11-01T14:00:19.852Z","updated":"2026-11-01T14:00:19.852Z","title":"WAVLINK WN553X1-B ioos sub_416B50 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.02823},{"id":"CVE-2026-120228","published":"2026-11-01T13:45:13.986Z","updated":"2026-11-02T14:32:26.558Z","title":"WAVLINK WN553X1-B ioos Service sub_416D88 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01652},{"id":"CVE-2026-117680","published":"2026-11-01T13:29:36.681Z","updated":"2026-11-02T19:44:02.251Z","title":"jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not","severity":"LOW","score":2.1,"vendor":"lud","product":"jsv","kev":false,"epss":0.00191},{"id":"CVE-2026-120308","published":"2026-11-01T12:51:50.481Z","updated":"2026-11-02T19:45:15.233Z","title":"Beta9 host filesystem exposure via volume path traversal","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 gateway","kev":false,"epss":0.00527},{"id":"CVE-2026-120307","published":"2026-11-01T12:49:51.981Z","updated":"2026-11-02T19:46:38.442Z","title":"Beta9 container escape via unvalidated sandbox file paths","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 worker","kev":false,"epss":0.00484},{"id":"CVE-2026-120306","published":"2026-11-01T12:49:05.857Z","updated":"2026-11-02T19:47:25.051Z","title":"Beta9 build sandbox escape via chroot-only isolation","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 worker","kev":false,"epss":0.00362},{"id":"CVE-2026-120227","published":"2026-11-01T12:30:14.040Z","updated":"2026-11-02T17:42:35.281Z","title":"WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN701AE","kev":false,"epss":0.02211},{"id":"CVE-2026-120226","published":"2026-11-01T11:45:15.817Z","updated":"2026-11-01T11:45:15.817Z","title":"Hangzhou Xiongmai Technology P2PAPI.dll P2P SDK P2PAPI_Connect buffer overflow","severity":"MEDIUM","score":4.8,"vendor":"Hangzhou Xiongmai Technology","product":"P2PAPI.dll","kev":false,"epss":0.00124},{"id":"CVE-2026-13575","published":"2026-11-01T10:46:36.389Z","updated":"2026-11-01T20:05:00.738Z","title":"HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI","severity":"UNKNOWN","score":null,"vendor":null,"product":"http-session","kev":false,"epss":0.00933},{"id":"CVE-2026-120225","published":"2026-11-01T10:45:20.715Z","updated":"2026-11-01T10:45:20.715Z","title":"Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00727},{"id":"CVE-2026-120224","published":"2026-11-01T10:15:16.501Z","updated":"2026-11-02T14:21:10.830Z","title":"Oray Pugongying X5 Pro API Authorization run_async_task improper authorization","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00382},{"id":"CVE-2026-120223","published":"2026-11-01T10:00:19.575Z","updated":"2026-11-02T17:43:04.501Z","title":"Oray Pugongying X5 Pro Session ID session.lua session_get random values","severity":"LOW","score":2.3,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00316},{"id":"CVE-2026-119627","published":"2026-11-01T09:48:58.988Z","updated":"2026-11-01T09:48:58.988Z","title":"Gitea limited-visibility profile disclosure with public-only tokens","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00199},{"id":"CVE-2026-119625","published":"2026-11-01T09:48:57.404Z","updated":"2026-11-01T09:48:57.404Z","title":"Gitea user and organization feed token scope bypass","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00194},{"id":"CVE-2026-119533","published":"2026-11-01T09:48:55.849Z","updated":"2026-11-01T09:48:55.849Z","title":"Gitea private pull request disclosure on project boards","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-119441","published":"2026-11-01T09:48:54.215Z","updated":"2026-11-01T09:48:54.215Z","title":"Gitea public-only token bypass on bulk organization repository deletion","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-118504","published":"2026-11-01T09:48:52.593Z","updated":"2026-11-01T09:48:52.593Z","title":"Gitea issue changes on archived repositories through the API","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00161},{"id":"CVE-2026-118395","published":"2026-11-01T09:48:51.036Z","updated":"2026-11-01T09:48:51.036Z","title":"Gitea public-only token bypass in repository and organization creation","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00157},{"id":"CVE-2026-118394","published":"2026-11-01T09:48:49.431Z","updated":"2026-11-01T09:48:49.431Z","title":"Gitea OAuth2 userinfo private group disclosure to public-only tokens","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-117685","published":"2026-11-01T09:48:46.825Z","updated":"2026-11-01T09:48:46.825Z","title":"Gitea public-only package token access to private OCI blobs","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-117677","published":"2026-11-01T09:48:45.233Z","updated":"2026-11-01T09:48:45.233Z","title":"Gitea Helm chart upload decompression denial of service","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.0021},{"id":"CVE-2026-117649","published":"2026-11-01T09:48:43.592Z","updated":"2026-11-01T09:48:43.592Z","title":"Gitea private issue disclosure through issue dependency timeline events","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00206},{"id":"CVE-2026-117646","published":"2026-11-01T09:48:42.012Z","updated":"2026-11-01T09:48:42.012Z","title":"Gitea private repository listing to public-only tokens on profiles","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00157},{"id":"CVE-2026-117635","published":"2026-11-01T09:48:40.375Z","updated":"2026-11-01T09:48:40.375Z","title":"Gitea admin API public-only token scope bypass","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-116474","published":"2026-11-01T09:48:38.763Z","updated":"2026-11-01T09:48:38.763Z","title":"Gitea Actions job token spoofing of instance-signed commits","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00108},{"id":"CVE-2026-116296","published":"2026-11-01T09:48:37.020Z","updated":"2026-11-01T12:35:34.671Z","title":"Gitea archived repository release, milestone and label modification","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00266},{"id":"CVE-2026-116289","published":"2026-11-01T09:48:35.376Z","updated":"2026-11-01T09:48:35.376Z","title":"Gitea public-only token bypass through Actions runner registration","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-114199","published":"2026-11-01T09:48:33.765Z","updated":"2026-11-01T09:48:33.765Z","title":"Gitea contribution heatmap private activity disclosure to public-only tokens","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00157},{"id":"CVE-2026-113429","published":"2026-11-01T09:48:32.206Z","updated":"2026-11-01T09:48:32.206Z","title":"Gitea stored XSS through legacy Actions artifact Content-Encoding","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00171},{"id":"CVE-2026-112887","published":"2026-11-01T09:48:30.659Z","updated":"2026-11-01T09:48:30.659Z","title":"Gitea Actions task token private repository enumeration","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00185},{"id":"CVE-2026-120263","published":"2026-11-01T09:47:09.191Z","updated":"2026-11-01T09:47:09.191Z","title":"Gitea OAuth2 account auto-linking takeover through the sign-up form","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00162},{"id":"CVE-2026-118386","published":"2026-11-01T09:47:07.487Z","updated":"2026-11-01T09:47:07.487Z","title":"Gitea Actions fork workflow trust through pull request review commit","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00149},{"id":"CVE-2026-120218","published":"2026-11-01T06:30:17.213Z","updated":"2026-11-01T06:30:17.213Z","title":"Typemill SvgSanitizer.php saveImage cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Typemill","kev":false,"epss":0.00254},{"id":"CVE-2026-120217","published":"2026-11-01T06:15:17.369Z","updated":"2026-11-01T06:15:17.369Z","title":"Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos","severity":"MEDIUM","score":5.3,"vendor":"Delgan","product":"loguru","kev":false,"epss":0.00271},{"id":"CVE-2026-118168","published":"2026-11-01T06:00:23.081Z","updated":"2026-11-01T17:34:15.928Z","title":"MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"MapPress","kev":false,"epss":0.00197},{"id":"CVE-2026-113482","published":"2026-11-01T06:00:22.885Z","updated":"2026-11-01T17:34:16.056Z","title":"Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00235},{"id":"CVE-2026-113481","published":"2026-11-01T06:00:22.682Z","updated":"2026-11-01T17:34:16.204Z","title":"Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00162},{"id":"CVE-2026-107343","published":"2026-11-01T06:00:22.510Z","updated":"2026-11-01T17:34:16.357Z","title":"Kali Forms < 2.4.30 - Subscriber+ Email Sending and Sender Spoofing","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Kali Forms — Contact Form & Drag-and-Drop Builder","kev":false,"epss":0.00152},{"id":"CVE-2026-107342","published":"2026-11-01T06:00:22.338Z","updated":"2026-11-01T17:34:16.483Z","title":"Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Kali Forms — Contact Form & Drag-and-Drop Builder","kev":false,"epss":0.00176},{"id":"CVE-2026-120198","published":"2026-11-01T04:15:16.456Z","updated":"2026-11-02T14:20:19.342Z","title":"WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WL-WN530BE1-A","kev":false,"epss":0.0207},{"id":"CVE-2026-120197","published":"2026-11-01T03:45:22.184Z","updated":"2026-11-02T17:43:36.802Z","title":"WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WL-WN530HG4B","kev":false,"epss":0.01687},{"id":"CVE-2026-120196","published":"2026-11-01T03:30:24.626Z","updated":"2026-11-01T03:30:24.626Z","title":"WAVLINK WN579X3-D wapi.cgi port_forward os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN579X3-D","kev":false,"epss":0.01687},{"id":"CVE-2026-120195","published":"2026-11-01T03:00:27.095Z","updated":"2026-11-01T03:00:27.095Z","title":"WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WL-WN579A3-A","kev":false,"epss":0.0207},{"id":"CVE-2026-120192","published":"2026-11-01T01:45:24.422Z","updated":"2026-11-02T14:40:48.406Z","title":"Presenton Desktop Authentication Middleware app_data information disclosure","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Presenton","kev":false,"epss":0.00852},{"id":"CVE-2026-120191","published":"2026-11-01T01:00:26.213Z","updated":"2026-11-02T17:43:59.670Z","title":"Presenton API missing authentication","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Presenton","kev":false,"epss":0.00803},{"id":"CVE-2026-120252","published":"2026-11-01T00:57:15.614Z","updated":"2026-11-02T17:44:19.013Z","title":"imagecodecs 2023.1.23 through 2026.10.10 Stack Buffer Overflow via jpegsof3_decode()","severity":"MEDIUM","score":6.8,"vendor":"cgohlke","product":"imagecodecs","kev":false,"epss":0.00137},{"id":"CVE-2026-120251","published":"2026-11-01T00:57:14.911Z","updated":"2026-11-01T00:57:14.911Z","title":"imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()","severity":"MEDIUM","score":6.8,"vendor":"cgohlke","product":"imagecodecs","kev":false,"epss":0.00124},{"id":"CVE-2026-120250","published":"2026-11-01T00:57:14.226Z","updated":"2026-11-01T00:57:14.226Z","title":"OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections","severity":"MEDIUM","score":6,"vendor":"marketcalls","product":"OpenAlgo","kev":false,"epss":0.00114},{"id":"CVE-2026-120249","published":"2026-11-01T00:57:13.531Z","updated":"2026-11-02T15:53:13.777Z","title":"Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes","severity":"MEDIUM","score":6.9,"vendor":"Thelia","product":"Thelia Back-office Default Twig Template","kev":false,"epss":0.00144},{"id":"CVE-2026-120248","published":"2026-11-01T00:57:12.828Z","updated":"2026-11-02T17:44:31.955Z","title":"Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads","severity":"MEDIUM","score":4.6,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.00239},{"id":"CVE-2026-120247","published":"2026-11-01T00:57:12.137Z","updated":"2026-11-01T00:57:12.137Z","title":"FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124},{"id":"CVE-2026-120246","published":"2026-11-01T00:57:11.435Z","updated":"2026-11-01T00:57:11.435Z","title":"FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124},{"id":"CVE-2026-120245","published":"2026-11-01T00:57:10.732Z","updated":"2026-11-02T14:40:04.609Z","title":"FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124},{"id":"CVE-2026-120244","published":"2026-11-01T00:57:10.036Z","updated":"2026-11-02T17:44:48.638Z","title":"FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124},{"id":"CVE-2026-120243","published":"2026-11-01T00:57:09.338Z","updated":"2026-11-01T00:57:09.338Z","title":"FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124},{"id":"CVE-2026-120190","published":"2026-11-01T00:30:25.292Z","updated":"2026-11-01T00:30:25.292Z","title":"PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"PostyBirb Plus","kev":false,"epss":0.00392},{"id":"CVE-2026-120189","published":"2026-11-01T00:00:23.604Z","updated":"2026-11-01T00:00:23.604Z","title":"D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow","severity":"CRITICAL","score":10,"vendor":"D-Link","product":"DIR-505","kev":false,"epss":0.01346},{"id":"CVE-2026-115946","published":"2026-10-31T23:49:36.583Z","updated":"2026-10-31T23:49:36.583Z","title":"XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder","severity":"UNKNOWN","score":null,"vendor":null,"product":"XS-libbrotli","kev":false,"epss":0.00244},{"id":"CVE-2026-120185","published":"2026-10-31T22:15:20.469Z","updated":"2026-11-02T14:39:02.110Z","title":"ken678 YznCMS Auth Group Group.php Backend privileges management","severity":"MEDIUM","score":5.1,"vendor":"ken678","product":"YznCMS","kev":false,"epss":0.00227},{"id":"CVE-2026-120135","published":"2026-10-31T20:33:00.088Z","updated":"2026-10-31T21:08:29.726Z","title":"Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Thrift","kev":false,"epss":0.00553},{"id":"CVE-2026-118636","published":"2026-10-31T20:17:11.191Z","updated":"2026-10-31T21:08:27.192Z","title":"Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache MINA","kev":false,"epss":0.00575},{"id":"CVE-2026-118147","published":"2026-10-31T18:13:37.059Z","updated":"2026-10-31T18:13:37.059Z","title":"Visual Studio Spoofing Vulnerability","severity":"HIGH","score":7.4,"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9","kev":false,"epss":0.00612},{"id":"CVE-2026-120210","published":"2026-10-31T17:25:56.847Z","updated":"2026-10-31T17:25:56.847Z","title":"FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path","severity":"MEDIUM","score":5.3,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00276},{"id":"CVE-2026-120209","published":"2026-10-31T17:25:56.161Z","updated":"2026-11-02T14:37:55.775Z","title":"AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token","severity":"CRITICAL","score":9.3,"vendor":"anji-plus","product":"AJ-Report","kev":false,"epss":0.00544},{"id":"CVE-2026-120208","published":"2026-10-31T17:25:55.507Z","updated":"2026-11-02T17:45:27.671Z","title":"libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder","severity":"HIGH","score":7.7,"vendor":"strukturag","product":"libheif","kev":false,"epss":0.00365},{"id":"CVE-2026-120207","published":"2026-10-31T17:25:54.837Z","updated":"2026-10-31T17:25:54.837Z","title":"Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes","severity":"HIGH","score":7,"vendor":"Thelia","product":"Thelia Page Module","kev":false,"epss":0.00203},{"id":"CVE-2026-120206","published":"2026-10-31T17:25:54.151Z","updated":"2026-10-31T17:25:54.151Z","title":"Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions","severity":"MEDIUM","score":5.9,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.0015},{"id":"CVE-2026-120205","published":"2026-10-31T17:25:53.467Z","updated":"2026-11-02T14:37:06.106Z","title":"Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name","severity":"HIGH","score":7.4,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.00263},{"id":"CVE-2026-120204","published":"2026-10-31T17:25:52.812Z","updated":"2026-11-02T17:45:36.440Z","title":"DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter","severity":"MEDIUM","score":6.3,"vendor":"deepseek-ai","product":"DeepInfer","kev":false,"epss":0.0043},{"id":"CVE-2026-120203","published":"2026-10-31T17:25:52.170Z","updated":"2026-10-31T17:25:52.170Z","title":"ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates","severity":"HIGH","score":8.7,"vendor":"ShowDoc","product":"ShowDoc","kev":false,"epss":0.00352},{"id":"CVE-2026-120202","published":"2026-10-31T17:25:51.512Z","updated":"2026-10-31T17:25:51.512Z","title":"Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc","severity":"HIGH","score":7.1,"vendor":"highflame-ai","product":"ramparts","kev":false,"epss":0.00287},{"id":"CVE-2026-120201","published":"2026-10-31T17:25:50.846Z","updated":"2026-11-02T14:35:22.658Z","title":"Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header","severity":"CRITICAL","score":9.3,"vendor":"dromara","product":"Jpom","kev":false,"epss":0.00603},{"id":"CVE-2026-120200","published":"2026-10-31T17:25:50.165Z","updated":"2026-11-02T17:51:26.402Z","title":"Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes","severity":"MEDIUM","score":5.3,"vendor":"gnmyt","product":"Nexterm","kev":false,"epss":0.00227},{"id":"CVE-2026-120199","published":"2026-10-31T17:25:49.528Z","updated":"2026-10-31T17:25:49.528Z","title":"LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API","severity":"MEDIUM","score":5.3,"vendor":"learnhouse","product":"learnhouse","kev":false,"epss":0.00218},{"id":"CVE-2026-102212","published":"2026-10-31T16:01:56.106Z","updated":"2026-10-31T16:01:56.106Z","title":"Pre-Auth Heap Buffer Overflow in the Multipart Request","severity":"HIGH","score":8.4,"vendor":"Opengear","product":"IM7200","kev":false,"epss":0.0032},{"id":"CVE-2026-78192","published":"2026-10-31T14:34:49.524Z","updated":"2026-10-31T14:34:49.524Z","title":"WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page","severity":"UNKNOWN","score":null,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00223},{"id":"CVE-2026-78191","published":"2026-10-31T14:34:30.167Z","updated":"2026-10-31T14:34:30.167Z","title":"WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages","severity":"UNKNOWN","score":null,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00454},{"id":"CVE-2026-78190","published":"2026-10-31T14:34:14.014Z","updated":"2026-10-31T14:34:14.014Z","title":"WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting","severity":"UNKNOWN","score":null,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00239},{"id":"CVE-2026-78189","published":"2026-10-31T14:33:55.211Z","updated":"2026-10-31T14:33:55.211Z","title":"WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback","severity":"UNKNOWN","score":null,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00249},{"id":"CVE-2026-78188","published":"2026-10-31T14:33:37.285Z","updated":"2026-10-31T14:33:37.285Z","title":"WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes","severity":"UNKNOWN","score":null,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00127},{"id":"CVE-2026-15272","published":"2026-10-31T11:28:43.836Z","updated":"2026-11-01T17:37:50.660Z","title":"Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter","severity":"MEDIUM","score":6.5,"vendor":"Shamalli","product":"Web 2.0 Directory plugin for WordPress","kev":false,"epss":0.0032},{"id":"CVE-2026-120194","published":"2026-10-31T10:11:47.188Z","updated":"2026-11-02T17:51:44.847Z","title":"Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00475},{"id":"CVE-2026-118599","published":"2026-10-31T09:29:37.264Z","updated":"2026-10-31T09:29:37.264Z","title":"epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install","severity":"MEDIUM","score":5.5,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.00182},{"id":"CVE-2026-118598","published":"2026-10-31T09:29:34.128Z","updated":"2026-10-31T09:29:34.128Z","title":"epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access","severity":"MEDIUM","score":6.5,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.00469},{"id":"CVE-2026-104926","published":"2026-10-31T09:29:28.216Z","updated":"2026-11-01T17:38:00.300Z","title":"WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' Parameter","severity":"MEDIUM","score":6.1,"vendor":"ThemeHigh","product":"WooCommerce Extra Product Options Pro","kev":false,"epss":0.00269},{"id":"CVE-2026-109231","published":"2026-10-31T09:29:27.848Z","updated":"2026-10-31T09:29:27.848Z","title":"Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change","severity":"MEDIUM","score":4.3,"vendor":"vendidero","product":"Germanized for WooCommerce","kev":false,"epss":0.00369},{"id":"CVE-2026-107711","published":"2026-10-31T09:29:27.498Z","updated":"2026-11-01T17:34:18.153Z","title":"FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint","severity":"MEDIUM","score":6.4,"vendor":"wppool","product":"FlexStock – Product Stock Sync with Google Sheets for WooCommerce","kev":false,"epss":0.00342},{"id":"CVE-2026-120114","published":"2026-10-31T09:29:27.152Z","updated":"2026-11-01T17:34:18.291Z","title":"Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint","severity":"HIGH","score":7.2,"vendor":"qriouslad","product":"Debug Log Manager – Conveniently Monitor and Inspect Errors","kev":false,"epss":0.0041},{"id":"CVE-2026-100151","published":"2026-10-31T09:29:26.798Z","updated":"2026-11-01T17:34:18.422Z","title":"Ninja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL Parameter","severity":"MEDIUM","score":6.1,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00231},{"id":"CVE-2026-109197","published":"2026-10-31T09:29:26.446Z","updated":"2026-10-31T09:29:26.446Z","title":"WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameter","severity":"HIGH","score":7.5,"vendor":"wpdirectorykit","product":"WP Directory Kit","kev":false,"epss":0.00433},{"id":"CVE-2026-96554","published":"2026-10-31T09:29:26.095Z","updated":"2026-11-01T17:34:18.544Z","title":"BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name","severity":"MEDIUM","score":6.4,"vendor":"Boss Media","product":"BuddyBoss Platform","kev":false,"epss":0.00199},{"id":"CVE-2026-76010","published":"2026-10-31T09:29:25.701Z","updated":"2026-11-02T14:34:16.619Z","title":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path Traversal","severity":"HIGH","score":8.8,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00772},{"id":"CVE-2026-116752","published":"2026-10-31T09:29:25.226Z","updated":"2026-11-01T17:34:18.697Z","title":"GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injection","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00329},{"id":"CVE-2026-117681","published":"2026-10-31T08:57:35.252Z","updated":"2026-10-31T08:57:35.252Z","title":"Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone","severity":"HIGH","score":8,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00097},{"id":"CVE-2026-116964","published":"2026-10-31T08:57:31.115Z","updated":"2026-11-01T10:29:03.389Z","title":"Konflux-ci: remote code execution via eval() in manifest scripts","severity":"HIGH","score":8.4,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00337},{"id":"CVE-2026-116086","published":"2026-10-31T08:55:12.938Z","updated":"2026-11-01T10:28:59.107Z","title":"Konflux-ci: jq filter injection in github workflow issue management","severity":"HIGH","score":8.8,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.0031},{"id":"CVE-2026-114217","published":"2026-10-31T08:55:09.219Z","updated":"2026-11-02T14:33:55.893Z","title":"Konflux-ci: github token plaintext exposure in ci/cd scripts","severity":"HIGH","score":8.6,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00086},{"id":"CVE-2026-101325","published":"2026-10-31T08:30:47.642Z","updated":"2026-11-02T14:33:34.571Z","title":"Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"contrid","product":"Newsletters","kev":false,"epss":0.00254},{"id":"CVE-2026-110530","published":"2026-10-31T08:30:47.249Z","updated":"2026-11-01T17:34:18.827Z","title":"FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Content","severity":"HIGH","score":7.2,"vendor":"radgeek","product":"FeedWordPress","kev":false,"epss":0.00241},{"id":"CVE-2026-120075","published":"2026-10-31T08:30:46.887Z","updated":"2026-11-01T17:34:18.950Z","title":"WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting","severity":"HIGH","score":7.2,"vendor":"melapress","product":"WP Activity Log","kev":false,"epss":0.00229},{"id":"CVE-2026-103882","published":"2026-10-31T08:30:46.515Z","updated":"2026-10-31T08:30:46.515Z","title":"Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter","severity":"CRITICAL","score":9.1,"vendor":"acadlix","product":"Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress","kev":false,"epss":0.00787},{"id":"CVE-2026-119160","published":"2026-10-31T08:30:46.152Z","updated":"2026-11-01T17:34:19.085Z","title":"Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter block","severity":"MEDIUM","score":6.4,"vendor":"shapedplugin","product":"Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News","kev":false,"epss":0.00234},{"id":"CVE-2026-109367","published":"2026-10-31T08:30:45.785Z","updated":"2026-11-02T17:54:24.960Z","title":"All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter","severity":"MEDIUM","score":5.3,"vendor":"smub","product":"All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)","kev":false,"epss":0.0028},{"id":"CVE-2026-118235","published":"2026-10-31T08:30:45.403Z","updated":"2026-11-02T14:33:11.407Z","title":"SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data","severity":"CRITICAL","score":9.8,"vendor":"wpazleen","product":"SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications","kev":false,"epss":0.0074},{"id":"CVE-2026-103915","published":"2026-10-31T08:30:44.876Z","updated":"2026-10-31T08:30:44.876Z","title":"Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter","severity":"MEDIUM","score":5.3,"vendor":"melograno","product":"Booking for Appointments and Events Calendar – Amelia","kev":false,"epss":0.00255},{"id":"CVE-2026-120070","published":"2026-10-31T07:46:53.190Z","updated":"2026-10-31T07:46:53.190Z","title":"User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter","severity":"HIGH","score":8.8,"vendor":"wedevs","product":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","kev":false,"epss":0.00302},{"id":"CVE-2026-103898","published":"2026-10-31T07:46:52.815Z","updated":"2026-10-31T07:46:52.815Z","title":"Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback","severity":"HIGH","score":8.1,"vendor":"roxnor","product":"Wp Social Login and Register Social Counter","kev":false,"epss":0.0044},{"id":"CVE-2026-111070","published":"2026-10-31T07:46:52.404Z","updated":"2026-11-01T17:34:19.236Z","title":"Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name=\"description\">`","severity":"MEDIUM","score":5.4,"vendor":"pluginever","product":"Content Pilot – Autoblogging & Affiliate Marketing Suite","kev":false,"epss":0.00221},{"id":"CVE-2026-107759","published":"2026-10-31T07:46:52.028Z","updated":"2026-11-01T17:44:27.569Z","title":"WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail","severity":"HIGH","score":7.2,"vendor":"wpo365","product":"WPO365 | MICROSOFT 365 GRAPH MAILER","kev":false,"epss":0.00272},{"id":"CVE-2026-116512","published":"2026-10-31T07:46:51.642Z","updated":"2026-11-02T14:51:27.976Z","title":"Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection","severity":"CRITICAL","score":9.8,"vendor":"wedevs","product":"Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker","kev":false,"epss":0.00584},{"id":"CVE-2026-103997","published":"2026-10-31T07:46:51.254Z","updated":"2026-10-31T07:46:51.254Z","title":"Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript","severity":"MEDIUM","score":6.5,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00276},{"id":"CVE-2025-11455","published":"2026-10-31T07:46:50.870Z","updated":"2026-11-02T15:53:38.422Z","title":"Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacement","severity":"MEDIUM","score":4.3,"vendor":"tigroumeow","product":"Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF","kev":false,"epss":0.00192},{"id":"CVE-2025-9462","published":"2026-10-31T07:46:50.489Z","updated":"2026-10-31T07:46:50.489Z","title":"WP2LEADS <= 3.5.6 - Authenticated (Subscriber+) SQL Injection via order Parameter","severity":"MEDIUM","score":6.5,"vendor":"tobias_conrad","product":"WP2LEADS |  WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden","kev":false,"epss":0.00307},{"id":"CVE-2026-103962","published":"2026-10-31T07:46:50.023Z","updated":"2026-11-01T17:44:27.702Z","title":"User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter","severity":"MEDIUM","score":6.1,"vendor":"wedevs","product":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","kev":false,"epss":0.00215},{"id":"CVE-2026-116535","published":"2026-10-31T07:46:49.602Z","updated":"2026-11-01T17:44:27.834Z","title":"SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag","severity":"MEDIUM","score":6.4,"vendor":"rainbowgeek","product":"SEOPress – AI SEO Plugin & On-site SEO","kev":false,"epss":0.00235},{"id":"CVE-2026-119096","published":"2026-10-31T07:46:49.237Z","updated":"2026-11-02T17:54:58.248Z","title":"Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter","severity":"CRITICAL","score":9.8,"vendor":"uncannyowl","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.00463},{"id":"CVE-2026-118057","published":"2026-10-31T07:46:48.870Z","updated":"2026-11-01T17:44:27.992Z","title":"Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log","severity":"HIGH","score":7.2,"vendor":"paultgoodchild","product":"Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning","kev":false,"epss":0.00241},{"id":"CVE-2026-110023","published":"2026-10-31T07:46:48.466Z","updated":"2026-10-31T07:46:48.466Z","title":"WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter","severity":"MEDIUM","score":5.9,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.0029},{"id":"CVE-2026-111592","published":"2026-10-31T07:46:48.065Z","updated":"2026-11-01T17:44:28.119Z","title":"Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name","severity":"MEDIUM","score":6.4,"vendor":"publishpress","product":"Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors","kev":false,"epss":0.00193},{"id":"CVE-2026-104012","published":"2026-10-31T07:46:47.528Z","updated":"2026-11-02T14:51:04.867Z","title":"Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint","severity":"HIGH","score":8.8,"vendor":"roxnor","product":"Rox Appointment Booking – Event, Calendar & Appointment Scheduling","kev":false,"epss":0.00281},{"id":"CVE-2026-11396","published":"2026-10-31T06:44:24.344Z","updated":"2026-10-31T06:44:24.344Z","title":"Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter","severity":"MEDIUM","score":5.3,"vendor":"woobewoo","product":"Product Filter for WooCommerce by WBW","kev":false,"epss":0.00231},{"id":"CVE-2026-109386","published":"2026-10-31T06:44:23.926Z","updated":"2026-11-02T17:55:32.556Z","title":"Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00357},{"id":"CVE-2026-119166","published":"2026-10-31T06:44:23.561Z","updated":"2026-10-31T06:44:23.561Z","title":"Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter","severity":"MEDIUM","score":5.3,"vendor":"uscnanbu","product":"Welcart e-Commerce","kev":false,"epss":0.00289},{"id":"CVE-2026-119065","published":"2026-10-31T06:44:23.204Z","updated":"2026-11-01T17:44:28.252Z","title":"Shipping Zones by Drawing for WooCommerce <= 3.3.0 - Unauthenticated Stored Cross-Site Scripting via 'szbd-picked' Checkout Parameter","severity":"HIGH","score":7.2,"vendor":"arosoft","product":"Shipping Zones by Drawing for WooCommerce","kev":false,"epss":0.00241},{"id":"CVE-2026-109217","published":"2026-10-31T06:44:22.823Z","updated":"2026-10-31T06:44:22.823Z","title":"PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache","severity":"MEDIUM","score":5.3,"vendor":"wpovernight","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00256},{"id":"CVE-2026-116548","published":"2026-10-31T06:44:22.444Z","updated":"2026-11-01T17:44:28.395Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter","severity":"HIGH","score":7.2,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00241},{"id":"CVE-2026-110251","published":"2026-10-31T06:44:22.058Z","updated":"2026-10-31T06:44:22.058Z","title":"Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter","severity":"MEDIUM","score":5.4,"vendor":"villatheme","product":"Revopic – Photo Reviews for WooCommerce","kev":false,"epss":0.00316},{"id":"CVE-2026-116557","published":"2026-10-31T06:44:21.690Z","updated":"2026-10-31T06:44:21.690Z","title":"WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action","severity":"CRITICAL","score":9.1,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.00348},{"id":"CVE-2026-118070","published":"2026-10-31T06:44:21.307Z","updated":"2026-11-01T17:44:28.530Z","title":"Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter","severity":"HIGH","score":7.2,"vendor":"uscnanbu","product":"Welcart e-Commerce","kev":false,"epss":0.00241},{"id":"CVE-2026-115840","published":"2026-10-31T06:44:20.911Z","updated":"2026-11-01T17:44:28.696Z","title":"VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter","severity":"HIGH","score":7.2,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00241},{"id":"CVE-2026-107750","published":"2026-10-31T06:44:20.549Z","updated":"2026-11-01T17:44:28.847Z","title":"PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout","severity":"HIGH","score":7.2,"vendor":"wpovernight","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00259},{"id":"CVE-2026-88942","published":"2026-10-31T06:44:20.166Z","updated":"2026-11-01T17:44:29.015Z","title":"Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter","severity":"MEDIUM","score":6.1,"vendor":"woobewoo","product":"Product Filter for WooCommerce by WBW","kev":false,"epss":0.00271},{"id":"CVE-2026-119980","published":"2026-10-31T06:44:19.791Z","updated":"2026-11-02T17:55:58.239Z","title":"UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hash","severity":"MEDIUM","score":6.5,"vendor":"stiofansisland","product":"UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP","kev":false,"epss":0.00263},{"id":"CVE-2026-90960","published":"2026-10-31T06:44:19.388Z","updated":"2026-10-31T06:44:19.388Z","title":"Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory","severity":"MEDIUM","score":5.3,"vendor":"seraphinitesoft","product":"Seraphinite Accelerator","kev":false,"epss":0.00323},{"id":"CVE-2026-119162","published":"2026-10-31T06:44:19.012Z","updated":"2026-11-01T17:44:29.161Z","title":"User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting","severity":"HIGH","score":7.2,"vendor":"specialk","product":"User Submitted Posts – Enable Users to Submit Posts from the Front End","kev":false,"epss":0.00241},{"id":"CVE-2026-107765","published":"2026-10-31T06:44:18.638Z","updated":"2026-11-01T17:44:29.305Z","title":"Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field","severity":"MEDIUM","score":6.4,"vendor":"marketingfire","product":"Discussion Board – WordPress Forum Plugin","kev":false,"epss":0.00193},{"id":"CVE-2026-120040","published":"2026-10-31T06:44:18.179Z","updated":"2026-10-31T06:44:18.179Z","title":"Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure","severity":"HIGH","score":7.5,"vendor":"wardee","product":"Mail logging & Catcher","kev":false,"epss":0.00282},{"id":"CVE-2026-116546","published":"2026-10-31T06:44:17.810Z","updated":"2026-11-01T17:44:29.475Z","title":"WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpjobportal","product":"WP Job Portal – AI-Powered Recruitment System for Company or Job Board website","kev":false,"epss":0.00206},{"id":"CVE-2026-116522","published":"2026-10-31T06:44:17.433Z","updated":"2026-11-01T17:44:29.607Z","title":"Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode","severity":"HIGH","score":7.2,"vendor":"comesio","product":"Relevanssi – A Better Search","kev":false,"epss":0.00247},{"id":"CVE-2026-119089","published":"2026-10-31T06:44:17.036Z","updated":"2026-11-01T17:44:29.749Z","title":"ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag","severity":"HIGH","score":7.2,"vendor":"supercleanse","product":"ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin","kev":false,"epss":0.00236},{"id":"CVE-2026-120019","published":"2026-10-31T06:44:16.137Z","updated":"2026-11-01T17:44:29.877Z","title":"W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder","severity":"MEDIUM","score":5.4,"vendor":"boldgrid","product":"W3 Total Cache","kev":false,"epss":0.00221},{"id":"CVE-2026-107653","published":"2026-10-31T06:44:15.724Z","updated":"2026-11-01T17:44:30.025Z","title":"SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in Comments","severity":"HIGH","score":7.2,"vendor":"surecart","product":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments","kev":false,"epss":0.0028},{"id":"CVE-2026-119163","published":"2026-10-31T06:44:15.350Z","updated":"2026-10-31T06:44:15.350Z","title":"FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter","severity":"HIGH","score":7.5,"vendor":"teamfunnelkit","product":"FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce","kev":false,"epss":0.00304},{"id":"CVE-2026-109220","published":"2026-10-31T06:44:14.919Z","updated":"2026-10-31T06:44:14.919Z","title":"PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field","severity":"CRITICAL","score":9.8,"vendor":"addonsorg","product":"PDF Invoice for WooCommerce + Drag and Drop Template Builder","kev":false,"epss":0.0052},{"id":"CVE-2026-89270","published":"2026-10-31T06:44:14.491Z","updated":"2026-11-02T17:56:30.351Z","title":"Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters","severity":"CRITICAL","score":9.1,"vendor":"popupbuilder","product":"Popup Builder – Create highly converting, mobile friendly marketing popups.","kev":false,"epss":0.00394},{"id":"CVE-2026-111109","published":"2026-10-31T06:44:14.112Z","updated":"2026-11-01T17:44:30.159Z","title":"Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag","severity":"MEDIUM","score":6.1,"vendor":"pfefferle","product":"Webmention","kev":false,"epss":0.0028},{"id":"CVE-2026-111254","published":"2026-10-31T06:44:13.577Z","updated":"2026-11-01T17:44:30.300Z","title":"W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry","severity":"HIGH","score":7.2,"vendor":"boldgrid","product":"W3 Total Cache","kev":false,"epss":0.00307},{"id":"CVE-2026-94361","published":"2026-10-31T06:00:23.604Z","updated":"2026-11-01T17:34:16.609Z","title":"PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payable Payment Gateway for WooCommerce","kev":false,"epss":0.00221},{"id":"CVE-2026-82214","published":"2026-10-31T06:00:23.431Z","updated":"2026-11-01T17:34:16.734Z","title":"Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Quick Event Manager","kev":false,"epss":0.00251},{"id":"CVE-2026-118638","published":"2026-10-31T06:00:23.246Z","updated":"2026-11-01T17:34:16.868Z","title":"Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Mapster WP Maps","kev":false,"epss":0.00253},{"id":"CVE-2026-118629","published":"2026-10-31T06:00:23.071Z","updated":"2026-11-01T17:34:17.011Z","title":"All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"All-in-One Video Gallery","kev":false,"epss":0.00251},{"id":"CVE-2026-118438","published":"2026-10-31T06:00:22.892Z","updated":"2026-11-01T17:34:17.139Z","title":"Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Firelight Lightbox","kev":false,"epss":0.0029},{"id":"CVE-2026-118437","published":"2026-10-31T06:00:22.722Z","updated":"2026-11-01T17:34:17.282Z","title":"BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion","severity":"LOW","score":3.7,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00205},{"id":"CVE-2026-118185","published":"2026-10-31T06:00:22.549Z","updated":"2026-11-01T17:34:17.423Z","title":"Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Security Optimizer","kev":false,"epss":0.00286},{"id":"CVE-2026-118184","published":"2026-10-31T06:00:22.376Z","updated":"2026-11-01T17:34:17.566Z","title":"Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Premium Packages","kev":false,"epss":0.00214},{"id":"CVE-2026-118043","published":"2026-10-31T06:00:22.200Z","updated":"2026-11-01T17:34:17.748Z","title":"Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Bulk Media Register","kev":false,"epss":0.00238},{"id":"CVE-2026-110808","published":"2026-10-31T06:00:21.608Z","updated":"2026-11-01T17:34:17.877Z","title":"Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role","severity":"MEDIUM","score":4.2,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00231},{"id":"CVE-2026-110042","published":"2026-10-31T06:00:21.428Z","updated":"2026-11-01T17:34:18.003Z","title":"Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Payment Forms for Paystack","kev":false,"epss":0.00289},{"id":"CVE-2026-116520","published":"2026-10-31T05:33:08.490Z","updated":"2026-11-01T17:44:30.459Z","title":"PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision","severity":"HIGH","score":7.2,"vendor":"buildwps","product":"PPWP – Password Protect Pages","kev":false,"epss":0.00383},{"id":"CVE-2026-100155","published":"2026-10-31T05:33:08.113Z","updated":"2026-11-02T14:50:42.803Z","title":"Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tag","severity":"MEDIUM","score":6.5,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00514},{"id":"CVE-2026-92294","published":"2026-10-31T05:33:07.751Z","updated":"2026-10-31T05:33:07.751Z","title":"Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters","severity":"MEDIUM","score":6.5,"vendor":"brainstormforce","product":"Spectra Legacy – Gutenberg Blocks","kev":false,"epss":0.00444},{"id":"CVE-2026-109997","published":"2026-10-31T05:33:07.391Z","updated":"2026-11-01T17:44:30.605Z","title":"Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalization","severity":"HIGH","score":7.2,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00442},{"id":"CVE-2026-119977","published":"2026-10-31T05:33:07.059Z","updated":"2026-10-31T05:33:07.059Z","title":"WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution","severity":"HIGH","score":8.1,"vendor":"WordPress Foundation","product":"WordPress","kev":false,"epss":0.006},{"id":"CVE-2026-109234","published":"2026-10-31T05:33:06.702Z","updated":"2026-11-01T17:44:30.757Z","title":"Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization","severity":"HIGH","score":7.2,"vendor":"tigroumeow","product":"Meow Lightbox","kev":false,"epss":0.00383},{"id":"CVE-2026-116563","published":"2026-10-31T05:33:06.334Z","updated":"2026-11-01T17:44:30.899Z","title":"Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTML","severity":"MEDIUM","score":5.4,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00352},{"id":"CVE-2026-101326","published":"2026-10-31T05:33:05.826Z","updated":"2026-10-31T05:33:05.826Z","title":"Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_name","severity":"MEDIUM","score":5.4,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00371},{"id":"CVE-2026-116755","published":"2026-10-31T01:56:35.922Z","updated":"2026-10-31T01:56:35.922Z","title":"SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields","severity":"HIGH","score":7.4,"vendor":"SoftIron","product":"HyperCloud","kev":false,"epss":0.00929},{"id":"CVE-2026-110176","published":"2026-10-31T00:01:51.979Z","updated":"2026-10-31T00:01:51.979Z","title":"File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers","severity":"HIGH","score":8.7,"vendor":"Drupal","product":"File Force Download","kev":false,"epss":0.00249},{"id":"CVE-2026-77152","published":"2026-10-30T23:56:29.862Z","updated":"2026-10-30T23:56:29.862Z","title":"Field Collection for Drupal 7 access bypass via missing parent entity access check","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Field Collection for Drupal 7","kev":false,"epss":0.00228},{"id":"CVE-2026-117656","published":"2026-10-30T23:55:23.426Z","updated":"2026-10-30T23:55:23.426Z","title":"Unverified Sign in with Apple callback parameter can override verified ID token claims","severity":"CRITICAL","score":9.3,"vendor":"pow-auth","product":"assent","kev":false,"epss":0.00228},{"id":"CVE-2026-63414","published":"2026-10-30T22:49:47.431Z","updated":"2026-10-30T22:49:47.431Z","title":"Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps","severity":"HIGH","score":7.6,"vendor":"Shopify","product":"shopify_app","kev":false,"epss":0.00549},{"id":"CVE-2026-63410","published":"2026-10-30T22:48:09.173Z","updated":"2026-11-02T14:50:09.239Z","title":"secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication","severity":"MEDIUM","score":5.9,"vendor":"sgbett","product":"secp256k1-native","kev":false,"epss":0.00281},{"id":"CVE-2026-63400","published":"2026-10-30T22:46:10.154Z","updated":"2026-10-30T22:46:10.154Z","title":"Coop sessions are not invalidated on password reset","severity":"LOW","score":2.3,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00269},{"id":"CVE-2026-63398","published":"2026-10-30T22:44:43.092Z","updated":"2026-11-02T17:56:56.369Z","title":"Coop has SAML cross-tenant authentication bypass","severity":"HIGH","score":7.4,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00184},{"id":"CVE-2026-63401","published":"2026-10-30T22:43:31.969Z","updated":"2026-11-02T14:49:10.279Z","title":"Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser","severity":"MEDIUM","score":5.3,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00269},{"id":"CVE-2026-63396","published":"2026-10-30T22:42:12.245Z","updated":"2026-11-02T17:57:28.824Z","title":"Coop has a data leak via unauthenticated GraphQL Query.allOrgs","severity":"HIGH","score":8.7,"vendor":"roostorg","product":"coop","kev":false,"epss":0.0031},{"id":"CVE-2026-63399","published":"2026-10-30T22:40:29.297Z","updated":"2026-10-30T22:40:29.297Z","title":"Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg","severity":"MEDIUM","score":6.9,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00285},{"id":"CVE-2026-63402","published":"2026-10-30T22:39:07.286Z","updated":"2026-10-30T22:39:07.286Z","title":"i18next: Shared built-in corruption through inherited-key deepExtend recursion","severity":"MEDIUM","score":5.9,"vendor":"i18next","product":"i18next","kev":false,"epss":0.00264},{"id":"CVE-2026-63339","published":"2026-10-30T22:35:32.619Z","updated":"2026-10-30T22:35:32.619Z","title":"IXP Manager has authenticated non-administrator privilege escalation","severity":"HIGH","score":8.8,"vendor":"inex","product":"IXP-Manager","kev":false,"epss":0.00267},{"id":"CVE-2026-63338","published":"2026-10-30T22:24:52.299Z","updated":"2026-10-30T22:24:52.299Z","title":"IXP Manager has Broken Object-Level Authorization","severity":"HIGH","score":8.3,"vendor":"inex","product":"IXP-Manager","kev":false,"epss":0.0026},{"id":"CVE-2026-63393","published":"2026-10-30T22:22:05.735Z","updated":"2026-11-02T14:48:08.509Z","title":"OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution","severity":"HIGH","score":8.7,"vendor":"opensearch-project","product":"sql","kev":false,"epss":0.00499},{"id":"CVE-2026-63378","published":"2026-10-30T22:19:39.743Z","updated":"2026-11-02T17:57:56.881Z","title":"TAKO AI Agent for Okta: Authenticated Python execution through validator bypass","severity":"HIGH","score":8.8,"vendor":"fctr-id","product":"okta-ai-agent","kev":false,"epss":0.00361},{"id":"CVE-2026-63377","published":"2026-10-30T22:18:26.733Z","updated":"2026-10-30T22:18:26.733Z","title":"TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover","severity":"CRITICAL","score":9.8,"vendor":"fctr-id","product":"okta-ai-agent","kev":false,"epss":0.00397},{"id":"CVE-2026-63346","published":"2026-10-30T22:17:02.231Z","updated":"2026-11-02T14:47:20.841Z","title":"Refitter: C# source injection through OpenAPI header parameter names","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035},{"id":"CVE-2026-63344","published":"2026-10-30T22:15:27.846Z","updated":"2026-10-30T22:15:27.846Z","title":"Refitter: C# source injection through OpenAPI content-type map keys","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035},{"id":"CVE-2026-63345","published":"2026-10-30T22:13:53.498Z","updated":"2026-11-02T17:58:04.730Z","title":"Refitter: C# source injection through OpenAPI path keys","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035},{"id":"CVE-2026-61725","published":"2026-10-30T22:10:55.526Z","updated":"2026-11-02T14:46:18.025Z","title":"sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites","severity":"MEDIUM","score":6.1,"vendor":"hasenbanck","product":"sevenz-rust2","kev":false,"epss":0.00138},{"id":"CVE-2026-63341","published":"2026-10-30T22:09:50.280Z","updated":"2026-10-30T22:09:50.280Z","title":"Aedes has Uncaught Exception and Uncontrolled Resource Consumption","severity":"HIGH","score":7.5,"vendor":"moscajs","product":"aedes","kev":false,"epss":0.00365},{"id":"CVE-2026-63121","published":"2026-10-30T22:08:03.004Z","updated":"2026-10-30T22:08:03.004Z","title":"Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules","severity":"MEDIUM","score":6.3,"vendor":"kubewarden","product":"policies","kev":false,"epss":0.00193},{"id":"CVE-2026-62277","published":"2026-10-30T22:06:50.159Z","updated":"2026-11-02T14:44:22.850Z","title":"LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltration","severity":"MEDIUM","score":6.5,"vendor":"hargata","product":"lubelog","kev":false,"epss":0.00316},{"id":"CVE-2026-63224","published":"2026-10-30T22:05:43.581Z","updated":"2026-10-30T22:05:43.581Z","title":"OpenRemote has authenticated SQL injection in crosstab datapoint exports","severity":"HIGH","score":7.2,"vendor":"openremote","product":"openremote","kev":false,"epss":0.00337},{"id":"CVE-2026-63201","published":"2026-10-30T22:03:18.551Z","updated":"2026-11-02T18:08:38.871Z","title":"netopeer2-server logging has format string vulnerability via subtree filter","severity":"HIGH","score":7.1,"vendor":"CESNET","product":"netopeer2","kev":false,"epss":0.00432},{"id":"CVE-2026-55614","published":"2026-10-30T22:01:54.750Z","updated":"2026-10-30T22:01:54.750Z","title":"uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching","severity":"MEDIUM","score":6.9,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.00395},{"id":"CVE-2026-55612","published":"2026-10-30T22:00:19.756Z","updated":"2026-11-02T18:09:13.455Z","title":"uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset","severity":"LOW","score":3.7,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.0029},{"id":"CVE-2026-55613","published":"2026-10-30T21:57:19.199Z","updated":"2026-10-30T21:57:19.199Z","title":"uhttpd: HTTP request smuggling via ubus POST body parse-error desync","severity":"MEDIUM","score":6.9,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.00395},{"id":"CVE-2026-63184","published":"2026-10-30T21:49:06.793Z","updated":"2026-11-02T14:43:07.417Z","title":"Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion","severity":"HIGH","score":7.1,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.00411},{"id":"CVE-2026-63182","published":"2026-10-30T21:46:38.551Z","updated":"2026-10-30T21:46:38.551Z","title":"LightSAML: Signature reference wrapping permits unsigned assertion claims","severity":"HIGH","score":8.1,"vendor":"litesaml","product":"lightsaml","kev":false,"epss":0.00151},{"id":"CVE-2026-62347","published":"2026-10-30T21:35:20.991Z","updated":"2026-10-30T21:35:20.991Z","title":"Element Call exposes shared passwords in logs","severity":"MEDIUM","score":5.9,"vendor":"element-hq","product":"element-call","kev":false,"epss":0.00304},{"id":"CVE-2026-63115","published":"2026-10-30T21:33:55.894Z","updated":"2026-11-02T18:09:53.602Z","title":"ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts","severity":"MEDIUM","score":5.3,"vendor":"TryGhost","product":"ActivityPub","kev":false,"epss":0.00143},{"id":"CVE-2026-55146","published":"2026-10-30T21:32:36.340Z","updated":"2026-10-30T21:32:36.340Z","title":"LORIS has incorrect access checks in issue_tracker","severity":"MEDIUM","score":4.3,"vendor":"aces","product":"Loris","kev":false,"epss":0.00213},{"id":"CVE-2026-55147","published":"2026-10-30T21:29:38.725Z","updated":"2026-11-02T14:41:58.905Z","title":"LORIS has incorrect access checks in API for Imaging Browser","severity":"MEDIUM","score":6.3,"vendor":"aces","product":"Loris","kev":false,"epss":0.00215},{"id":"CVE-2026-118938","published":"2026-10-30T21:19:13.015Z","updated":"2026-10-30T21:19:13.015Z","title":"Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis","severity":"HIGH","score":8.8,"vendor":"trailofbits","product":"fickling","kev":false,"epss":0.00478},{"id":"CVE-2026-111578","published":"2026-10-30T21:17:55.672Z","updated":"2026-10-31T00:53:29.904Z","title":"PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00298},{"id":"CVE-2026-16760","published":"2026-10-30T21:16:31.353Z","updated":"2026-10-30T21:16:31.353Z","title":"Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables","severity":"HIGH","score":8.8,"vendor":"trailofbits","product":"fickling","kev":false,"epss":0.00455},{"id":"CVE-2026-62991","published":"2026-10-30T21:07:04.473Z","updated":"2026-11-02T18:10:19.747Z","title":"Shopper: customer detail IDOR exposes administrator and staff records","severity":"MEDIUM","score":6.5,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00238},{"id":"CVE-2026-62990","published":"2026-10-30T21:05:51.880Z","updated":"2026-10-30T21:05:51.880Z","title":"Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creation","severity":"HIGH","score":8.7,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00243},{"id":"CVE-2026-62989","published":"2026-10-30T21:03:25.723Z","updated":"2026-11-02T16:07:08.743Z","title":"Shopper: missing variant-delete authorization permits destructive single and bulk actions","severity":"HIGH","score":8.1,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00279},{"id":"CVE-2026-59993","published":"2026-10-30T21:01:54.818Z","updated":"2026-10-30T21:01:54.818Z","title":"Picotls has NULL pointer dereference during handshake, when running as a client","severity":"MEDIUM","score":6.5,"vendor":"h2o","product":"picotls","kev":false,"epss":0.00247},{"id":"CVE-2026-62297","published":"2026-10-30T20:57:06.379Z","updated":"2026-11-02T14:53:11.326Z","title":"ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)","severity":"HIGH","score":7.5,"vendor":"Agamnentzar","product":"ag-psd","kev":false,"epss":0.00339},{"id":"CVE-2026-62979","published":"2026-10-30T20:55:56.995Z","updated":"2026-10-30T22:12:34.837Z","title":"jack: upstream error responses expose backend and peer credentials","severity":"HIGH","score":8.4,"vendor":"roziscoding","product":"jack","kev":false,"epss":0.00355},{"id":"CVE-2026-62967","published":"2026-10-30T20:54:52.378Z","updated":"2026-10-30T20:54:52.378Z","title":"ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser","severity":"HIGH","score":8.1,"vendor":"sinamics","product":"ztnet","kev":false,"epss":0.00368},{"id":"CVE-2026-62966","published":"2026-10-30T20:53:37.292Z","updated":"2026-10-30T20:53:37.292Z","title":"ESPAsyncWebServer multipart parser has null-pointer write","severity":"HIGH","score":7.5,"vendor":"ESP32Async","product":"ESPAsyncWebServer","kev":false,"epss":0.00426},{"id":"CVE-2026-62965","published":"2026-10-30T20:45:43.462Z","updated":"2026-10-30T20:45:43.462Z","title":"SABnzbd: Orphan-job path traversal permits arbitrary file deletion","severity":"HIGH","score":7,"vendor":"sabnzbd","product":"sabnzbd","kev":false,"epss":0.00335},{"id":"CVE-2026-62958","published":"2026-10-30T20:44:21.663Z","updated":"2026-11-02T14:55:00.894Z","title":"libriscv: Out of bounds read vuln in the ELF parser (Denial of service)","severity":"HIGH","score":7.9,"vendor":"libriscv","product":"libriscv","kev":false,"epss":0.00205},{"id":"CVE-2026-62968","published":"2026-10-30T20:43:03.608Z","updated":"2026-10-30T22:12:41.610Z","title":"Dream Displays has command-line argument injection in yt-dlp invocation","severity":"HIGH","score":8.7,"vendor":"arsmotorin","product":"dreamdisplays","kev":false,"epss":0.00427},{"id":"CVE-2026-62860","published":"2026-10-30T20:40:46.993Z","updated":"2026-10-30T20:40:46.993Z","title":"Picsou vulnerable to login timing attack","severity":"MEDIUM","score":5.3,"vendor":"Zoeille","product":"picsou-finance","kev":false,"epss":0.00236},{"id":"CVE-2026-54610","published":"2026-10-30T20:39:19.805Z","updated":"2026-10-30T20:39:19.805Z","title":"LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling","severity":"LOW","score":3.3,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00118},{"id":"CVE-2026-62250","published":"2026-10-30T20:37:47.927Z","updated":"2026-10-30T22:12:48.952Z","title":"LibreDWG: unbounded allocation in pre-R13 DWG entity decoding","severity":"MEDIUM","score":5.5,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00165},{"id":"CVE-2026-62254","published":"2026-10-30T20:36:09.037Z","updated":"2026-10-30T22:12:55.917Z","title":"LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing","severity":"MEDIUM","score":5.5,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00165},{"id":"CVE-2026-62864","published":"2026-10-30T20:34:42.963Z","updated":"2026-11-02T15:05:18.669Z","title":"Ring's nested-params middleware has inefficient regular expression complexity","severity":"HIGH","score":7.5,"vendor":"ring-clojure","product":"ring","kev":false,"epss":0.00339},{"id":"CVE-2026-62863","published":"2026-10-30T20:33:14.561Z","updated":"2026-10-30T20:33:14.561Z","title":"MoLing: unauthenticated SSE and wildcard CORS expose tool sessions","severity":"CRITICAL","score":9.6,"vendor":"gojue","product":"moling","kev":false,"epss":0.00314},{"id":"CVE-2026-119343","published":"2026-10-30T20:31:48.374Z","updated":"2026-11-02T15:03:47.434Z","title":"Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read","severity":"MEDIUM","score":6.8,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00284},{"id":"CVE-2026-40573","published":"2026-10-30T20:31:13.209Z","updated":"2026-10-30T20:31:13.209Z","title":"NovumOS: Nova Interpreter Privilege Escalation","severity":"HIGH","score":8.6,"vendor":"MinecAnton209","product":"NovumOS","kev":false,"epss":0.00129},{"id":"CVE-2026-62849","published":"2026-10-30T20:29:16.880Z","updated":"2026-10-30T22:13:05.155Z","title":"ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection","severity":"CRITICAL","score":9.1,"vendor":"mqttsnet","product":"thinglinks","kev":false,"epss":0.00497},{"id":"CVE-2026-119342","published":"2026-10-30T20:28:30.049Z","updated":"2026-10-30T20:28:30.049Z","title":"Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass","severity":"MEDIUM","score":5.3,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00433},{"id":"CVE-2026-62853","published":"2026-10-30T20:28:07.829Z","updated":"2026-10-30T20:28:07.829Z","title":"ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks","severity":"CRITICAL","score":9.9,"vendor":"mqttsnet","product":"thinglinks","kev":false,"epss":0.00406},{"id":"CVE-2026-117645","published":"2026-10-30T20:25:06.758Z","updated":"2026-10-30T20:25:06.758Z","title":"Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1","severity":"MEDIUM","score":5.3,"vendor":"phoenixframework","product":"phoenix_html","kev":false,"epss":0.00315},{"id":"CVE-2026-119341","published":"2026-10-30T20:24:56.121Z","updated":"2026-11-02T15:02:43.092Z","title":"Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor","severity":"NONE","score":0,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.0027},{"id":"CVE-2026-62847","published":"2026-10-30T20:23:50.882Z","updated":"2026-10-30T22:13:12.107Z","title":"Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)","severity":"HIGH","score":8.2,"vendor":"metalama","product":"Metalama","kev":false,"epss":0.00151},{"id":"CVE-2026-119340","published":"2026-10-30T20:22:46.387Z","updated":"2026-10-30T20:22:46.387Z","title":"Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions","severity":"MEDIUM","score":5.5,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00121},{"id":"CVE-2026-117666","published":"2026-10-30T20:22:16.466Z","updated":"2026-10-30T20:22:16.466Z","title":"ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary","severity":"CRITICAL","score":9.1,"vendor":"deadtrickster","product":"ssl_verify_fun","kev":false,"epss":0.0019},{"id":"CVE-2026-62848","published":"2026-10-30T20:19:55.876Z","updated":"2026-10-30T20:19:55.876Z","title":"Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution","severity":"HIGH","score":7.3,"vendor":"metalama","product":"Metalama","kev":false,"epss":0.00186},{"id":"CVE-2026-62300","published":"2026-10-30T20:15:23.238Z","updated":"2026-11-02T15:01:53.210Z","title":"Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources","severity":"MEDIUM","score":6.5,"vendor":"filecoin-project","product":"filecoin-pin","kev":false,"epss":0.00249},{"id":"CVE-2026-119339","published":"2026-10-30T20:13:37.931Z","updated":"2026-10-30T22:13:31.619Z","title":"Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service","severity":"MEDIUM","score":5.5,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00165},{"id":"CVE-2026-58412","published":"2026-10-30T20:12:50.288Z","updated":"2026-10-30T20:12:50.288Z","title":"Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow","severity":"HIGH","score":8.2,"vendor":"filecoin-project","product":"filecoin-pin","kev":false,"epss":0.00228},{"id":"CVE-2026-119338","published":"2026-10-30T20:12:29.030Z","updated":"2026-10-30T20:12:29.030Z","title":"Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages","severity":"MEDIUM","score":6.9,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00138},{"id":"CVE-2026-119337","published":"2026-10-30T20:10:27.373Z","updated":"2026-10-30T20:10:27.373Z","title":"RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization","severity":"HIGH","score":7.1,"vendor":"infiniflow","product":"ragflow","kev":false,"epss":0.00335},{"id":"CVE-2026-55098","published":"2026-10-30T20:09:04.909Z","updated":"2026-11-02T15:00:56.869Z","title":"Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735","severity":"MEDIUM","score":6.5,"vendor":"Basekick-Labs","product":"arc","kev":false,"epss":0.00319},{"id":"CVE-2026-62333","published":"2026-10-30T20:08:48.566Z","updated":"2026-10-30T20:08:48.566Z","title":"OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots","severity":"HIGH","score":8.7,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00396},{"id":"CVE-2026-62334","published":"2026-10-30T20:06:32.957Z","updated":"2026-10-30T22:13:55.245Z","title":"OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification","severity":"HIGH","score":8.7,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00525},{"id":"CVE-2026-119336","published":"2026-10-30T20:05:40.100Z","updated":"2026-10-30T22:14:23.468Z","title":"Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink","severity":"HIGH","score":7.8,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00247},{"id":"CVE-2026-119335","published":"2026-10-30T20:03:32.975Z","updated":"2026-10-30T20:03:32.975Z","title":"Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489  fix bypass","severity":"HIGH","score":7.8,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00228},{"id":"CVE-2026-62335","published":"2026-10-30T20:03:14.543Z","updated":"2026-10-30T20:03:14.543Z","title":"OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments","severity":"MEDIUM","score":6.9,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00379},{"id":"CVE-2026-119334","published":"2026-10-30T20:01:59.115Z","updated":"2026-11-02T14:59:33.186Z","title":"Pi-hole: file:// adlist read check and curl can resolve different files","severity":"LOW","score":2.2,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00343},{"id":"CVE-2026-62337","published":"2026-10-30T20:00:55.328Z","updated":"2026-11-02T14:58:37.998Z","title":"SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements","severity":"MEDIUM","score":6.9,"vendor":"axiom-crypto","product":"snark-verifier","kev":false,"epss":0.00301},{"id":"CVE-2026-119333","published":"2026-10-30T19:59:51.737Z","updated":"2026-11-02T14:57:15.884Z","title":"draw.io Desktop allows Windows executable search-path hijacking","severity":"HIGH","score":7.8,"vendor":"jgraph","product":"drawio-desktop","kev":false,"epss":0.00136},{"id":"CVE-2026-61618","published":"2026-10-30T19:59:26.867Z","updated":"2026-10-30T19:59:26.867Z","title":"SNARK Verifier: noncanonical accumulator limb decoding","severity":"MEDIUM","score":6.9,"vendor":"axiom-crypto","product":"snark-verifier","kev":false,"epss":0.00371},{"id":"CVE-2026-119332","published":"2026-10-30T19:57:47.291Z","updated":"2026-10-30T19:57:47.291Z","title":"Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()","severity":"HIGH","score":8.8,"vendor":"LadybirdBrowser","product":"ladybird","kev":false,"epss":0.00242},{"id":"CVE-2026-61620","published":"2026-10-30T19:56:19.987Z","updated":"2026-10-30T22:14:44.078Z","title":"HoneySQL unchecked entity names can lead to SQL injection results","severity":"CRITICAL","score":9.8,"vendor":"seancorfield","product":"honeysql","kev":false,"epss":0.00392},{"id":"CVE-2026-119331","published":"2026-10-30T19:56:01.743Z","updated":"2026-10-30T22:14:59.829Z","title":"Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation","severity":"HIGH","score":7.1,"vendor":"LadybirdBrowser","product":"ladybird","kev":false,"epss":0.00183},{"id":"CVE-2026-116252","published":"2026-10-30T19:55:20.208Z","updated":"2026-10-30T19:55:20.208Z","title":"pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00258},{"id":"CVE-2026-116251","published":"2026-10-30T19:55:19.613Z","updated":"2026-10-30T19:55:19.613Z","title":"pgAdmin 4: A user's other sessions survive a change of their password","severity":"LOW","score":2.3,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00108},{"id":"CVE-2026-116250","published":"2026-10-30T19:55:18.713Z","updated":"2026-10-30T19:55:18.713Z","title":"pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check","severity":"HIGH","score":7.3,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00096},{"id":"CVE-2026-116249","published":"2026-10-30T19:55:18.121Z","updated":"2026-10-30T19:55:18.121Z","title":"pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory","severity":"HIGH","score":7.2,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00183},{"id":"CVE-2026-116248","published":"2026-10-30T19:55:17.531Z","updated":"2026-10-30T19:55:17.531Z","title":"pgAdmin 4: Non-administrators can share a server with every user","severity":"MEDIUM","score":6,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00228},{"id":"CVE-2026-116247","published":"2026-10-30T19:55:16.935Z","updated":"2026-10-30T19:55:16.935Z","title":"pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00127},{"id":"CVE-2026-116246","published":"2026-10-30T19:55:16.276Z","updated":"2026-10-30T19:55:16.276Z","title":"pgAdmin 4: Server passwords are left in pgAdmin's process environment","severity":"HIGH","score":7,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.0019},{"id":"CVE-2026-116245","published":"2026-10-30T19:55:15.679Z","updated":"2026-10-30T19:55:15.679Z","title":"pgAdmin 4: Connection services are not restricted in server mode","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00157},{"id":"CVE-2026-116244","published":"2026-10-30T19:55:15.101Z","updated":"2026-10-30T19:55:15.101Z","title":"pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00277},{"id":"CVE-2026-116243","published":"2026-10-30T19:55:14.513Z","updated":"2026-10-30T19:55:14.513Z","title":"pgAdmin 4: Utility binary path can point at a shared storage directory","severity":"HIGH","score":7.7,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00322},{"id":"CVE-2026-116242","published":"2026-10-30T19:55:13.843Z","updated":"2026-10-30T19:55:13.843Z","title":"pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00232},{"id":"CVE-2026-116241","published":"2026-10-30T19:55:13.194Z","updated":"2026-10-30T19:55:13.194Z","title":"pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier","severity":"CRITICAL","score":9.4,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00324},{"id":"CVE-2026-116240","published":"2026-10-30T19:55:12.603Z","updated":"2026-10-30T19:55:12.603Z","title":"pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00264},{"id":"CVE-2026-116239","published":"2026-10-30T19:55:12.002Z","updated":"2026-10-30T19:55:12.002Z","title":"pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username","severity":"HIGH","score":8.9,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00389},{"id":"CVE-2026-116238","published":"2026-10-30T19:55:11.056Z","updated":"2026-10-30T19:55:11.056Z","title":"pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks","severity":"CRITICAL","score":9.2,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00404},{"id":"CVE-2026-61694","published":"2026-10-30T19:55:05.539Z","updated":"2026-10-30T19:55:05.539Z","title":"go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)","severity":"LOW","score":3.7,"vendor":"LeJamon","product":"go-xrpl","kev":false,"epss":0.00275},{"id":"CVE-2026-119330","published":"2026-10-30T19:53:29.214Z","updated":"2026-10-30T19:53:29.214Z","title":"Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API","severity":"LOW","score":3.5,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00222},{"id":"CVE-2026-119329","published":"2026-10-30T19:51:23.105Z","updated":"2026-11-02T16:08:15.406Z","title":"Immich: Partner \"view-only\" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers","severity":"MEDIUM","score":4.3,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00251},{"id":"CVE-2026-119328","published":"2026-10-30T19:50:02.460Z","updated":"2026-10-30T19:50:02.460Z","title":"Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service","severity":"MEDIUM","score":6.5,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00436},{"id":"CVE-2026-115829","published":"2026-10-30T19:47:31.936Z","updated":"2026-10-30T19:57:00.723Z","title":"Secret Server partial login bypass","severity":"HIGH","score":8.7,"vendor":"Delinea","product":"Secret Server","kev":false,"epss":0.00312},{"id":"CVE-2026-115830","published":"2026-10-30T19:46:55.330Z","updated":"2026-10-30T19:58:06.797Z","title":"Secret Server JWT issuance error","severity":"HIGH","score":8.7,"vendor":"Delinea","product":"Secret Server","kev":false,"epss":0.00294},{"id":"CVE-2026-115828","published":"2026-10-30T19:46:25.446Z","updated":"2026-10-30T19:58:57.299Z","title":"Secret Server device validation error","severity":"MEDIUM","score":5.1,"vendor":"Delinea","product":"Secret Server","kev":false,"epss":0.00359},{"id":"CVE-2026-61850","published":"2026-10-30T19:33:01.720Z","updated":"2026-10-30T19:33:01.720Z","title":"Kargo: Privilege escalation via Project RBAC management in the Kargo API","severity":"CRITICAL","score":9.3,"vendor":"akuity","product":"kargo","kev":false,"epss":0.00359},{"id":"CVE-2026-55598","published":"2026-10-30T19:31:04.617Z","updated":"2026-10-30T19:54:47.327Z","title":"PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)","severity":"CRITICAL","score":9.1,"vendor":"madeofpendletonwool","product":"PinePods","kev":false,"epss":0.00326},{"id":"CVE-2026-62302","published":"2026-10-30T19:29:46.456Z","updated":"2026-10-30T22:15:09.861Z","title":"MyTube: Unauthenticated Media Access via Static Routes Bypassing Login","severity":"HIGH","score":8.7,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.00462},{"id":"CVE-2026-62301","published":"2026-10-30T19:26:59.821Z","updated":"2026-10-30T19:26:59.821Z","title":"MyTube: Visitor Can Access Hidden Video Metadata and Content","severity":"HIGH","score":7.1,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.00412},{"id":"CVE-2026-55493","published":"2026-10-30T19:25:29.640Z","updated":"2026-10-30T19:25:29.640Z","title":"HotCRP: comment-author search exposes anonymous commenter identities","severity":"MEDIUM","score":6.5,"vendor":"kohler","product":"hotcrp","kev":false,"epss":0.003},{"id":"CVE-2026-62284","published":"2026-10-30T19:23:39.257Z","updated":"2026-10-30T22:15:16.751Z","title":"OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy","severity":"HIGH","score":8.6,"vendor":"osac-project","product":"osac-operator","kev":false,"epss":0.00505},{"id":"CVE-2026-119730","published":"2026-10-30T19:14:44.463Z","updated":"2026-10-30T19:14:44.463Z","title":"Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing","severity":"MEDIUM","score":5.1,"vendor":"Maxthon Technology Limited","product":"Maxthon Browser for Android","kev":false,"epss":0.00248},{"id":"CVE-2026-78403","published":"2026-10-30T19:12:56.080Z","updated":"2026-10-30T20:02:33.210Z","title":"Unauthenticated Stack Buffer Overflow in Sentinel Keys Server","severity":"CRITICAL","score":9.3,"vendor":"Thalesgroup","product":"Sentinel Keys Server","kev":false,"epss":0.00577},{"id":"CVE-2026-78402","published":"2026-10-30T19:11:53.889Z","updated":"2026-10-30T20:00:42.731Z","title":"Stack Buffer Overflow in Sentinel Keys Server","severity":"HIGH","score":7.3,"vendor":"Thalesgroup","product":"Sentinel Keys Server","kev":false,"epss":0.00147},{"id":"CVE-2026-7005","published":"2026-10-30T19:01:12.466Z","updated":"2026-10-30T19:52:12.878Z","title":"WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding","severity":"MEDIUM","score":5.3,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00124},{"id":"CVE-2026-62331","published":"2026-10-30T19:00:25.777Z","updated":"2026-10-30T19:46:25.082Z","title":"praktor: Telegram upload traversal permits persistent agent instruction injection","severity":"HIGH","score":8.2,"vendor":"mtzanidakis","product":"praktor","kev":false,"epss":0.00778},{"id":"CVE-2026-7004","published":"2026-10-30T18:59:23.159Z","updated":"2026-10-30T22:15:23.482Z","title":"WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter","severity":"MEDIUM","score":5.1,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00268},{"id":"CVE-2026-61586","published":"2026-10-30T18:59:14.076Z","updated":"2026-10-30T18:59:14.076Z","title":"Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider)","severity":"HIGH","score":8.2,"vendor":"copernik-eu","product":"copernik-xml-factory","kev":false,"epss":0.00357},{"id":"CVE-2026-7003","published":"2026-10-30T18:58:29.306Z","updated":"2026-10-30T18:58:29.306Z","title":"WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure","severity":"MEDIUM","score":6.9,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00294},{"id":"CVE-2026-62303","published":"2026-10-30T18:58:10.308Z","updated":"2026-10-30T18:58:10.308Z","title":"Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)","severity":"MEDIUM","score":5.9,"vendor":"pistacheio","product":"pistache","kev":false,"epss":0.00308},{"id":"CVE-2026-62298","published":"2026-10-30T18:56:59.029Z","updated":"2026-10-30T22:15:29.845Z","title":"asn1c: ASAN crash with decode of open types","severity":"NONE","score":0,"vendor":"mouse07410","product":"asn1c","kev":false,"epss":0.00502},{"id":"CVE-2026-59978","published":"2026-10-30T18:53:04.957Z","updated":"2026-10-30T19:50:24.134Z","title":"AdminNeo: version-cache array injection causes persistent denial of service","severity":"HIGH","score":7.5,"vendor":"adminneo-org","product":"adminneo","kev":false,"epss":0.00646},{"id":"CVE-2026-120046","published":"2026-10-30T18:52:58.489Z","updated":"2026-10-30T18:52:58.489Z","title":"Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History","severity":"MEDIUM","score":6,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.003},{"id":"CVE-2026-120007","published":"2026-10-30T18:52:57.828Z","updated":"2026-10-30T19:42:51.208Z","title":"NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid","severity":"MEDIUM","score":6.9,"vendor":"NodeBB","product":"NodeBB","kev":false,"epss":0.00338},{"id":"CVE-2026-119842","published":"2026-10-30T18:51:12.598Z","updated":"2026-10-30T22:15:36.211Z","title":"Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00332},{"id":"CVE-2026-119727","published":"2026-10-30T18:51:08.851Z","updated":"2026-11-02T20:17:40.818Z","title":"Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00252},{"id":"CVE-2026-61848","published":"2026-10-30T18:45:20.036Z","updated":"2026-10-30T18:45:20.036Z","title":"Crass: Non-ASCII characters cause superlinear CPU consumption","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486},{"id":"CVE-2026-61847","published":"2026-10-30T18:44:22.330Z","updated":"2026-10-30T22:15:42.844Z","title":"Crass: A large number of adjacent CSS comments can trigger a SystemStackError","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486},{"id":"CVE-2026-61846","published":"2026-10-30T18:43:25.373Z","updated":"2026-10-30T18:43:25.373Z","title":"Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486},{"id":"CVE-2026-61845","published":"2026-10-30T18:41:58.369Z","updated":"2026-10-30T19:41:24.227Z","title":"Crass: Large numeric exponents cause CPU and memory denial of service","severity":"HIGH","score":8.9,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00386},{"id":"CVE-2026-46560","published":"2026-10-30T18:36:24.763Z","updated":"2026-10-30T18:36:24.763Z","title":"OpenAM Authentication Bypass via RADIUS Spoofing","severity":"HIGH","score":7.5,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00186},{"id":"CVE-2026-119729","published":"2026-10-30T18:34:39.838Z","updated":"2026-10-30T20:00:57.578Z","title":"Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.004},{"id":"CVE-2026-119728","published":"2026-10-30T18:34:36.945Z","updated":"2026-10-30T20:00:57.732Z","title":"Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00163},{"id":"CVE-2026-62264","published":"2026-10-30T18:32:18.093Z","updated":"2026-10-30T18:32:18.093Z","title":"PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY","severity":"HIGH","score":7.5,"vendor":"SylphxAI","product":"pdf-reader-mcp","kev":false,"epss":0.00452},{"id":"CVE-2026-118090","published":"2026-10-30T18:30:57.420Z","updated":"2026-10-30T18:50:06.371Z","title":"WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Stylemix","product":"MasterStudy LMS","kev":false,"epss":0.00446},{"id":"CVE-2026-118089","published":"2026-10-30T18:30:56.607Z","updated":"2026-10-30T18:50:06.521Z","title":"WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"RexTheme","product":"Product Feed Manager","kev":false,"epss":0.0039},{"id":"CVE-2026-118086","published":"2026-10-30T18:30:54.718Z","updated":"2026-10-30T22:15:49.368Z","title":"WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"Hakan Ozevin","product":"WP BASE Booking","kev":false,"epss":0.0036},{"id":"CVE-2026-116862","published":"2026-10-30T18:30:53.968Z","updated":"2026-10-30T18:50:06.680Z","title":"WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Acato","product":"WP REST Cache","kev":false,"epss":0.00317},{"id":"CVE-2026-116861","published":"2026-10-30T18:30:53.202Z","updated":"2026-10-30T18:50:06.822Z","title":"WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"wpdesk","product":"Flexible Chat","kev":false,"epss":0.00335},{"id":"CVE-2026-116854","published":"2026-10-30T18:30:52.464Z","updated":"2026-10-30T18:50:06.975Z","title":"WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Aguila Technologies","product":"WP Customer Area","kev":false,"epss":0.00196},{"id":"CVE-2026-116853","published":"2026-10-30T18:30:51.710Z","updated":"2026-10-30T18:50:07.134Z","title":"WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Nexcess","product":"GiveWP","kev":false,"epss":0.00207},{"id":"CVE-2026-116852","published":"2026-10-30T18:30:50.961Z","updated":"2026-10-30T22:15:55.746Z","title":"WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Marketing Fire","product":"Widget Options","kev":false,"epss":0.00595},{"id":"CVE-2026-116851","published":"2026-10-30T18:30:50.217Z","updated":"2026-10-30T18:50:07.289Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.0019},{"id":"CVE-2026-116847","published":"2026-10-30T18:30:49.476Z","updated":"2026-10-30T18:50:07.433Z","title":"WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Kitae Park","product":"Mang Board WP","kev":false,"epss":0.0019},{"id":"CVE-2026-116410","published":"2026-10-30T18:30:48.730Z","updated":"2026-10-30T18:50:07.593Z","title":"WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"masteriyo","product":"Masteriyo - LMS","kev":false,"epss":0.00207},{"id":"CVE-2026-116405","published":"2026-10-30T18:30:47.976Z","updated":"2026-10-30T18:50:07.747Z","title":"WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019},{"id":"CVE-2026-116401","published":"2026-10-30T18:30:47.215Z","updated":"2026-10-30T22:16:02.694Z","title":"WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"RealMag777","product":"HUSKY","kev":false,"epss":0.00317},{"id":"CVE-2026-116386","published":"2026-10-30T18:30:46.458Z","updated":"2026-10-30T18:50:07.905Z","title":"WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Cozy Vision Technologies Pvt. Ltd.","product":"SMS Alert Order Notifications","kev":false,"epss":0.00349},{"id":"CVE-2026-115947","published":"2026-10-30T18:30:45.703Z","updated":"2026-10-30T18:50:08.056Z","title":"WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"RealMag777","product":"HUSKY","kev":false,"epss":0.00219},{"id":"CVE-2026-115604","published":"2026-10-30T18:30:44.953Z","updated":"2026-10-30T18:50:08.230Z","title":"WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability","severity":"MEDIUM","score":5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00425},{"id":"CVE-2026-114711","published":"2026-10-30T18:30:44.199Z","updated":"2026-10-30T18:50:08.382Z","title":"WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"MultiVendorX","product":"MultiVendorX","kev":false,"epss":0.00235},{"id":"CVE-2026-107868","published":"2026-10-30T18:30:43.460Z","updated":"2026-10-30T22:16:09.766Z","title":"WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITHEMES","product":"YITH WooCommerce Product Add-Ons","kev":false,"epss":0.00304},{"id":"CVE-2026-105077","published":"2026-10-30T18:30:42.711Z","updated":"2026-10-30T19:00:18.568Z","title":"WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00228},{"id":"CVE-2026-94175","published":"2026-10-30T18:30:41.949Z","updated":"2026-10-30T19:00:18.724Z","title":"WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Saad Iqbal","product":"All In One Login","kev":false,"epss":0.00184},{"id":"CVE-2026-90888","published":"2026-10-30T18:30:41.184Z","updated":"2026-10-30T19:00:18.867Z","title":"WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"leadsnap","product":"LeadSnap","kev":false,"epss":0.0032},{"id":"CVE-2026-78527","published":"2026-10-30T18:30:40.428Z","updated":"2026-10-30T22:16:24.495Z","title":"WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Testimonial Slider","kev":false,"epss":0.00374},{"id":"CVE-2026-73186","published":"2026-10-30T18:30:39.660Z","updated":"2026-10-30T19:00:19.002Z","title":"WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"ShortPixel","product":"Enable Media Replace","kev":false,"epss":0.00391},{"id":"CVE-2026-54855","published":"2026-10-30T18:30:38.911Z","updated":"2026-10-30T19:00:19.152Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00228},{"id":"CVE-2026-54854","published":"2026-10-30T18:30:38.149Z","updated":"2026-10-30T19:00:19.289Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability","severity":"MEDIUM","score":6.3,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.0024},{"id":"CVE-2026-54850","published":"2026-10-30T18:30:37.392Z","updated":"2026-10-30T19:00:19.472Z","title":"WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"magepeopleteam","product":"Booking and Rental Manager","kev":false,"epss":0.00363},{"id":"CVE-2026-48201","published":"2026-10-30T18:30:36.622Z","updated":"2026-10-30T22:16:45.956Z","title":"WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Raul P.","product":"Fast Velocity Minify","kev":false,"epss":0.00228},{"id":"CVE-2026-39786","published":"2026-10-30T18:30:35.811Z","updated":"2026-10-30T19:00:19.629Z","title":"WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"bookingalgorithms","product":"BA Book Everything","kev":false,"epss":0.00228},{"id":"CVE-2026-39738","published":"2026-10-30T18:30:34.923Z","updated":"2026-11-01T10:33:20.156Z","title":"WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.00408},{"id":"CVE-2026-39734","published":"2026-10-30T18:30:34.168Z","updated":"2026-10-30T19:00:19.915Z","title":"WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability","severity":"HIGH","score":7.5,"vendor":"Saad Iqbal","product":"WP EasyPay","kev":false,"epss":0.0046},{"id":"CVE-2026-39732","published":"2026-10-30T18:30:33.419Z","updated":"2026-10-30T19:00:20.047Z","title":"WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Ivijan-Stefan Stipic","product":"Transliterator","kev":false,"epss":0.00323},{"id":"CVE-2026-28160","published":"2026-10-30T18:30:32.657Z","updated":"2026-11-02T06:29:27.699Z","title":"WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.00228},{"id":"CVE-2026-27061","published":"2026-10-30T18:30:31.909Z","updated":"2026-10-30T19:00:20.210Z","title":"WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"wpeverest","product":"User Registration","kev":false,"epss":0.00235},{"id":"CVE-2026-119526","published":"2026-10-30T18:30:31.153Z","updated":"2026-10-30T19:00:20.359Z","title":"WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Royal Event","kev":false,"epss":0.00408},{"id":"CVE-2026-62162","published":"2026-10-30T18:30:20.005Z","updated":"2026-10-30T22:17:11.419Z","title":"Hydra: Deposit Claim omits Head state-token spending requirement","severity":"HIGH","score":8.2,"vendor":"cardano-scaling","product":"hydra","kev":false,"epss":0.00367},{"id":"CVE-2026-62160","published":"2026-10-30T18:26:29.248Z","updated":"2026-10-30T19:39:33.382Z","title":"Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware","severity":"HIGH","score":8.7,"vendor":"daptin","product":"daptin","kev":false,"epss":0.00417},{"id":"CVE-2026-61854","published":"2026-10-30T18:25:28.484Z","updated":"2026-10-30T18:25:28.484Z","title":"VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth","severity":"HIGH","score":8.2,"vendor":"jackh54","product":"VoiceSentinel","kev":false,"epss":0.00243},{"id":"CVE-2026-61840","published":"2026-10-30T18:23:22.213Z","updated":"2026-10-30T22:17:17.865Z","title":"Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services","severity":"LOW","score":2.3,"vendor":"vantern-org","product":"questbot","kev":false,"epss":0.00299},{"id":"CVE-2026-62056","published":"2026-10-30T18:14:58.428Z","updated":"2026-10-30T18:33:56.893Z","title":"WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00272},{"id":"CVE-2026-62023","published":"2026-10-30T18:14:07.501Z","updated":"2026-10-30T18:49:58.188Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.0025},{"id":"CVE-2026-62019","published":"2026-10-30T18:13:23.687Z","updated":"2026-10-30T18:49:58.331Z","title":"WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"BookIt","kev":false,"epss":0.00255},{"id":"CVE-2026-104674","published":"2026-10-30T18:12:56.057Z","updated":"2026-10-30T18:49:58.474Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.0025},{"id":"CVE-2026-62047","published":"2026-10-30T18:12:37.091Z","updated":"2026-10-30T18:49:58.628Z","title":"WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"Event Tickets","kev":false,"epss":0.00255},{"id":"CVE-2026-39739","published":"2026-10-30T18:11:41.349Z","updated":"2026-10-30T18:34:07.113Z","title":"WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"Ultimate Addons for Elementor - Lite","kev":false,"epss":0.00204},{"id":"CVE-2026-73322","published":"2026-10-30T18:10:09.341Z","updated":"2026-10-30T19:04:44.187Z","title":"Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Pinot","kev":false,"epss":0.00177},{"id":"CVE-2026-52710","published":"2026-10-30T18:09:43.100Z","updated":"2026-10-30T19:00:20.558Z","title":"WordPress GIFTiT &#8211; Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ithemelandco","product":"GIFTiT &#8211; Free Gifts for WooCommerce","kev":false,"epss":0.003},{"id":"CVE-2026-62057","published":"2026-10-30T18:08:54.944Z","updated":"2026-10-30T19:00:20.717Z","title":"WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Fahim Reza","product":"Divi Contact Form 7","kev":false,"epss":0.003},{"id":"CVE-2026-62121","published":"2026-10-30T18:06:19.970Z","updated":"2026-10-30T18:49:58.770Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.00408},{"id":"CVE-2026-62122","published":"2026-10-30T18:05:54.717Z","updated":"2026-10-30T18:49:58.921Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00272},{"id":"CVE-2026-119117","published":"2026-10-30T18:05:08.411Z","updated":"2026-10-30T20:01:39.618Z","title":"Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java","severity":"HIGH","score":8.2,"vendor":"AWS","product":"amazon-kinesis-producer","kev":false,"epss":0.00151},{"id":"CVE-2026-119777","published":"2026-10-30T17:59:41.041Z","updated":"2026-10-30T19:20:39.082Z","title":"Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00186},{"id":"CVE-2026-119979","published":"2026-10-30T17:48:43.705Z","updated":"2026-10-30T18:34:20.363Z","title":"LM Studio before 0.4.22+1 Path Traversal via Model Downloader","severity":"HIGH","score":8.7,"vendor":"Element Labs","product":"LM Studio","kev":false,"epss":0.00397},{"id":"CVE-2026-119620","published":"2026-10-30T17:45:15.786Z","updated":"2026-10-30T18:34:44.346Z","title":"37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"37954679","product":"cak-filemanagement-system","kev":false,"epss":0.00454},{"id":"CVE-2026-84243","published":"2026-10-30T17:43:35.178Z","updated":"2026-10-31T03:56:44.588Z","title":"gettext: Directory traversal via the LANGUAGE environment variable","severity":"HIGH","score":7,"vendor":"The GNU C Library","product":"glibc","kev":false,"epss":0.00297},{"id":"CVE-2026-119086","published":"2026-10-30T17:33:51.535Z","updated":"2026-10-30T20:04:33.929Z","title":"Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel","severity":"HIGH","score":8.2,"vendor":"FreeRTOS","product":"FreeRTOS-Kernel","kev":false,"epss":0.00155},{"id":"CVE-2026-118697","published":"2026-10-30T17:31:26.886Z","updated":"2026-11-02T16:19:28.345Z","title":"In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion…","severity":"CRITICAL","score":9,"vendor":"JetBrains","product":"Toolbox App","kev":false,"epss":0.00275},{"id":"CVE-2026-118696","published":"2026-10-30T17:31:04.317Z","updated":"2026-10-31T03:56:43.807Z","title":"In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…","severity":"HIGH","score":8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00273},{"id":"CVE-2026-119978","published":"2026-10-30T17:28:31.216Z","updated":"2026-10-30T17:28:31.216Z","title":"Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00317},{"id":"CVE-2026-69446","published":"2026-10-30T17:23:20.903Z","updated":"2026-10-31T03:56:42.238Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"MEDIUM","score":4.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00253},{"id":"CVE-2026-119764","published":"2026-10-30T17:19:55.892Z","updated":"2026-10-30T17:19:55.892Z","title":"Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview","severity":"HIGH","score":7.4,"vendor":"its-a-feature","product":"Mythic","kev":false,"epss":0.00317},{"id":"CVE-2026-119763","published":"2026-10-30T17:19:55.269Z","updated":"2026-10-30T19:15:19.502Z","title":"changelog.com before commit 7b35e829 Missing Authorization via Preview Routes","severity":"MEDIUM","score":6.9,"vendor":"thechangelog","product":"changelog.com","kev":false,"epss":0.00486},{"id":"CVE-2026-119762","published":"2026-10-30T17:19:54.568Z","updated":"2026-10-30T18:35:08.753Z","title":"Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests","severity":"HIGH","score":8.7,"vendor":"Axigen","product":"Axigen Mail Server","kev":false,"epss":0.00507},{"id":"CVE-2026-119761","published":"2026-10-30T17:19:53.886Z","updated":"2026-10-30T17:19:53.886Z","title":"Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name","severity":"MEDIUM","score":5.3,"vendor":"Axigen","product":"Axigen Mail Server","kev":false,"epss":0.00319},{"id":"CVE-2026-119760","published":"2026-10-30T17:19:53.212Z","updated":"2026-10-30T17:19:53.212Z","title":"sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()","severity":"HIGH","score":8.7,"vendor":"dlundquist","product":"sniproxy","kev":false,"epss":0.00477},{"id":"CVE-2026-76012","published":"2026-10-30T17:15:33.570Z","updated":"2026-10-30T18:08:55.506Z","title":"Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload","severity":"HIGH","score":7.5,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00829},{"id":"CVE-2026-119113","published":"2026-10-30T17:15:33.218Z","updated":"2026-10-30T18:08:55.651Z","title":"GeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00365},{"id":"CVE-2026-105894","published":"2026-10-30T17:15:32.867Z","updated":"2026-10-30T18:08:56.279Z","title":"Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update","severity":"HIGH","score":8.8,"vendor":"akbilisim","product":"Ak Framework","kev":false,"epss":0.00318},{"id":"CVE-2026-115869","published":"2026-10-30T17:15:32.527Z","updated":"2026-10-30T18:08:57.238Z","title":"Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field","severity":"MEDIUM","score":6.4,"vendor":"themifyme","product":"Themify Builder","kev":false,"epss":0.00297},{"id":"CVE-2026-109984","published":"2026-10-30T17:15:32.163Z","updated":"2026-10-30T18:08:57.382Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments","severity":"MEDIUM","score":5.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00401},{"id":"CVE-2026-104744","published":"2026-10-30T17:15:31.809Z","updated":"2026-10-30T18:35:23.501Z","title":"Independent Analytics Pro <= 2.15.5 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter","severity":"HIGH","score":7.2,"vendor":"Independent Analytics","product":"Independent Analytics Pro","kev":false,"epss":0.00283},{"id":"CVE-2026-112365","published":"2026-10-30T17:15:31.461Z","updated":"2026-10-30T18:08:57.531Z","title":"easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00528},{"id":"CVE-2026-115346","published":"2026-10-30T17:15:31.119Z","updated":"2026-10-30T18:08:57.666Z","title":"Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field","severity":"HIGH","score":8.1,"vendor":"ThemeFusion","product":"Avada | Website Builder For WordPress & WooCommerce","kev":false,"epss":0.0066},{"id":"CVE-2026-115820","published":"2026-10-30T17:15:30.768Z","updated":"2026-10-30T18:08:57.800Z","title":"Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter","severity":"MEDIUM","score":6.5,"vendor":"ahmadmj","product":"Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin","kev":false,"epss":0.0042},{"id":"CVE-2026-118205","published":"2026-10-30T17:15:30.431Z","updated":"2026-10-30T18:08:57.942Z","title":"Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision","severity":"HIGH","score":7.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00469},{"id":"CVE-2026-109592","published":"2026-10-30T17:15:30.070Z","updated":"2026-10-30T18:08:58.094Z","title":"OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements","severity":"MEDIUM","score":4.3,"vendor":"wordpressdotorg","product":"OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA","kev":false,"epss":0.00345},{"id":"CVE-2026-102918","published":"2026-10-30T17:15:29.717Z","updated":"2026-10-30T18:08:58.237Z","title":"Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id","severity":"MEDIUM","score":6.4,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00312},{"id":"CVE-2026-102905","published":"2026-10-30T17:15:29.355Z","updated":"2026-10-30T17:24:48.214Z","title":"Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter","severity":"MEDIUM","score":6.5,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00422},{"id":"CVE-2026-110533","published":"2026-10-30T17:15:28.997Z","updated":"2026-10-30T17:25:10.191Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.0032},{"id":"CVE-2026-104739","published":"2026-10-30T17:15:28.645Z","updated":"2026-10-30T18:08:58.390Z","title":"JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter","severity":"MEDIUM","score":4.9,"vendor":"rabilal","product":"JS Help Desk – AI-Powered Support & Ticketing System","kev":false,"epss":0.00787},{"id":"CVE-2026-96894","published":"2026-10-30T17:15:28.298Z","updated":"2026-10-30T18:08:58.540Z","title":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body","severity":"HIGH","score":7.2,"vendor":"wedevs","product":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce","kev":false,"epss":0.00375},{"id":"CVE-2026-97638","published":"2026-10-30T17:15:27.922Z","updated":"2026-10-30T18:08:58.688Z","title":"Forminator Forms <= 1.57.3.1 - Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover via 'previous_draft_id' Parameter","severity":"HIGH","score":7.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.00561},{"id":"CVE-2026-118635","published":"2026-10-30T17:15:27.562Z","updated":"2026-10-30T18:08:58.837Z","title":"GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameter","severity":"MEDIUM","score":6.5,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00435},{"id":"CVE-2026-107630","published":"2026-10-30T17:15:27.201Z","updated":"2026-10-30T17:25:36.608Z","title":"Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_order' Parameter","severity":"HIGH","score":7.5,"vendor":"saadiqbal","product":"Email Templates Customizer and Designer for WordPress and WooCommerce","kev":false,"epss":0.00509},{"id":"CVE-2026-9239","published":"2026-10-30T17:15:26.845Z","updated":"2026-10-30T18:08:58.980Z","title":"Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)","severity":"MEDIUM","score":6.4,"vendor":"tigroumeow","product":"Meow Gallery","kev":false,"epss":0.0032},{"id":"CVE-2026-116552","published":"2026-10-30T17:15:26.489Z","updated":"2026-10-30T17:26:01.617Z","title":"Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header","severity":"MEDIUM","score":4.7,"vendor":"likebtn","product":"Like Button Rating ♥ LikeBtn","kev":false,"epss":0.00307},{"id":"CVE-2026-110305","published":"2026-10-30T17:15:26.153Z","updated":"2026-10-30T18:08:59.282Z","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Injection","severity":"HIGH","score":7.5,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00613},{"id":"CVE-2026-110001","published":"2026-10-30T17:15:25.812Z","updated":"2026-10-30T18:08:59.456Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute","severity":"MEDIUM","score":5.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00344},{"id":"CVE-2025-8574","published":"2026-10-30T17:15:25.473Z","updated":"2026-10-30T18:08:59.619Z","title":"Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion","severity":"HIGH","score":8.7,"vendor":"tigroumeow","product":"Database Cleaner: Cleanup, Optimization & Repair","kev":false,"epss":0.00366},{"id":"CVE-2026-13747","published":"2026-10-30T17:15:25.089Z","updated":"2026-10-30T17:26:22.628Z","title":"Meow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST Endpoint","severity":"MEDIUM","score":6.5,"vendor":"tigroumeow","product":"Meow Gallery","kev":false,"epss":0.0039},{"id":"CVE-2026-119176","published":"2026-10-30T17:15:24.563Z","updated":"2026-10-30T18:08:59.759Z","title":"CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"CP Multi View Events Calendar","kev":false,"epss":0.0032},{"id":"CVE-2026-119619","published":"2026-10-30T17:15:15.085Z","updated":"2026-10-30T17:15:15.085Z","title":"37954679 cak-filemanagement-system save_student.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"37954679","product":"cak-filemanagement-system","kev":false,"epss":0.00328},{"id":"CVE-2026-61826","published":"2026-10-30T17:12:43.384Z","updated":"2026-10-30T17:12:43.384Z","title":"Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery","severity":"CRITICAL","score":10,"vendor":"morpheus65535","product":"bazarr","kev":false,"epss":0.00263},{"id":"CVE-2026-50000","published":"2026-10-30T17:11:13.250Z","updated":"2026-10-30T18:35:34.990Z","title":"SecureDrop: API session token reuse against the Journalist Interface web UI","severity":"MEDIUM","score":5,"vendor":"freedomofpress","product":"securedrop","kev":false,"epss":0.00359},{"id":"CVE-2026-61804","published":"2026-10-30T17:04:33.294Z","updated":"2026-10-30T17:04:33.294Z","title":"myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management","severity":"HIGH","score":8.1,"vendor":"myTinyWMS","product":"myTinyWMS","kev":false,"epss":0.00284},{"id":"CVE-2026-61806","published":"2026-10-30T17:02:55.465Z","updated":"2026-10-30T17:24:19.803Z","title":"Frappe LMS allows unpublished certificate access","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00243},{"id":"CVE-2026-61805","published":"2026-10-30T17:01:42.988Z","updated":"2026-10-30T17:01:42.988Z","title":"Frappe LMS: Quiz result manipulation and cross-user submission forgery","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00218},{"id":"CVE-2026-61803","published":"2026-10-30T16:50:08.737Z","updated":"2026-10-30T16:59:19.940Z","title":"Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amount","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00227},{"id":"CVE-2026-55551","published":"2026-10-30T16:48:51.352Z","updated":"2026-10-30T16:48:51.352Z","title":"ZAC: Missing per-zaaktype authorization on by-ID decision and process reads","severity":"MEDIUM","score":6.5,"vendor":"infonl","product":"dimpact-zaakafhandelcomponent","kev":false,"epss":0.00257},{"id":"CVE-2026-39375","published":"2026-10-30T16:46:58.127Z","updated":"2026-10-30T18:35:46.027Z","title":"Frappe LMS has Stored XSS in Course Meta","severity":"MEDIUM","score":5.1,"vendor":"frappe","product":"lms","kev":false,"epss":0.00348},{"id":"CVE-2026-112816","published":"2026-10-30T16:42:06.617Z","updated":"2026-10-31T03:56:41.468Z","title":"Improper certificate validation in the HTTPS listener in LXD","severity":"CRITICAL","score":10,"vendor":"Canonical","product":"LXD","kev":false,"epss":0.00303},{"id":"CVE-2026-119300","published":"2026-10-30T16:29:16.786Z","updated":"2026-10-30T16:29:16.786Z","title":"Wekan: ReDoS via Unescaped User Input in RegExp","severity":"MEDIUM","score":6.5,"vendor":"wekan","product":"wekan","kev":false,"epss":0.00295},{"id":"CVE-2026-119299","published":"2026-10-30T16:23:51.655Z","updated":"2026-10-30T16:54:01.623Z","title":"gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments","severity":"MEDIUM","score":5.9,"vendor":"gopacket","product":"gopacket","kev":false,"epss":0.0047},{"id":"CVE-2026-115642","published":"2026-10-30T16:23:23.404Z","updated":"2026-10-30T17:07:49.860Z","title":"In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted…","severity":"HIGH","score":8.3,"vendor":"OpenStack","product":"keystonemiddleware","kev":false,"epss":0.0051},{"id":"CVE-2026-119466","published":"2026-10-30T16:16:28.198Z","updated":"2026-10-30T16:39:18.607Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00129},{"id":"CVE-2026-65566","published":"2026-10-30T16:15:59.202Z","updated":"2026-10-30T17:18:21.422Z","title":"WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Meow Apps","product":"AI Engine","kev":false,"epss":0.00166},{"id":"CVE-2026-119298","published":"2026-10-30T16:12:49.765Z","updated":"2026-10-30T18:35:53.606Z","title":"croc: Overwrite-confirmation bypass via a crafted \"croc-stdin-\" filename on receive","severity":"MEDIUM","score":4.2,"vendor":"schollz","product":"croc","kev":false,"epss":0.00302},{"id":"CVE-2026-119148","published":"2026-10-30T16:12:06.479Z","updated":"2026-10-30T18:08:59.904Z","title":"Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint","severity":"HIGH","score":8.2,"vendor":"AWS","product":"aws-nitro-enclaves-sdk-c","kev":false,"epss":0.00174},{"id":"CVE-2026-104623","published":"2026-10-30T16:11:30.079Z","updated":"2026-10-30T18:09:00.059Z","title":"Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster","severity":"MEDIUM","score":6.3,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00272},{"id":"CVE-2026-62055","published":"2026-10-30T16:11:26.969Z","updated":"2026-10-30T17:18:21.560Z","title":"WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"Event Tickets","kev":false,"epss":0.00272},{"id":"CVE-2026-119365","published":"2026-10-30T16:11:00.627Z","updated":"2026-10-30T17:18:21.690Z","title":"WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Media Player Addons for Elementor – Media Player widget for WP","kev":false,"epss":0.00204},{"id":"CVE-2026-119116","published":"2026-10-30T16:10:39.338Z","updated":"2026-10-30T20:00:57.890Z","title":"Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c","severity":"HIGH","score":8.7,"vendor":"AWS","product":"kmstool-enclave","kev":false,"epss":0.00161},{"id":"CVE-2026-119367","published":"2026-10-30T16:10:10.603Z","updated":"2026-10-30T17:18:21.825Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00231},{"id":"CVE-2026-61789","published":"2026-10-30T16:08:24.224Z","updated":"2026-10-30T16:08:24.224Z","title":"DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation","severity":"MEDIUM","score":6.1,"vendor":"bytebase","product":"dbhub","kev":false,"epss":0.00385},{"id":"CVE-2026-119291","published":"2026-10-30T15:52:01.029Z","updated":"2026-10-30T15:52:01.029Z","title":"zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory","severity":"MEDIUM","score":5.5,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00145},{"id":"CVE-2026-119290","published":"2026-10-30T15:50:46.959Z","updated":"2026-10-30T16:38:54.900Z","title":"Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run","severity":"HIGH","score":7.5,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00455},{"id":"CVE-2026-104615","published":"2026-10-30T15:49:01.402Z","updated":"2026-10-30T15:49:01.402Z","title":"Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace","severity":"HIGH","score":7.9,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00221},{"id":"CVE-2026-119289","published":"2026-10-30T15:48:59.726Z","updated":"2026-10-30T15:48:59.726Z","title":"Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate","severity":"HIGH","score":7.1,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00176},{"id":"CVE-2026-119288","published":"2026-10-30T15:47:23.790Z","updated":"2026-10-30T18:36:00.991Z","title":"Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line","severity":"HIGH","score":7,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00186},{"id":"CVE-2026-119287","published":"2026-10-30T15:39:52.468Z","updated":"2026-10-30T15:39:52.468Z","title":"Zuke: Command-form registry descriptors bypass the MCP launch policy","severity":"HIGH","score":8,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00223},{"id":"CVE-2026-105454","published":"2026-10-30T15:34:57.607Z","updated":"2026-10-30T17:18:21.963Z","title":"Stored XSS via crafted URLs in HTML ticket content in Request Tracker","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"Request Tracker","kev":false,"epss":0.00436},{"id":"CVE-2026-105455","published":"2026-10-30T15:34:49.001Z","updated":"2026-10-30T17:18:22.098Z","title":"Stored XSS via related ticket subject on RTIR Split and Create Incident forms","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"RT for Incident Response","kev":false,"epss":0.0041},{"id":"CVE-2026-62141","published":"2026-10-30T15:29:24.363Z","updated":"2026-10-30T17:18:22.239Z","title":"WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00179},{"id":"CVE-2026-105456","published":"2026-10-30T15:22:07.644Z","updated":"2026-10-30T17:18:22.375Z","title":"Stored XSS via HTML scrubber rule in RTIR","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"RT for Incident Response","kev":false,"epss":0.0045},{"id":"CVE-2026-119722","published":"2026-10-30T15:16:18.421Z","updated":"2026-10-30T15:43:14.258Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00182},{"id":"CVE-2026-119721","published":"2026-10-30T15:16:17.738Z","updated":"2026-10-30T18:36:11.655Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors","severity":"MEDIUM","score":6.9,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00171},{"id":"CVE-2026-119720","published":"2026-10-30T15:16:17.041Z","updated":"2026-10-30T15:16:17.041Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block","severity":"MEDIUM","score":6.8,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00127},{"id":"CVE-2026-119719","published":"2026-10-30T15:16:16.337Z","updated":"2026-10-30T15:16:16.337Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00159},{"id":"CVE-2026-119718","published":"2026-10-30T15:16:15.633Z","updated":"2026-10-30T15:42:41.053Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00195},{"id":"CVE-2026-119717","published":"2026-10-30T15:16:14.963Z","updated":"2026-10-30T18:36:20.432Z","title":"pybars4 through 0.9.13 Code Injection via Bracketed Path Segments","severity":"CRITICAL","score":9.2,"vendor":"up9inc","product":"pybars4","kev":false,"epss":0.00557},{"id":"CVE-2026-119716","published":"2026-10-30T15:16:14.237Z","updated":"2026-10-30T15:16:14.237Z","title":"pybars3 through 0.9.7 Code Injection via Bracketed Path Segments","severity":"CRITICAL","score":9.2,"vendor":"wbond","product":"pybars3","kev":false,"epss":0.00371},{"id":"CVE-2026-119715","published":"2026-10-30T15:16:13.524Z","updated":"2026-10-30T15:16:13.524Z","title":"NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers","severity":"MEDIUM","score":5.3,"vendor":"nocodb","product":"nocodb","kev":false,"epss":0.00216},{"id":"CVE-2026-119714","published":"2026-10-30T15:16:12.860Z","updated":"2026-10-30T15:42:00.197Z","title":"My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter","severity":"MEDIUM","score":6.9,"vendor":"joedolson","product":"My Calendar - Accessible Event Manager","kev":false,"epss":0.00309},{"id":"CVE-2026-119713","published":"2026-10-30T15:16:12.174Z","updated":"2026-10-30T18:36:27.401Z","title":"Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands","severity":"HIGH","score":8.7,"vendor":"paperclipai","product":"@paperclipai/server","kev":false,"epss":0.00798},{"id":"CVE-2026-119712","published":"2026-10-30T15:16:11.556Z","updated":"2026-10-30T15:19:20.964Z","title":"PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents","severity":"MEDIUM","score":5.3,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.00253},{"id":"CVE-2026-119711","published":"2026-10-30T15:16:10.897Z","updated":"2026-10-30T15:16:10.897Z","title":"PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header","severity":"MEDIUM","score":6.9,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.0022},{"id":"CVE-2026-119710","published":"2026-10-30T15:16:10.174Z","updated":"2026-10-30T15:41:02.299Z","title":"PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route","severity":"HIGH","score":7.1,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.00424},{"id":"CVE-2026-119709","published":"2026-10-30T15:16:09.484Z","updated":"2026-10-30T18:36:35.797Z","title":"Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata","severity":"MEDIUM","score":6.9,"vendor":"goniszewski","product":"grimoire","kev":false,"epss":0.00406},{"id":"CVE-2026-119708","published":"2026-10-30T15:16:08.776Z","updated":"2026-10-30T15:16:08.776Z","title":"abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name","severity":"HIGH","score":7.1,"vendor":"colinin","product":"abp-next-admin","kev":false,"epss":0.00296},{"id":"CVE-2026-119707","published":"2026-10-30T15:16:08.044Z","updated":"2026-10-30T15:16:08.044Z","title":"SonicJS through 3.0.0 Missing Authorization in Content Write API","severity":"HIGH","score":7.1,"vendor":"SonicJs-Org","product":"sonicjs","kev":false,"epss":0.00307},{"id":"CVE-2026-119706","published":"2026-10-30T15:16:07.266Z","updated":"2026-11-02T18:29:40.134Z","title":"LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization","severity":"CRITICAL","score":9.3,"vendor":"InternLM","product":"lmdeploy","kev":false,"epss":0.0103},{"id":"CVE-2026-119705","published":"2026-10-30T15:16:05.377Z","updated":"2026-10-30T18:36:44.022Z","title":"SerpBear before 3.1.1 Missing Authentication via POST /api/notify","severity":"MEDIUM","score":6.9,"vendor":"towfiqi","product":"serpbear","kev":false,"epss":0.00626},{"id":"CVE-2026-119704","published":"2026-10-30T15:16:04.687Z","updated":"2026-10-30T15:16:04.687Z","title":"Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp","severity":"MEDIUM","score":5.3,"vendor":"BastilleBSD","product":"bastille","kev":false,"epss":0.00141},{"id":"CVE-2026-119703","published":"2026-10-30T15:16:03.996Z","updated":"2026-10-30T15:19:20.269Z","title":"xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header","severity":"MEDIUM","score":6.3,"vendor":"xinnan-tech","product":"xiaozhi-esp32-server","kev":false,"epss":0.0034},{"id":"CVE-2026-119702","published":"2026-10-30T15:16:03.297Z","updated":"2026-10-30T15:39:13.528Z","title":"WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.00361},{"id":"CVE-2026-119701","published":"2026-10-30T15:16:02.605Z","updated":"2026-10-30T18:36:52.042Z","title":"WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.0059},{"id":"CVE-2026-119700","published":"2026-10-30T15:16:01.901Z","updated":"2026-10-30T15:19:18.275Z","title":"WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.00363},{"id":"CVE-2026-119699","published":"2026-10-30T15:16:01.198Z","updated":"2026-10-30T15:19:17.609Z","title":"WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL Smart Cache","kev":false,"epss":0.00454},{"id":"CVE-2026-104067","published":"2026-10-30T15:16:00.500Z","updated":"2026-10-30T15:33:08.066Z","title":"Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196},{"id":"CVE-2026-104066","published":"2026-10-30T15:15:59.772Z","updated":"2026-10-30T18:37:00.577Z","title":"Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212},{"id":"CVE-2026-104065","published":"2026-10-30T15:15:59.072Z","updated":"2026-10-30T15:15:59.072Z","title":"Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw Import","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196},{"id":"CVE-2026-104064","published":"2026-10-30T15:15:58.358Z","updated":"2026-10-30T15:15:58.358Z","title":"Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer Handling","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212},{"id":"CVE-2026-104063","published":"2026-10-30T15:15:57.615Z","updated":"2026-10-30T15:32:25.808Z","title":"Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image Data","severity":"MEDIUM","score":6.9,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00171},{"id":"CVE-2026-104062","published":"2026-10-30T15:15:56.910Z","updated":"2026-10-30T18:37:11.249Z","title":"Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212},{"id":"CVE-2026-104061","published":"2026-10-30T15:15:56.127Z","updated":"2026-10-30T15:15:56.127Z","title":"Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image Loader","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196},{"id":"CVE-2026-119369","published":"2026-10-30T15:10:13.570Z","updated":"2026-10-30T15:43:43.340Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00217},{"id":"CVE-2026-119479","published":"2026-10-30T15:09:48.592Z","updated":"2026-10-30T17:18:22.511Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00313},{"id":"CVE-2026-116407","published":"2026-10-30T15:08:52.909Z","updated":"2026-10-30T15:50:49.510Z","title":"WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Webba Plugins","product":"Webba Booking","kev":false,"epss":0.00242},{"id":"CVE-2026-118238","published":"2026-10-30T15:08:41.752Z","updated":"2026-10-30T17:07:06.917Z","title":"CVE-2026-118238","severity":"HIGH","score":7.2,"vendor":"Tenda","product":"W18E","kev":false,"epss":0.01535},{"id":"CVE-2026-119368","published":"2026-10-30T15:02:22.664Z","updated":"2026-10-30T17:18:22.640Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00314},{"id":"CVE-2026-119482","published":"2026-10-30T15:01:55.085Z","updated":"2026-10-30T17:18:22.784Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00272},{"id":"CVE-2026-46499","published":"2026-10-30T15:00:47.494Z","updated":"2026-10-30T15:00:47.494Z","title":"Collabora Online: Read-only session authorization bypass permits live document edits","severity":"MEDIUM","score":4.3,"vendor":"CollaboraOnline","product":"online","kev":false,"epss":0.00249},{"id":"CVE-2026-48164","published":"2026-10-30T14:57:18.378Z","updated":"2026-10-30T15:44:29.766Z","title":"Collabora Online: Reflected HTML injection through host_session_id","severity":"MEDIUM","score":4.7,"vendor":"CollaboraOnline","product":"online","kev":false,"epss":0.00325},{"id":"CVE-2026-93327","published":"2026-10-30T14:56:39.383Z","updated":"2026-10-30T17:18:22.927Z","title":"Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Google Cloud","product":"Application Integration","kev":false,"epss":0.00394},{"id":"CVE-2026-61627","published":"2026-10-30T14:55:45.500Z","updated":"2026-10-30T15:51:10.521Z","title":"libass: Out-of-bounds read and write in wrap_lines_measure","severity":"HIGH","score":7.3,"vendor":"libass","product":"libass","kev":false,"epss":0.00155},{"id":"CVE-2026-61626","published":"2026-10-30T14:52:21.006Z","updated":"2026-10-30T14:52:21.006Z","title":"libass: Out-of-bounds bit clears for negative Matroska ReadOrder values","severity":"HIGH","score":7.3,"vendor":"libass","product":"libass","kev":false,"epss":0.00118},{"id":"CVE-2026-61739","published":"2026-10-30T14:50:23.292Z","updated":"2026-10-30T15:45:17.745Z","title":"SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)","severity":"HIGH","score":7.5,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00374},{"id":"CVE-2026-116860","published":"2026-10-30T14:42:18.051Z","updated":"2026-10-30T15:07:31.474Z","title":"WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00242},{"id":"CVE-2026-119370","published":"2026-10-30T14:41:30.900Z","updated":"2026-10-30T15:07:31.625Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.0017},{"id":"CVE-2026-65444","published":"2026-10-30T14:40:48.198Z","updated":"2026-10-30T15:07:31.758Z","title":"WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Creative Themes","product":"Blocksy Companion","kev":false,"epss":0.0017},{"id":"CVE-2026-61738","published":"2026-10-30T14:36:10.445Z","updated":"2026-10-30T14:36:10.445Z","title":"SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)","severity":"CRITICAL","score":10,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00558},{"id":"CVE-2026-61737","published":"2026-10-30T14:34:03.817Z","updated":"2026-10-30T15:51:24.314Z","title":"ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin","severity":"CRITICAL","score":9.8,"vendor":"huajian123","product":"ng-antd-admin","kev":false,"epss":0.00507},{"id":"CVE-2026-44344","published":"2026-10-30T14:32:32.674Z","updated":"2026-10-30T14:32:32.674Z","title":"Chamilo LMS: Conditional PHP execution through vendored QuickForm eval","severity":"MEDIUM","score":6.6,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00344},{"id":"CVE-2026-45141","published":"2026-10-30T14:30:44.438Z","updated":"2026-10-30T15:46:07.156Z","title":"Chamilo LMS: CSRF in destructive skill-management AJAX actions","severity":"MEDIUM","score":6.5,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.0017},{"id":"CVE-2026-45145","published":"2026-10-30T14:29:05.283Z","updated":"2026-10-30T15:51:30.372Z","title":"Chamilo LMS: Database-backed PHP object injection in career deserialization","severity":"HIGH","score":7.5,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00353},{"id":"CVE-2026-45144","published":"2026-10-30T14:27:29.397Z","updated":"2026-10-30T14:27:29.397Z","title":"Chamilo LMS: Stored XSS in public user-profile fields","severity":"HIGH","score":8.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00229},{"id":"CVE-2026-61730","published":"2026-10-30T14:25:53.976Z","updated":"2026-10-30T15:47:21.224Z","title":"SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount","severity":"CRITICAL","score":9.3,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00369},{"id":"CVE-2026-61729","published":"2026-10-30T14:24:04.762Z","updated":"2026-10-30T14:24:04.762Z","title":"SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection","severity":"CRITICAL","score":9.4,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00376},{"id":"CVE-2015-20130","published":"2026-10-30T14:23:44.161Z","updated":"2026-10-30T14:23:44.161Z","title":"Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php","severity":"MEDIUM","score":5.1,"vendor":"Netsweeper","product":"Netsweeper","kev":false,"epss":0.0029},{"id":"CVE-2010-20125","published":"2026-10-30T14:23:34.726Z","updated":"2026-10-30T15:47:58.288Z","title":"DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php","severity":"HIGH","score":8.7,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00553},{"id":"CVE-2026-61728","published":"2026-10-30T14:22:18.332Z","updated":"2026-10-30T14:22:18.332Z","title":"SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover","severity":"CRITICAL","score":9.9,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00459},{"id":"CVE-2026-111487","published":"2026-10-30T14:21:23.428Z","updated":"2026-10-30T14:21:23.428Z","title":"Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt Framework","kev":false,"epss":0.00125},{"id":"CVE-2026-119682","published":"2026-10-30T14:21:21.154Z","updated":"2026-10-30T14:21:21.154Z","title":"Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus","severity":"HIGH","score":7.9,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.00344},{"id":"CVE-2026-61708","published":"2026-10-30T14:20:17.885Z","updated":"2026-10-30T15:52:19.134Z","title":"SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)","severity":"HIGH","score":8.5,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00397},{"id":"CVE-2026-112905","published":"2026-10-30T14:19:46.201Z","updated":"2026-10-30T14:19:46.201Z","title":"Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft","severity":"CRITICAL","score":9,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00495},{"id":"CVE-2026-110799","published":"2026-10-30T14:19:17.309Z","updated":"2026-10-30T15:48:43.788Z","title":"Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover","severity":"CRITICAL","score":9.8,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00708},{"id":"CVE-2026-119665","published":"2026-10-30T14:16:24.683Z","updated":"2026-10-30T15:52:24.404Z","title":"WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs","severity":"MEDIUM","score":5.3,"vendor":"MGdaasLab","product":"WHartTest","kev":false,"epss":0.00393},{"id":"CVE-2026-119664","published":"2026-10-30T14:16:24.007Z","updated":"2026-10-30T14:16:24.007Z","title":"Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update","severity":"MEDIUM","score":5.3,"vendor":"wannabespace","product":"tamery","kev":false,"epss":0.00295},{"id":"CVE-2026-119663","published":"2026-10-30T14:16:23.361Z","updated":"2026-10-30T14:16:23.361Z","title":"Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create","severity":"MEDIUM","score":5.3,"vendor":"wannabespace","product":"tamery","kev":false,"epss":0.00271},{"id":"CVE-2026-119662","published":"2026-10-30T14:16:22.650Z","updated":"2026-10-30T16:14:43.940Z","title":"Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend","severity":"HIGH","score":8.7,"vendor":"songloft-org","product":"songloft","kev":false,"epss":0.00431},{"id":"CVE-2026-119661","published":"2026-10-30T14:16:21.954Z","updated":"2026-10-30T15:52:32.619Z","title":"ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries","severity":"LOW","score":2.3,"vendor":"star7th","product":"ShowDoc","kev":false,"epss":0.00379},{"id":"CVE-2026-119660","published":"2026-10-30T14:16:21.246Z","updated":"2026-10-30T14:16:21.246Z","title":"MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key","severity":"CRITICAL","score":9.3,"vendor":"yincongcyincong","product":"MuseBot","kev":false,"epss":0.0052},{"id":"CVE-2026-119659","published":"2026-10-30T14:16:20.531Z","updated":"2026-10-30T14:16:20.531Z","title":"Blossom through 1.17.1 Authorization Bypass via Folder Endpoints","severity":"MEDIUM","score":5.3,"vendor":"blossom-editor","product":"Blossom","kev":false,"epss":0.00263},{"id":"CVE-2026-119658","published":"2026-10-30T14:16:19.832Z","updated":"2026-10-30T16:15:55.020Z","title":"PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update","severity":"MEDIUM","score":5.3,"vendor":"PowerDNS-Admin","product":"PowerDNS-Admin","kev":false,"epss":0.00414},{"id":"CVE-2026-119657","published":"2026-10-30T14:16:19.114Z","updated":"2026-10-30T15:52:45.124Z","title":"FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations","severity":"LOW","score":2.3,"vendor":"zyx0814","product":"FilePress","kev":false,"epss":0.0033},{"id":"CVE-2026-119656","published":"2026-10-30T14:16:18.408Z","updated":"2026-10-30T14:16:18.408Z","title":"CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList","severity":"HIGH","score":8.7,"vendor":"CoreUnion","product":"CoreShop","kev":false,"epss":0.00337},{"id":"CVE-2026-119655","published":"2026-10-30T14:16:17.712Z","updated":"2026-10-30T14:16:17.712Z","title":"CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList","severity":"HIGH","score":8.7,"vendor":"CoreUnion","product":"CoreShop","kev":false,"epss":0.00337},{"id":"CVE-2026-119654","published":"2026-10-30T14:16:16.982Z","updated":"2026-10-30T16:16:54.207Z","title":"DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization","severity":"HIGH","score":8.7,"vendor":"devlive-community","product":"DataCap","kev":false,"epss":0.00499},{"id":"CVE-2026-119653","published":"2026-10-30T14:16:16.291Z","updated":"2026-10-30T15:52:54.964Z","title":"Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path","severity":"MEDIUM","score":5.3,"vendor":"admpub","product":"nging","kev":false,"epss":0.00354},{"id":"CVE-2026-119652","published":"2026-10-30T14:16:15.521Z","updated":"2026-10-30T14:16:15.521Z","title":"HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00281},{"id":"CVE-2026-119651","published":"2026-10-30T14:16:14.833Z","updated":"2026-10-30T14:16:14.833Z","title":"HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00306},{"id":"CVE-2026-119650","published":"2026-10-30T14:16:14.132Z","updated":"2026-10-30T16:13:28.899Z","title":"HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00299},{"id":"CVE-2026-119649","published":"2026-10-30T14:16:13.410Z","updated":"2026-10-30T15:53:06.874Z","title":"Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check","severity":"HIGH","score":7.1,"vendor":"OrchardCMS","product":"Orchard","kev":false,"epss":0.00363},{"id":"CVE-2026-119648","published":"2026-10-30T14:16:12.678Z","updated":"2026-10-30T14:16:12.678Z","title":"BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail","severity":"MEDIUM","score":5.3,"vendor":"TencentBlueKing","product":"bk-cmdb","kev":false,"epss":0.0029},{"id":"CVE-2026-119647","published":"2026-10-30T14:16:10.847Z","updated":"2026-10-30T14:16:10.847Z","title":"RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}","severity":"MEDIUM","score":5.3,"vendor":"dromara","product":"RuoYi-Vue-Plus","kev":false,"epss":0.00311},{"id":"CVE-2026-119646","published":"2026-10-30T14:16:10.196Z","updated":"2026-10-30T16:17:52.032Z","title":"Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API","severity":"MEDIUM","score":5.3,"vendor":"Open Web Analytics","product":"Open Web Analytics","kev":false,"epss":0.00458},{"id":"CVE-2026-119645","published":"2026-10-30T14:16:09.559Z","updated":"2026-10-30T15:53:14.646Z","title":"ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc","severity":"HIGH","score":7.1,"vendor":"easysoft","product":"zentaopms","kev":false,"epss":0.00388},{"id":"CVE-2026-119644","published":"2026-10-30T14:16:08.905Z","updated":"2026-10-30T14:16:08.905Z","title":"Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints","severity":"MEDIUM","score":5.3,"vendor":"blossom-editor","product":"Blossom","kev":false,"epss":0.00326},{"id":"CVE-2026-119680","published":"2026-10-30T14:14:24.193Z","updated":"2026-10-30T14:14:24.193Z","title":"Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature","severity":"HIGH","score":8.5,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.0024},{"id":"CVE-2026-100355","published":"2026-10-30T14:10:34.695Z","updated":"2026-10-30T14:10:34.695Z","title":"Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard","severity":"LOW","score":3.1,"vendor":"basecamp","product":"once-campfire","kev":false,"epss":0.00279},{"id":"CVE-2026-112348","published":"2026-10-30T14:01:53.050Z","updated":"2026-10-30T14:01:53.050Z","title":"Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token","severity":"MEDIUM","score":6.9,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00294},{"id":"CVE-2026-112347","published":"2026-10-30T13:58:55.891Z","updated":"2026-10-30T14:04:03.894Z","title":"Kirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page API","severity":"HIGH","score":7.2,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00282},{"id":"CVE-2026-119542","published":"2026-10-30T13:54:23.591Z","updated":"2026-10-30T15:53:22.097Z","title":"Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","kev":false,"epss":0.00332},{"id":"CVE-2026-91912","published":"2026-10-30T13:52:16.513Z","updated":"2026-10-30T15:07:31.898Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access…","severity":"HIGH","score":7.3,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00124},{"id":"CVE-2026-119528","published":"2026-10-30T13:52:12.118Z","updated":"2026-10-31T03:56:45.704Z","title":"Gimp: gimp: stack buffer overflow in psd image resource header loader","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00186},{"id":"CVE-2026-91913","published":"2026-10-30T13:47:44.188Z","updated":"2026-10-31T03:56:26.445Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02652},{"id":"CVE-2026-111498","published":"2026-10-30T13:43:46.711Z","updated":"2026-10-30T14:09:53.946Z","title":"OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could…","severity":"MEDIUM","score":4.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00106},{"id":"CVE-2026-86715","published":"2026-10-30T13:41:49.240Z","updated":"2026-10-30T14:09:21.809Z","title":"Clear Text Storage of Password in Crypttech's Vatos DLP","severity":"HIGH","score":7.1,"vendor":"Crypttech Crypto and Informatics Technologies Industry and Trade Inc.","product":"Vatos DLP","kev":false,"epss":0.00131},{"id":"CVE-2026-111499","published":"2026-10-30T13:40:15.743Z","updated":"2026-10-30T15:07:32.173Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00138},{"id":"CVE-2026-91914","published":"2026-10-30T13:37:02.727Z","updated":"2026-10-30T15:07:32.309Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.0025},{"id":"CVE-2026-111500","published":"2026-10-30T13:33:29.953Z","updated":"2026-10-30T15:07:32.437Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with…","severity":"MEDIUM","score":5.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00229},{"id":"CVE-2026-115683","published":"2026-10-30T13:33:02.733Z","updated":"2026-11-02T11:33:33.900Z","title":"epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler","severity":"MEDIUM","score":6.8,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.0022},{"id":"CVE-2026-91915","published":"2026-10-30T13:30:02.187Z","updated":"2026-10-31T03:56:27.224Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00277},{"id":"CVE-2026-119602","published":"2026-10-30T13:18:20.547Z","updated":"2026-10-30T15:53:29.159Z","title":"libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window","severity":"MEDIUM","score":6.3,"vendor":"kyz","product":"libmspack","kev":false,"epss":0.00307},{"id":"CVE-2026-119601","published":"2026-10-30T13:18:19.851Z","updated":"2026-10-30T13:18:19.851Z","title":"AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page","severity":"MEDIUM","score":6.9,"vendor":"sshock","product":"AFFLIB","kev":false,"epss":0.00121},{"id":"CVE-2026-119600","published":"2026-10-30T13:18:19.167Z","updated":"2026-10-30T13:18:19.167Z","title":"tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length","severity":"MEDIUM","score":6.3,"vendor":"simsong","product":"tcpflow","kev":false,"epss":0.00373},{"id":"CVE-2026-119599","published":"2026-10-30T13:18:18.486Z","updated":"2026-10-30T14:07:11.920Z","title":"AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes","severity":"MEDIUM","score":5.3,"vendor":"looplj","product":"AxonHub","kev":false,"epss":0.0041},{"id":"CVE-2026-119598","published":"2026-10-30T13:18:17.785Z","updated":"2026-10-30T15:53:35.836Z","title":"Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_id","severity":"MEDIUM","score":5.3,"vendor":"iluobei","product":"miaomiaowu","kev":false,"epss":0.00347},{"id":"CVE-2026-119597","published":"2026-10-30T13:18:17.101Z","updated":"2026-10-30T13:18:17.101Z","title":"OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery","severity":"CRITICAL","score":9.3,"vendor":"AIDotNet","product":"OpenDeepWiki","kev":false,"epss":0.00371},{"id":"CVE-2026-119596","published":"2026-10-30T13:18:16.431Z","updated":"2026-10-30T13:18:16.431Z","title":"UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download","severity":"MEDIUM","score":5.3,"vendor":"HDInnovations","product":"UNIT3D","kev":false,"epss":0.00277},{"id":"CVE-2026-119578","published":"2026-10-30T13:18:15.757Z","updated":"2026-10-30T14:04:58.732Z","title":"MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00552},{"id":"CVE-2026-119577","published":"2026-10-30T13:18:15.066Z","updated":"2026-10-30T15:53:42.078Z","title":"ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections","severity":"HIGH","score":7.6,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00285},{"id":"CVE-2026-119576","published":"2026-10-30T13:18:14.388Z","updated":"2026-10-30T13:18:14.388Z","title":"ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00215},{"id":"CVE-2026-119575","published":"2026-10-30T13:18:13.675Z","updated":"2026-10-30T13:18:13.675Z","title":"ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List","severity":"HIGH","score":7.1,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00258},{"id":"CVE-2026-119574","published":"2026-10-30T13:18:12.970Z","updated":"2026-10-30T15:17:13.625Z","title":"Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service","severity":"HIGH","score":8.2,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00284},{"id":"CVE-2026-119573","published":"2026-10-30T13:18:12.280Z","updated":"2026-10-30T15:53:49.154Z","title":"Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret","severity":"LOW","score":2.1,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00273},{"id":"CVE-2026-119572","published":"2026-10-30T13:18:11.594Z","updated":"2026-10-30T13:18:11.594Z","title":"Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00188},{"id":"CVE-2026-119571","published":"2026-10-30T13:18:10.885Z","updated":"2026-10-30T13:18:10.885Z","title":"Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation ID","severity":"MEDIUM","score":6.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00219},{"id":"CVE-2026-119570","published":"2026-10-30T13:18:10.194Z","updated":"2026-10-30T15:17:47.332Z","title":"Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00252},{"id":"CVE-2026-119569","published":"2026-10-30T13:18:09.513Z","updated":"2026-10-30T15:53:54.963Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Service","severity":"MEDIUM","score":6,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00378},{"id":"CVE-2026-118986","published":"2026-10-30T13:13:32.845Z","updated":"2026-10-30T13:13:32.845Z","title":"CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00158},{"id":"CVE-2026-118987","published":"2026-10-30T13:13:11.338Z","updated":"2026-10-30T13:13:11.338Z","title":"CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00158},{"id":"CVE-2026-118990","published":"2026-10-30T13:12:29.396Z","updated":"2026-10-30T13:12:29.396Z","title":"CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00161},{"id":"CVE-2026-118991","published":"2026-10-30T13:12:13.128Z","updated":"2026-10-30T13:12:13.128Z","title":"CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00104},{"id":"CVE-2026-118992","published":"2026-10-30T13:11:55.375Z","updated":"2026-10-30T19:08:35.108Z","title":"CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup","severity":"HIGH","score":8.4,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00231},{"id":"CVE-2026-118993","published":"2026-10-30T13:11:14.458Z","updated":"2026-10-30T13:11:14.458Z","title":"CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI, FastCGI and PSGI","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00158},{"id":"CVE-2026-118994","published":"2026-10-30T13:10:57.452Z","updated":"2026-10-30T13:10:57.452Z","title":"CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.0021},{"id":"CVE-2026-118995","published":"2026-10-30T13:10:38.972Z","updated":"2026-10-30T13:10:38.972Z","title":"CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00321},{"id":"CVE-2026-118996","published":"2026-10-30T13:10:21.922Z","updated":"2026-10-30T13:10:21.922Z","title":"CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00158},{"id":"CVE-2026-13576","published":"2026-10-30T13:09:47.702Z","updated":"2026-10-30T13:09:47.702Z","title":"CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00104},{"id":"CVE-2026-119038","published":"2026-10-30T12:56:46.887Z","updated":"2026-10-30T12:56:46.887Z","title":"Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect flow ID create payments against another customer's mandate","severity":"UNKNOWN","score":null,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00166},{"id":"CVE-2026-119037","published":"2026-10-30T12:56:27.922Z","updated":"2026-10-30T12:56:27.922Z","title":"Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty","severity":"UNKNOWN","score":null,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00123},{"id":"CVE-2026-119036","published":"2026-10-30T12:56:09.479Z","updated":"2026-10-30T12:56:09.479Z","title":"Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their signature","severity":"UNKNOWN","score":null,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00176},{"id":"CVE-2026-116128","published":"2026-10-30T12:46:30.844Z","updated":"2026-10-30T12:46:30.844Z","title":"Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies","severity":"UNKNOWN","score":null,"vendor":null,"product":"Starlet","kev":false,"epss":0.00239},{"id":"CVE-2026-116127","published":"2026-10-30T12:46:11.352Z","updated":"2026-10-30T12:46:11.352Z","title":"Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection","severity":"UNKNOWN","score":null,"vendor":null,"product":"Starlet","kev":false,"epss":0.00159},{"id":"CVE-2026-115866","published":"2026-10-30T12:45:39.814Z","updated":"2026-10-30T12:45:39.814Z","title":"Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies","severity":"UNKNOWN","score":null,"vendor":null,"product":"Starlet","kev":false,"epss":0.00239},{"id":"CVE-2026-115865","published":"2026-10-30T12:44:06.034Z","updated":"2026-10-30T12:44:06.034Z","title":"Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory","severity":"UNKNOWN","score":null,"vendor":null,"product":"Starlet","kev":false,"epss":0.00239},{"id":"CVE-2026-75882","published":"2026-10-30T12:40:44.859Z","updated":"2026-10-30T15:22:56.675Z","title":"Improper access control vulnerability in ESET Encryption products for Windows","severity":"HIGH","score":8.5,"vendor":"ESET spol. s.r.o.","product":"ESET Endpoint Encryption","kev":false,"epss":0.00097},{"id":"CVE-2026-116130","published":"2026-10-30T12:38:27.038Z","updated":"2026-10-30T15:05:28.040Z","title":"HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Parser-XS","kev":false,"epss":0.00329},{"id":"CVE-2026-118988","published":"2026-10-30T12:34:35.614Z","updated":"2026-10-30T15:05:29.332Z","title":"CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route","severity":"UNKNOWN","score":null,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00239},{"id":"CVE-2026-87768","published":"2026-10-30T12:25:21.054Z","updated":"2026-10-30T15:05:30.618Z","title":"DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds","severity":"UNKNOWN","score":null,"vendor":null,"product":"DateTime-Lite","kev":false,"epss":0.00195},{"id":"CVE-2026-91917","published":"2026-10-30T12:24:20.449Z","updated":"2026-10-31T03:56:20.763Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network…","severity":"HIGH","score":8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00264},{"id":"CVE-2026-111501","published":"2026-10-30T12:20:20.402Z","updated":"2026-10-30T15:07:32.835Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated…","severity":"MEDIUM","score":5.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00216},{"id":"CVE-2026-111502","published":"2026-10-30T12:16:50.901Z","updated":"2026-10-30T15:07:32.968Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability. A low privileged attacker with remote…","severity":"MEDIUM","score":4.3,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00221},{"id":"CVE-2026-111503","published":"2026-10-30T12:10:50.917Z","updated":"2026-10-30T15:07:33.106Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00281},{"id":"CVE-2026-112374","published":"2026-10-30T12:10:37.508Z","updated":"2026-10-30T12:10:37.508Z","title":"FOSSBilling before 0.8.9 Login CSRF via Staff Guest Login API","severity":"MEDIUM","score":5.1,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00172},{"id":"CVE-2026-101209","published":"2026-10-30T12:07:14.750Z","updated":"2026-10-30T15:07:33.251Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access…","severity":"LOW","score":2.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00276},{"id":"CVE-2026-105924","published":"2026-10-30T12:04:22.186Z","updated":"2026-10-30T15:25:08.893Z","title":"NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt","kev":false,"epss":0.00163},{"id":"CVE-2026-111504","published":"2026-10-30T12:01:32.185Z","updated":"2026-10-31T03:56:21.597Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.0047},{"id":"CVE-2026-101210","published":"2026-10-30T11:57:53.530Z","updated":"2026-10-31T03:56:22.405Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02835},{"id":"CVE-2026-110972","published":"2026-10-30T11:56:49.582Z","updated":"2026-10-30T15:26:20.225Z","title":"Use of Client-Side Authentication in Płatnik","severity":"HIGH","score":8.6,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.00205},{"id":"CVE-2026-110971","published":"2026-10-30T11:56:44.797Z","updated":"2026-10-30T15:30:47.680Z","title":"Weak password encoding in Płatnik","severity":"HIGH","score":7.7,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.0017},{"id":"CVE-2026-110970","published":"2026-10-30T11:56:39.165Z","updated":"2026-11-02T13:31:14.203Z","title":"Lack of traffic encryption in Płatnik","severity":"LOW","score":2.3,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.00335},{"id":"CVE-2026-101213","published":"2026-10-30T11:53:35.368Z","updated":"2026-10-31T03:56:23.206Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00132},{"id":"CVE-2026-101214","published":"2026-10-30T11:50:00.496Z","updated":"2026-10-31T03:56:24.000Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02835},{"id":"CVE-2026-111505","published":"2026-10-30T11:45:39.342Z","updated":"2026-10-31T03:56:24.784Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.01446},{"id":"CVE-2025-68395","published":"2026-10-30T11:37:48.062Z","updated":"2026-10-30T15:29:11.101Z","title":"Stored XSS in Protectel","severity":"MEDIUM","score":5.1,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00248},{"id":"CVE-2025-68394","published":"2026-10-30T11:37:46.506Z","updated":"2026-10-30T15:28:41.579Z","title":"SQL Injection in Protectel","severity":"HIGH","score":8.4,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00204},{"id":"CVE-2025-68393","published":"2026-10-30T11:37:45.042Z","updated":"2026-10-30T15:28:04.300Z","title":"SQL Injection in Protectel","severity":"HIGH","score":8.4,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00204},{"id":"CVE-2025-68392","published":"2026-10-30T11:37:43.427Z","updated":"2026-10-30T15:27:21.077Z","title":"Incorrect authorization in Protectel","severity":"MEDIUM","score":5.1,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00167},{"id":"CVE-2025-68391","published":"2026-10-30T11:37:29.261Z","updated":"2026-10-30T15:26:48.082Z","title":"Arbitrary File Upload in Protectel","severity":"MEDIUM","score":5.3,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00235},{"id":"CVE-2026-119591","published":"2026-10-30T11:31:15.714Z","updated":"2026-10-30T11:31:15.714Z","title":"SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00124},{"id":"CVE-2026-119586","published":"2026-10-30T11:31:15.070Z","updated":"2026-10-30T16:19:09.235Z","title":"SQLite CLI through 3.54.1 Command Injection via .recover Output","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00841},{"id":"CVE-2026-119568","published":"2026-10-30T11:31:14.408Z","updated":"2026-10-30T15:54:01.560Z","title":"vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking","severity":"CRITICAL","score":9.1,"vendor":"vsftpd","product":"vsftpd","kev":false,"epss":0.00404},{"id":"CVE-2026-119567","published":"2026-10-30T11:31:13.756Z","updated":"2026-10-30T11:31:13.756Z","title":"vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases","severity":"LOW","score":2.3,"vendor":"vsftpd","product":"vsftpd","kev":false,"epss":0.00217},{"id":"CVE-2026-119566","published":"2026-10-30T11:31:13.086Z","updated":"2026-10-30T11:31:13.086Z","title":"Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects","severity":"MEDIUM","score":6.3,"vendor":"prometheus","product":"prometheus","kev":false,"epss":0.00201},{"id":"CVE-2026-119565","published":"2026-10-30T11:31:12.420Z","updated":"2026-10-30T16:20:23.056Z","title":"Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update","severity":"MEDIUM","score":5.3,"vendor":"Plausible","product":"Plausible Analytics","kev":false,"epss":0.00309},{"id":"CVE-2026-119564","published":"2026-10-30T11:31:11.750Z","updated":"2026-10-30T15:54:10.078Z","title":"Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs","severity":"MEDIUM","score":6,"vendor":"Plausible","product":"Plausible Analytics","kev":false,"epss":0.00292},{"id":"CVE-2026-119563","published":"2026-10-30T11:31:11.051Z","updated":"2026-10-30T11:31:11.051Z","title":"phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name","severity":"MEDIUM","score":5.1,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00171},{"id":"CVE-2026-119562","published":"2026-10-30T11:31:10.368Z","updated":"2026-10-30T11:31:10.368Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00175},{"id":"CVE-2026-119561","published":"2026-10-30T11:31:09.654Z","updated":"2026-10-30T16:21:29.456Z","title":"phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer","severity":"HIGH","score":7.6,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00186},{"id":"CVE-2026-119560","published":"2026-10-30T11:31:08.977Z","updated":"2026-10-30T15:54:16.495Z","title":"OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields","severity":"MEDIUM","score":6,"vendor":"opnsense","product":"core","kev":false,"epss":0.00344},{"id":"CVE-2026-119559","published":"2026-10-30T11:31:08.276Z","updated":"2026-10-30T11:31:08.276Z","title":"OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch","severity":"HIGH","score":8.2,"vendor":"litespeedtech","product":"openlitespeed","kev":false,"epss":0.00289},{"id":"CVE-2026-119558","published":"2026-10-30T11:31:07.587Z","updated":"2026-10-30T11:31:07.587Z","title":"OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points","severity":"LOW","score":2.3,"vendor":"OpenCart","product":"OpenCart","kev":false,"epss":0.00201},{"id":"CVE-2026-119557","published":"2026-10-30T11:31:06.894Z","updated":"2026-10-30T16:22:27.929Z","title":"n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node","severity":"HIGH","score":8.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00491},{"id":"CVE-2026-119556","published":"2026-10-30T11:31:06.200Z","updated":"2026-10-30T15:54:25.966Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems","severity":"MEDIUM","score":5.3,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00285},{"id":"CVE-2026-119555","published":"2026-10-30T11:31:05.504Z","updated":"2026-10-30T11:31:05.504Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback","severity":"MEDIUM","score":5.3,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00217},{"id":"CVE-2026-119554","published":"2026-10-30T11:31:04.811Z","updated":"2026-10-30T11:31:04.811Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber","severity":"MEDIUM","score":6,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00215},{"id":"CVE-2026-119553","published":"2026-10-30T11:31:04.114Z","updated":"2026-10-30T16:12:09.728Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal","severity":"HIGH","score":7.1,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00419},{"id":"CVE-2026-119552","published":"2026-10-30T11:31:03.438Z","updated":"2026-10-30T15:54:36.118Z","title":"Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler","severity":"MEDIUM","score":6.3,"vendor":"louislam","product":"uptime-kuma","kev":false,"epss":0.00234},{"id":"CVE-2026-119551","published":"2026-10-30T11:31:02.744Z","updated":"2026-10-30T11:31:02.744Z","title":"Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestions","severity":"HIGH","score":7.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.00319},{"id":"CVE-2026-119550","published":"2026-10-30T11:31:02.065Z","updated":"2026-10-30T11:31:02.065Z","title":"Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}","severity":"MEDIUM","score":5.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.00222},{"id":"CVE-2026-119549","published":"2026-10-30T11:31:01.382Z","updated":"2026-10-30T16:11:21.944Z","title":"Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images","severity":"HIGH","score":7.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.0044},{"id":"CVE-2026-119548","published":"2026-10-30T11:31:00.682Z","updated":"2026-10-30T15:54:44.148Z","title":"Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook","severity":"LOW","score":2.3,"vendor":"getlago","product":"lago","kev":false,"epss":0.00312},{"id":"CVE-2026-119547","published":"2026-10-30T11:31:00.001Z","updated":"2026-10-30T11:31:00.001Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}","severity":"MEDIUM","score":5.3,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00251},{"id":"CVE-2026-119546","published":"2026-10-30T11:30:59.315Z","updated":"2026-10-30T11:30:59.315Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo","severity":"MEDIUM","score":6.8,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00148},{"id":"CVE-2026-119545","published":"2026-10-30T11:30:58.642Z","updated":"2026-10-30T16:09:53.289Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery","severity":"MEDIUM","score":6.9,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00448},{"id":"CVE-2026-119429","published":"2026-10-30T11:30:57.953Z","updated":"2026-10-30T15:54:53.572Z","title":"phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00374},{"id":"CVE-2026-119428","published":"2026-10-30T11:30:57.237Z","updated":"2026-10-30T11:30:57.237Z","title":"phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled","severity":"MEDIUM","score":6.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00313},{"id":"CVE-2026-119427","published":"2026-10-30T11:30:56.522Z","updated":"2026-10-30T11:30:56.522Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00224},{"id":"CVE-2026-119426","published":"2026-10-30T11:30:55.817Z","updated":"2026-10-30T16:06:24.241Z","title":"phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql","severity":"HIGH","score":7.7,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00284},{"id":"CVE-2026-119425","published":"2026-10-30T11:30:55.121Z","updated":"2026-10-30T15:55:05.938Z","title":"OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP","severity":"MEDIUM","score":5.3,"vendor":"opnsense","product":"core","kev":false,"epss":0.00313},{"id":"CVE-2026-119424","published":"2026-10-30T11:30:54.395Z","updated":"2026-10-30T11:30:54.395Z","title":"OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity","severity":"MEDIUM","score":6.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.00424},{"id":"CVE-2026-119423","published":"2026-10-30T11:30:53.650Z","updated":"2026-10-30T11:30:53.650Z","title":"OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username","severity":"MEDIUM","score":6.9,"vendor":"opnsense","product":"core","kev":false,"epss":0.00376},{"id":"CVE-2026-119422","published":"2026-10-30T11:30:52.947Z","updated":"2026-10-30T16:05:29.768Z","title":"Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector","severity":"HIGH","score":8.2,"vendor":"juspay","product":"hyperswitch","kev":false,"epss":0.00237},{"id":"CVE-2026-119421","published":"2026-10-30T11:30:52.245Z","updated":"2026-10-30T15:55:12.805Z","title":"Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation","severity":"HIGH","score":8.2,"vendor":"juspay","product":"hyperswitch","kev":false,"epss":0.0034},{"id":"CVE-2026-119420","published":"2026-10-30T11:30:51.565Z","updated":"2026-10-30T11:30:51.565Z","title":"Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation","severity":"HIGH","score":8.7,"vendor":"getlago","product":"lago","kev":false,"epss":0.00394},{"id":"CVE-2026-119419","published":"2026-10-30T11:30:50.862Z","updated":"2026-10-30T11:30:50.862Z","title":"CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00394},{"id":"CVE-2026-119418","published":"2026-10-30T11:30:50.158Z","updated":"2026-10-30T16:04:14.569Z","title":"CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0048},{"id":"CVE-2026-119417","published":"2026-10-30T11:30:49.444Z","updated":"2026-10-30T15:55:41.693Z","title":"CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00452},{"id":"CVE-2026-119416","published":"2026-10-30T11:30:48.754Z","updated":"2026-10-30T11:30:48.754Z","title":"CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00175},{"id":"CVE-2026-119415","published":"2026-10-30T11:30:48.078Z","updated":"2026-10-30T11:30:48.078Z","title":"CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0037},{"id":"CVE-2026-119414","published":"2026-10-30T11:30:47.330Z","updated":"2026-10-30T16:37:45.394Z","title":"Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create","severity":"MEDIUM","score":5.3,"vendor":"bitwarden","product":"server","kev":false,"epss":0.00361},{"id":"CVE-2026-119409","published":"2026-10-30T11:30:46.595Z","updated":"2026-10-30T15:55:57.541Z","title":"OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting","severity":"HIGH","score":8.6,"vendor":"opnsense","product":"core","kev":false,"epss":0.02477},{"id":"CVE-2026-119408","published":"2026-10-30T11:30:45.729Z","updated":"2026-10-30T11:30:45.729Z","title":"n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes","severity":"HIGH","score":8.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00627},{"id":"CVE-2026-119407","published":"2026-10-30T11:30:44.046Z","updated":"2026-10-30T11:30:44.046Z","title":"Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters","severity":"HIGH","score":7.1,"vendor":"element-hq","product":"element-web","kev":false,"epss":0.00142},{"id":"CVE-2026-119379","published":"2026-10-30T11:30:43.335Z","updated":"2026-10-30T16:02:09.331Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00184},{"id":"CVE-2026-119378","published":"2026-10-30T11:30:42.626Z","updated":"2026-10-30T15:56:16.807Z","title":"SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00163},{"id":"CVE-2026-119377","published":"2026-10-30T11:30:41.921Z","updated":"2026-10-30T11:30:41.921Z","title":"SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING","severity":"LOW","score":2,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00118},{"id":"CVE-2026-119376","published":"2026-10-30T11:30:41.213Z","updated":"2026-10-30T11:30:41.213Z","title":"SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00157},{"id":"CVE-2026-119375","published":"2026-10-30T11:30:40.533Z","updated":"2026-10-30T15:52:57.646Z","title":"SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00177},{"id":"CVE-2026-119374","published":"2026-10-30T11:30:39.834Z","updated":"2026-10-30T15:56:39.115Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00184},{"id":"CVE-2026-119373","published":"2026-10-30T11:30:39.153Z","updated":"2026-10-30T11:30:39.153Z","title":"SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00144},{"id":"CVE-2026-119372","published":"2026-10-30T11:30:38.453Z","updated":"2026-10-30T11:30:38.453Z","title":"SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00131},{"id":"CVE-2026-119371","published":"2026-10-30T11:30:37.740Z","updated":"2026-10-30T15:51:05.359Z","title":"SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00199},{"id":"CVE-2026-119364","published":"2026-10-30T11:30:37.047Z","updated":"2026-10-30T15:56:45.622Z","title":"ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass","severity":"MEDIUM","score":6,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00465},{"id":"CVE-2026-119147","published":"2026-10-30T11:30:36.342Z","updated":"2026-10-30T11:30:36.342Z","title":"ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00289},{"id":"CVE-2026-119146","published":"2026-10-30T11:30:35.628Z","updated":"2026-10-30T11:30:35.628Z","title":"ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap","severity":"MEDIUM","score":6.3,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00459},{"id":"CVE-2026-116366","published":"2026-10-30T11:00:11.115Z","updated":"2026-10-30T16:36:32.335Z","title":"Unauthenticated RCE vulnerability against ClickHouse Server","severity":"CRITICAL","score":9.5,"vendor":"ClickHouse","product":"ClickHouse","kev":false,"epss":0.00395},{"id":"CVE-2026-22110","published":"2026-10-30T10:34:24.151Z","updated":"2026-10-30T16:35:40.502Z","title":"Missing authentication check on POST/PUT requests","severity":"HIGH","score":8.7,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.0024},{"id":"CVE-2026-22105","published":"2026-10-30T10:34:23.081Z","updated":"2026-10-30T16:35:01.858Z","title":"Use of default password based on serial number","severity":"HIGH","score":8.7,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00191},{"id":"CVE-2026-22109","published":"2026-10-30T10:34:21.978Z","updated":"2026-10-30T16:34:28.556Z","title":"Default WebUI passwords stored in plaintext","severity":"HIGH","score":8.4,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00151},{"id":"CVE-2026-22114","published":"2026-10-30T10:34:20.904Z","updated":"2026-10-30T16:33:58.275Z","title":"Missing brute-force protection for web interface","severity":"MEDIUM","score":5.3,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00185},{"id":"CVE-2025-31704","published":"2026-10-30T10:25:46.561Z","updated":"2026-10-30T15:07:34.049Z","title":"Dahua Intelligent Connection Center command injection","severity":"CRITICAL","score":9.8,"vendor":"Dahua","product":"Intelligent Connection Center","kev":false,"epss":0.01364},{"id":"CVE-2026-85268","published":"2026-10-30T10:20:06.249Z","updated":"2026-10-30T16:48:22.519Z","title":"Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID","severity":"HIGH","score":8.7,"vendor":"Google Cloud","product":"Identity Platform and Firebase Authentication","kev":false,"epss":0.00581},{"id":"CVE-2026-14467","published":"2026-10-30T09:52:32.373Z","updated":"2026-10-30T16:49:11.234Z","title":"Display of information in the Forocoches comments editor","severity":"HIGH","score":8.2,"vendor":"Forocoches","product":"Forocoches comments editor","kev":false,"epss":0.00294},{"id":"CVE-2026-97209","published":"2026-10-30T08:59:17.615Z","updated":"2026-10-30T16:50:46.465Z","title":"Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build","severity":"MEDIUM","score":5.4,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00115},{"id":"CVE-2026-115274","published":"2026-10-30T08:57:16.847Z","updated":"2026-10-30T16:51:45.396Z","title":"Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.9,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00498},{"id":"CVE-2026-109821","published":"2026-10-30T08:54:07.752Z","updated":"2026-10-30T16:52:43.052Z","title":"Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.3,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00496},{"id":"CVE-2026-59387","published":"2026-10-30T08:47:59.006Z","updated":"2026-10-30T20:10:53.458Z","title":"Broken access control restriction in Cloud Controller API","severity":"HIGH","score":8.8,"vendor":"Cloud Foundry","product":"CAPI (Cloud Controller API)","kev":false,"epss":0.00232},{"id":"CVE-2026-59385","published":"2026-10-30T08:44:45.681Z","updated":"2026-10-30T16:55:29.935Z","title":"Space Developer can extract space-scoped broker credentials","severity":"LOW","score":2.7,"vendor":"Cloud Foundry","product":"CAPI (Cloud Foundry Controller)","kev":false,"epss":0.00179},{"id":"CVE-2026-59388","published":"2026-10-30T08:40:39.058Z","updated":"2026-10-30T16:56:09.310Z","title":"Cloud Controller exposes secrets in audit log","severity":"MEDIUM","score":6.5,"vendor":"Cloud Foundry Foundation","product":"CAPI (Cloud Foundry Controller)","kev":false,"epss":0.00299},{"id":"CVE-2026-59386","published":"2026-10-30T08:35:20.435Z","updated":"2026-10-30T16:56:57.050Z","title":"Credential exposure to space supporter","severity":"MEDIUM","score":6.5,"vendor":"Cloud Foundry","product":"Cloud Foundry Controller (CAPI)","kev":false,"epss":0.00222},{"id":"CVE-2026-64618","published":"2026-10-30T08:29:02.904Z","updated":"2026-10-30T09:10:27.784Z","title":"Apache Fineract: SQL injection vulnerability in Search API","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Fineract","kev":false,"epss":0.00229},{"id":"CVE-2026-59396","published":"2026-10-30T08:24:47.718Z","updated":"2026-10-30T20:10:01.484Z","title":"DoS Vulnerability in UAA Related to JWKS URI Handling","severity":"MEDIUM","score":6.9,"vendor":"Cloud Foundry","product":"UAA","kev":false,"epss":0.00287},{"id":"CVE-2026-115456","published":"2026-10-30T08:21:50.361Z","updated":"2026-10-30T15:47:46.856Z","title":"Gcc: out-of-bounds read in std::from_chars","severity":"LOW","score":3.7,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00221},{"id":"CVE-2026-65874","published":"2026-10-30T08:18:08.619Z","updated":"2026-10-30T09:10:29.643Z","title":"Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Fineract","kev":false,"epss":0.00276},{"id":"CVE-2026-82104","published":"2026-10-30T08:01:55.034Z","updated":"2026-10-30T16:57:57.063Z","title":"API permission bypass via logic bug","severity":"CRITICAL","score":9.4,"vendor":"Teltonika Networks","product":"RUT","kev":false,"epss":0.00389},{"id":"CVE-2026-115455","published":"2026-10-30T07:13:06.547Z","updated":"2026-10-30T07:13:06.547Z","title":"Gcc: stack overflow in std::bitset on libstdc++","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00303},{"id":"CVE-2026-114691","published":"2026-10-30T07:13:05.891Z","updated":"2026-10-30T18:34:30.487Z","title":"Gcc: integer wrap in `std","severity":"MEDIUM","score":5.9,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00395},{"id":"CVE-2026-114690","published":"2026-10-30T07:13:04.008Z","updated":"2026-10-30T18:49:39.316Z","title":"Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00107},{"id":"CVE-2026-103039","published":"2026-10-30T06:47:32.599Z","updated":"2026-10-30T15:57:19.794Z","title":"Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field","severity":"CRITICAL","score":9.8,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.00508},{"id":"CVE-2026-110732","published":"2026-10-30T06:47:32.210Z","updated":"2026-10-30T18:09:00.341Z","title":"AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via Unauthenticated MCP OAuth Client Registration","severity":"HIGH","score":7.5,"vendor":"tigroumeow","product":"AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini","kev":false,"epss":0.00273},{"id":"CVE-2026-116622","published":"2026-10-30T06:47:31.812Z","updated":"2026-10-30T17:01:37.301Z","title":"Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_time' Cookie","severity":"HIGH","score":7.2,"vendor":"wpscripts","product":"Food Store – Online Food Delivery & Pickup","kev":false,"epss":0.00241},{"id":"CVE-2026-97645","published":"2026-10-30T06:47:31.434Z","updated":"2026-10-30T15:57:26.069Z","title":"Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List Field","severity":"HIGH","score":7.2,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.0019},{"id":"CVE-2026-89435","published":"2026-10-30T06:47:31.045Z","updated":"2026-10-30T18:09:00.504Z","title":"Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter","severity":"HIGH","score":8.8,"vendor":"strategy11team","product":"Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder","kev":false,"epss":0.00392},{"id":"CVE-2026-90437","published":"2026-10-30T06:47:30.530Z","updated":"2026-10-30T18:09:00.650Z","title":"Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values","severity":"HIGH","score":7.2,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.0019},{"id":"CVE-2026-118593","published":"2026-10-30T06:41:50.515Z","updated":"2026-11-01T17:38:11.696Z","title":"Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)","severity":"MEDIUM","score":5.9,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00199},{"id":"CVE-2026-118952","published":"2026-10-30T06:04:14.196Z","updated":"2026-10-30T06:04:14.196Z","title":"Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"streams for Apache Kafka 2","kev":false,"epss":0.00231},{"id":"CVE-2026-118165","published":"2026-10-30T06:00:24.399Z","updated":"2026-10-30T13:26:46.417Z","title":"Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Firelight Lightbox","kev":false,"epss":0.00235},{"id":"CVE-2026-118101","published":"2026-10-30T06:00:24.224Z","updated":"2026-10-30T13:26:46.551Z","title":"BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00153},{"id":"CVE-2026-118100","published":"2026-10-30T06:00:24.047Z","updated":"2026-10-30T13:26:46.692Z","title":"BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00206},{"id":"CVE-2026-118072","published":"2026-10-30T06:00:23.873Z","updated":"2026-10-30T13:26:46.841Z","title":"Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Fraud Prevention For WooCommerce and EDD","kev":false,"epss":0.0017},{"id":"CVE-2026-118071","published":"2026-10-30T06:00:23.702Z","updated":"2026-10-30T13:26:46.982Z","title":"Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Joinchat","kev":false,"epss":0.00235},{"id":"CVE-2026-117572","published":"2026-10-30T06:00:23.528Z","updated":"2026-10-30T13:26:47.112Z","title":"WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter","severity":"MEDIUM","score":4.1,"vendor":"Unknown","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00186},{"id":"CVE-2026-117571","published":"2026-10-30T06:00:23.349Z","updated":"2026-10-30T13:26:47.266Z","title":"WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00276},{"id":"CVE-2026-115277","published":"2026-10-30T06:00:23.167Z","updated":"2026-10-30T13:26:47.565Z","title":"WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter","severity":"MEDIUM","score":4.7,"vendor":"Unknown","product":"User Frontend","kev":false,"epss":0.00175},{"id":"CVE-2026-114444","published":"2026-10-30T06:00:22.985Z","updated":"2026-10-30T13:26:47.723Z","title":"Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer","severity":"MEDIUM","score":4.4,"vendor":"Unknown","product":"Security Plugin, Firewall & Malware Scanner with Auto Removal","kev":false,"epss":0.00227},{"id":"CVE-2026-114443","published":"2026-10-30T06:00:22.794Z","updated":"2026-10-30T13:26:47.867Z","title":"Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App Code","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Security Plugin, Firewall & Malware Scanner with Auto Removal","kev":false,"epss":0.0019},{"id":"CVE-2026-114422","published":"2026-10-30T06:00:22.558Z","updated":"2026-10-30T13:26:47.999Z","title":"Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Enable Media Replace","kev":false,"epss":0.00475},{"id":"CVE-2026-119087","published":"2026-10-30T05:35:52.429Z","updated":"2026-10-30T18:09:00.780Z","title":"Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation via 'preset_id' Parameter","severity":"MEDIUM","score":4.3,"vendor":"keywordrush","product":"Content Egg – Affiliate Product Importer & Price Comparison","kev":false,"epss":0.00222},{"id":"CVE-2026-119059","published":"2026-10-30T05:35:52.057Z","updated":"2026-10-30T18:09:00.924Z","title":"Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Meta Modification via 'post_id' Parameter via cegg_update_products AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"keywordrush","product":"Content Egg – Affiliate Product Importer & Price Comparison","kev":false,"epss":0.00204},{"id":"CVE-2026-118634","published":"2026-10-30T05:35:51.705Z","updated":"2026-10-30T18:09:01.062Z","title":"Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"liedekef","product":"Events Made Easy","kev":false,"epss":0.00201},{"id":"CVE-2026-118500","published":"2026-10-30T05:35:51.355Z","updated":"2026-10-30T15:57:46.333Z","title":"Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter","severity":"MEDIUM","score":6.4,"vendor":"coolplugins","product":"Cool FormKit Lite – Advanced Form Builder for Elementor","kev":false,"epss":0.00216},{"id":"CVE-2026-118698","published":"2026-10-30T05:35:50.977Z","updated":"2026-10-30T17:02:00.463Z","title":"JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"beardev","product":"JoomSport – for Sports: Team & League, Football, Hockey & more","kev":false,"epss":0.00321},{"id":"CVE-2026-118194","published":"2026-10-30T05:35:50.445Z","updated":"2026-10-30T18:09:01.200Z","title":"Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication","severity":"MEDIUM","score":6.5,"vendor":"cyberlord92","product":"Page and Post Restriction","kev":false,"epss":0.00344},{"id":"CVE-2026-5461","published":"2026-10-30T04:32:43.721Z","updated":"2026-10-30T18:09:01.358Z","title":"Forminator Forms <= 1.55.0.2 - Unauthenticated Limited File Deletion via Draft Upload Metadata","severity":"MEDIUM","score":6.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.0029},{"id":"CVE-2026-104368","published":"2026-10-30T04:32:43.217Z","updated":"2026-10-30T17:02:26.821Z","title":"Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field","severity":"HIGH","score":8.8,"vendor":"webtoffee","product":"Export and Import Users and Customers","kev":false,"epss":0.00347},{"id":"CVE-2026-103963","published":"2026-10-30T04:08:40.002Z","updated":"2026-10-30T04:08:40.002Z","title":"Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00339},{"id":"CVE-2026-107249","published":"2026-10-30T03:10:24.115Z","updated":"2026-10-30T19:38:37.015Z","title":"Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192","severity":"CRITICAL","score":9.8,"vendor":"Drupal","product":"Block AJAX","kev":false,"epss":0.00394},{"id":"CVE-2026-107250","published":"2026-10-30T03:10:23.038Z","updated":"2026-10-30T20:04:17.822Z","title":"ECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"ECA Helper","kev":false,"epss":0.00199},{"id":"CVE-2026-107251","published":"2026-10-30T03:10:22.038Z","updated":"2026-10-30T19:39:48.437Z","title":"Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Entity Reference Manager (Merge entities)","kev":false,"epss":0.00198},{"id":"CVE-2026-107252","published":"2026-10-30T03:10:20.994Z","updated":"2026-10-30T19:40:27.567Z","title":"MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"MathJax: LaTeX for Drupal","kev":false,"epss":0.00149},{"id":"CVE-2026-107253","published":"2026-10-30T03:10:19.921Z","updated":"2026-10-30T20:03:41.322Z","title":"Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Orphans Media","kev":false,"epss":0.00199},{"id":"CVE-2026-107254","published":"2026-10-30T03:10:18.866Z","updated":"2026-10-30T19:57:51.424Z","title":"Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"Authenticator Login Plus (2FA)","kev":false,"epss":0.00221},{"id":"CVE-2026-107257","published":"2026-10-30T03:10:17.831Z","updated":"2026-10-30T20:00:02.424Z","title":"Actstream - Critical - Access bypass - SA-CONTRIB-2026-198","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Actstream","kev":false,"epss":0.00194},{"id":"CVE-2026-107258","published":"2026-10-30T03:10:16.826Z","updated":"2026-10-30T20:04:49.660Z","title":"Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Inline Entity Form Dialog","kev":false,"epss":0.00168},{"id":"CVE-2026-107259","published":"2026-10-30T03:10:15.793Z","updated":"2026-10-30T20:05:19.615Z","title":"Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Linked Field","kev":false,"epss":0.00183},{"id":"CVE-2026-107261","published":"2026-10-30T03:10:14.755Z","updated":"2026-10-30T20:05:50.940Z","title":"Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Authenticator Login Plus (2FA)","kev":false,"epss":0.00191},{"id":"CVE-2026-107263","published":"2026-10-30T03:10:13.713Z","updated":"2026-10-30T20:06:20.756Z","title":"Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Gutenberg","kev":false,"epss":0.00168},{"id":"CVE-2026-107264","published":"2026-10-30T03:10:12.569Z","updated":"2026-10-30T20:06:44.137Z","title":"Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Inline Formatter Field","kev":false,"epss":0.00183},{"id":"CVE-2026-107265","published":"2026-10-30T03:10:11.422Z","updated":"2026-10-30T20:07:36.234Z","title":"Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Leaflet","kev":false,"epss":0.0018},{"id":"CVE-2026-107266","published":"2026-10-30T03:10:10.336Z","updated":"2026-10-30T03:10:10.336Z","title":"Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Views Share","kev":false,"epss":0.00142},{"id":"CVE-2026-96389","published":"2026-10-30T03:10:09.246Z","updated":"2026-10-30T20:08:09.645Z","title":"Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Xray Audit","kev":false,"epss":0.00159},{"id":"CVE-2026-107268","published":"2026-10-30T03:10:08.179Z","updated":"2026-10-30T20:08:45.383Z","title":"Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Two Factor Authentication - TFA / Passwordless Login","kev":false,"epss":0.00295},{"id":"CVE-2026-107267","published":"2026-10-30T03:10:07.093Z","updated":"2026-10-30T20:09:13.860Z","title":"DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"DKAN","kev":false,"epss":0.00228},{"id":"CVE-2026-107306","published":"2026-10-30T03:10:06.002Z","updated":"2026-10-30T20:20:29.219Z","title":"Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Menu Link Attributes","kev":false,"epss":0.00193},{"id":"CVE-2026-107307","published":"2026-10-30T03:10:04.955Z","updated":"2026-10-30T20:20:53.249Z","title":"SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"SmartLinker AI","kev":false,"epss":0.00197},{"id":"CVE-2026-107308","published":"2026-10-30T03:10:03.911Z","updated":"2026-10-30T20:34:57.018Z","title":"Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Country","kev":false,"epss":0.0015},{"id":"CVE-2026-107309","published":"2026-10-30T03:10:02.716Z","updated":"2026-10-30T20:35:36.354Z","title":"Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Easy Breadcrumb","kev":false,"epss":0.00197},{"id":"CVE-2026-107310","published":"2026-10-30T03:10:01.636Z","updated":"2026-10-30T20:36:20.608Z","title":"Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Freelinking","kev":false,"epss":0.00197},{"id":"CVE-2026-107311","published":"2026-10-30T03:10:00.554Z","updated":"2026-10-30T20:38:03.847Z","title":"Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Permissions by Term","kev":false,"epss":0.00208},{"id":"CVE-2026-107312","published":"2026-10-30T03:09:59.485Z","updated":"2026-10-30T20:37:12.885Z","title":"Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Examples for Developers","kev":false,"epss":0.00262},{"id":"CVE-2026-107255","published":"2026-10-30T03:09:58.356Z","updated":"2026-10-30T03:09:58.356Z","title":"Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Restrict route by IP","kev":false,"epss":0.00142},{"id":"CVE-2026-107262","published":"2026-10-30T03:09:56.247Z","updated":"2026-10-30T20:40:11.922Z","title":"Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Advanced Filesystem","kev":false,"epss":0.00121},{"id":"CVE-2026-108097","published":"2026-10-30T03:09:55.043Z","updated":"2026-10-30T03:09:55.043Z","title":"Drupal core - Critical - Remote code execution - SA-CORE-2026-014","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00326},{"id":"CVE-2026-110738","published":"2026-10-30T03:09:53.718Z","updated":"2026-10-30T03:09:53.718Z","title":"Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Gin Admin Theme","kev":false,"epss":0.00161},{"id":"CVE-2026-108515","published":"2026-10-30T03:09:52.573Z","updated":"2026-10-30T03:09:52.573Z","title":"Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00197},{"id":"CVE-2026-108514","published":"2026-10-30T03:09:51.346Z","updated":"2026-10-30T03:09:51.346Z","title":"Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00197},{"id":"CVE-2026-108099","published":"2026-10-30T03:09:50.302Z","updated":"2026-10-30T03:09:50.302Z","title":"Entity  List - Critical - Remote code execution - SA-CONTRIB-2026-218","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Entity  List","kev":false,"epss":0.00318},{"id":"CVE-2026-114523","published":"2026-10-30T03:09:49.279Z","updated":"2026-10-30T03:09:49.279Z","title":"Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Ffmpeg Image Toolkit","kev":false,"epss":0.00527},{"id":"CVE-2026-114527","published":"2026-10-30T03:09:48.255Z","updated":"2026-10-30T03:09:48.255Z","title":"UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"UI Icons","kev":false,"epss":0.00161},{"id":"CVE-2026-114528","published":"2026-10-30T03:09:47.242Z","updated":"2026-10-30T03:09:47.242Z","title":"Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Zero Point","kev":false,"epss":0.00161},{"id":"CVE-2026-114526","published":"2026-10-30T03:09:46.199Z","updated":"2026-10-30T03:09:46.199Z","title":"Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Black Hole","kev":false,"epss":0.00168},{"id":"CVE-2026-114525","published":"2026-10-30T03:09:45.202Z","updated":"2026-10-30T03:09:45.202Z","title":"ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"ABC","kev":false,"epss":0.00161},{"id":"CVE-2026-114524","published":"2026-10-30T03:09:44.167Z","updated":"2026-10-30T03:09:44.167Z","title":"Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Custom Formatters","kev":false,"epss":0.00142},{"id":"CVE-2026-114529","published":"2026-10-30T03:09:43.089Z","updated":"2026-10-30T03:09:43.089Z","title":"CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"CSV Field","kev":false,"epss":0.00161},{"id":"CVE-2026-114530","published":"2026-10-30T03:09:42.085Z","updated":"2026-10-30T03:09:42.085Z","title":"Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Dopup","kev":false,"epss":0.00142},{"id":"CVE-2026-114531","published":"2026-10-30T03:09:40.925Z","updated":"2026-10-30T03:09:40.925Z","title":"Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Swiper formatter","kev":false,"epss":0.00161},{"id":"CVE-2026-107260","published":"2026-10-30T03:09:39.913Z","updated":"2026-10-30T03:09:39.913Z","title":"Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Sector Distribution","kev":false,"epss":0.00161},{"id":"CVE-2026-114532","published":"2026-10-30T03:09:38.903Z","updated":"2026-10-30T03:09:38.903Z","title":"UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"UI Icons","kev":false,"epss":0.00161},{"id":"CVE-2026-114533","published":"2026-10-30T03:09:37.860Z","updated":"2026-10-30T03:09:37.860Z","title":"Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Ágora Transparency Theme","kev":false,"epss":0.00142},{"id":"CVE-2026-114534","published":"2026-10-30T03:09:36.863Z","updated":"2026-10-30T03:09:36.863Z","title":"Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Block Attributes","kev":false,"epss":0.00161},{"id":"CVE-2026-114535","published":"2026-10-30T03:09:35.861Z","updated":"2026-10-30T03:09:35.861Z","title":"Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Swiper formatter","kev":false,"epss":0.00142},{"id":"CVE-2026-114536","published":"2026-10-30T03:09:34.828Z","updated":"2026-10-30T03:09:34.828Z","title":"USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"USWDS Paragraph Components","kev":false,"epss":0.00161},{"id":"CVE-2026-114537","published":"2026-10-30T03:09:33.836Z","updated":"2026-10-30T03:09:33.836Z","title":"View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"View Unpublished","kev":false,"epss":0.00142},{"id":"CVE-2026-114538","published":"2026-10-30T03:09:32.792Z","updated":"2026-10-30T03:09:32.792Z","title":"Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Bootstrap","kev":false,"epss":0.00161},{"id":"CVE-2026-114539","published":"2026-10-30T03:09:31.746Z","updated":"2026-10-30T03:09:31.746Z","title":"DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"DocCheck Basic","kev":false,"epss":0.00193},{"id":"CVE-2026-114540","published":"2026-10-30T03:09:30.703Z","updated":"2026-10-30T03:09:30.703Z","title":"Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Domain","kev":false,"epss":0.00142},{"id":"CVE-2026-114543","published":"2026-10-30T03:09:29.665Z","updated":"2026-10-30T03:09:29.665Z","title":"Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Simple User Management","kev":false,"epss":0.00142},{"id":"CVE-2026-114541","published":"2026-10-30T03:09:28.662Z","updated":"2026-10-30T03:09:28.662Z","title":"Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Frontend Editing","kev":false,"epss":0.00103},{"id":"CVE-2026-114553","published":"2026-10-30T03:09:27.605Z","updated":"2026-10-30T03:09:27.605Z","title":"Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Frontend Editing","kev":false,"epss":0.00142},{"id":"CVE-2026-114542","published":"2026-10-30T03:09:26.573Z","updated":"2026-10-30T03:09:26.573Z","title":"Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Simple OAuth (OAuth2) & OpenID Connect","kev":false,"epss":0.0015},{"id":"CVE-2026-114544","published":"2026-10-30T03:09:25.557Z","updated":"2026-10-30T03:09:25.557Z","title":"Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Media Bulk Upload","kev":false,"epss":0.00142},{"id":"CVE-2026-114545","published":"2026-10-30T03:09:24.468Z","updated":"2026-10-30T03:09:24.468Z","title":"Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Fullcalendar View","kev":false,"epss":0.00142},{"id":"CVE-2026-114546","published":"2026-10-30T03:09:23.440Z","updated":"2026-10-30T03:09:23.440Z","title":"Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Media Alias Display","kev":false,"epss":0.0015},{"id":"CVE-2026-114547","published":"2026-10-30T03:09:22.443Z","updated":"2026-10-30T03:09:22.443Z","title":"TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"TinyPNG","kev":false,"epss":0.00142},{"id":"CVE-2026-114548","published":"2026-10-30T03:09:21.401Z","updated":"2026-10-30T03:09:21.401Z","title":"ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"ImageAPI Optimize WebP","kev":false,"epss":0.0015},{"id":"CVE-2026-107256","published":"2026-10-30T03:09:20.371Z","updated":"2026-10-30T03:09:20.371Z","title":"Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Shield","kev":false,"epss":0.00182},{"id":"CVE-2026-114572","published":"2026-10-30T03:09:19.330Z","updated":"2026-10-30T19:54:33.247Z","title":"Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Domain Login Restrict","kev":false,"epss":0.00218},{"id":"CVE-2026-114555","published":"2026-10-30T03:09:18.190Z","updated":"2026-10-30T19:55:58.068Z","title":"Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Data field","kev":false,"epss":0.00184},{"id":"CVE-2026-114554","published":"2026-10-30T03:09:17.116Z","updated":"2026-10-30T03:09:17.116Z","title":"AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI File to Text","kev":false,"epss":0.00142},{"id":"CVE-2026-114571","published":"2026-10-30T03:09:16.074Z","updated":"2026-10-30T03:09:16.074Z","title":"Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Rabbit Hole","kev":false,"epss":0.00142},{"id":"CVE-2026-114573","published":"2026-10-30T03:09:15.036Z","updated":"2026-10-30T03:09:15.036Z","title":"Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Monster Menus","kev":false,"epss":0.00245},{"id":"CVE-2026-118539","published":"2026-10-30T03:09:13.976Z","updated":"2026-10-31T03:56:19.259Z","title":"Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00305},{"id":"CVE-2026-118540","published":"2026-10-30T03:09:12.953Z","updated":"2026-10-30T03:09:12.953Z","title":"Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00148},{"id":"CVE-2026-118541","published":"2026-10-30T03:09:11.899Z","updated":"2026-10-30T03:09:11.899Z","title":"Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00148},{"id":"CVE-2026-118542","published":"2026-10-30T03:09:10.859Z","updated":"2026-10-30T03:09:10.859Z","title":"Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00148},{"id":"CVE-2026-118543","published":"2026-10-30T03:09:09.800Z","updated":"2026-10-30T03:09:09.800Z","title":"Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00128},{"id":"CVE-2026-118544","published":"2026-10-30T03:09:08.731Z","updated":"2026-10-30T03:09:08.731Z","title":"Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00142},{"id":"CVE-2026-118555","published":"2026-10-30T03:09:06.783Z","updated":"2026-10-30T03:09:06.783Z","title":"Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce License","kev":false,"epss":0.00148},{"id":"CVE-2026-118556","published":"2026-10-30T03:09:05.585Z","updated":"2026-10-30T03:09:05.585Z","title":"Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Shipping","kev":false,"epss":0.00148},{"id":"CVE-2026-118557","published":"2026-10-30T03:09:04.516Z","updated":"2026-10-30T03:09:04.516Z","title":"Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Shipping","kev":false,"epss":0.00138},{"id":"CVE-2026-118558","published":"2026-10-30T03:09:03.476Z","updated":"2026-10-30T03:09:03.476Z","title":"Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.00101},{"id":"CVE-2026-118559","published":"2026-10-30T03:09:02.462Z","updated":"2026-10-30T03:09:02.462Z","title":"Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.00096},{"id":"CVE-2026-118560","published":"2026-10-30T03:09:01.410Z","updated":"2026-10-30T03:09:01.410Z","title":"Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.00157},{"id":"CVE-2026-118545","published":"2026-10-30T03:09:00.347Z","updated":"2026-10-30T03:09:00.347Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00168},{"id":"CVE-2026-118546","published":"2026-10-30T03:08:59.295Z","updated":"2026-10-30T03:08:59.295Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00168},{"id":"CVE-2026-118548","published":"2026-10-30T03:08:58.257Z","updated":"2026-10-30T03:08:58.257Z","title":"AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00153},{"id":"CVE-2026-118549","published":"2026-10-30T03:08:57.240Z","updated":"2026-10-30T03:08:57.240Z","title":"AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00168},{"id":"CVE-2026-118550","published":"2026-10-30T03:08:56.132Z","updated":"2026-10-30T03:08:56.132Z","title":"AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.0019},{"id":"CVE-2026-118551","published":"2026-10-30T03:08:55.104Z","updated":"2026-10-30T03:08:55.104Z","title":"AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.0015},{"id":"CVE-2026-118552","published":"2026-10-30T03:08:54.084Z","updated":"2026-10-30T03:08:54.084Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00168},{"id":"CVE-2026-118553","published":"2026-10-30T03:08:52.993Z","updated":"2026-10-30T03:08:52.993Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00168},{"id":"CVE-2026-118561","published":"2026-10-30T03:08:51.799Z","updated":"2026-10-30T03:08:51.799Z","title":"Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Single Content Sync","kev":false,"epss":0.00146},{"id":"CVE-2026-118562","published":"2026-10-30T03:08:50.773Z","updated":"2026-10-30T03:08:50.773Z","title":"Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Single Content Sync","kev":false,"epss":0.00268},{"id":"CVE-2026-118563","published":"2026-10-30T03:08:49.738Z","updated":"2026-10-30T03:08:49.738Z","title":"CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"CacheFlush","kev":false,"epss":0.00146},{"id":"CVE-2026-118564","published":"2026-10-30T03:08:48.653Z","updated":"2026-10-30T03:08:48.653Z","title":"PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"PayUmoney for Drupal Commerce","kev":false,"epss":0.00146},{"id":"CVE-2026-118565","published":"2026-10-30T03:08:47.618Z","updated":"2026-10-30T03:08:47.618Z","title":"GroupEx PRO ( Daxko )  integration - Critical - Unsupported - SA-CONTRIB-2026-278","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"GroupEx PRO ( Daxko )  integration","kev":false,"epss":0.00146},{"id":"CVE-2026-118582","published":"2026-10-30T03:08:46.618Z","updated":"2026-10-30T03:08:46.618Z","title":"CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"CAPTCHA","kev":false,"epss":0.00182},{"id":"CVE-2026-118569","published":"2026-10-30T03:08:45.588Z","updated":"2026-10-30T03:08:45.588Z","title":"Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Fasttoggle","kev":false,"epss":0.00138},{"id":"CVE-2026-118570","published":"2026-10-30T03:08:44.482Z","updated":"2026-10-30T03:08:44.482Z","title":"Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Fasttoggle","kev":false,"epss":0.00101},{"id":"CVE-2026-118574","published":"2026-10-30T03:08:43.467Z","updated":"2026-10-30T03:08:43.467Z","title":"S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"S3 File System","kev":false,"epss":0.00132},{"id":"CVE-2026-118567","published":"2026-10-30T03:08:42.458Z","updated":"2026-10-30T03:08:42.458Z","title":"Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Bulk Update User Roles","kev":false,"epss":0.00138},{"id":"CVE-2026-118572","published":"2026-10-30T03:08:41.455Z","updated":"2026-10-30T03:08:41.455Z","title":"OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"OAuth Login - OAuth OIDC SSO","kev":false,"epss":0.00182},{"id":"CVE-2026-118575","published":"2026-10-30T03:08:40.415Z","updated":"2026-10-30T03:08:40.415Z","title":"Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Signature pad widget","kev":false,"epss":0.00157},{"id":"CVE-2026-118576","published":"2026-10-30T03:08:39.367Z","updated":"2026-10-30T03:08:39.367Z","title":"Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Stage File Proxy","kev":false,"epss":0.00157},{"id":"CVE-2026-118554","published":"2026-10-30T03:08:38.343Z","updated":"2026-10-30T03:08:38.343Z","title":"OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"OpenID Connect Client","kev":false,"epss":0.00193},{"id":"CVE-2026-118583","published":"2026-10-30T03:08:37.282Z","updated":"2026-10-30T03:08:37.282Z","title":"Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Field Permissions","kev":false,"epss":0.00132},{"id":"CVE-2026-118584","published":"2026-10-30T03:08:36.287Z","updated":"2026-10-30T03:08:36.287Z","title":"Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Field Permissions","kev":false,"epss":0.00132},{"id":"CVE-2026-118573","published":"2026-10-30T03:08:35.264Z","updated":"2026-10-30T03:08:35.264Z","title":"OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"OAuth2 Token Manager","kev":false,"epss":0.00138},{"id":"CVE-2026-118568","published":"2026-10-30T03:08:34.253Z","updated":"2026-10-30T03:08:34.253Z","title":"Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Content Sync (content-sync.io)","kev":false,"epss":0.0014},{"id":"CVE-2026-118571","published":"2026-10-30T03:08:33.262Z","updated":"2026-10-30T03:08:33.262Z","title":"Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Media Alias Display","kev":false,"epss":0.0014},{"id":"CVE-2026-74915","published":"2026-10-30T02:11:22.333Z","updated":"2026-10-30T02:11:22.333Z","title":"GPU DDK - OOB write in UntwiddlePOTSquare64bpp","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-74912","published":"2026-10-30T02:07:31.880Z","updated":"2026-10-30T02:07:31.880Z","title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-19199","published":"2026-10-30T02:03:39.562Z","updated":"2026-10-30T02:03:39.562Z","title":"GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-18629","published":"2026-10-30T02:00:30.719Z","updated":"2026-10-30T02:00:30.719Z","title":"GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-65587","published":"2026-10-30T01:56:26.691Z","updated":"2026-10-30T01:56:26.691Z","title":"GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-65586","published":"2026-10-30T01:42:18.824Z","updated":"2026-10-30T01:42:18.824Z","title":"GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0014},{"id":"CVE-2026-65584","published":"2026-10-30T01:32:56.408Z","updated":"2026-10-30T01:52:21.452Z","title":"GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00175},{"id":"CVE-2026-118475","published":"2026-10-30T01:24:43.195Z","updated":"2026-10-30T17:00:01.226Z","title":"Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk","severity":"LOW","score":3.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","kev":false,"epss":0.00108},{"id":"CVE-2026-112922","published":"2026-10-30T01:24:32.059Z","updated":"2026-10-30T15:58:20.193Z","title":"Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading","severity":"LOW","score":3.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00141},{"id":"CVE-2026-15466","published":"2026-10-30T01:23:24.460Z","updated":"2026-10-30T01:53:35.071Z","title":"GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()","severity":"UNKNOWN","score":null,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00177},{"id":"CVE-2026-91920","published":"2026-10-30T01:16:53.416Z","updated":"2026-10-30T01:16:53.416Z","title":"Undertow: undertow: chunkreader message length permits chunk-size overflow","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","kev":false,"epss":0.00235},{"id":"CVE-2026-112605","published":"2026-10-30T00:26:44.082Z","updated":"2026-10-30T00:26:44.082Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00136},{"id":"CVE-2026-112602","published":"2026-10-30T00:26:43.253Z","updated":"2026-10-30T00:26:43.253Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00136},{"id":"CVE-2026-110133","published":"2026-10-30T00:17:13.962Z","updated":"2026-10-30T17:00:30.340Z","title":"Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback","severity":"MEDIUM","score":5.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00235},{"id":"CVE-2026-118959","published":"2026-10-30T00:15:31.611Z","updated":"2026-10-30T00:15:31.611Z","title":"Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00195},{"id":"CVE-2026-118947","published":"2026-10-30T00:13:56.153Z","updated":"2026-10-30T00:13:56.153Z","title":"Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00198},{"id":"CVE-2026-119272","published":"2026-10-30T00:05:10.337Z","updated":"2026-10-30T13:27:28.727Z","title":"Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00163},{"id":"CVE-2026-119271","published":"2026-10-30T00:05:10.204Z","updated":"2026-10-31T03:56:35.986Z","title":"Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119270","published":"2026-10-30T00:05:10.072Z","updated":"2026-10-31T03:56:35.225Z","title":"Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00252},{"id":"CVE-2026-119269","published":"2026-10-30T00:05:09.940Z","updated":"2026-10-31T03:56:34.470Z","title":"Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119268","published":"2026-10-30T00:05:09.805Z","updated":"2026-10-31T03:56:33.543Z","title":"Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119267","published":"2026-10-30T00:05:09.662Z","updated":"2026-10-31T03:56:32.748Z","title":"Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119266","published":"2026-10-30T00:05:09.521Z","updated":"2026-10-31T03:56:31.984Z","title":"Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119265","published":"2026-10-30T00:05:09.381Z","updated":"2026-10-31T03:56:31.201Z","title":"Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119264","published":"2026-10-30T00:05:09.239Z","updated":"2026-10-31T03:56:30.404Z","title":"Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-119263","published":"2026-10-30T00:05:09.101Z","updated":"2026-10-31T03:56:29.565Z","title":"Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00271},{"id":"CVE-2026-119262","published":"2026-10-30T00:05:08.953Z","updated":"2026-10-31T03:56:28.785Z","title":"Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0028},{"id":"CVE-2026-119261","published":"2026-10-30T00:05:08.810Z","updated":"2026-10-31T03:56:28.000Z","title":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00282},{"id":"CVE-2026-119260","published":"2026-10-30T00:05:08.673Z","updated":"2026-10-31T03:56:25.660Z","title":"Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-76031","published":"2026-10-30T00:05:08.551Z","updated":"2026-10-31T03:56:40.679Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00304},{"id":"CVE-2026-76030","published":"2026-10-30T00:05:08.411Z","updated":"2026-10-31T03:56:39.798Z","title":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-76029","published":"2026-10-30T00:05:08.263Z","updated":"2026-10-31T03:56:39.046Z","title":"Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-76028","published":"2026-10-30T00:05:08.133Z","updated":"2026-10-31T03:56:38.268Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-76027","published":"2026-10-30T00:05:07.992Z","updated":"2026-10-30T13:28:00.821Z","title":"Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00215},{"id":"CVE-2026-76026","published":"2026-10-30T00:05:07.858Z","updated":"2026-10-31T03:56:37.529Z","title":"Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242},{"id":"CVE-2026-76025","published":"2026-10-30T00:05:07.640Z","updated":"2026-10-31T03:56:36.752Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00303},{"id":"CVE-2026-76024","published":"2026-10-30T00:05:07.416Z","updated":"2026-10-30T13:11:25.487Z","title":"Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00219},{"id":"CVE-2026-117350","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T14:05:22.550Z","title":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00167},{"id":"CVE-2026-117349","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T17:23:17.210Z","title":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-117346","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T14:26:11.489Z","title":"Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00198},{"id":"CVE-2026-117184","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T15:21:55.746Z","title":"An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00244},{"id":"CVE-2026-117183","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T15:08:24.191Z","title":"A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00244},{"id":"CVE-2026-117182","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T15:33:57.827Z","title":"An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00301},{"id":"CVE-2026-117028","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T13:30:22.536Z","title":"Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-37468","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T15:06:31.528Z","title":"Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00207},{"id":"CVE-2025-49602","published":"2026-10-30T00:00:00.000Z","updated":"2026-10-30T16:12:29.294Z","title":"An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00187},{"id":"CVE-2026-92744","published":"2026-10-29T22:56:09.879Z","updated":"2026-10-30T18:31:46.118Z","title":"Delinea Privilege Manager agent unauthenticated remote code execution vulnerability","severity":"HIGH","score":8.7,"vendor":"Delinea","product":"Privilege Manager","kev":false,"epss":0.00257},{"id":"CVE-2026-107238","published":"2026-10-29T22:55:37.666Z","updated":"2026-10-30T17:02:59.654Z","title":"A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management…","severity":"HIGH","score":8.7,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00449},{"id":"CVE-2026-107239","published":"2026-10-29T22:55:37.649Z","updated":"2026-10-30T17:03:28.384Z","title":"A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam…","severity":"HIGH","score":8.8,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00648},{"id":"CVE-2023-22793","published":"2026-10-29T22:55:37.594Z","updated":"2026-10-30T17:04:18.232Z","title":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of…","severity":"CRITICAL","score":9.3,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00526},{"id":"CVE-2026-119286","published":"2026-10-29T21:38:43.633Z","updated":"2026-10-30T15:58:44.342Z","title":"GraphQL-core: Denial of service via memory leak in aborted validations","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.00421},{"id":"CVE-2026-115943","published":"2026-10-29T21:37:40.697Z","updated":"2026-10-30T18:27:48.508Z","title":"Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt","severity":"UNKNOWN","score":null,"vendor":null,"product":"Spreadsheet-XLSX","kev":false,"epss":0.00254},{"id":"CVE-2026-119285","published":"2026-10-29T21:36:02.199Z","updated":"2026-10-29T21:36:02.199Z","title":"Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads","severity":"MEDIUM","score":5.9,"vendor":"gofiber","product":"fiber","kev":false,"epss":0.00129},{"id":"CVE-2026-119284","published":"2026-10-29T21:33:16.529Z","updated":"2026-10-30T17:05:38.184Z","title":"joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection","severity":"MEDIUM","score":6.9,"vendor":"authlib","product":"joserfc","kev":false,"epss":0.00192},{"id":"CVE-2026-61719","published":"2026-10-29T21:26:27.288Z","updated":"2026-10-29T21:26:27.288Z","title":"WeGIA: Stored Cross-Site Scripting (XSS) in \"historico_prontuarios.php\" via \"textoProntuario\" Field","severity":"HIGH","score":8.9,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00236},{"id":"CVE-2026-61707","published":"2026-10-29T21:25:01.101Z","updated":"2026-10-30T15:59:08.843Z","title":"SOCFortress CoPilot: Stored case-report template injection permits backend code execution","severity":"CRITICAL","score":9,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00235},{"id":"CVE-2026-61673","published":"2026-10-29T21:22:22.290Z","updated":"2026-10-29T21:22:22.290Z","title":"WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover","severity":"MEDIUM","score":6.3,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00334},{"id":"CVE-2026-61671","published":"2026-10-29T21:21:02.485Z","updated":"2026-10-30T17:06:30.196Z","title":"WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes","severity":"HIGH","score":8.1,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00163},{"id":"CVE-2026-61654","published":"2026-10-29T21:19:12.542Z","updated":"2026-10-29T21:19:12.542Z","title":"Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key","severity":"HIGH","score":8.3,"vendor":"lightdash","product":"lightdash","kev":false,"epss":0.0038},{"id":"CVE-2026-61645","published":"2026-10-29T21:17:37.532Z","updated":"2026-10-30T15:59:29.551Z","title":"Docat has Arbitrary File Upload exists in Upload API","severity":"CRITICAL","score":9.1,"vendor":"docat-org","product":"docat","kev":false,"epss":0.0041},{"id":"CVE-2026-45049","published":"2026-10-29T21:13:55.740Z","updated":"2026-10-29T21:13:55.740Z","title":"OpenAM Session Hijacking via CDSSO","severity":"HIGH","score":8.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00332},{"id":"CVE-2026-119317","published":"2026-10-29T21:13:04.494Z","updated":"2026-10-30T17:07:23.004Z","title":"Incorrect Authorization","severity":"MEDIUM","score":6,"vendor":"Tenable, Inc.","product":"Plugin Feed","kev":false,"epss":0.00201},{"id":"CVE-2026-119283","published":"2026-10-29T21:10:05.490Z","updated":"2026-10-30T17:08:26.483Z","title":"joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption","severity":"HIGH","score":7.5,"vendor":"authlib","product":"joserfc","kev":false,"epss":0.00229},{"id":"CVE-2026-119282","published":"2026-10-29T21:07:46.468Z","updated":"2026-10-29T21:07:46.468Z","title":"Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle","severity":"HIGH","score":7.3,"vendor":"nrwl","product":"nx","kev":false,"epss":0.0014},{"id":"CVE-2026-13303","published":"2026-10-29T21:03:41.322Z","updated":"2026-10-30T17:08:58.961Z","title":"Boundary vulnerable to server-side request forgery in Vault credential store","severity":"HIGH","score":8.7,"vendor":"HashiCorp","product":"Boundary","kev":false,"epss":0.00222},{"id":"CVE-2026-61576","published":"2026-10-29T21:00:35.691Z","updated":"2026-10-30T15:59:44.311Z","title":"Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key","severity":"HIGH","score":8.3,"vendor":"lightdash","product":"lightdash","kev":false,"epss":0.00448},{"id":"CVE-2026-119281","published":"2026-10-29T20:58:39.322Z","updated":"2026-10-29T20:58:39.322Z","title":"MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00283},{"id":"CVE-2026-119280","published":"2026-10-29T20:55:50.101Z","updated":"2026-10-30T17:10:10.174Z","title":"MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths","severity":"LOW","score":3.7,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00306},{"id":"CVE-2026-119279","published":"2026-10-29T20:52:22.903Z","updated":"2026-10-29T20:52:22.903Z","title":"MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351},{"id":"CVE-2026-119278","published":"2026-10-29T20:50:35.474Z","updated":"2026-10-30T16:00:11.050Z","title":"MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00364},{"id":"CVE-2026-119277","published":"2026-10-29T20:49:24.148Z","updated":"2026-10-29T20:49:24.148Z","title":"MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351},{"id":"CVE-2026-119276","published":"2026-10-29T20:47:32.086Z","updated":"2026-10-30T17:11:51.081Z","title":"MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351},{"id":"CVE-2026-119210","published":"2026-10-29T20:45:38.135Z","updated":"2026-10-29T20:45:38.135Z","title":"MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00303},{"id":"CVE-2026-119209","published":"2026-10-29T20:43:03.072Z","updated":"2026-10-30T16:00:30.516Z","title":"pypdf: Possible large memory usage when parsing cross-reference streams","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00268},{"id":"CVE-2026-119208","published":"2026-10-29T20:41:02.879Z","updated":"2026-10-29T20:41:02.879Z","title":"pypdf: Possible long runtimes/large memory usage for encrypted PDF files","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119207","published":"2026-10-29T20:38:54.611Z","updated":"2026-10-30T17:12:40.743Z","title":"pypdf: Possible large memory usage for exceptions in strict mode","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119206","published":"2026-10-29T20:37:15.057Z","updated":"2026-10-29T20:37:15.057Z","title":"pypdf: Possible long runtimes when retrieving page labels","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119205","published":"2026-10-29T20:35:33.902Z","updated":"2026-10-30T16:00:42.997Z","title":"pypdf: Possible infinite loop when cloning dictionaries","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119325","published":"2026-10-29T20:34:52.827Z","updated":"2026-10-30T17:13:16.422Z","title":"Bricks Theme Broken Access Control via load_popup_content","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Theme","kev":false,"epss":0.00241},{"id":"CVE-2026-119204","published":"2026-10-29T20:34:02.704Z","updated":"2026-10-29T20:34:02.704Z","title":"pypdf: Possible large memory usage when parsing page tree","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119203","published":"2026-10-29T20:30:13.426Z","updated":"2026-10-30T17:11:01.881Z","title":"pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00304},{"id":"CVE-2026-119202","published":"2026-10-29T20:24:17.210Z","updated":"2026-10-29T20:24:17.210Z","title":"@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service","severity":"HIGH","score":7.5,"vendor":"hapijs","product":"content","kev":false,"epss":0.00411},{"id":"CVE-2026-119201","published":"2026-10-29T20:21:27.895Z","updated":"2026-10-30T16:08:10.079Z","title":"Nuxt dev server exposes generated appSecret through Vite file serving","severity":"MEDIUM","score":4.8,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00205},{"id":"CVE-2026-119200","published":"2026-10-29T20:17:08.837Z","updated":"2026-10-29T20:17:08.837Z","title":"Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes","severity":"MEDIUM","score":6.5,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00339},{"id":"CVE-2026-119199","published":"2026-10-29T20:14:07.854Z","updated":"2026-10-29T20:27:59.121Z","title":"Nuxt dev server exposes private runtime config through the Nitro dev bundle","severity":"MEDIUM","score":5.9,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.0035},{"id":"CVE-2026-119198","published":"2026-10-29T20:11:35.300Z","updated":"2026-10-29T20:11:35.300Z","title":"Nuxt dev server arbitrary file read through client error reports","severity":"MEDIUM","score":5.9,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00289},{"id":"CVE-2026-92092","published":"2026-10-29T19:51:44.996Z","updated":"2026-10-30T16:08:35.536Z","title":"Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","kev":false,"epss":0.0024},{"id":"CVE-2026-119197","published":"2026-10-29T19:48:52.470Z","updated":"2026-10-30T16:08:50.120Z","title":"pyasn1: Quadratic-complexity denial of service in binary REAL decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425},{"id":"CVE-2026-119196","published":"2026-10-29T19:44:46.031Z","updated":"2026-10-29T19:44:46.031Z","title":"pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425},{"id":"CVE-2026-119195","published":"2026-10-29T19:41:37.352Z","updated":"2026-10-29T20:26:31.801Z","title":"pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00527},{"id":"CVE-2026-119194","published":"2026-10-29T19:38:14.056Z","updated":"2026-10-29T19:38:14.056Z","title":"pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425},{"id":"CVE-2026-119193","published":"2026-10-29T19:35:36.052Z","updated":"2026-10-30T16:09:03.726Z","title":"PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling","severity":"MEDIUM","score":5.4,"vendor":"sebastianbergmann","product":"phpunit","kev":false,"epss":0.00113},{"id":"CVE-2026-119191","published":"2026-10-29T19:26:29.815Z","updated":"2026-10-29T19:26:29.815Z","title":"Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00429},{"id":"CVE-2026-119190","published":"2026-10-29T19:25:09.677Z","updated":"2026-10-29T20:25:04.131Z","title":"Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13","severity":"HIGH","score":7.4,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00246},{"id":"CVE-2026-119189","published":"2026-10-29T19:23:25.238Z","updated":"2026-10-29T19:23:25.238Z","title":"Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00165},{"id":"CVE-2026-119188","published":"2026-10-29T19:21:27.347Z","updated":"2026-10-30T16:09:23.948Z","title":"Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00411},{"id":"CVE-2026-119187","published":"2026-10-29T19:19:36.824Z","updated":"2026-10-29T19:19:36.824Z","title":"Forge: Denial of service in TLS record processing via call stack exhaustion","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00415},{"id":"CVE-2026-119186","published":"2026-10-29T19:17:26.965Z","updated":"2026-10-29T20:24:15.290Z","title":"Forge: AES-GCM authentication bypass via unvalidated tagLength option","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00206},{"id":"CVE-2026-103093","published":"2026-10-29T18:54:22.587Z","updated":"2026-10-29T20:36:53.393Z","title":"Sandbox Escape via Table Rotation in ServiceNow AI Platform","severity":"CRITICAL","score":9.4,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00429},{"id":"CVE-2026-118782","published":"2026-10-29T18:51:02.388Z","updated":"2026-10-29T18:51:02.388Z","title":"Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00125},{"id":"CVE-2026-6877","published":"2026-10-29T18:49:37.752Z","updated":"2026-10-29T20:37:31.040Z","title":"Domain Separation Bypass in ServiceNow AI Platform","severity":"MEDIUM","score":5.3,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00345},{"id":"CVE-2026-118781","published":"2026-10-29T18:49:28.661Z","updated":"2026-10-30T16:09:30.153Z","title":"Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)","severity":"LOW","score":2.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00119},{"id":"CVE-2026-118780","published":"2026-10-29T18:47:35.961Z","updated":"2026-10-29T18:47:35.961Z","title":"Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00172},{"id":"CVE-2026-118779","published":"2026-10-29T18:45:55.093Z","updated":"2026-10-29T20:23:11.602Z","title":"Forge: Regular expression denial of service in PEM decoding (pem.decode)","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00556},{"id":"CVE-2026-118778","published":"2026-10-29T18:44:09.502Z","updated":"2026-10-29T18:44:09.502Z","title":"Forge: TLS client crash when the server sends no certificate","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00204},{"id":"CVE-2026-118777","published":"2026-10-29T18:42:06.079Z","updated":"2026-10-30T17:12:06.088Z","title":"Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie","severity":"MEDIUM","score":4.8,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00255},{"id":"CVE-2026-103094","published":"2026-10-29T18:40:52.681Z","updated":"2026-10-29T20:38:39.043Z","title":"Cleartext Storage of OAuth Credentials in ServiceNow AI Platform","severity":"HIGH","score":7.1,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00269},{"id":"CVE-2026-118776","published":"2026-10-29T18:37:32.362Z","updated":"2026-10-29T18:37:32.362Z","title":"Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00131},{"id":"CVE-2026-118775","published":"2026-10-29T18:35:33.776Z","updated":"2026-10-29T20:22:06.327Z","title":"Forge: ASN.1 OID first arc truncation in asn1.oidToDer","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00313},{"id":"CVE-2026-118774","published":"2026-10-29T18:33:46.399Z","updated":"2026-10-29T18:33:46.399Z","title":"Forge: Certificate signature verified with the issuer's RSA signature scheme","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00107},{"id":"CVE-2026-119251","published":"2026-10-29T18:29:46.417Z","updated":"2026-10-29T20:39:44.834Z","title":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate…","severity":"MEDIUM","score":6.7,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop for macOS","kev":false,"epss":0.00147},{"id":"CVE-2026-118773","published":"2026-10-29T18:27:47.480Z","updated":"2026-10-30T17:12:23.906Z","title":"Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal","severity":"MEDIUM","score":6.3,"vendor":"isaacs","product":"node-glob","kev":false,"epss":0.0035},{"id":"CVE-2026-119250","published":"2026-10-29T18:26:35.631Z","updated":"2026-10-31T13:15:01.713Z","title":"A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute…","severity":"HIGH","score":7.8,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop","kev":false,"epss":0.00289},{"id":"CVE-2026-119249","published":"2026-10-29T18:23:36.670Z","updated":"2026-10-31T13:14:19.605Z","title":"A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information…","severity":"HIGH","score":7.5,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop","kev":false,"epss":0.00335},{"id":"CVE-2026-41216","published":"2026-10-29T18:16:43.058Z","updated":"2026-10-30T17:22:40.522Z","title":"An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00278},{"id":"CVE-2026-42057","published":"2026-10-29T18:16:42.702Z","updated":"2026-10-30T17:22:15.940Z","title":"An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00278},{"id":"CVE-2026-8822","published":"2026-10-29T18:16:42.278Z","updated":"2026-10-30T17:21:50.704Z","title":"A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307},{"id":"CVE-2026-8824","published":"2026-10-29T18:16:41.816Z","updated":"2026-10-30T17:21:13.595Z","title":"A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307},{"id":"CVE-2026-9535","published":"2026-10-29T18:16:41.439Z","updated":"2026-10-30T17:20:44.742Z","title":"A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an…","severity":"HIGH","score":8.2,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00258},{"id":"CVE-2026-9536","published":"2026-10-29T18:16:40.913Z","updated":"2026-10-30T17:20:19.693Z","title":"A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307},{"id":"CVE-2026-118772","published":"2026-10-29T18:13:33.771Z","updated":"2026-10-29T18:13:33.771Z","title":"joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service","severity":"HIGH","score":7.5,"vendor":"hapijs","product":"joi","kev":false,"epss":0.00467},{"id":"CVE-2026-119168","published":"2026-10-29T18:12:51.268Z","updated":"2026-10-30T17:19:47.361Z","title":"Nomad allocation data migration may allow host directory permission modification via symlink following","severity":"HIGH","score":8.8,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00134},{"id":"CVE-2026-107347","published":"2026-10-29T18:10:08.951Z","updated":"2026-10-30T17:19:16.677Z","title":"Nomad dispatch payload writes can escape the allocation directory through symlinks","severity":"HIGH","score":8.4,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00132},{"id":"CVE-2026-102260","published":"2026-10-29T18:05:47.414Z","updated":"2026-10-30T17:18:44.118Z","title":"Nomad vulnerable to cross-namespace information disclosure in multiple endpoints","severity":"MEDIUM","score":4.3,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00176},{"id":"CVE-2026-116566","published":"2026-10-29T17:45:47.583Z","updated":"2026-10-30T17:18:15.574Z","title":"socket.getaddrinfo() accepts embedded null bytes in host and port","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00259},{"id":"CVE-2026-118769","published":"2026-10-29T17:22:07.316Z","updated":"2026-10-29T20:21:04.235Z","title":"Botan: Integer overflow when reporting block size in FFI can cause memory corruption","severity":"CRITICAL","score":9.2,"vendor":"randombit","product":"botan","kev":false,"epss":0.00365},{"id":"CVE-2026-118768","published":"2026-10-29T17:20:05.577Z","updated":"2026-10-29T17:20:05.577Z","title":"Botan: CLI utility `ocsp_check` accepts unauthenticated responses","severity":"MEDIUM","score":5.9,"vendor":"randombit","product":"botan","kev":false,"epss":0.0007},{"id":"CVE-2026-118767","published":"2026-10-29T17:17:24.323Z","updated":"2026-10-30T17:12:36.136Z","title":"Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs","severity":"MEDIUM","score":4.8,"vendor":"randombit","product":"botan","kev":false,"epss":0.00217},{"id":"CVE-2026-118766","published":"2026-10-29T17:14:47.676Z","updated":"2026-10-29T17:14:47.676Z","title":"Botan: Online OCSP redirects enable blind requests to internal HTTP services","severity":"MEDIUM","score":6.1,"vendor":"randombit","product":"botan","kev":false,"epss":0.00097},{"id":"CVE-2026-118765","published":"2026-10-29T17:12:07.807Z","updated":"2026-10-29T20:19:55.406Z","title":"Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state","severity":"HIGH","score":7.3,"vendor":"randombit","product":"botan","kev":false,"epss":0.00145},{"id":"CVE-2026-118764","published":"2026-10-29T17:07:11.357Z","updated":"2026-10-30T23:09:45.690Z","title":"minimatch: potential denial of service via globparts amplification","severity":"MEDIUM","score":6.9,"vendor":"isaacs","product":"minimatch","kev":false,"epss":0.00291},{"id":"CVE-2026-118763","published":"2026-10-29T17:01:40.294Z","updated":"2026-10-30T17:13:12.761Z","title":"@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location","severity":"HIGH","score":7.4,"vendor":"sigstore","product":"sigstore-js","kev":false,"epss":0.003},{"id":"CVE-2026-118762","published":"2026-10-29T16:50:44.341Z","updated":"2026-10-29T16:50:44.341Z","title":"Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN","severity":"CRITICAL","score":9.3,"vendor":"monkeytypegame","product":"monkeytype","kev":false,"epss":0.0032},{"id":"CVE-2026-115805","published":"2026-10-29T16:48:05.723Z","updated":"2026-10-30T17:18:24.014Z","title":"Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path","severity":"HIGH","score":7.8,"vendor":"Rapid7","product":"Insight Agent","kev":false,"epss":0.00167},{"id":"CVE-2026-11587","published":"2026-10-29T16:38:39.793Z","updated":"2026-10-30T17:17:16.870Z","title":"Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0","severity":"HIGH","score":7.2,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00264},{"id":"CVE-2023-7357","published":"2026-10-29T16:38:37.007Z","updated":"2026-10-30T17:16:40.079Z","title":"FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability","severity":"HIGH","score":8.6,"vendor":"Revera","product":"FlexNet Publisher","kev":false,"epss":0.00379},{"id":"CVE-2026-118761","published":"2026-10-29T16:37:44.333Z","updated":"2026-10-29T20:18:59.625Z","title":"Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00495},{"id":"CVE-2026-119115","published":"2026-10-29T16:37:08.287Z","updated":"2026-10-29T16:37:08.287Z","title":"Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes","severity":"HIGH","score":8.4,"vendor":"AWS","product":"aws-privateca-issuer","kev":false,"epss":0.0017},{"id":"CVE-2026-118760","published":"2026-10-29T16:35:05.192Z","updated":"2026-10-29T16:35:05.192Z","title":"Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads","severity":"MEDIUM","score":6.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00352},{"id":"CVE-2026-118759","published":"2026-10-29T16:30:25.711Z","updated":"2026-10-30T17:13:29.148Z","title":"Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00336},{"id":"CVE-2025-12523","published":"2026-10-29T16:29:20.074Z","updated":"2026-10-30T17:16:11.153Z","title":"Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00212},{"id":"CVE-2026-62374","published":"2026-10-29T16:27:40.825Z","updated":"2026-10-29T16:27:40.825Z","title":"SD JWT JS: Tampered disclosures silently dropped instead of rejected","severity":"HIGH","score":7.1,"vendor":"openwallet-foundation","product":"@sd-jwt/core","kev":false,"epss":0.00226},{"id":"CVE-2026-118758","published":"2026-10-29T16:12:42.138Z","updated":"2026-10-29T20:18:30.607Z","title":"Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00525},{"id":"CVE-2026-118673","published":"2026-10-29T16:01:55.635Z","updated":"2026-10-29T16:01:55.635Z","title":"KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses","severity":"MEDIUM","score":4.1,"vendor":"keepassxreboot","product":"keepassxc","kev":false,"epss":0.00115},{"id":"CVE-2025-13050","published":"2026-10-29T15:58:50.079Z","updated":"2026-10-30T17:23:25.626Z","title":"Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users","severity":"MEDIUM","score":5.4,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00257},{"id":"CVE-2026-119145","published":"2026-10-29T15:58:23.465Z","updated":"2026-10-29T17:14:19.218Z","title":"Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload","severity":"CRITICAL","score":9.4,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00761},{"id":"CVE-2026-119144","published":"2026-10-29T15:58:22.718Z","updated":"2026-10-29T15:58:22.718Z","title":"Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields","severity":"HIGH","score":8.7,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00305},{"id":"CVE-2026-119143","published":"2026-10-29T15:58:21.991Z","updated":"2026-10-29T15:58:21.991Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212},{"id":"CVE-2026-119142","published":"2026-10-29T15:58:21.265Z","updated":"2026-10-29T20:12:57.319Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254},{"id":"CVE-2026-119141","published":"2026-10-29T15:58:20.531Z","updated":"2026-10-29T17:14:25.649Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00372},{"id":"CVE-2026-119140","published":"2026-10-29T15:58:19.800Z","updated":"2026-10-29T15:58:19.800Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208},{"id":"CVE-2026-119139","published":"2026-10-29T15:58:19.056Z","updated":"2026-10-29T15:58:19.056Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208},{"id":"CVE-2026-119138","published":"2026-10-29T15:58:18.284Z","updated":"2026-10-29T20:13:38.106Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254},{"id":"CVE-2026-119137","published":"2026-10-29T15:58:17.461Z","updated":"2026-10-29T17:14:32.292Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00399},{"id":"CVE-2026-119136","published":"2026-10-29T15:58:16.692Z","updated":"2026-10-29T15:58:16.692Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208},{"id":"CVE-2026-119135","published":"2026-10-29T15:58:15.914Z","updated":"2026-10-29T15:58:15.914Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208},{"id":"CVE-2026-119134","published":"2026-10-29T15:58:15.105Z","updated":"2026-10-29T20:14:16.506Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153},{"id":"CVE-2026-119133","published":"2026-10-29T15:58:14.355Z","updated":"2026-10-29T17:14:39.514Z","title":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0021},{"id":"CVE-2026-119132","published":"2026-10-29T15:58:13.552Z","updated":"2026-10-29T15:58:13.552Z","title":"Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212},{"id":"CVE-2026-119131","published":"2026-10-29T15:58:12.765Z","updated":"2026-10-29T15:58:12.765Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00304},{"id":"CVE-2026-119130","published":"2026-10-29T15:58:12.004Z","updated":"2026-10-29T20:14:54.045Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00236},{"id":"CVE-2026-119129","published":"2026-10-29T15:58:11.241Z","updated":"2026-10-29T17:14:47.873Z","title":"ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval","severity":"HIGH","score":8.6,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00284},{"id":"CVE-2026-119128","published":"2026-10-29T15:58:10.483Z","updated":"2026-10-29T15:58:10.483Z","title":"ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie","severity":"CRITICAL","score":9.1,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00285},{"id":"CVE-2026-119127","published":"2026-10-29T15:58:09.747Z","updated":"2026-10-29T15:58:09.747Z","title":"ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection","severity":"HIGH","score":8.6,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00278},{"id":"CVE-2026-119126","published":"2026-10-29T15:58:09.005Z","updated":"2026-10-29T20:15:26.949Z","title":"Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keys","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00264},{"id":"CVE-2026-119125","published":"2026-10-29T15:58:08.254Z","updated":"2026-10-29T17:14:55.516Z","title":"Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fields","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00252},{"id":"CVE-2026-119124","published":"2026-10-29T15:58:07.508Z","updated":"2026-10-29T15:58:07.508Z","title":"ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00125},{"id":"CVE-2026-119123","published":"2026-10-29T15:58:06.685Z","updated":"2026-10-29T15:58:06.685Z","title":"ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00302},{"id":"CVE-2026-119122","published":"2026-10-29T15:58:05.930Z","updated":"2026-10-29T20:16:29.709Z","title":"Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0037},{"id":"CVE-2026-119121","published":"2026-10-29T15:58:05.117Z","updated":"2026-10-29T17:15:06.009Z","title":"Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for","severity":"MEDIUM","score":5.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00286},{"id":"CVE-2026-119120","published":"2026-10-29T15:58:04.414Z","updated":"2026-10-29T15:58:04.414Z","title":"Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name","severity":"HIGH","score":7.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00419},{"id":"CVE-2026-119119","published":"2026-10-29T15:58:03.704Z","updated":"2026-10-29T15:58:03.704Z","title":"Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields","severity":"HIGH","score":8.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00359},{"id":"CVE-2026-119118","published":"2026-10-29T15:58:02.951Z","updated":"2026-10-29T20:12:21.033Z","title":"Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags","severity":"HIGH","score":8.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00186},{"id":"CVE-2026-90872","published":"2026-10-29T15:57:24.826Z","updated":"2026-10-30T17:18:24.148Z","title":"Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00288},{"id":"CVE-2026-90871","published":"2026-10-29T15:56:34.762Z","updated":"2026-10-30T17:15:33.651Z","title":"Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00265},{"id":"CVE-2026-90870","published":"2026-10-29T15:55:43.950Z","updated":"2026-10-30T17:15:05.940Z","title":"Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0027},{"id":"CVE-2026-90869","published":"2026-10-29T15:54:48.769Z","updated":"2026-10-30T17:14:35.864Z","title":"Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00356},{"id":"CVE-2026-90868","published":"2026-10-29T15:53:59.315Z","updated":"2026-10-30T17:18:24.284Z","title":"OS Command Injection in Progress WS_FTP Server","severity":"CRITICAL","score":9.9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01493},{"id":"CVE-2026-90867","published":"2026-10-29T15:53:12.203Z","updated":"2026-10-30T17:18:24.424Z","title":"Improper Access Control of Web Admin Console in Progress WS_FTP Server","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00403},{"id":"CVE-2026-90866","published":"2026-10-29T15:52:24.790Z","updated":"2026-10-30T17:18:24.557Z","title":"Virtual Folder Path Confinement Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0073},{"id":"CVE-2026-90865","published":"2026-10-29T15:51:35.058Z","updated":"2026-10-30T17:18:24.861Z","title":"Command Injection via FTP Notification Variables in Progress WS_FTP Server","severity":"CRITICAL","score":9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01143},{"id":"CVE-2026-90864","published":"2026-10-29T15:50:29.084Z","updated":"2026-10-30T17:18:24.999Z","title":"Host Administrator Path Containment Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00479},{"id":"CVE-2026-90863","published":"2026-10-29T15:49:34.111Z","updated":"2026-10-30T17:18:25.132Z","title":"Privilege Escalation via Missing Authorization in WS_FTP Manager","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00656},{"id":"CVE-2026-90862","published":"2026-10-29T15:48:42.885Z","updated":"2026-10-30T17:14:03.885Z","title":"Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":4.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00222},{"id":"CVE-2026-90861","published":"2026-10-29T15:47:45.075Z","updated":"2026-10-30T17:18:25.273Z","title":"Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00305},{"id":"CVE-2026-84296","published":"2026-10-29T15:46:44.924Z","updated":"2026-10-30T17:18:25.411Z","title":"SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":6.8,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00339},{"id":"CVE-2026-84295","published":"2026-10-29T15:45:08.601Z","updated":"2026-10-30T17:18:25.542Z","title":"Improper Authentication in Progress WS_FTP Server","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00553},{"id":"CVE-2026-115793","published":"2026-10-29T15:44:11.697Z","updated":"2026-10-29T15:44:11.697Z","title":"Resource exhaustion from RPC sessions kept for requests to unknown interface","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396},{"id":"CVE-2026-115794","published":"2026-10-29T15:43:55.798Z","updated":"2026-10-29T15:43:55.798Z","title":"Alarm data length not validated against received frame length","severity":"LOW","score":2.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00176},{"id":"CVE-2026-115795","published":"2026-10-29T15:43:36.494Z","updated":"2026-10-29T15:43:36.494Z","title":"Out-of-bounds read of DCP block header in DCP Set and Identify request parsing","severity":"MEDIUM","score":5.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165},{"id":"CVE-2026-111736","published":"2026-10-29T15:43:11.102Z","updated":"2026-10-29T15:43:11.102Z","title":"NULL pointer dereference on implicit read of user specific record index","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396},{"id":"CVE-2026-112200","published":"2026-10-29T15:42:51.513Z","updated":"2026-10-29T15:42:51.513Z","title":"Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00414},{"id":"CVE-2026-84294","published":"2026-10-29T15:42:44.195Z","updated":"2026-10-29T15:43:29.463Z","title":"Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server","severity":"HIGH","score":7.7,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00352},{"id":"CVE-2026-111735","published":"2026-10-29T15:42:29.115Z","updated":"2026-10-29T15:42:29.115Z","title":"Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()","severity":"HIGH","score":7.1,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165},{"id":"CVE-2026-111734","published":"2026-10-29T15:42:10.509Z","updated":"2026-10-29T15:42:10.509Z","title":"Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()","severity":"HIGH","score":7.1,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165},{"id":"CVE-2026-111733","published":"2026-10-29T15:41:48.920Z","updated":"2026-10-29T15:41:48.920Z","title":"NULL pointer dereference on implicit read of AR specific record index","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396},{"id":"CVE-2026-111732","published":"2026-10-29T15:40:00.541Z","updated":"2026-10-29T15:40:00.541Z","title":"Out-of-bounds write when parsing AR Vendor Block requests","severity":"CRITICAL","score":9.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00404},{"id":"CVE-2026-111731","published":"2026-10-29T15:39:02.066Z","updated":"2026-10-29T15:39:02.066Z","title":"Infinite loop when reading PDPortDataCheck record of subslot 0","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00402},{"id":"CVE-2026-111730","published":"2026-10-29T15:37:52.267Z","updated":"2026-10-29T15:37:52.267Z","title":"Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length","severity":"HIGH","score":7.2,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00186},{"id":"CVE-2026-112256","published":"2026-10-29T15:31:18.768Z","updated":"2026-10-29T15:31:18.768Z","title":"Logon bypass (trust of attacker-controlled completed-methods list)","severity":"CRITICAL","score":9.2,"vendor":"OpenText","product":"Advanced Authentication Server","kev":false,"epss":0.00245},{"id":"CVE-2026-112255","published":"2026-10-29T15:30:55.825Z","updated":"2026-10-29T15:30:55.825Z","title":"Endpoint credential minting (insecure default allow-list)","severity":"LOW","score":2.9,"vendor":"OpenText","product":"Advanced Authentication Server","kev":false,"epss":0.00469},{"id":"CVE-2026-118084","published":"2026-10-29T15:24:41.085Z","updated":"2026-10-30T18:39:14.169Z","title":"WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"nicdark","product":"Hotel Booking","kev":false,"epss":0.00326},{"id":"CVE-2026-118083","published":"2026-10-29T15:24:40.327Z","updated":"2026-10-30T18:49:59.436Z","title":"WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Themeum","product":"WP Crowdfunding","kev":false,"epss":0.00303},{"id":"CVE-2026-118082","published":"2026-10-29T15:24:39.565Z","updated":"2026-10-30T18:49:59.606Z","title":"WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"BuddyBoss","product":"Buddyboss Platform","kev":false,"epss":0.0036},{"id":"CVE-2026-118081","published":"2026-10-29T15:24:38.804Z","updated":"2026-10-29T19:43:59.116Z","title":"WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"10Web","product":"10Web Social Photo Feed","kev":false,"epss":0.00374},{"id":"CVE-2026-118080","published":"2026-10-29T15:24:38.055Z","updated":"2026-10-29T17:15:13.611Z","title":"WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Social Snap","product":"Social Snap","kev":false,"epss":0.00374},{"id":"CVE-2026-118079","published":"2026-10-29T15:24:37.276Z","updated":"2026-10-30T18:49:59.807Z","title":"WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"FolioVision","product":"FV Flowplayer Video Player","kev":false,"epss":0.003},{"id":"CVE-2026-118078","published":"2026-10-29T15:24:36.520Z","updated":"2026-10-30T18:49:59.967Z","title":"WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"PixelYourSite","product":"Product Catalog Feed by PixelYourSite","kev":false,"epss":0.003},{"id":"CVE-2026-118077","published":"2026-10-29T15:24:35.763Z","updated":"2026-10-30T18:50:00.172Z","title":"WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Fast Themes","product":"Sastra Essential Addons for Elementor","kev":false,"epss":0.003},{"id":"CVE-2026-118076","published":"2026-10-29T15:24:35.032Z","updated":"2026-10-29T19:44:58.856Z","title":"WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Frisbii","product":"Frisbii Pay","kev":false,"epss":0.00374},{"id":"CVE-2026-118075","published":"2026-10-29T15:24:34.274Z","updated":"2026-10-29T17:15:20.028Z","title":"WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"dbarrere","product":"WP Media folders","kev":false,"epss":0.00374},{"id":"CVE-2026-118074","published":"2026-10-29T15:24:33.509Z","updated":"2026-10-30T18:50:00.340Z","title":"WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Daman Jeet","product":"Finale Lite","kev":false,"epss":0.003},{"id":"CVE-2026-118073","published":"2026-10-29T15:24:32.755Z","updated":"2026-10-30T18:50:00.514Z","title":"WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"blazethemes","product":"News Kit Elementor Addons","kev":false,"epss":0.00391},{"id":"CVE-2026-116869","published":"2026-10-29T15:24:32.010Z","updated":"2026-10-30T18:50:00.662Z","title":"WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"myPOS Payments","product":"myPOS Checkout","kev":false,"epss":0.003},{"id":"CVE-2026-116868","published":"2026-10-29T15:24:31.253Z","updated":"2026-10-29T19:45:42.553Z","title":"WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"BuddyDev","product":"BuddyPress Xprofile Custom Field Types","kev":false,"epss":0.00446},{"id":"CVE-2026-116867","published":"2026-10-29T15:24:30.502Z","updated":"2026-10-29T17:15:40.473Z","title":"WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"sosidee","product":"Dynamic QR Code &#8211; generator","kev":false,"epss":0.00374},{"id":"CVE-2026-116866","published":"2026-10-29T15:24:29.747Z","updated":"2026-10-30T18:50:00.815Z","title":"WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Dotstore","product":"Extra Fees Plugin for WooCommerce","kev":false,"epss":0.00288},{"id":"CVE-2026-116865","published":"2026-10-29T15:24:29.022Z","updated":"2026-10-30T18:50:00.961Z","title":"WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Gesundheit Bewegt GmbH","product":"Zippy","kev":false,"epss":0.003},{"id":"CVE-2026-116864","published":"2026-10-29T15:24:28.267Z","updated":"2026-10-30T18:50:01.124Z","title":"WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Arni Cinco","product":"WPCargo Track & Trace","kev":false,"epss":0.003},{"id":"CVE-2026-108494","published":"2026-10-29T15:24:27.520Z","updated":"2026-10-29T19:46:58.960Z","title":"WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Bob","product":"Chained Quiz","kev":false,"epss":0.0019},{"id":"CVE-2026-62131","published":"2026-10-29T15:24:26.750Z","updated":"2026-10-30T18:50:01.303Z","title":"WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Zoho Flow","product":"Zoho Flow","kev":false,"epss":0.00313},{"id":"CVE-2026-62018","published":"2026-10-29T15:24:26.009Z","updated":"2026-10-29T19:48:00.882Z","title":"WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gunslinger","kev":false,"epss":0.00449},{"id":"CVE-2026-62017","published":"2026-10-29T15:24:25.273Z","updated":"2026-10-29T17:16:01.751Z","title":"WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Good Homes","kev":false,"epss":0.00419},{"id":"CVE-2026-62016","published":"2026-10-29T15:24:24.535Z","updated":"2026-10-30T18:50:01.447Z","title":"WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gamic","kev":false,"epss":0.00396},{"id":"CVE-2026-62015","published":"2026-10-29T15:24:23.807Z","updated":"2026-10-30T18:50:01.608Z","title":"WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gamezone","kev":false,"epss":0.00396},{"id":"CVE-2026-62014","published":"2026-10-29T15:24:23.059Z","updated":"2026-10-30T18:50:01.772Z","title":"WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"EmojiNation","kev":false,"epss":0.00425},{"id":"CVE-2026-62013","published":"2026-10-29T15:24:22.290Z","updated":"2026-10-29T19:49:22.240Z","title":"WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Edge Decor","kev":false,"epss":0.00449},{"id":"CVE-2026-62012","published":"2026-10-29T15:24:21.539Z","updated":"2026-10-29T17:16:19.063Z","title":"WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Coinpress","kev":false,"epss":0.00419},{"id":"CVE-2026-62011","published":"2026-10-29T15:24:20.782Z","updated":"2026-10-30T18:50:01.917Z","title":"WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Bonbon","kev":false,"epss":0.00396},{"id":"CVE-2026-62010","published":"2026-10-29T15:24:20.043Z","updated":"2026-10-30T18:50:02.069Z","title":"WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Avventure","kev":false,"epss":0.00396},{"id":"CVE-2026-62009","published":"2026-10-29T15:24:19.287Z","updated":"2026-10-30T18:50:02.217Z","title":"WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Filmax","kev":false,"epss":0.00425},{"id":"CVE-2026-62008","published":"2026-10-29T15:24:18.536Z","updated":"2026-10-29T19:43:02.462Z","title":"WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Orpheus","kev":false,"epss":0.00419},{"id":"CVE-2026-62006","published":"2026-10-29T15:24:17.789Z","updated":"2026-10-29T17:16:25.167Z","title":"WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Nuts","kev":false,"epss":0.00419},{"id":"CVE-2026-62005","published":"2026-10-29T15:24:17.046Z","updated":"2026-10-30T18:50:02.379Z","title":"WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Muzicon","kev":false,"epss":0.00396},{"id":"CVE-2026-62004","published":"2026-10-29T15:24:16.292Z","updated":"2026-10-30T18:50:02.531Z","title":"WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Motorix","kev":false,"epss":0.00396},{"id":"CVE-2026-62003","published":"2026-10-29T15:24:15.533Z","updated":"2026-10-30T18:50:02.679Z","title":"WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Mission","kev":false,"epss":0.00396},{"id":"CVE-2026-62002","published":"2026-10-29T15:24:14.783Z","updated":"2026-10-29T19:42:29.362Z","title":"WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Meals & Wheels","kev":false,"epss":0.00511},{"id":"CVE-2026-62001","published":"2026-10-29T15:24:14.045Z","updated":"2026-10-29T17:16:36.644Z","title":"WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Marcell","kev":false,"epss":0.00476},{"id":"CVE-2026-61998","published":"2026-10-29T15:24:13.299Z","updated":"2026-10-30T18:50:02.827Z","title":"WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Le Truffe","kev":false,"epss":0.00476},{"id":"CVE-2026-61997","published":"2026-10-29T15:24:12.567Z","updated":"2026-10-30T18:50:03.004Z","title":"WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Legal Stone","kev":false,"epss":0.00511},{"id":"CVE-2026-61996","published":"2026-10-29T15:24:11.830Z","updated":"2026-10-30T18:39:14.014Z","title":"WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"favethemes","product":"MLS On The Fly","kev":false,"epss":0.00381},{"id":"CVE-2026-61995","published":"2026-10-29T15:24:10.950Z","updated":"2026-10-29T19:41:43.590Z","title":"WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"emarket-design","product":"YouTube Showcase","kev":false,"epss":0.00228},{"id":"CVE-2026-61993","published":"2026-10-29T15:24:10.200Z","updated":"2026-10-29T17:16:44.466Z","title":"WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"blockonomics","product":"Blockonomics","kev":false,"epss":0.00228},{"id":"CVE-2026-61992","published":"2026-10-29T15:24:09.438Z","updated":"2026-10-30T18:50:03.183Z","title":"WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Von Eyal Fitoussi","product":"GEO my WordPress","kev":false,"epss":0.00386},{"id":"CVE-2026-61991","published":"2026-10-29T15:24:08.677Z","updated":"2026-10-30T18:50:03.334Z","title":"WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":10,"vendor":"Ajax Load More","product":"AjaxLoadMore Cache","kev":false,"epss":0.00748},{"id":"CVE-2026-61989","published":"2026-10-29T15:24:07.932Z","updated":"2026-10-30T18:50:03.505Z","title":"WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Merv Barrett","product":"Easy Property Listings","kev":false,"epss":0.00175},{"id":"CVE-2026-61988","published":"2026-10-29T15:24:07.189Z","updated":"2026-10-29T19:41:03.059Z","title":"WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"morehawes","product":"Auction Nudge – Your eBay on Your Site","kev":false,"epss":0.00236},{"id":"CVE-2026-54866","published":"2026-10-29T15:24:06.443Z","updated":"2026-10-29T17:16:52.192Z","title":"WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Razorpay","product":"Razorpay Payment Button Elementor Plugin","kev":false,"epss":0.00243},{"id":"CVE-2026-54865","published":"2026-10-29T15:24:05.681Z","updated":"2026-10-30T18:39:13.879Z","title":"WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Podamibe Nepal","product":"Podamibe Custom User Gravatar","kev":false,"epss":0.00224},{"id":"CVE-2026-54864","published":"2026-10-29T15:24:04.940Z","updated":"2026-10-30T18:50:03.679Z","title":"WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"nicashmu","product":"Post Video Players","kev":false,"epss":0.0018},{"id":"CVE-2026-54860","published":"2026-10-29T15:24:04.196Z","updated":"2026-10-30T18:50:03.835Z","title":"WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Ozisti","kev":false,"epss":0.0049},{"id":"CVE-2026-54859","published":"2026-10-29T15:24:03.450Z","updated":"2026-10-29T19:40:30.116Z","title":"WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Preservation","kev":false,"epss":0.00526},{"id":"CVE-2026-54858","published":"2026-10-29T15:24:02.681Z","updated":"2026-10-29T17:16:59.146Z","title":"WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Printy","kev":false,"epss":0.0049},{"id":"CVE-2026-54857","published":"2026-10-29T15:24:01.923Z","updated":"2026-10-30T18:50:04.264Z","title":"WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Quirky","kev":false,"epss":0.0049},{"id":"CVE-2026-54856","published":"2026-10-29T15:24:01.171Z","updated":"2026-10-30T18:50:04.441Z","title":"WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"RexCoin","kev":false,"epss":0.0049},{"id":"CVE-2026-42701","published":"2026-10-29T15:24:00.414Z","updated":"2026-10-30T18:50:04.609Z","title":"WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"YayCommerce","product":"YayMail","kev":false,"epss":0.0037},{"id":"CVE-2026-42692","published":"2026-10-29T15:23:59.420Z","updated":"2026-10-29T19:39:42.399Z","title":"WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Themeum","product":"WP Crowdfunding","kev":false,"epss":0.00243},{"id":"CVE-2026-42690","published":"2026-10-29T15:23:58.663Z","updated":"2026-10-29T17:17:08.164Z","title":"WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00238},{"id":"CVE-2026-27394","published":"2026-10-29T15:23:57.862Z","updated":"2026-10-30T18:50:04.772Z","title":"WordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Jyothis Joy","product":"Eventer","kev":false,"epss":0.00175},{"id":"CVE-2026-118085","published":"2026-10-29T15:23:57.104Z","updated":"2026-10-30T18:50:05.160Z","title":"WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Global Payments","product":"GlobalPayments WooCommerce","kev":false,"epss":0.0018},{"id":"CVE-2026-66912","published":"2026-10-29T15:22:22.773Z","updated":"2026-10-29T15:22:22.773Z","title":"Stored Cross-Site Scripting in Zimbra","severity":"MEDIUM","score":5.3,"vendor":"Synacor","product":"Zimbra Collaboration","kev":false,"epss":0.00467},{"id":"CVE-2026-66911","published":"2026-10-29T15:22:19.086Z","updated":"2026-10-29T15:22:19.086Z","title":"Stored Cross-Site Scripting in Zimbra","severity":"MEDIUM","score":5.3,"vendor":"Synacor","product":"Zimbra Collaboration","kev":false,"epss":0.0054},{"id":"CVE-2026-88078","published":"2026-10-29T15:21:52.370Z","updated":"2026-10-31T18:13:37.641Z","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00298},{"id":"CVE-2026-88077","published":"2026-10-29T15:21:51.829Z","updated":"2026-10-31T18:13:40.054Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00638},{"id":"CVE-2026-96196","published":"2026-10-29T15:21:50.749Z","updated":"2026-10-31T18:13:38.267Z","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00767},{"id":"CVE-2026-96187","published":"2026-10-29T15:21:49.667Z","updated":"2026-10-31T18:13:36.114Z","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","severity":"HIGH","score":7.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00514},{"id":"CVE-2026-85899","published":"2026-10-29T15:21:49.145Z","updated":"2026-10-31T18:13:35.612Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.1,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00641},{"id":"CVE-2026-85330","published":"2026-10-29T15:21:48.611Z","updated":"2026-10-31T18:13:35.114Z","title":"Microsoft Edge for Android Security Feature Bypass Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.0035},{"id":"CVE-2026-88090","published":"2026-10-29T15:21:48.152Z","updated":"2026-10-31T18:13:34.611Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00318},{"id":"CVE-2026-114148","published":"2026-10-29T15:21:47.615Z","updated":"2026-10-31T18:13:34.093Z","title":"ASP.NET Core Elevation of Privilege Vulnerability","severity":"HIGH","score":7.8,"vendor":"Microsoft","product":".NET 10.0 installed on Linux","kev":false,"epss":0.00355},{"id":"CVE-2026-20942","published":"2026-10-29T15:21:46.978Z","updated":"2026-10-31T18:13:33.579Z","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00642},{"id":"CVE-2026-96203","published":"2026-10-29T15:21:46.378Z","updated":"2026-10-31T18:13:33.074Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00585},{"id":"CVE-2026-96192","published":"2026-10-29T15:21:45.832Z","updated":"2026-10-31T18:13:32.565Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00572},{"id":"CVE-2026-18894","published":"2026-10-29T15:19:09.963Z","updated":"2026-10-29T19:38:15.803Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00523},{"id":"CVE-2026-77817","published":"2026-10-29T15:19:02.855Z","updated":"2026-11-02T19:52:46.981Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00342},{"id":"CVE-2026-77819","published":"2026-10-29T15:18:52.708Z","updated":"2026-10-29T15:18:52.708Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00366},{"id":"CVE-2026-90991","published":"2026-10-29T15:18:45.602Z","updated":"2026-10-29T17:17:15.737Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00391},{"id":"CVE-2026-93680","published":"2026-10-29T15:18:37.766Z","updated":"2026-10-30T17:18:26.502Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.02181},{"id":"CVE-2026-102590","published":"2026-10-29T15:18:29.723Z","updated":"2026-10-29T15:18:29.723Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00287},{"id":"CVE-2026-103092","published":"2026-10-29T15:18:22.583Z","updated":"2026-10-29T17:17:22.934Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00407},{"id":"CVE-2026-101288","published":"2026-10-29T15:18:14.171Z","updated":"2026-10-30T17:18:26.636Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702},{"id":"CVE-2026-104308","published":"2026-10-29T15:18:06.244Z","updated":"2026-10-29T15:18:06.244Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00338},{"id":"CVE-2026-104309","published":"2026-10-29T15:17:56.851Z","updated":"2026-10-29T19:37:22.227Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00599},{"id":"CVE-2026-104310","published":"2026-10-29T15:17:48.959Z","updated":"2026-11-02T19:53:33.946Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00257},{"id":"CVE-2026-104312","published":"2026-10-29T15:17:40.538Z","updated":"2026-10-29T15:17:40.538Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"LOW","score":3.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00245},{"id":"CVE-2026-104314","published":"2026-10-29T15:17:32.546Z","updated":"2026-10-29T17:17:30.909Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00315},{"id":"CVE-2026-104315","published":"2026-10-29T15:17:25.178Z","updated":"2026-10-29T15:17:25.178Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00211},{"id":"CVE-2026-104316","published":"2026-10-29T15:17:16.705Z","updated":"2026-10-29T19:36:52.416Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00329},{"id":"CVE-2026-104317","published":"2026-10-29T15:17:09.357Z","updated":"2026-10-30T17:18:26.776Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.1,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00592},{"id":"CVE-2026-104324","published":"2026-10-29T15:17:01.776Z","updated":"2026-10-30T17:18:27.074Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00663},{"id":"CVE-2026-113576","published":"2026-10-29T15:16:54.386Z","updated":"2026-10-29T17:17:37.992Z","title":"Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)","severity":"MEDIUM","score":6.3,"vendor":"Adobe","product":"Adobe Digital Editions","kev":false,"epss":0.00218},{"id":"CVE-2026-104328","published":"2026-10-29T15:16:53.198Z","updated":"2026-10-30T03:56:27.478Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702},{"id":"CVE-2026-104331","published":"2026-10-29T15:16:46.050Z","updated":"2026-10-29T15:16:46.050Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.0018},{"id":"CVE-2026-104339","published":"2026-10-29T15:16:38.628Z","updated":"2026-10-30T03:56:26.674Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00748},{"id":"CVE-2026-107326","published":"2026-10-29T15:16:30.710Z","updated":"2026-10-30T17:18:27.229Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702},{"id":"CVE-2026-107327","published":"2026-10-29T15:16:23.183Z","updated":"2026-10-30T17:18:27.369Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00672},{"id":"CVE-2026-107328","published":"2026-10-29T15:16:15.011Z","updated":"2026-10-30T03:56:24.374Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00853},{"id":"CVE-2026-107329","published":"2026-10-29T15:16:06.801Z","updated":"2026-10-30T17:18:27.502Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00853},{"id":"CVE-2026-110186","published":"2026-10-29T15:15:59.506Z","updated":"2026-10-30T17:18:27.634Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00622},{"id":"CVE-2026-110190","published":"2026-10-29T15:15:50.730Z","updated":"2026-10-29T17:18:06.527Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00419},{"id":"CVE-2026-110192","published":"2026-10-29T15:15:43.369Z","updated":"2026-10-29T15:15:43.369Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00249},{"id":"CVE-2026-110193","published":"2026-10-29T15:15:34.231Z","updated":"2026-10-30T03:56:22.119Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00777},{"id":"CVE-2026-110196","published":"2026-10-29T15:15:26.470Z","updated":"2026-10-30T17:18:27.761Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00464},{"id":"CVE-2026-110200","published":"2026-10-29T15:15:19.051Z","updated":"2026-10-29T15:15:19.051Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00234},{"id":"CVE-2026-110244","published":"2026-10-29T15:15:11.347Z","updated":"2026-10-29T17:18:14.720Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00647},{"id":"CVE-2026-110245","published":"2026-10-29T15:15:02.023Z","updated":"2026-10-29T15:15:02.023Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":7.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00365},{"id":"CVE-2026-110309","published":"2026-10-29T15:14:49.273Z","updated":"2026-10-30T03:56:20.522Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00575},{"id":"CVE-2026-96199","published":"2026-10-29T15:09:08.945Z","updated":"2026-10-31T18:01:14.611Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00586},{"id":"CVE-2026-96198","published":"2026-10-29T15:09:08.400Z","updated":"2026-10-31T18:01:14.078Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00586},{"id":"CVE-2026-85897","published":"2026-10-29T15:09:07.330Z","updated":"2026-10-31T18:01:12.960Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00586},{"id":"CVE-2026-85890","published":"2026-10-29T15:09:06.731Z","updated":"2026-10-31T18:01:12.499Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00586},{"id":"CVE-2026-106036","published":"2026-10-29T15:08:02.788Z","updated":"2026-10-29T15:08:02.788Z","title":"Improper certificate validation in Szafir","severity":"MEDIUM","score":6.9,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00167},{"id":"CVE-2026-93571","published":"2026-10-29T15:07:53.572Z","updated":"2026-10-29T15:07:53.572Z","title":"Path Traversal in Szafir","severity":"LOW","score":2.3,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00185},{"id":"CVE-2026-93570","published":"2026-10-29T15:07:48.053Z","updated":"2026-10-29T15:07:48.053Z","title":"XML External Entity injection in Szafir and Szafir Weryfikująca","severity":"HIGH","score":8.2,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00278},{"id":"CVE-2026-42694","published":"2026-10-29T15:05:18.749Z","updated":"2026-10-30T18:50:05.330Z","title":"WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00173},{"id":"CVE-2026-48200","published":"2026-10-29T15:04:50.615Z","updated":"2026-10-29T17:18:26.068Z","title":"WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Barn2 Plugins","product":"Document Library Lite","kev":false,"epss":0.00282},{"id":"CVE-2026-116848","published":"2026-10-29T15:04:29.001Z","updated":"2026-10-30T18:39:13.456Z","title":"WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"POSIMYTH Innovations","product":"The Plus Addons for Elementor Page Builder Lite","kev":false,"epss":0.0013},{"id":"CVE-2026-109891","published":"2026-10-29T15:04:03.409Z","updated":"2026-10-30T18:50:05.523Z","title":"WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.4,"vendor":"weDevs","product":"Happy Addons for Elementor","kev":false,"epss":0.00138},{"id":"CVE-2026-25448","published":"2026-10-29T14:55:02.968Z","updated":"2026-10-29T19:34:34.063Z","title":"WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"weDevs","product":"WP ERP","kev":false,"epss":0.00226},{"id":"CVE-2026-42691","published":"2026-10-29T14:40:48.838Z","updated":"2026-10-30T19:00:20.857Z","title":"WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"EventPrime","product":"EventPrime","kev":false,"epss":0.00189},{"id":"CVE-2026-54852","published":"2026-10-29T14:40:27.236Z","updated":"2026-10-30T19:00:20.999Z","title":"WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"miniOrange","product":"Page Restriction WordPress (WP)","kev":false,"epss":0.00191},{"id":"CVE-2026-97073","published":"2026-10-29T14:39:40.470Z","updated":"2026-10-29T17:18:39.592Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00261},{"id":"CVE-2026-118097","published":"2026-10-29T14:39:07.281Z","updated":"2026-10-29T19:34:06.345Z","title":"WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Flash & HTML5 Video","kev":false,"epss":0.0017},{"id":"CVE-2026-27062","published":"2026-10-29T14:38:48.633Z","updated":"2026-10-30T19:00:21.175Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00098},{"id":"CVE-2026-54853","published":"2026-10-29T14:32:35.962Z","updated":"2026-10-29T17:19:05.990Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00229},{"id":"CVE-2026-114706","published":"2026-10-29T14:32:29.513Z","updated":"2026-10-30T18:39:13.589Z","title":"WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.0013},{"id":"CVE-2026-27063","published":"2026-10-29T14:32:08.078Z","updated":"2026-10-30T18:50:05.686Z","title":"WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Kit","product":"Kit (formerly ConvertKit)","kev":false,"epss":0.00187},{"id":"CVE-2026-115601","published":"2026-10-29T14:31:58.839Z","updated":"2026-10-30T18:50:05.850Z","title":"WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Custom Price for WooCommerce","kev":false,"epss":0.00176},{"id":"CVE-2026-115605","published":"2026-10-29T14:29:40.076Z","updated":"2026-10-29T16:49:18.631Z","title":"WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00234},{"id":"CVE-2026-118095","published":"2026-10-29T14:29:27.704Z","updated":"2026-10-29T16:49:18.797Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00179},{"id":"CVE-2026-54871","published":"2026-10-29T14:29:24.576Z","updated":"2026-10-29T16:49:18.942Z","title":"WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Mamunur Rashid","product":"ShopBuilder – Elementor WooCommerce Builder Addons","kev":false,"epss":0.0027},{"id":"CVE-2026-25450","published":"2026-10-29T14:29:14.280Z","updated":"2026-10-29T16:49:19.089Z","title":"WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00229},{"id":"CVE-2026-116850","published":"2026-10-29T14:29:07.948Z","updated":"2026-10-29T16:49:19.233Z","title":"WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"weDevs","product":"Happy Addons for Elementor","kev":false,"epss":0.00179},{"id":"CVE-2026-114181","published":"2026-10-29T14:28:58.705Z","updated":"2026-10-29T16:49:19.379Z","title":"WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Taxi Booking Manager for WooCommerce","kev":false,"epss":0.00242},{"id":"CVE-2026-118088","published":"2026-10-29T14:26:27.526Z","updated":"2026-10-29T16:49:19.530Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00229},{"id":"CVE-2026-116849","published":"2026-10-29T14:26:08.716Z","updated":"2026-10-29T16:49:19.673Z","title":"WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"StreamCast","kev":false,"epss":0.00179},{"id":"CVE-2026-110881","published":"2026-10-29T14:25:46.727Z","updated":"2026-10-29T16:49:19.816Z","title":"WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.0017},{"id":"CVE-2026-116856","published":"2026-10-29T14:24:43.173Z","updated":"2026-10-29T16:49:19.958Z","title":"WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Flexible Quantity – Measurement Price Calculator for WooCommerce","kev":false,"epss":0.00229},{"id":"CVE-2026-39737","published":"2026-10-29T14:24:19.832Z","updated":"2026-10-29T17:19:30.379Z","title":"WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetElements For Elementor","kev":false,"epss":0.0017},{"id":"CVE-2026-118091","published":"2026-10-29T14:23:51.139Z","updated":"2026-10-30T18:50:06.004Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00176},{"id":"CVE-2026-116387","published":"2026-10-29T14:22:37.807Z","updated":"2026-10-30T18:50:06.170Z","title":"WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureForms","kev":false,"epss":0.00176},{"id":"CVE-2026-39742","published":"2026-10-29T14:20:45.598Z","updated":"2026-10-29T14:37:20.747Z","title":"WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"Gutenberg Blocks by Kadence Blocks","kev":false,"epss":0.00191},{"id":"CVE-2026-115610","published":"2026-10-29T14:20:16.168Z","updated":"2026-10-30T18:39:13.737Z","title":"WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"PublishPress","product":"PublishPress Authors","kev":false,"epss":0.00139},{"id":"CVE-2026-118092","published":"2026-10-29T14:17:28.380Z","updated":"2026-10-29T17:19:46.176Z","title":"WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"StylemixThemes","product":"MasterStudy LMS","kev":false,"epss":0.00261},{"id":"CVE-2026-116406","published":"2026-10-29T14:16:17.757Z","updated":"2026-10-29T16:49:20.101Z","title":"WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Webba Plugins","product":"Webba Booking","kev":false,"epss":0.00267},{"id":"CVE-2026-52708","published":"2026-10-29T14:15:19.164Z","updated":"2026-10-29T16:49:20.247Z","title":"WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"weDevs","product":"WP User Frontend","kev":false,"epss":0.00245},{"id":"CVE-2026-116846","published":"2026-10-29T14:14:41.416Z","updated":"2026-10-29T16:49:20.397Z","title":"WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP User Manager","product":"WP User Manager","kev":false,"epss":0.00302},{"id":"CVE-2026-48884","published":"2026-10-29T14:13:18.988Z","updated":"2026-10-29T16:49:20.542Z","title":"WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"weDevs","product":"WP User Frontend","kev":false,"epss":0.00284},{"id":"CVE-2026-80069","published":"2026-10-29T14:12:10.394Z","updated":"2026-11-02T16:16:09.609Z","title":"MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax","severity":"MEDIUM","score":5.3,"vendor":"Stylemix","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.00372},{"id":"CVE-2026-80067","published":"2026-10-29T14:11:09.173Z","updated":"2026-11-02T16:17:14.198Z","title":"MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter","severity":"MEDIUM","score":5.3,"vendor":"Stylemix","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.00585},{"id":"CVE-2026-115713","published":"2026-10-29T14:10:08.088Z","updated":"2026-10-30T03:56:09.946Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification","severity":"HIGH","score":7.5,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00157},{"id":"CVE-2026-115712","published":"2026-10-29T14:10:06.580Z","updated":"2026-10-29T16:49:21.112Z","title":"Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00245},{"id":"CVE-2026-115711","published":"2026-10-29T14:10:04.920Z","updated":"2026-10-30T17:18:28.502Z","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure","severity":"MEDIUM","score":6.4,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00222},{"id":"CVE-2026-115709","published":"2026-10-29T14:10:03.402Z","updated":"2026-10-30T17:18:28.637Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss","severity":"HIGH","score":8.2,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00255},{"id":"CVE-2026-115708","published":"2026-10-29T14:10:01.656Z","updated":"2026-10-30T17:18:28.766Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass","severity":"HIGH","score":7.2,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00167},{"id":"CVE-2026-115707","published":"2026-10-29T14:09:59.890Z","updated":"2026-10-30T17:18:28.898Z","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation","severity":"MEDIUM","score":6.4,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00125},{"id":"CVE-2026-115706","published":"2026-10-29T14:09:58.330Z","updated":"2026-10-30T17:18:29.029Z","title":"Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation","severity":"MEDIUM","score":6.8,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00245},{"id":"CVE-2026-39736","published":"2026-10-29T14:08:21.817Z","updated":"2026-10-29T16:49:21.267Z","title":"WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00305},{"id":"CVE-2026-116402","published":"2026-10-29T14:05:58.547Z","updated":"2026-10-29T16:49:21.421Z","title":"WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureForms","kev":false,"epss":0.003},{"id":"CVE-2026-118425","published":"2026-10-29T13:58:32.731Z","updated":"2026-11-02T20:13:43.008Z","title":"Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00228},{"id":"CVE-2026-48202","published":"2026-10-29T13:58:06.273Z","updated":"2026-10-29T16:49:21.568Z","title":"WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brave","product":"Brave","kev":false,"epss":0.00286},{"id":"CVE-2026-39782","published":"2026-10-29T13:56:43.214Z","updated":"2026-10-29T16:49:21.714Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.00256},{"id":"CVE-2026-25467","published":"2026-10-29T13:55:28.476Z","updated":"2026-10-29T16:49:21.855Z","title":"WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00265},{"id":"CVE-2026-116399","published":"2026-10-29T13:54:04.259Z","updated":"2026-10-29T16:49:21.999Z","title":"WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"InstaWP","product":"InstaWP Connect","kev":false,"epss":0.00166},{"id":"CVE-2026-116857","published":"2026-10-29T13:53:39.647Z","updated":"2026-10-29T16:49:22.150Z","title":"WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetSmartFilters","kev":false,"epss":0.00204},{"id":"CVE-2026-113697","published":"2026-10-29T13:31:46.427Z","updated":"2026-10-29T13:49:18.392Z","title":"Reflected Cross-Site Scripting in BMC Helix Operations Management","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC Helix Operations Management","kev":false,"epss":0.00432},{"id":"CVE-2026-113696","published":"2026-10-29T13:29:15.025Z","updated":"2026-10-29T13:49:59.814Z","title":"Improper Authorization in BMC ITSM SmartIT Change Approvals","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00402},{"id":"CVE-2026-113695","published":"2026-10-29T13:14:32.009Z","updated":"2026-10-29T13:50:29.419Z","title":"Reflected Cross-Site Scripting in BMC ITSM SmartIT","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348},{"id":"CVE-2026-93009","published":"2026-10-29T13:13:34.504Z","updated":"2026-10-30T08:05:48.784Z","title":"Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00202},{"id":"CVE-2026-93010","published":"2026-10-29T13:13:23.430Z","updated":"2026-10-30T08:05:53.237Z","title":"Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00192},{"id":"CVE-2026-113694","published":"2026-10-29T13:12:52.855Z","updated":"2026-10-29T13:51:08.903Z","title":"Improper Authorization in BMC ITSM SmartIT Attachments","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00308},{"id":"CVE-2026-113693","published":"2026-10-29T13:09:39.803Z","updated":"2026-10-29T13:59:33.397Z","title":"System Account Credential Disclosure in BMC ITSM","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00336},{"id":"CVE-2026-54862","published":"2026-10-29T13:09:14.823Z","updated":"2026-10-29T13:47:35.097Z","title":"WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Codection","product":"Import and export users and customers","kev":false,"epss":0.0017},{"id":"CVE-2026-113692","published":"2026-10-29T13:08:54.995Z","updated":"2026-10-29T14:00:48.538Z","title":"Path Traversal in BMC ITSM","severity":"MEDIUM","score":6.9,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00471},{"id":"CVE-2026-119054","published":"2026-10-29T13:08:54.249Z","updated":"2026-10-29T13:08:54.249Z","title":"Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url","severity":"MEDIUM","score":5.1,"vendor":"Themeisle","product":"Multiple Pages Generator by Themeisle","kev":false,"epss":0.00226},{"id":"CVE-2026-119053","published":"2026-10-29T13:08:53.560Z","updated":"2026-10-29T14:01:51.233Z","title":"lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()","severity":"MEDIUM","score":6.9,"vendor":"lwIP","product":"lwIP","kev":false,"epss":0.00482},{"id":"CVE-2026-119052","published":"2026-10-29T13:08:52.886Z","updated":"2026-10-29T17:19:54.661Z","title":"llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length","severity":"HIGH","score":8.7,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00613},{"id":"CVE-2026-119051","published":"2026-10-29T13:08:52.215Z","updated":"2026-10-29T13:08:52.215Z","title":"flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keys","severity":"HIGH","score":8.2,"vendor":"hughsk","product":"flat","kev":false,"epss":0.0032},{"id":"CVE-2026-119050","published":"2026-10-29T13:08:51.517Z","updated":"2026-10-29T13:08:51.517Z","title":"Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection","severity":"CRITICAL","score":9.2,"vendor":"agno-agi","product":"agno","kev":false,"epss":0.00429},{"id":"CVE-2026-119049","published":"2026-10-29T13:08:50.838Z","updated":"2026-10-29T14:02:26.966Z","title":"FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming","severity":"HIGH","score":7.2,"vendor":"idinging","product":"FreeMail","kev":false,"epss":0.00386},{"id":"CVE-2026-119048","published":"2026-10-29T13:08:50.215Z","updated":"2026-10-29T17:20:03.681Z","title":"JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module","severity":"LOW","score":2.3,"vendor":"thinkgem","product":"JeeSite","kev":false,"epss":0.0027},{"id":"CVE-2019-25781","published":"2026-10-29T13:08:49.597Z","updated":"2026-10-29T13:08:49.597Z","title":"Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing","severity":"HIGH","score":8.7,"vendor":"Python-Markdown","product":"Markdown","kev":false,"epss":0.00422},{"id":"CVE-2026-42707","published":"2026-10-29T13:07:48.740Z","updated":"2026-10-29T13:47:35.256Z","title":"WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"HivePress","product":"HivePress Claim Listings","kev":false,"epss":0.00198},{"id":"CVE-2026-48195","published":"2026-10-29T13:07:16.802Z","updated":"2026-10-29T13:47:35.412Z","title":"WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"PDF Poster","kev":false,"epss":0.0017},{"id":"CVE-2026-113691","published":"2026-10-29T13:07:03.816Z","updated":"2026-10-29T14:03:20.544Z","title":"Stored Cross-Site Scripting in BMC ITSM Knowledge Articles","severity":"MEDIUM","score":5.1,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00432},{"id":"CVE-2026-39741","published":"2026-10-29T13:06:11.953Z","updated":"2026-10-29T13:47:35.579Z","title":"WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"RelyWP","product":"Simple Cloudflare Turnstile","kev":false,"epss":0.00229},{"id":"CVE-2026-48196","published":"2026-10-29T13:04:39.022Z","updated":"2026-10-29T13:47:35.754Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.0017},{"id":"CVE-2026-22386","published":"2026-10-29T13:04:17.195Z","updated":"2026-10-29T13:47:35.898Z","title":"WordPress WP Job Portal plugin <= 2.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Ahmad","product":"WP Job Portal","kev":false,"epss":0.00221},{"id":"CVE-2026-52709","published":"2026-10-29T13:03:56.761Z","updated":"2026-10-29T13:47:36.058Z","title":"WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Video Gallery Block","kev":false,"epss":0.0017},{"id":"CVE-2026-113690","published":"2026-10-29T13:03:06.288Z","updated":"2026-10-29T14:05:55.037Z","title":"Stored Cross-Site Scripting in BMC ITSM Attachments","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348},{"id":"CVE-2026-113689","published":"2026-10-29T13:02:34.909Z","updated":"2026-10-29T14:06:24.850Z","title":"Stored Cross-Site Scripting in BMC ITSM Work Notes","severity":"MEDIUM","score":5.1,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348},{"id":"CVE-2026-24533","published":"2026-10-29T13:02:13.252Z","updated":"2026-10-29T13:47:36.226Z","title":"WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"CozyThemes","product":"Cozy Blocks","kev":false,"epss":0.0017},{"id":"CVE-2026-42703","published":"2026-10-29T13:01:49.395Z","updated":"2026-10-29T13:47:36.384Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.00274},{"id":"CVE-2026-113688","published":"2026-10-29T13:01:46.475Z","updated":"2026-10-29T14:06:49.262Z","title":"Server-Side Request Forgery in BMC ITSM SmartIT","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00308},{"id":"CVE-2026-118087","published":"2026-10-29T13:01:05.153Z","updated":"2026-10-29T13:47:36.553Z","title":"WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Gemini Labs","product":"Site Reviews","kev":false,"epss":0.0017},{"id":"CVE-2026-118094","published":"2026-10-29T12:59:46.185Z","updated":"2026-10-29T13:47:36.720Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.0017},{"id":"CVE-2026-39735","published":"2026-10-29T12:58:57.438Z","updated":"2026-10-29T13:47:36.877Z","title":"WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00274},{"id":"CVE-2026-56056","published":"2026-10-29T12:58:32.218Z","updated":"2026-10-29T13:47:37.027Z","title":"WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Mamunur Rashid","product":"The Post Grid","kev":false,"epss":0.0017},{"id":"CVE-2026-118093","published":"2026-10-29T12:58:10.017Z","updated":"2026-10-29T13:47:37.178Z","title":"WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"Product Feed Manager","kev":false,"epss":0.00229},{"id":"CVE-2026-93006","published":"2026-10-29T12:47:23.431Z","updated":"2026-10-30T01:16:56.129Z","title":"Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00302},{"id":"CVE-2026-93007","published":"2026-10-29T12:47:18.954Z","updated":"2026-10-30T07:12:44.289Z","title":"Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00427},{"id":"CVE-2026-93011","published":"2026-10-29T12:47:10.170Z","updated":"2026-10-30T06:04:34.857Z","title":"Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00634},{"id":"CVE-2026-49142","published":"2026-10-29T12:37:16.791Z","updated":"2026-10-29T12:37:16.791Z","title":"OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00355},{"id":"CVE-2026-93008","published":"2026-10-29T12:33:22.941Z","updated":"2026-10-30T00:23:28.723Z","title":"Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.0015},{"id":"CVE-2026-119028","published":"2026-10-29T11:36:34.692Z","updated":"2026-10-29T14:08:24.785Z","title":"oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values","severity":"HIGH","score":8.7,"vendor":"oapi-codegen","product":"oapi-codegen","kev":false,"epss":0.00422},{"id":"CVE-2026-119027","published":"2026-10-29T11:36:34.029Z","updated":"2026-10-29T17:20:19.252Z","title":"oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension","severity":"HIGH","score":7.7,"vendor":"oapi-codegen","product":"oapi-codegen","kev":false,"epss":0.00394},{"id":"CVE-2026-109822","published":"2026-10-29T11:34:08.429Z","updated":"2026-10-29T12:36:50.215Z","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files…","severity":"HIGH","score":7.1,"vendor":"Yamaha Corporation","product":"NWR100","kev":false,"epss":0.0031},{"id":"CVE-2026-97854","published":"2026-10-29T11:33:51.649Z","updated":"2026-10-29T12:36:50.361Z","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by…","severity":"CRITICAL","score":9.3,"vendor":"Yamaha Corporation","product":"NWR100","kev":false,"epss":0.01369},{"id":"CVE-2026-103665","published":"2026-10-29T11:33:30.885Z","updated":"2026-10-29T14:10:50.402Z","title":"The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is…","severity":"HIGH","score":8.4,"vendor":"Yamaha Corporation","product":"Yamaha LAN Monitor for Windows","kev":false,"epss":0.00194},{"id":"CVE-2026-97860","published":"2026-10-29T11:33:10.955Z","updated":"2026-10-29T14:12:18.004Z","title":"YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system…","severity":"HIGH","score":8.4,"vendor":"Yamaha Corporation","product":"YMS-VPN8","kev":false,"epss":0.00192},{"id":"CVE-2026-27401","published":"2026-10-29T11:28:05.240Z","updated":"2026-10-29T12:36:50.510Z","title":"WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITH","product":"YITH PayPal Express Checkout for WooCommerce","kev":false,"epss":0.00242},{"id":"CVE-2026-115821","published":"2026-10-29T11:27:15.965Z","updated":"2026-10-29T12:36:50.654Z","title":"NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters","severity":"HIGH","score":7.2,"vendor":"newsmanapp","product":"NewsmanApp","kev":false,"epss":0.00302},{"id":"CVE-2026-110184","published":"2026-10-29T11:27:15.602Z","updated":"2026-10-29T12:36:50.798Z","title":"Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter","severity":"HIGH","score":7.5,"vendor":"blazethemes","product":"Newsmatic","kev":false,"epss":0.00424},{"id":"CVE-2026-92086","published":"2026-10-29T11:27:15.236Z","updated":"2026-10-29T12:36:50.947Z","title":"MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"websoudan","product":"MW WP Form","kev":false,"epss":0.00336},{"id":"CVE-2026-109216","published":"2026-10-29T11:27:14.853Z","updated":"2026-10-29T12:36:51.108Z","title":"Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys","severity":"MEDIUM","score":4.9,"vendor":"metabox","product":"Meta Box – A Framework for Dynamic Websites","kev":false,"epss":0.00228},{"id":"CVE-2026-96767","published":"2026-10-29T11:27:14.333Z","updated":"2026-10-29T12:36:51.254Z","title":"NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header","severity":"HIGH","score":7.2,"vendor":"webaways","product":"NEX-Forms – Ultimate Forms Plugin for WordPress","kev":false,"epss":0.00419},{"id":"CVE-2026-119025","published":"2026-10-29T11:24:18.723Z","updated":"2026-10-29T11:24:18.723Z","title":"open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows","severity":"HIGH","score":7.7,"vendor":"sindresorhus","product":"open","kev":false,"epss":0.01446},{"id":"CVE-2026-5702","published":"2026-10-29T11:17:09.384Z","updated":"2026-10-29T13:07:11.657Z","title":"Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.00177},{"id":"CVE-2026-5700","published":"2026-10-29T11:17:02.161Z","updated":"2026-10-29T13:07:11.804Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003},{"id":"CVE-2026-5699","published":"2026-10-29T11:16:57.467Z","updated":"2026-10-29T13:07:11.952Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003},{"id":"CVE-2026-5698","published":"2026-10-29T11:16:52.469Z","updated":"2026-10-29T13:07:12.103Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003},{"id":"CVE-2026-5697","published":"2026-10-29T11:16:47.555Z","updated":"2026-10-29T13:07:12.257Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003},{"id":"CVE-2026-115611","published":"2026-10-29T11:00:26.280Z","updated":"2026-10-29T12:36:51.406Z","title":"WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"PluginUs.Net","product":"TableOn","kev":false,"epss":0.0019},{"id":"CVE-2026-115964","published":"2026-10-29T11:00:25.837Z","updated":"2026-10-29T12:36:51.554Z","title":"WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"StylemixThemes","product":"Motors","kev":false,"epss":0.00323},{"id":"CVE-2026-115962","published":"2026-10-29T11:00:25.822Z","updated":"2026-10-29T12:36:51.694Z","title":"WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00259},{"id":"CVE-2026-115592","published":"2026-10-29T11:00:25.353Z","updated":"2026-10-29T12:36:51.841Z","title":"WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"OceanWP","product":"OceanWP","kev":false,"epss":0.0019},{"id":"CVE-2026-116409","published":"2026-10-29T11:00:25.348Z","updated":"2026-10-29T12:36:51.988Z","title":"WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Swings","product":"Upsell Order Bump Offer for WooCommerce","kev":false,"epss":0.0019},{"id":"CVE-2026-112827","published":"2026-10-29T11:00:24.746Z","updated":"2026-10-29T12:36:52.128Z","title":"WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"VillaTheme","product":"HANDMADE – Dropshipping for Etsy and WooCommerce","kev":false,"epss":0.00238},{"id":"CVE-2026-114193","published":"2026-10-29T11:00:24.744Z","updated":"2026-10-29T12:36:52.272Z","title":"WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Eyal Fitoussi","product":"GEO my WordPress","kev":false,"epss":0.00317},{"id":"CVE-2026-115599","published":"2026-10-29T11:00:24.169Z","updated":"2026-10-29T12:36:52.417Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00317},{"id":"CVE-2026-115965","published":"2026-10-29T11:00:24.136Z","updated":"2026-10-29T12:36:52.568Z","title":"WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"BuddyPress","product":"BuddyPress","kev":false,"epss":0.00289},{"id":"CVE-2026-115967","published":"2026-10-29T11:00:23.638Z","updated":"2026-10-29T12:36:52.709Z","title":"WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability","severity":"HIGH","score":8.8,"vendor":"Hamid Alinia","product":"Login with phone number","kev":false,"epss":0.00354},{"id":"CVE-2026-115963","published":"2026-10-29T11:00:23.604Z","updated":"2026-10-29T12:36:52.863Z","title":"WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"VideoWhisper.com","product":"Broadcast Live Video","kev":false,"epss":0.00238},{"id":"CVE-2026-118989","published":"2026-10-29T10:57:40.767Z","updated":"2026-10-29T12:36:53.008Z","title":"WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects","severity":"MEDIUM","score":5.1,"vendor":"WebToffee","product":"Product Import Export for WooCommerce","kev":false,"epss":0.00267},{"id":"CVE-2026-33924","published":"2026-10-29T10:46:35.814Z","updated":"2026-10-29T12:36:53.161Z","title":"Authenticated RCE in update functionality in Guardian/CMC before 26.4.0","severity":"HIGH","score":7.5,"vendor":"Nozomi Networks","product":"Guardian","kev":false,"epss":0.01114},{"id":"CVE-2026-33923","published":"2026-10-29T10:46:27.450Z","updated":"2026-10-29T12:36:53.310Z","title":"Update bundle signature bypass in Guardian/CMC before 26.4.0","severity":"HIGH","score":7.5,"vendor":"Nozomi Networks","product":"Guardian","kev":false,"epss":0.00227},{"id":"CVE-2026-118984","published":"2026-10-29T10:44:39.676Z","updated":"2026-10-29T12:36:53.458Z","title":"OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login","severity":"HIGH","score":7,"vendor":"cheaper-inference","product":"OmniRoute","kev":false,"epss":0.00381},{"id":"CVE-2026-71569","published":"2026-10-29T10:31:01.478Z","updated":"2026-10-29T13:07:12.410Z","title":"Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00346},{"id":"CVE-2026-115942","published":"2026-10-29T10:19:58.757Z","updated":"2026-10-29T11:09:37.028Z","title":"Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00137},{"id":"CVE-2026-114230","published":"2026-10-29T10:19:15.580Z","updated":"2026-10-29T11:09:06.927Z","title":"Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00268},{"id":"CVE-2026-105042","published":"2026-10-29T10:17:20.853Z","updated":"2026-10-29T11:08:30.677Z","title":"Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00228},{"id":"CVE-2026-105031","published":"2026-10-29T10:16:41.384Z","updated":"2026-10-29T11:08:28.567Z","title":"Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00134},{"id":"CVE-2026-111417","published":"2026-10-29T09:45:11.736Z","updated":"2026-10-29T12:36:53.601Z","title":"Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service","severity":"HIGH","score":7.5,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00345},{"id":"CVE-2026-111418","published":"2026-10-29T09:45:08.998Z","updated":"2026-10-29T12:36:53.752Z","title":"SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service","severity":"HIGH","score":7.5,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00435},{"id":"CVE-2026-111419","published":"2026-10-29T09:45:07.279Z","updated":"2026-10-29T12:36:53.897Z","title":"Hardcoded API Token in Foxit Official Website","severity":"HIGH","score":8.6,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00345},{"id":"CVE-2026-117611","published":"2026-10-29T09:32:57.964Z","updated":"2026-10-29T14:13:09.797Z","title":"Trust of compromised eMudhra root CA in bundled CA stores","severity":"HIGH","score":7.1,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00238},{"id":"CVE-2026-111318","published":"2026-10-29T09:25:37.098Z","updated":"2026-10-29T10:35:36.425Z","title":"HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink","severity":"MEDIUM","score":5.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00272},{"id":"CVE-2026-107743","published":"2026-10-29T09:25:36.733Z","updated":"2026-10-29T10:35:36.566Z","title":"Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter","severity":"HIGH","score":7.2,"vendor":"mapster","product":"Mapster WP Maps","kev":false,"epss":0.00401},{"id":"CVE-2026-91153","published":"2026-10-29T09:25:36.385Z","updated":"2026-10-29T10:45:40.641Z","title":"Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})","severity":"MEDIUM","score":5.3,"vendor":"wpeverest","product":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI","kev":false,"epss":0.00613},{"id":"CVE-2026-116763","published":"2026-10-29T09:25:36.034Z","updated":"2026-10-29T10:45:40.785Z","title":"LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)","severity":"MEDIUM","score":5.4,"vendor":"litespeedtech","product":"LiteSpeed Cache","kev":false,"epss":0.00341},{"id":"CVE-2026-104727","published":"2026-10-29T09:25:35.676Z","updated":"2026-10-29T10:45:40.925Z","title":"Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys","severity":"MEDIUM","score":6.4,"vendor":"berocket","product":"Sequential Order Numbers for WooCommerce","kev":false,"epss":0.00252},{"id":"CVE-2026-109215","published":"2026-10-29T09:25:35.290Z","updated":"2026-10-29T10:45:41.071Z","title":"LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization","severity":"MEDIUM","score":6.4,"vendor":"litespeedtech","product":"LiteSpeed Cache","kev":false,"epss":0.00334},{"id":"CVE-2026-91152","published":"2026-10-29T09:25:34.908Z","updated":"2026-10-29T10:45:41.225Z","title":"Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter","severity":"MEDIUM","score":6.1,"vendor":"wpeverest","product":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI","kev":false,"epss":0.00346},{"id":"CVE-2026-107627","published":"2026-10-29T09:25:34.542Z","updated":"2026-10-29T10:45:41.367Z","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block","severity":"MEDIUM","score":5.4,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.0033},{"id":"CVE-2026-107629","published":"2026-10-29T09:25:34.184Z","updated":"2026-10-29T10:45:41.516Z","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText","severity":"MEDIUM","score":5.4,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.00341},{"id":"CVE-2026-110707","published":"2026-10-29T09:25:33.811Z","updated":"2026-10-29T10:45:41.659Z","title":"RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element","severity":"MEDIUM","score":4.7,"vendor":"themeisle","product":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator","kev":false,"epss":0.00304},{"id":"CVE-2026-103875","published":"2026-10-29T09:25:33.216Z","updated":"2026-10-29T10:45:41.805Z","title":"Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links","severity":"MEDIUM","score":4.7,"vendor":"dglingren","product":"Media Library Assistant","kev":false,"epss":0.00304},{"id":"CVE-2026-118192","published":"2026-10-29T09:25:32.674Z","updated":"2026-10-29T10:45:41.954Z","title":"JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"beardev","product":"JoomSport – for Sports: Team & League, Football, Hockey & more","kev":false,"epss":0.00442},{"id":"CVE-2026-103485","published":"2026-10-29T09:25:32.060Z","updated":"2026-10-29T10:45:42.096Z","title":"Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property","severity":"MEDIUM","score":5.4,"vendor":"hupe13","product":"Extensions for Leaflet Map","kev":false,"epss":0.00341},{"id":"CVE-2026-88941","published":"2026-10-29T09:11:33.069Z","updated":"2026-10-29T16:54:19.568Z","title":"Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network…","severity":"MEDIUM","score":6.2,"vendor":"Kaspersky","product":"Network Agent","kev":false,"epss":0.00144},{"id":"CVE-2026-85498","published":"2026-10-29T09:02:35.845Z","updated":"2026-10-30T01:19:27.577Z","title":"Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow","severity":"LOW","score":3.5,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00262},{"id":"CVE-2026-7190","published":"2026-10-29T09:00:02.158Z","updated":"2026-10-29T12:36:54.332Z","title":"Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration","severity":"MEDIUM","score":5.1,"vendor":"ICT Innovations","product":"ICT Innovations’ PHP-CGI/PHP-FPM configuration","kev":false,"epss":0.00335},{"id":"CVE-2026-114358","published":"2026-10-29T08:53:05.549Z","updated":"2026-10-29T14:13:51.533Z","title":"SQL Injection Vulnerability in Radius Xenia M2M Platform","severity":"CRITICAL","score":9.3,"vendor":"Radius Synergies","product":"Radius Xenia M2M Platform","kev":false,"epss":0.00502},{"id":"CVE-2026-115303","published":"2026-10-29T08:03:46.351Z","updated":"2026-10-29T10:45:50.346Z","title":"Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00224},{"id":"CVE-2025-62841","published":"2026-10-29T07:40:02.766Z","updated":"2026-10-29T14:16:06.907Z","title":"Hard-coded Cryptographic Key #2","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"HBS 3 Hybrid Backup Sync","kev":false,"epss":0.00245},{"id":"CVE-2025-62839","published":"2026-10-29T07:39:53.736Z","updated":"2026-10-29T14:17:58.115Z","title":"Hard-coded Cryptographic Key #1","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"HBS 3 Hybrid Backup Sync","kev":false,"epss":0.00245},{"id":"CVE-2026-118030","published":"2026-10-29T06:22:11.871Z","updated":"2026-10-29T14:18:44.865Z","title":"Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins","severity":"MEDIUM","score":4.2,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00163},{"id":"CVE-2026-117859","published":"2026-10-29T06:22:11.710Z","updated":"2026-10-29T17:20:26.217Z","title":"Keycloak-services: keycloak-services: par single-use bypass via flow restart","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00193},{"id":"CVE-2026-117688","published":"2026-10-29T06:22:06.480Z","updated":"2026-10-29T06:22:06.480Z","title":"Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00275},{"id":"CVE-2026-117548","published":"2026-10-29T06:22:06.328Z","updated":"2026-10-29T06:22:06.328Z","title":"389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Directory Server 11","kev":false,"epss":0.00334},{"id":"CVE-2026-117627","published":"2026-10-29T06:22:03.427Z","updated":"2026-10-29T06:22:03.427Z","title":"Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00246},{"id":"CVE-2026-114488","published":"2026-10-29T06:07:33.732Z","updated":"2026-11-02T20:12:15.876Z","title":"Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Fuse 7","kev":false,"epss":0.00338},{"id":"CVE-2026-19610","published":"2026-10-29T06:07:32.569Z","updated":"2026-10-29T14:24:04.416Z","title":"Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","kev":false,"epss":0.00209},{"id":"CVE-2026-15564","published":"2026-10-29T06:07:28.359Z","updated":"2026-10-29T17:20:33.597Z","title":"Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","kev":false,"epss":0.00124},{"id":"CVE-2026-86794","published":"2026-10-29T06:00:26.534Z","updated":"2026-10-29T10:56:05.527Z","title":"Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Community Events","kev":false,"epss":0.00276},{"id":"CVE-2026-85007","published":"2026-10-29T06:00:26.360Z","updated":"2026-10-29T10:46:16.022Z","title":"YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Video Player for YouTube","kev":false,"epss":0.00152},{"id":"CVE-2026-115259","published":"2026-10-29T06:00:26.186Z","updated":"2026-10-29T10:56:05.733Z","title":"Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00193},{"id":"CVE-2026-115245","published":"2026-10-29T06:00:26.002Z","updated":"2026-10-29T10:56:05.928Z","title":"Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Chat AI with Dispatcher","kev":false,"epss":0.00462},{"id":"CVE-2026-114270","published":"2026-10-29T06:00:25.828Z","updated":"2026-10-29T10:56:06.088Z","title":"GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00206},{"id":"CVE-2026-113617","published":"2026-10-29T06:00:25.656Z","updated":"2026-10-29T10:56:06.251Z","title":"Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal","severity":"CRITICAL","score":9.9,"vendor":"Unknown","product":"Automated Import Products to Cart","kev":false,"epss":0.00344},{"id":"CVE-2026-113616","published":"2026-10-29T06:00:25.482Z","updated":"2026-10-29T10:56:06.421Z","title":"LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"LogixFast Auth","kev":false,"epss":0.00341},{"id":"CVE-2026-111739","published":"2026-10-29T06:00:25.291Z","updated":"2026-10-29T10:56:06.577Z","title":"Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Two Factor Authentication","kev":false,"epss":0.00286},{"id":"CVE-2026-110983","published":"2026-10-29T06:00:25.116Z","updated":"2026-10-29T10:56:06.731Z","title":"WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"WP Photo Album Plus","kev":false,"epss":0.00107},{"id":"CVE-2026-110505","published":"2026-10-29T06:00:24.942Z","updated":"2026-10-29T10:56:06.878Z","title":"Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.00391},{"id":"CVE-2026-110504","published":"2026-10-29T06:00:24.769Z","updated":"2026-10-29T10:56:07.031Z","title":"Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.0029},{"id":"CVE-2026-110030","published":"2026-10-29T06:00:24.596Z","updated":"2026-10-29T10:56:07.177Z","title":"Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Hide Price Until Login","kev":false,"epss":0.00214},{"id":"CVE-2026-108763","published":"2026-10-29T06:00:24.396Z","updated":"2026-10-29T10:56:07.338Z","title":"Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Wallet System for WooCommerce","kev":false,"epss":0.00185},{"id":"CVE-2026-108686","published":"2026-10-29T06:00:24.208Z","updated":"2026-10-29T10:56:07.495Z","title":"WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure","severity":"LOW","score":3.7,"vendor":"Unknown","product":"WP Post Author","kev":false,"epss":0.00216},{"id":"CVE-2026-108685","published":"2026-10-29T06:00:24.033Z","updated":"2026-10-29T10:56:07.645Z","title":"WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields","severity":"LOW","score":3.7,"vendor":"Unknown","product":"WP Post Author","kev":false,"epss":0.00259},{"id":"CVE-2026-105258","published":"2026-10-29T06:00:23.853Z","updated":"2026-10-29T10:56:07.796Z","title":"LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Appointment Booking Plugin","kev":false,"epss":0.00173},{"id":"CVE-2026-103693","published":"2026-10-29T06:00:23.681Z","updated":"2026-10-29T10:56:07.950Z","title":"Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection","severity":"CRITICAL","score":9,"vendor":"Unknown","product":"Frontend Dashboard","kev":false,"epss":0.0047},{"id":"CVE-2024-3586","published":"2026-10-29T06:00:23.500Z","updated":"2026-10-29T10:56:08.109Z","title":"LetterPress < 2.4.0 - Admin+ Stored XSS","severity":"LOW","score":3.5,"vendor":"Unknown","product":"LetterPress","kev":false,"epss":0.00173},{"id":"CVE-2026-89216","published":"2026-10-29T06:00:23.322Z","updated":"2026-10-29T10:56:08.266Z","title":"vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"vTables","kev":false,"epss":0.00274},{"id":"CVE-2026-88928","published":"2026-10-29T06:00:23.147Z","updated":"2026-10-29T10:56:08.430Z","title":"PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PAYCOMET for WooCommerce","kev":false,"epss":0.00164},{"id":"CVE-2026-78396","published":"2026-10-29T06:00:22.964Z","updated":"2026-10-29T10:56:08.584Z","title":"Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00206},{"id":"CVE-2026-78395","published":"2026-10-29T06:00:22.791Z","updated":"2026-10-29T10:56:08.732Z","title":"Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00182},{"id":"CVE-2026-115302","published":"2026-10-29T06:00:22.361Z","updated":"2026-10-29T10:56:08.890Z","title":"Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00182},{"id":"CVE-2026-115301","published":"2026-10-29T06:00:22.187Z","updated":"2026-10-29T10:56:09.041Z","title":"Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00422},{"id":"CVE-2026-115300","published":"2026-10-29T06:00:22.014Z","updated":"2026-10-29T10:56:09.201Z","title":"Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00098},{"id":"CVE-2026-115299","published":"2026-10-29T06:00:21.839Z","updated":"2026-10-29T10:56:09.360Z","title":"Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00091},{"id":"CVE-2026-115282","published":"2026-10-29T06:00:21.666Z","updated":"2026-10-29T10:56:09.514Z","title":"Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Recipe Card Blocks Lite","kev":false,"epss":0.00206},{"id":"CVE-2026-93293","published":"2026-10-29T05:30:31.921Z","updated":"2026-10-29T10:45:42.261Z","title":"Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler","severity":"MEDIUM","score":6.4,"vendor":"saadiqbal","product":"Password Protected – Protect Your Site Content With a Password","kev":false,"epss":0.00187},{"id":"CVE-2026-118905","published":"2026-10-29T05:22:35.156Z","updated":"2026-10-29T05:22:35.156Z","title":"nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed","severity":"HIGH","score":7.1,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00139},{"id":"CVE-2026-93757","published":"2026-10-29T03:39:15.801Z","updated":"2026-10-29T10:45:42.405Z","title":"Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite","severity":"HIGH","score":7.5,"vendor":"wild-apricot","product":"Wild Apricot Login","kev":false,"epss":0.00425},{"id":"CVE-2026-96228","published":"2026-10-29T03:39:15.430Z","updated":"2026-10-29T10:45:42.545Z","title":"SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover","severity":"HIGH","score":8.1,"vendor":"sslplugins","product":"SSL Wireless SMS Notification","kev":false,"epss":0.00475},{"id":"CVE-2026-96666","published":"2026-10-29T03:39:15.064Z","updated":"2026-10-29T10:45:42.686Z","title":"Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter","severity":"HIGH","score":7.2,"vendor":"vberkel","product":"Schema App Structured Data","kev":false,"epss":0.00296},{"id":"CVE-2026-93904","published":"2026-10-29T03:39:14.706Z","updated":"2026-10-29T10:45:42.823Z","title":"Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter","severity":"HIGH","score":7.5,"vendor":"dejanmarkovic","product":"Social Web Suite – Social Media Auto Post, Social Media Auto Publish","kev":false,"epss":0.00457},{"id":"CVE-2026-93855","published":"2026-10-29T03:39:14.346Z","updated":"2026-10-29T10:45:42.961Z","title":"SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter","severity":"HIGH","score":7.5,"vendor":"brewlabs","product":"SendPress Newsletters","kev":false,"epss":0.00411},{"id":"CVE-2026-96669","published":"2026-10-29T03:39:13.993Z","updated":"2026-10-29T10:45:43.106Z","title":"Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie","severity":"HIGH","score":7.2,"vendor":"wpscripts","product":"Food Store – Online Food Delivery & Pickup","kev":false,"epss":0.00302},{"id":"CVE-2026-96741","published":"2026-10-29T03:39:13.622Z","updated":"2026-10-29T10:45:43.246Z","title":"DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption","severity":"HIGH","score":7.2,"vendor":"mlfactory","product":"DSGVO All in one for WP","kev":false,"epss":0.00236},{"id":"CVE-2026-109516","published":"2026-10-29T03:39:13.121Z","updated":"2026-10-29T10:45:43.403Z","title":"Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token","severity":"CRITICAL","score":9.8,"vendor":"guruteam","product":"Bot for Telegram on WooCommerce","kev":false,"epss":0.00575},{"id":"CVE-2026-42949","published":"2026-10-29T02:59:52.571Z","updated":"2026-10-29T12:32:40.787Z","title":"A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to…","severity":"MEDIUM","score":5.6,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00221},{"id":"CVE-2026-40063","published":"2026-10-29T02:59:52.226Z","updated":"2026-10-29T13:07:12.544Z","title":"A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can…","severity":"MEDIUM","score":5.3,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00288},{"id":"CVE-2026-42922","published":"2026-10-29T02:59:51.711Z","updated":"2026-10-29T13:07:12.686Z","title":"A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a…","severity":"CRITICAL","score":9.8,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00534},{"id":"CVE-2026-118426","published":"2026-10-29T02:02:13.443Z","updated":"2026-10-29T02:02:13.443Z","title":"In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group…","severity":"MEDIUM","score":5.3,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00268},{"id":"CVE-2026-113409","published":"2026-10-29T01:43:11.787Z","updated":"2026-10-29T02:02:12.553Z","title":"The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor…","severity":"MEDIUM","score":4.8,"vendor":"canva","product":"ortto","kev":false,"epss":0.00196},{"id":"CVE-2026-114173","published":"2026-10-29T01:42:02.291Z","updated":"2026-10-29T02:02:12.706Z","title":"The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat…","severity":"MEDIUM","score":5.3,"vendor":"canva","product":"ortto","kev":false,"epss":0.00285},{"id":"CVE-2026-113387","published":"2026-10-29T01:40:39.020Z","updated":"2026-10-29T02:02:12.845Z","title":"The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An…","severity":"HIGH","score":8.6,"vendor":"canva","product":"ortto","kev":false,"epss":0.00287},{"id":"CVE-2026-66092","published":"2026-10-29T01:39:28.582Z","updated":"2026-10-29T02:02:12.981Z","title":"Stored XSS in pre-login notice via reachable legacy logon route","severity":"MEDIUM","score":4.8,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00326},{"id":"CVE-2026-66091","published":"2026-10-29T01:38:24.876Z","updated":"2026-10-29T02:02:13.127Z","title":"Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details","severity":"MEDIUM","score":6.9,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00403},{"id":"CVE-2026-66090","published":"2026-10-29T01:37:37.928Z","updated":"2026-10-29T02:02:13.278Z","title":"XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read","severity":"HIGH","score":7.1,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00269},{"id":"CVE-2026-66089","published":"2026-10-29T01:36:30.145Z","updated":"2026-10-29T02:02:13.415Z","title":"XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion","severity":"MEDIUM","score":6.1,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00269},{"id":"CVE-2026-66088","published":"2026-10-29T01:35:46.415Z","updated":"2026-10-29T02:02:13.562Z","title":"Unrestricted Command Execution via system.execute","severity":"CRITICAL","score":9.4,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00685},{"id":"CVE-2026-16889","published":"2026-10-29T01:32:09.466Z","updated":"2026-10-29T02:02:13.700Z","title":"Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin","severity":"MEDIUM","score":4.8,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00315},{"id":"CVE-2026-21157","published":"2026-10-29T01:01:58.516Z","updated":"2026-10-30T03:55:58.739Z","title":"Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.","severity":"HIGH","score":8.3,"vendor":"Samsung Mobile","product":"Bixby","kev":false,"epss":0.00106},{"id":"CVE-2026-113957","published":"2026-10-29T00:01:44.984Z","updated":"2026-10-29T00:01:44.984Z","title":"An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"container","kev":false,"epss":0.00136},{"id":"CVE-2026-118590","published":"2026-10-29T00:00:21.707Z","updated":"2026-10-29T00:00:21.707Z","title":"nipy nibabel Header volumeutils.py array_from_file memory allocation","severity":"MEDIUM","score":6.9,"vendor":"nipy","product":"nibabel","kev":false,"epss":0.00419},{"id":"CVE-2026-107060","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:37:31.032Z","title":"Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00277},{"id":"CVE-2026-107059","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:51:59.824Z","title":"An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile,…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.002},{"id":"CVE-2026-107058","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:54:43.834Z","title":"An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00487},{"id":"CVE-2026-107057","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T18:45:37.386Z","title":"An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00167},{"id":"CVE-2026-107056","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:49:40.491Z","title":"Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-107055","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:37:53.151Z","title":"Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00256},{"id":"CVE-2026-107053","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:46:11.125Z","title":"Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-107052","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:56:53.213Z","title":"Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00354},{"id":"CVE-2026-107051","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:19:34.362Z","title":"Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-107050","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:42:05.645Z","title":"An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00169},{"id":"CVE-2026-107049","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:05.715Z","title":"An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00311},{"id":"CVE-2026-107048","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:24:50.594Z","title":"An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00179},{"id":"CVE-2026-107047","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:00:19.322Z","title":"Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00434},{"id":"CVE-2026-107046","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:02:49.075Z","title":"A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via…","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107045","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:15:46.591Z","title":"Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107044","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:14.936Z","title":"Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00311},{"id":"CVE-2026-107043","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T16:07:24.987Z","title":"Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-107042","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:02:16.799Z","title":"Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00355},{"id":"CVE-2026-107041","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:23:49.410Z","title":"Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107040","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:48:01.798Z","title":"Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107039","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:24.152Z","title":"Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00488},{"id":"CVE-2026-107038","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:41:06.907Z","title":"Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00174},{"id":"CVE-2026-107037","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:04:25.870Z","title":"Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00434},{"id":"CVE-2026-107036","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:16:57.118Z","title":"Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker…","severity":"MEDIUM","score":5.1,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107035","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:38:25.601Z","title":"Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107034","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:32.136Z","title":"Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00366},{"id":"CVE-2026-107033","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:26:55.984Z","title":"Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-107032","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:06:17.579Z","title":"Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00499},{"id":"CVE-2026-107030","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:06:32.730Z","title":"Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password)…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107029","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:20:09.692Z","title":"Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00174},{"id":"CVE-2026-107028","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:39.719Z","title":"Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342},{"id":"CVE-2026-107027","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:07:42.324Z","title":"Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107026","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:08:14.988Z","title":"Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00458},{"id":"CVE-2026-107025","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:01:15.804Z","title":"Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00163},{"id":"CVE-2026-107024","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T15:01:05.247Z","title":"Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-107023","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:47.840Z","title":"Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00258},{"id":"CVE-2026-107021","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T14:56:14.391Z","title":"Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107020","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:11:20.498Z","title":"An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00576},{"id":"CVE-2026-107019","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:06:37.968Z","title":"Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107018","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T14:44:40.204Z","title":"Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107017","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:55.888Z","title":"Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342},{"id":"CVE-2026-107016","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T14:42:15.598Z","title":"Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00166},{"id":"CVE-2026-107015","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:52:34.924Z","title":"Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00499},{"id":"CVE-2026-107014","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:58:18.803Z","title":"Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note database.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-79589","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T14:02:04.041Z","title":"The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell.…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00177},{"id":"CVE-2026-51912","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T18:08:52.592Z","title":"OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00244},{"id":"CVE-2026-51905","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T17:13:57.738Z","title":"TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00381},{"id":"CVE-2026-51903","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T18:07:54.431Z","title":"SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00255},{"id":"CVE-2026-51902","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:11:51.118Z","title":"SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00145},{"id":"CVE-2026-51863","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:25:40.938Z","title":"DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00366},{"id":"CVE-2026-51851","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T17:51:55.034Z","title":"modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00244},{"id":"CVE-2026-51832","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:09:56.147Z","title":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-51831","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T18:49:13.038Z","title":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-118589","published":"2026-10-28T23:45:18.675Z","updated":"2026-10-29T17:20:40.744Z","title":"nschloe meshio VTK Reader _vtk_42.py memory allocation","severity":"MEDIUM","score":6.9,"vendor":"nschloe","product":"meshio","kev":false,"epss":0.00405},{"id":"CVE-2026-118586","published":"2026-10-28T23:30:17.619Z","updated":"2026-10-28T23:30:17.619Z","title":"dfm feedfinder2 feedfinder2.py find_feeds server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"dfm","product":"feedfinder2","kev":false,"epss":0.00311},{"id":"CVE-2026-118585","published":"2026-10-28T23:15:19.868Z","updated":"2026-10-28T23:15:19.868Z","title":"configuroweb inventariobasico Add Product addlist.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"configuroweb","product":"inventariobasico","kev":false,"epss":0.00199},{"id":"CVE-2026-86983","published":"2026-10-28T23:01:59.598Z","updated":"2026-10-28T23:02:44.171Z","title":"A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"swift-crypto","kev":false,"epss":0.00162},{"id":"CVE-2026-118579","published":"2026-10-28T23:00:15.627Z","updated":"2026-10-29T17:20:48.522Z","title":"D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor","severity":"CRITICAL","score":9.3,"vendor":"D-Link","product":"DIR-505","kev":false,"epss":0.00787},{"id":"CVE-2026-118578","published":"2026-10-28T22:45:10.175Z","updated":"2026-10-29T15:51:30.534Z","title":"maotoumao MusicFreeDesktop Request Forwarder information disclosure","severity":"MEDIUM","score":5.3,"vendor":"maotoumao","product":"MusicFreeDesktop","kev":false,"epss":0.00221},{"id":"CVE-2026-82411","published":"2026-10-28T22:40:13.728Z","updated":"2026-10-29T17:20:57.039Z","title":"Objects API: Cross-object-type authorization bypass on the object history-detail endpoint","severity":"MEDIUM","score":6.5,"vendor":"maykinmedia","product":"open-object","kev":false,"epss":0.00306},{"id":"CVE-2026-85749","published":"2026-10-28T22:37:38.513Z","updated":"2026-10-29T14:46:47.666Z","title":"MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail","severity":"HIGH","score":8.1,"vendor":"mailwatch","product":"MailWatch","kev":false,"epss":0.00287},{"id":"CVE-2026-55561","published":"2026-10-28T22:33:47.140Z","updated":"2026-10-28T22:33:47.140Z","title":"InvoicePlane: Guest user IDOR in quote approval and rejection","severity":"MEDIUM","score":5.3,"vendor":"InvoicePlane","product":"InvoicePlane","kev":false,"epss":0.00275},{"id":"CVE-2026-75520","published":"2026-10-28T22:30:59.693Z","updated":"2026-10-28T22:30:59.693Z","title":"Domoticz: Missing authorization and path traversal in the udevices Lua parser handler","severity":"MEDIUM","score":5.4,"vendor":"domoticz","product":"domoticz","kev":false,"epss":0.00279},{"id":"CVE-2026-118577","published":"2026-10-28T22:15:17.877Z","updated":"2026-10-29T15:52:21.877Z","title":"maotoumao MusicFreeDesktop Request Forwarder server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"maotoumao","product":"MusicFreeDesktop","kev":false,"epss":0.00229},{"id":"CVE-2026-118538","published":"2026-10-28T22:00:18.460Z","updated":"2026-10-29T17:21:05.935Z","title":"a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes","severity":"MEDIUM","score":5.1,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00299},{"id":"CVE-2026-61575","published":"2026-10-28T21:57:55.205Z","updated":"2026-10-29T17:21:16.746Z","title":"AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles","severity":"MEDIUM","score":4.7,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00177},{"id":"CVE-2026-61569","published":"2026-10-28T21:54:38.358Z","updated":"2026-10-29T15:11:35.842Z","title":"AVideo-Encoder: pre-authentication streamer-login SQL injection","severity":"HIGH","score":7.5,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00282},{"id":"CVE-2026-54453","published":"2026-10-28T21:53:24.736Z","updated":"2026-10-28T21:53:24.736Z","title":"OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)","severity":"HIGH","score":7.2,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00438},{"id":"CVE-2026-61571","published":"2026-10-28T21:49:16.840Z","updated":"2026-10-28T21:49:16.840Z","title":"AVideo-Encoder: missing authentication on control and status endpoints","severity":"HIGH","score":7.3,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.0028},{"id":"CVE-2026-116641","published":"2026-10-28T21:48:52.581Z","updated":"2026-10-29T15:13:15.811Z","title":"The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00144},{"id":"CVE-2026-61572","published":"2026-10-28T21:47:39.328Z","updated":"2026-10-29T15:14:17.879Z","title":"AVideo-Encoder: unauthenticated full-response server-side request forgery","severity":"HIGH","score":8.6,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00254},{"id":"CVE-2026-61573","published":"2026-10-28T21:46:18.413Z","updated":"2026-10-29T17:21:22.557Z","title":"AVideo-Encoder: reflected cross-site scripting in the login interface","severity":"MEDIUM","score":6.1,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00251},{"id":"CVE-2026-118537","published":"2026-10-28T21:45:16.400Z","updated":"2026-10-28T21:45:16.400Z","title":"a2ui Image Player/Video Player/Audio Player Image.js input validation","severity":"MEDIUM","score":5.3,"vendor":null,"product":"a2ui","kev":false,"epss":0.00379},{"id":"CVE-2026-54455","published":"2026-10-28T21:45:00.241Z","updated":"2026-10-29T17:21:29.511Z","title":"OpenCATS: Authenticated SQL injection in activity DataGrid date filters","severity":"HIGH","score":7.6,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00248},{"id":"CVE-2026-61567","published":"2026-10-28T21:43:48.515Z","updated":"2026-10-28T21:43:48.515Z","title":"AVideo-Encoder: unauthenticated command execution through streamer login trust","severity":"CRITICAL","score":10,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00525},{"id":"CVE-2026-61564","published":"2026-10-28T21:42:42.397Z","updated":"2026-10-28T21:42:42.397Z","title":"AVideo-Encoder: unauthenticated installer PHP code injection","severity":"CRITICAL","score":10,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00539},{"id":"CVE-2026-57448","published":"2026-10-28T21:41:21.557Z","updated":"2026-10-28T21:41:21.557Z","title":"Blombooru: administrator image-proxy server-side request forgery","severity":"MEDIUM","score":6.2,"vendor":"mrblomblo","product":"blombooru","kev":false,"epss":0.00341},{"id":"CVE-2026-93851","published":"2026-10-28T21:41:15.727Z","updated":"2026-10-30T03:56:14.074Z","title":"Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post","severity":"HIGH","score":8,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00266},{"id":"CVE-2026-61546","published":"2026-10-28T21:40:16.081Z","updated":"2026-10-29T18:24:59.680Z","title":"AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools","severity":"HIGH","score":8.8,"vendor":"ankimcp","product":"anki-mcp-server-addon","kev":false,"epss":0.00181},{"id":"CVE-2026-118804","published":"2026-10-28T21:18:28.475Z","updated":"2026-10-29T17:21:35.958Z","title":"Bricks Broken Access Control via query_result Endpoint","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Builder","kev":false,"epss":0.00249},{"id":"CVE-2026-118803","published":"2026-10-28T21:11:32.437Z","updated":"2026-10-29T20:26:13.822Z","title":"Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Theme","kev":false,"epss":0.00369},{"id":"CVE-2026-118757","published":"2026-10-28T21:11:24.955Z","updated":"2026-10-28T21:11:24.955Z","title":"PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees","severity":"MEDIUM","score":6.9,"vendor":"PI Websolution","product":"PiWeb Disable payment method / Partial payment for WooCommerce","kev":false,"epss":0.00231},{"id":"CVE-2026-118756","published":"2026-10-28T21:11:24.270Z","updated":"2026-10-28T21:11:24.270Z","title":"gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir","severity":"MEDIUM","score":6.7,"vendor":"gopasspw","product":"gopass","kev":false,"epss":0.00145},{"id":"CVE-2026-118755","published":"2026-10-28T21:11:23.608Z","updated":"2026-10-29T17:21:55.592Z","title":"Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path","severity":"HIGH","score":8.6,"vendor":"Volmarg","product":"personal-management-system","kev":false,"epss":0.01405},{"id":"CVE-2026-118754","published":"2026-10-28T21:11:22.905Z","updated":"2026-10-28T21:11:22.905Z","title":"Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php","severity":"MEDIUM","score":6.9,"vendor":"Dolibarr","product":"Dolibarr ERP/CRM","kev":false,"epss":0.00239},{"id":"CVE-2026-118753","published":"2026-10-28T21:11:22.192Z","updated":"2026-10-28T21:11:22.192Z","title":"FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing","severity":"HIGH","score":8.5,"vendor":"danoli3","product":"FreeImage","kev":false,"epss":0.00141},{"id":"CVE-2026-118752","published":"2026-10-28T21:11:21.485Z","updated":"2026-10-28T21:11:21.485Z","title":"FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder","severity":"HIGH","score":8.5,"vendor":"danoli3","product":"FreeImage","kev":false,"epss":0.00141},{"id":"CVE-2026-118694","published":"2026-10-28T21:11:20.814Z","updated":"2026-10-29T17:22:18.429Z","title":"python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations","severity":"HIGH","score":8.7,"vendor":"trentm","product":"python-markdown2","kev":false,"epss":0.00453},{"id":"CVE-2026-118693","published":"2026-10-28T21:11:20.057Z","updated":"2026-10-28T21:11:20.057Z","title":"CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path","severity":"MEDIUM","score":5.6,"vendor":"giuspen","product":"cherrytree","kev":false,"epss":0.00141},{"id":"CVE-2026-118692","published":"2026-10-28T21:11:19.351Z","updated":"2026-10-28T21:11:19.351Z","title":"CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action","severity":"HIGH","score":7.1,"vendor":"giuspen","product":"cherrytree","kev":false,"epss":0.00581},{"id":"CVE-2026-118691","published":"2026-10-28T21:11:18.629Z","updated":"2026-10-28T21:11:18.629Z","title":"xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message","severity":"MEDIUM","score":6.3,"vendor":"GuDong2003","product":"xianyu-auto-reply-fix","kev":false,"epss":0.00309},{"id":"CVE-2026-118690","published":"2026-10-28T21:11:17.919Z","updated":"2026-10-29T17:22:34.003Z","title":"Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs","severity":"CRITICAL","score":9.3,"vendor":"SignalK","product":"signalk-server","kev":false,"epss":0.00688},{"id":"CVE-2026-118689","published":"2026-10-28T21:11:17.232Z","updated":"2026-10-28T21:11:17.232Z","title":"OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length","severity":"HIGH","score":8.7,"vendor":"OvenMediaLabs","product":"OvenMediaEngine","kev":false,"epss":0.00509},{"id":"CVE-2026-118682","published":"2026-10-28T21:11:16.509Z","updated":"2026-10-28T21:11:16.509Z","title":"ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM","severity":"HIGH","score":7.7,"vendor":"KaringX","product":"clashmi","kev":false,"epss":0.0027},{"id":"CVE-2026-118669","published":"2026-10-28T21:09:58.893Z","updated":"2026-10-28T21:09:58.893Z","title":"OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client","severity":"HIGH","score":8.4,"vendor":"oauthlib","product":"oauthlib","kev":false,"epss":0.00312},{"id":"CVE-2026-118668","published":"2026-10-28T21:06:43.157Z","updated":"2026-10-29T17:22:55.674Z","title":"LangGraph JavaScript custom authentication may permit cross-user Store access","severity":"HIGH","score":8.6,"vendor":"langchain-ai","product":"langgraph-api","kev":false,"epss":0.00369},{"id":"CVE-2026-118667","published":"2026-10-28T20:51:46.657Z","updated":"2026-10-29T18:26:03.178Z","title":"LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","severity":"MEDIUM","score":4.3,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00394},{"id":"CVE-2026-118666","published":"2026-10-28T20:45:58.056Z","updated":"2026-10-28T20:45:58.056Z","title":"GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller","severity":"MEDIUM","score":6,"vendor":"ardatan","product":"graphql-tools","kev":false,"epss":0.00335},{"id":"CVE-2026-118665","published":"2026-10-28T20:41:47.228Z","updated":"2026-10-28T20:41:47.228Z","title":"GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications","severity":"HIGH","score":8.2,"vendor":"ardatan","product":"graphql-tools","kev":false,"epss":0.00388},{"id":"CVE-2026-118664","published":"2026-10-28T20:37:19.057Z","updated":"2026-10-29T17:23:10.863Z","title":"decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs","severity":"HIGH","score":8.2,"vendor":"SamVerschueren","product":"decode-uri-component","kev":false,"epss":0.00318},{"id":"CVE-2026-118663","published":"2026-10-28T20:35:22.948Z","updated":"2026-10-29T18:26:42.881Z","title":"@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths","severity":"MEDIUM","score":5.3,"vendor":"honojs","product":"node-server","kev":false,"epss":0.00353},{"id":"CVE-2026-118662","published":"2026-10-28T20:33:36.440Z","updated":"2026-10-28T20:33:36.440Z","title":"Vite: `server.fs.deny` bypassed with queries","severity":"MEDIUM","score":6.9,"vendor":"vitejs","product":"vite","kev":false,"epss":0.00295},{"id":"CVE-2026-118661","published":"2026-10-28T20:30:23.868Z","updated":"2026-10-28T20:30:23.868Z","title":"Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies","severity":"MEDIUM","score":6.5,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00272},{"id":"CVE-2026-118660","published":"2026-10-28T20:23:10.122Z","updated":"2026-10-29T17:23:32.163Z","title":"Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML","severity":"HIGH","score":8.6,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00405},{"id":"CVE-2026-118659","published":"2026-10-28T20:20:29.561Z","updated":"2026-10-29T18:27:45.701Z","title":"@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy","severity":"HIGH","score":7.5,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.0039},{"id":"CVE-2026-118658","published":"2026-10-28T20:17:11.083Z","updated":"2026-10-28T20:17:11.083Z","title":"Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto","severity":"MEDIUM","score":4.7,"vendor":"labstack","product":"echo","kev":false,"epss":0.00186},{"id":"CVE-2026-118657","published":"2026-10-28T20:14:09.883Z","updated":"2026-10-28T20:14:09.883Z","title":"Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00133},{"id":"CVE-2026-118656","published":"2026-10-28T20:12:13.757Z","updated":"2026-10-29T17:23:39.728Z","title":"Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI","severity":"MEDIUM","score":6.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.00197},{"id":"CVE-2026-76418","published":"2026-10-28T20:05:31.926Z","updated":"2026-10-30T03:55:57.976Z","title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability","severity":"HIGH","score":8.6,"vendor":"Cisco","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","kev":true,"epss":0.00821},{"id":"CVE-2026-118655","published":"2026-10-28T20:03:56.897Z","updated":"2026-10-29T18:29:50.622Z","title":"Echo: Static Middleware Double-Unescape Path Traversal","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00303},{"id":"CVE-2026-117574","published":"2026-10-28T20:02:14.895Z","updated":"2026-10-28T20:02:14.895Z","title":"Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization","severity":"CRITICAL","score":9.1,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00236},{"id":"CVE-2026-118654","published":"2026-10-28T19:59:27.911Z","updated":"2026-10-28T19:59:27.911Z","title":"Echo static file middleware route protection bypass via encoded dot-dot traversal","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00347},{"id":"CVE-2026-13451","published":"2026-10-28T19:52:51.913Z","updated":"2026-10-28T19:52:51.913Z","title":"Kserve: kserve: server-side request forgery via malicious storageuri","severity":"HIGH","score":7.7,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00212},{"id":"CVE-2026-61542","published":"2026-10-28T19:48:42.991Z","updated":"2026-10-28T19:48:42.991Z","title":"Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools","severity":"HIGH","score":8.6,"vendor":"drhelius","product":"Gearboy","kev":false,"epss":0.00307},{"id":"CVE-2026-54162","published":"2026-10-28T19:44:41.999Z","updated":"2026-10-29T18:31:49.122Z","title":"Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI","severity":"MEDIUM","score":4.7,"vendor":"alexandre-daubois","product":"ember","kev":false,"epss":0.00251},{"id":"CVE-2026-61529","published":"2026-10-28T19:43:17.490Z","updated":"2026-10-29T20:53:45.092Z","title":"Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)","severity":"MEDIUM","score":4.7,"vendor":"endatix","product":"endatix","kev":false,"epss":0.00206},{"id":"CVE-2026-118653","published":"2026-10-28T19:42:05.556Z","updated":"2026-10-28T19:42:05.556Z","title":"Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00415},{"id":"CVE-2026-118652","published":"2026-10-28T19:35:47.103Z","updated":"2026-10-28T19:35:47.103Z","title":"Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob","severity":"MEDIUM","score":6.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.00239},{"id":"CVE-2026-115415","published":"2026-10-28T19:33:10.542Z","updated":"2026-10-28T19:37:36.733Z","title":"Secret masking bypass in the environment tool in Strands Agents Tools","severity":"MEDIUM","score":5.9,"vendor":"amazon","product":"strands-agents-tools","kev":false,"epss":0.00343},{"id":"CVE-2026-118651","published":"2026-10-28T19:30:01.320Z","updated":"2026-10-29T20:53:54.404Z","title":"Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00207},{"id":"CVE-2026-63190","published":"2026-10-28T19:28:00.080Z","updated":"2026-10-29T18:35:51.109Z","title":"FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS","severity":"CRITICAL","score":9.4,"vendor":"fearlessgeekmedia","product":"FearlessCMS","kev":false,"epss":0.00544},{"id":"CVE-2026-118650","published":"2026-10-28T19:25:02.952Z","updated":"2026-10-28T19:25:02.952Z","title":"Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path","severity":"HIGH","score":7.5,"vendor":"labstack","product":"echo","kev":false,"epss":0.00396},{"id":"CVE-2026-118266","published":"2026-10-28T19:21:47.729Z","updated":"2026-10-28T19:21:47.729Z","title":"Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00163},{"id":"CVE-2026-78674","published":"2026-10-28T19:21:38.203Z","updated":"2026-10-29T02:02:13.846Z","title":"Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution","severity":"HIGH","score":8.8,"vendor":"WSO2","product":"Enterprise Integrator (BPS profile)","kev":false,"epss":0.00996},{"id":"CVE-2026-6647","published":"2026-10-28T19:21:35.702Z","updated":"2026-10-29T02:02:13.994Z","title":"Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events","severity":"HIGH","score":7.4,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00212},{"id":"CVE-2026-3583","published":"2026-10-28T19:21:34.577Z","updated":"2026-10-29T02:02:14.134Z","title":"Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]","severity":"LOW","score":3.1,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00264},{"id":"CVE-2026-11854","published":"2026-10-28T19:21:33.216Z","updated":"2026-10-29T02:02:14.279Z","title":"Cross-Site Scripting via Authentication Endpoint Error Message in Multiple WSO2 Products","severity":"MEDIUM","score":6.1,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00213},{"id":"CVE-2025-14260","published":"2026-10-28T19:21:32.066Z","updated":"2026-10-29T02:02:14.426Z","title":"Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources","severity":"HIGH","score":8.3,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.0028},{"id":"CVE-2026-109411","published":"2026-10-28T19:17:45.459Z","updated":"2026-10-30T05:04:35.990Z","title":"Samba: access control bypass via vfs_ceph_rgw case-insensitive open","severity":"HIGH","score":8.1,"vendor":"Samba","product":"Samba","kev":false,"epss":0.00649},{"id":"CVE-2026-118265","published":"2026-10-28T19:03:56.934Z","updated":"2026-10-29T20:54:10.718Z","title":"Echo: X-Real-IP extractor trusts the header value instead of the sending peer","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00139},{"id":"CVE-2026-118264","published":"2026-10-28T19:03:01.533Z","updated":"2026-10-30T19:21:07.156Z","title":"Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls","severity":"CRITICAL","score":9.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.0043},{"id":"CVE-2026-118263","published":"2026-10-28T19:01:30.268Z","updated":"2026-10-28T19:01:30.268Z","title":"Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests","severity":"MEDIUM","score":6.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00385},{"id":"CVE-2026-118262","published":"2026-10-28T19:00:12.315Z","updated":"2026-10-28T19:00:12.315Z","title":"Echo: WebSocket proxy can retain connections and handlers after client disconnect","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00302},{"id":"CVE-2026-118688","published":"2026-10-28T18:59:56.965Z","updated":"2026-10-28T18:59:56.965Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242},{"id":"CVE-2026-118687","published":"2026-10-28T18:59:56.265Z","updated":"2026-10-29T20:54:16.473Z","title":"Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication","severity":"HIGH","score":8.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00186},{"id":"CVE-2026-118686","published":"2026-10-28T18:59:55.556Z","updated":"2026-10-28T18:59:55.556Z","title":"EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex","severity":"HIGH","score":8.7,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00347},{"id":"CVE-2026-118685","published":"2026-10-28T18:59:54.863Z","updated":"2026-10-28T18:59:54.863Z","title":"ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard","severity":"MEDIUM","score":6.9,"vendor":"ToolJet","product":"ToolJet","kev":false,"epss":0.00185},{"id":"CVE-2026-118684","published":"2026-10-28T18:59:54.186Z","updated":"2026-10-28T18:59:54.186Z","title":"MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads","severity":"HIGH","score":8.2,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00185},{"id":"CVE-2026-118683","published":"2026-10-28T18:59:53.203Z","updated":"2026-10-29T20:54:22.874Z","title":"MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf","severity":"HIGH","score":8.6,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00486},{"id":"CVE-2026-118681","published":"2026-10-28T18:59:52.523Z","updated":"2026-10-28T18:59:52.523Z","title":"go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware","severity":"MEDIUM","score":6.3,"vendor":"go-chi","product":"chi","kev":false,"epss":0.00244},{"id":"CVE-2026-118680","published":"2026-10-28T18:59:51.831Z","updated":"2026-10-28T18:59:51.831Z","title":"SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias","severity":"MEDIUM","score":5.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00459},{"id":"CVE-2026-118679","published":"2026-10-28T18:59:51.136Z","updated":"2026-10-28T18:59:51.136Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger","severity":"MEDIUM","score":6.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00273},{"id":"CVE-2026-118678","published":"2026-10-28T18:59:50.449Z","updated":"2026-10-29T20:54:29.021Z","title":"n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction","severity":"HIGH","score":7.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00293},{"id":"CVE-2026-118677","published":"2026-10-28T18:59:49.747Z","updated":"2026-10-28T18:59:49.747Z","title":"n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance","severity":"MEDIUM","score":5.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00165},{"id":"CVE-2026-118676","published":"2026-10-28T18:59:49.071Z","updated":"2026-10-28T18:59:49.071Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.002},{"id":"CVE-2026-118675","published":"2026-10-28T18:59:48.389Z","updated":"2026-10-28T18:59:48.389Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00171},{"id":"CVE-2026-118649","published":"2026-10-28T18:59:47.664Z","updated":"2026-10-29T20:54:35.672Z","title":"n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables","severity":"HIGH","score":8.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.0027},{"id":"CVE-2026-118648","published":"2026-10-28T18:59:46.959Z","updated":"2026-10-28T18:59:46.959Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy","severity":"HIGH","score":8.4,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00259},{"id":"CVE-2026-118647","published":"2026-10-28T18:59:46.290Z","updated":"2026-10-28T18:59:46.290Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00256},{"id":"CVE-2026-118646","published":"2026-10-28T18:59:45.637Z","updated":"2026-10-28T18:59:45.637Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node","severity":"HIGH","score":7.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00249},{"id":"CVE-2026-118645","published":"2026-10-28T18:59:44.935Z","updated":"2026-10-29T20:54:42.221Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter","severity":"HIGH","score":7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00231},{"id":"CVE-2026-118644","published":"2026-10-28T18:59:44.266Z","updated":"2026-10-28T18:59:44.266Z","title":"n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00202},{"id":"CVE-2026-118643","published":"2026-10-28T18:59:41.954Z","updated":"2026-10-28T18:59:41.954Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00256},{"id":"CVE-2026-118642","published":"2026-10-28T18:59:40.775Z","updated":"2026-10-28T18:59:40.775Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00212},{"id":"CVE-2026-118641","published":"2026-10-28T18:59:40.104Z","updated":"2026-10-29T20:54:49.193Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes","severity":"MEDIUM","score":6.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00296},{"id":"CVE-2026-118640","published":"2026-10-28T18:59:39.419Z","updated":"2026-10-28T18:59:39.419Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00189},{"id":"CVE-2026-118261","published":"2026-10-28T18:58:43.504Z","updated":"2026-10-29T20:54:55.973Z","title":"Echo: Decompress permits unbounded gzip expansion in v4","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00372},{"id":"CVE-2026-118260","published":"2026-10-28T18:56:56.747Z","updated":"2026-10-30T19:19:59.727Z","title":"Echo: BodyDump captures request and response bodies without size limits in v4","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00372},{"id":"CVE-2026-118259","published":"2026-10-28T18:53:25.875Z","updated":"2026-10-28T18:53:25.875Z","title":"opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing","severity":"MEDIUM","score":5.3,"vendor":"open-telemetry","product":"opentelemetry-java","kev":false,"epss":0.0049},{"id":"CVE-2026-118633","published":"2026-10-28T18:45:59.892Z","updated":"2026-10-28T18:45:59.892Z","title":"A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race…","severity":"CRITICAL","score":9.2,"vendor":"Sophos","product":"SG UTM","kev":false,"epss":0.00595},{"id":"CVE-2026-118258","published":"2026-10-28T18:33:30.672Z","updated":"2026-10-28T18:33:30.672Z","title":"i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string","severity":"LOW","score":3.7,"vendor":"i18next","product":"i18next-http-backend","kev":false,"epss":0.0028},{"id":"CVE-2026-118257","published":"2026-10-28T18:23:49.400Z","updated":"2026-10-29T20:55:05.780Z","title":"Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages","severity":"HIGH","score":7.2,"vendor":"intlify","product":"vue-i18n","kev":false,"epss":0.00272},{"id":"CVE-2026-118256","published":"2026-10-28T18:20:14.644Z","updated":"2026-10-30T14:19:32.716Z","title":"Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list","severity":"LOW","score":2.1,"vendor":"intlify","product":"vue-i18n","kev":false,"epss":0.0048},{"id":"CVE-2026-118255","published":"2026-10-28T18:17:14.543Z","updated":"2026-10-28T18:17:14.543Z","title":"Highcharts Grid: javascript: URL in credits.href runs script on click","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00349},{"id":"CVE-2026-118254","published":"2026-10-28T18:13:20.084Z","updated":"2026-10-28T18:13:20.084Z","title":"Highcharts Grid: pagination language options are parsed as HTML","severity":"HIGH","score":8.6,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419},{"id":"CVE-2026-118253","published":"2026-10-28T18:11:03.809Z","updated":"2026-10-29T20:55:13.964Z","title":"Highcharts Dashboards: fullscreen labels are parsed as HTML","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419},{"id":"CVE-2026-118252","published":"2026-10-28T18:08:33.407Z","updated":"2026-10-30T18:20:14.175Z","title":"Highcharts Dashboards: sidebar component labels are parsed as HTML","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419},{"id":"CVE-2026-106484","published":"2026-10-28T18:04:06.666Z","updated":"2026-10-29T13:22:37.480Z","title":"Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"chrome-devtools-mcp","kev":false,"epss":0.00121},{"id":"CVE-2026-118251","published":"2026-10-28T18:02:46.576Z","updated":"2026-11-02T20:28:14.493Z","title":"Highcharts: javascript: URL in credits.href runs script on click","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00433},{"id":"CVE-2026-118250","published":"2026-10-28T17:59:48.828Z","updated":"2026-10-28T17:59:48.828Z","title":"Highcharts: dotted series.keys paths write to Object.prototype","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363},{"id":"CVE-2026-118249","published":"2026-10-28T17:57:18.323Z","updated":"2026-10-29T20:55:21.954Z","title":"Highcharts: series column construction writes to Object.prototype","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363},{"id":"CVE-2026-118248","published":"2026-10-28T17:55:47.520Z","updated":"2026-10-30T18:21:14.325Z","title":"Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype","severity":"MEDIUM","score":6.9,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.0028},{"id":"CVE-2026-118247","published":"2026-10-28T17:50:59.526Z","updated":"2026-11-02T20:27:24.621Z","title":"Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.","severity":"MEDIUM","score":6.9,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363},{"id":"CVE-2026-118246","published":"2026-10-28T17:47:18.817Z","updated":"2026-10-28T17:47:18.817Z","title":"Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337},{"id":"CVE-2026-118245","published":"2026-10-28T17:44:51.571Z","updated":"2026-10-29T20:55:28.922Z","title":"Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace","severity":"HIGH","score":8.6,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337},{"id":"CVE-2026-118244","published":"2026-10-28T17:36:43.768Z","updated":"2026-10-30T18:19:13.077Z","title":"Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337},{"id":"CVE-2026-116273","published":"2026-10-28T17:34:44.660Z","updated":"2026-10-28T17:34:44.660Z","title":"MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116272","published":"2026-10-28T17:34:25.862Z","updated":"2026-10-28T17:34:25.862Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116271","published":"2026-10-28T17:34:06.757Z","updated":"2026-10-28T17:34:06.757Z","title":"MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00191},{"id":"CVE-2026-116270","published":"2026-10-28T17:33:48.187Z","updated":"2026-10-28T17:33:48.187Z","title":"MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated \"=?\" sequences in decode_mimewords","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-118243","published":"2026-10-28T17:33:31.422Z","updated":"2026-11-02T20:26:32.947Z","title":"Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`","severity":"MEDIUM","score":5.3,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00351},{"id":"CVE-2026-116269","published":"2026-10-28T17:33:22.332Z","updated":"2026-10-28T17:33:22.332Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116268","published":"2026-10-28T17:33:04.336Z","updated":"2026-10-28T17:33:04.336Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116267","published":"2026-10-28T17:32:45.677Z","updated":"2026-10-28T17:32:45.677Z","title":"MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116266","published":"2026-10-28T17:32:28.565Z","updated":"2026-10-28T17:32:28.565Z","title":"MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-116265","published":"2026-10-28T17:32:11.827Z","updated":"2026-10-28T17:32:11.827Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-110183","published":"2026-10-28T17:31:53.824Z","updated":"2026-10-28T17:31:53.824Z","title":"PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking","severity":"MEDIUM","score":4.3,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00162},{"id":"CVE-2026-110182","published":"2026-10-28T17:31:53.230Z","updated":"2026-10-28T17:31:53.230Z","title":"PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data","severity":"MEDIUM","score":4.3,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00176},{"id":"CVE-2026-110181","published":"2026-10-28T17:31:52.642Z","updated":"2026-10-28T17:31:52.642Z","title":"PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data","severity":"MEDIUM","score":6.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.0027},{"id":"CVE-2026-116264","published":"2026-10-28T17:31:52.187Z","updated":"2026-10-28T17:31:52.187Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary","severity":"UNKNOWN","score":null,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00177},{"id":"CVE-2026-105620","published":"2026-10-28T17:31:52.043Z","updated":"2026-10-28T17:31:52.043Z","title":"PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query","severity":"MEDIUM","score":6.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00201},{"id":"CVE-2026-105619","published":"2026-10-28T17:31:49.949Z","updated":"2026-10-28T17:31:49.949Z","title":"PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views","severity":"MEDIUM","score":4.8,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00151},{"id":"CVE-2026-105618","published":"2026-10-28T17:31:49.263Z","updated":"2026-10-28T17:31:49.263Z","title":"PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00178},{"id":"CVE-2026-105617","published":"2026-10-28T17:31:48.320Z","updated":"2026-10-28T17:31:48.320Z","title":"PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00217},{"id":"CVE-2026-105616","published":"2026-10-28T17:31:47.686Z","updated":"2026-10-28T17:31:47.686Z","title":"PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00194},{"id":"CVE-2026-105615","published":"2026-10-28T17:31:46.771Z","updated":"2026-10-28T17:31:46.771Z","title":"PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats","severity":"LOW","score":3.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00143},{"id":"CVE-2026-105614","published":"2026-10-28T17:31:45.821Z","updated":"2026-10-28T17:31:45.821Z","title":"PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()","severity":"MEDIUM","score":4.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00183},{"id":"CVE-2026-105613","published":"2026-10-28T17:31:45.232Z","updated":"2026-10-28T17:31:45.232Z","title":"PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions","severity":"MEDIUM","score":4.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00183},{"id":"CVE-2026-105612","published":"2026-10-28T17:31:44.639Z","updated":"2026-10-28T17:31:44.639Z","title":"PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles","severity":"LOW","score":3.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00165},{"id":"CVE-2026-118242","published":"2026-10-28T17:30:55.383Z","updated":"2026-10-28T17:30:55.383Z","title":"Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`","severity":"HIGH","score":8.5,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00305},{"id":"CVE-2026-84725","published":"2026-10-28T17:30:13.626Z","updated":"2026-11-02T20:09:49.589Z","title":"Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","kev":false,"epss":0.00343},{"id":"CVE-2026-116797","published":"2026-10-28T17:28:33.128Z","updated":"2026-10-28T19:48:29.425Z","title":"Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`","severity":"HIGH","score":8.5,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00316},{"id":"CVE-2026-79656","published":"2026-10-28T17:23:44.625Z","updated":"2026-10-28T17:23:44.625Z","title":"OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors","severity":"MEDIUM","score":6,"vendor":"Grafana","product":"Grafana OSS","kev":false,"epss":0.00161},{"id":"CVE-2026-116796","published":"2026-10-28T17:23:02.604Z","updated":"2026-10-29T18:34:59.207Z","title":"Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337},{"id":"CVE-2026-58458","published":"2026-10-28T17:17:37.710Z","updated":"2026-11-02T20:23:48.946Z","title":"Don't Starve Together Memory Corruption via world_gen_data","severity":"MEDIUM","score":6.9,"vendor":"Klei Entertainment","product":"Don't Starve Together","kev":false,"epss":0.00246},{"id":"CVE-2026-117501","published":"2026-10-28T17:17:28.215Z","updated":"2026-10-28T17:17:28.215Z","title":"HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.0024},{"id":"CVE-2026-117500","published":"2026-10-28T17:17:11.051Z","updated":"2026-10-28T17:17:11.051Z","title":"HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00264},{"id":"CVE-2026-116531","published":"2026-10-28T17:16:42.065Z","updated":"2026-10-28T17:16:42.065Z","title":"HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00288},{"id":"CVE-2026-116285","published":"2026-10-28T17:16:16.997Z","updated":"2026-10-28T17:16:16.997Z","title":"HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00288},{"id":"CVE-2026-116135","published":"2026-10-28T17:15:50.270Z","updated":"2026-10-28T17:15:50.270Z","title":"HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00342},{"id":"CVE-2026-116134","published":"2026-10-28T17:15:31.799Z","updated":"2026-10-28T17:15:31.799Z","title":"HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.0031},{"id":"CVE-2026-116133","published":"2026-10-28T17:15:16.522Z","updated":"2026-10-28T17:15:16.522Z","title":"HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.0031},{"id":"CVE-2026-116132","published":"2026-10-28T17:15:00.711Z","updated":"2026-10-28T17:15:00.711Z","title":"HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00342},{"id":"CVE-2026-116131","published":"2026-10-28T17:14:43.357Z","updated":"2026-10-28T17:14:43.357Z","title":"HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.0031},{"id":"CVE-2026-116795","published":"2026-10-28T17:14:15.988Z","updated":"2026-11-02T20:21:58.052Z","title":"RE2JS: Quadratic-time denial of service in re2js lookbehind matching","severity":"HIGH","score":7.5,"vendor":"le0pard","product":"re2js","kev":false,"epss":0.00465},{"id":"CVE-2026-116794","published":"2026-10-28T17:06:57.542Z","updated":"2026-10-28T17:06:57.542Z","title":"russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation","severity":"HIGH","score":8.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00156},{"id":"CVE-2026-82962","published":"2026-10-28T16:59:00.030Z","updated":"2026-10-28T16:59:00.030Z","title":"Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00264},{"id":"CVE-2026-82961","published":"2026-10-28T16:58:58.927Z","updated":"2026-10-28T16:58:58.927Z","title":"Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00129},{"id":"CVE-2026-118619","published":"2026-10-28T16:54:34.850Z","updated":"2026-10-28T16:54:34.850Z","title":"Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00535},{"id":"CVE-2026-118618","published":"2026-10-28T16:54:29.943Z","updated":"2026-10-28T16:54:29.943Z","title":"Ultralytics parse_model Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00221},{"id":"CVE-2026-118617","published":"2026-10-28T16:54:24.766Z","updated":"2026-10-28T16:54:24.766Z","title":"Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00264},{"id":"CVE-2026-118616","published":"2026-10-28T16:54:20.598Z","updated":"2026-10-28T16:54:20.598Z","title":"Ultralytics parse_model Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00202},{"id":"CVE-2026-118615","published":"2026-10-28T16:54:16.852Z","updated":"2026-10-28T16:54:16.852Z","title":"Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00412},{"id":"CVE-2026-118614","published":"2026-10-28T16:54:13.021Z","updated":"2026-10-28T16:54:13.021Z","title":"Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00202},{"id":"CVE-2026-118613","published":"2026-10-28T16:54:09.055Z","updated":"2026-10-28T16:54:09.055Z","title":"Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00241},{"id":"CVE-2026-118581","published":"2026-10-28T16:51:21.960Z","updated":"2026-10-28T16:51:21.960Z","title":"NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"Java Driver","kev":false,"epss":0.00192},{"id":"CVE-2026-118611","published":"2026-10-28T16:50:49.460Z","updated":"2026-10-28T16:50:49.460Z","title":"Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297},{"id":"CVE-2026-118610","published":"2026-10-28T16:50:44.667Z","updated":"2026-10-28T16:50:44.667Z","title":"Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00336},{"id":"CVE-2026-118609","published":"2026-10-28T16:50:39.557Z","updated":"2026-10-28T16:50:39.557Z","title":"Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297},{"id":"CVE-2026-118608","published":"2026-10-28T16:50:34.964Z","updated":"2026-10-28T16:50:34.964Z","title":"Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability","severity":"LOW","score":3.5,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00152},{"id":"CVE-2026-118607","published":"2026-10-28T16:50:30.502Z","updated":"2026-10-28T16:50:30.502Z","title":"Alpine iLX-F511 diagapp Command Injection Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00869},{"id":"CVE-2026-103506","published":"2026-10-28T16:50:30.111Z","updated":"2026-10-28T16:50:30.111Z","title":"SSO settings authorization bypass","severity":"HIGH","score":8.9,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00269},{"id":"CVE-2026-118606","published":"2026-10-28T16:50:23.951Z","updated":"2026-10-28T16:50:23.951Z","title":"Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00338},{"id":"CVE-2026-118605","published":"2026-10-28T16:50:18.217Z","updated":"2026-10-28T16:50:18.217Z","title":"Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00237},{"id":"CVE-2026-88858","published":"2026-10-28T16:50:17.291Z","updated":"2026-10-28T16:50:17.291Z","title":"Server-side expression parser denial of service","severity":"MEDIUM","score":6.5,"vendor":"Grafana","product":"Grafana OSS","kev":false,"epss":0.00339},{"id":"CVE-2026-118604","published":"2026-10-28T16:50:11.011Z","updated":"2026-10-28T16:50:11.011Z","title":"Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297},{"id":"CVE-2026-118603","published":"2026-10-28T16:50:07.173Z","updated":"2026-10-28T16:50:07.173Z","title":"Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00237},{"id":"CVE-2026-118602","published":"2026-10-28T16:50:03.229Z","updated":"2026-10-28T16:50:03.229Z","title":"Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00117},{"id":"CVE-2026-118601","published":"2026-10-28T16:49:59.319Z","updated":"2026-10-28T16:49:59.319Z","title":"Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.3,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00274},{"id":"CVE-2026-88967","published":"2026-10-28T16:49:57.393Z","updated":"2026-10-28T16:49:57.393Z","title":"Azure Monitor access token disclosure via SSRF","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.0029},{"id":"CVE-2026-100105","published":"2026-10-28T16:48:58.880Z","updated":"2026-10-28T16:48:58.880Z","title":"Alerting contact point authorization bypass via schema downgrade","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.0029},{"id":"CVE-2026-117626","published":"2026-10-28T16:48:37.200Z","updated":"2026-10-28T16:48:37.200Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and…","severity":"UNKNOWN","score":null,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0017},{"id":"CVE-2026-117625","published":"2026-10-28T16:48:36.625Z","updated":"2026-10-28T16:48:36.625Z","title":"A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user…","severity":"UNKNOWN","score":null,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0017},{"id":"CVE-2026-117624","published":"2026-10-28T16:48:36.029Z","updated":"2026-10-28T16:48:36.029Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing their…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00194},{"id":"CVE-2026-117623","published":"2026-10-28T16:48:35.438Z","updated":"2026-10-28T16:48:35.438Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a…","severity":"MEDIUM","score":5.4,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0018},{"id":"CVE-2026-117622","published":"2026-10-28T16:48:34.850Z","updated":"2026-10-28T16:48:34.850Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller,…","severity":"MEDIUM","score":6.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0018},{"id":"CVE-2026-117621","published":"2026-10-28T16:48:34.260Z","updated":"2026-10-28T16:48:34.260Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file and directory,…","severity":"MEDIUM","score":6.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0018},{"id":"CVE-2026-117620","published":"2026-10-28T16:48:33.708Z","updated":"2026-10-28T16:48:33.708Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the \"Manage Old Data\" feature that can…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00191},{"id":"CVE-2026-117619","published":"2026-10-28T16:48:33.134Z","updated":"2026-10-28T16:48:33.134Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0022},{"id":"CVE-2026-117618","published":"2026-10-28T16:48:32.556Z","updated":"2026-10-28T16:48:32.556Z","title":"In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00199},{"id":"CVE-2026-117617","published":"2026-10-28T16:48:31.962Z","updated":"2026-10-28T16:48:31.962Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00191},{"id":"CVE-2026-117616","published":"2026-10-28T16:48:31.398Z","updated":"2026-10-28T16:48:31.398Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00212},{"id":"CVE-2026-117615","published":"2026-10-28T16:48:30.831Z","updated":"2026-10-28T16:48:30.831Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with…","severity":"MEDIUM","score":6.5,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00191},{"id":"CVE-2026-117614","published":"2026-10-28T16:48:30.245Z","updated":"2026-10-28T16:48:30.245Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent…","severity":"HIGH","score":7.2,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00212},{"id":"CVE-2026-117613","published":"2026-10-28T16:48:29.684Z","updated":"2026-10-28T16:48:29.684Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers with access to POST…","severity":"MEDIUM","score":5.4,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0018},{"id":"CVE-2026-117612","published":"2026-10-28T16:48:29.130Z","updated":"2026-10-28T16:48:29.130Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00191},{"id":"CVE-2026-114349","published":"2026-10-28T16:46:54.920Z","updated":"2026-10-29T13:48:26.738Z","title":"Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00247},{"id":"CVE-2026-112375","published":"2026-10-28T16:46:38.006Z","updated":"2026-10-28T16:46:38.006Z","title":"Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00224},{"id":"CVE-2026-116593","published":"2026-10-28T16:46:21.415Z","updated":"2026-10-30T12:25:18.712Z","title":"Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00227},{"id":"CVE-2026-115644","published":"2026-10-28T16:45:36.440Z","updated":"2026-10-28T20:07:00.157Z","title":"Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00258},{"id":"CVE-2026-111551","published":"2026-10-28T16:45:25.163Z","updated":"2026-10-28T20:06:57.172Z","title":"Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00222},{"id":"CVE-2026-111496","published":"2026-10-28T16:45:08.114Z","updated":"2026-10-28T20:06:55.726Z","title":"Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00204},{"id":"CVE-2026-111115","published":"2026-10-28T16:44:53.268Z","updated":"2026-10-28T20:06:54.294Z","title":"Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00236},{"id":"CVE-2026-111108","published":"2026-10-28T16:38:08.524Z","updated":"2026-10-28T20:06:52.812Z","title":"Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00266},{"id":"CVE-2026-111073","published":"2026-10-28T16:37:58.482Z","updated":"2026-10-28T20:06:51.327Z","title":"Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00204},{"id":"CVE-2026-106079","published":"2026-10-28T16:37:49.668Z","updated":"2026-10-28T16:37:49.668Z","title":"Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.01182},{"id":"CVE-2026-110985","published":"2026-10-28T16:37:45.688Z","updated":"2026-10-28T16:37:45.688Z","title":"Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00126},{"id":"CVE-2026-103411","published":"2026-10-28T16:37:35.468Z","updated":"2026-10-28T16:37:35.468Z","title":"Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00174},{"id":"CVE-2026-110952","published":"2026-10-28T16:37:34.723Z","updated":"2026-10-28T16:37:34.723Z","title":"Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00123},{"id":"CVE-2026-83525","published":"2026-10-28T16:37:19.893Z","updated":"2026-10-28T20:07:03.066Z","title":"Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00186},{"id":"CVE-2026-103410","published":"2026-10-28T16:37:17.946Z","updated":"2026-10-29T01:52:03.380Z","title":"Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection","severity":"HIGH","score":7.5,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00322},{"id":"CVE-2026-103409","published":"2026-10-28T16:36:46.539Z","updated":"2026-10-28T16:36:46.539Z","title":"Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed","severity":"CRITICAL","score":9.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00347},{"id":"CVE-2026-103408","published":"2026-10-28T16:36:33.095Z","updated":"2026-10-28T16:36:33.095Z","title":"Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00309},{"id":"CVE-2026-103407","published":"2026-10-28T16:36:19.559Z","updated":"2026-10-28T16:36:19.559Z","title":"Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00229},{"id":"CVE-2026-103406","published":"2026-10-28T16:35:53.323Z","updated":"2026-10-28T16:35:53.323Z","title":"Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.","severity":"CRITICAL","score":9.8,"vendor":"Juniper Networks","product":"Session Smart Conductor","kev":false,"epss":0.00516},{"id":"CVE-2026-103405","published":"2026-10-28T16:35:39.369Z","updated":"2026-10-28T16:35:39.369Z","title":"Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting","severity":"MEDIUM","score":5.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00226},{"id":"CVE-2026-103404","published":"2026-10-28T16:35:25.296Z","updated":"2026-10-28T16:35:25.296Z","title":"Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials","severity":"MEDIUM","score":6.8,"vendor":"Juniper Networks","product":"Session Smart Conductor","kev":false,"epss":0.00232},{"id":"CVE-2026-103403","published":"2026-10-28T16:35:11.327Z","updated":"2026-10-28T16:35:11.327Z","title":"Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.01182},{"id":"CVE-2026-103402","published":"2026-10-28T16:34:58.448Z","updated":"2026-10-28T16:34:58.448Z","title":"Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00196},{"id":"CVE-2026-103401","published":"2026-10-28T16:34:44.566Z","updated":"2026-10-28T16:34:44.566Z","title":"Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00344},{"id":"CVE-2026-103400","published":"2026-10-28T16:34:29.792Z","updated":"2026-10-29T01:52:03.696Z","title":"Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup","severity":"MEDIUM","score":5.5,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00177},{"id":"CVE-2026-103394","published":"2026-10-28T16:34:16.486Z","updated":"2026-10-29T01:52:03.984Z","title":"Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.","severity":"LOW","score":3.7,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00314},{"id":"CVE-2026-103393","published":"2026-10-28T16:34:00.167Z","updated":"2026-10-28T16:34:00.167Z","title":"Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing","severity":"MEDIUM","score":4.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00154},{"id":"CVE-2026-103392","published":"2026-10-28T16:33:46.534Z","updated":"2026-10-28T16:33:46.534Z","title":"Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled","severity":"MEDIUM","score":4.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00216},{"id":"CVE-2026-93536","published":"2026-10-28T16:33:33.815Z","updated":"2026-10-28T16:33:33.815Z","title":"X.Org Server GestureBuildSprite Use-After-Free","severity":"MEDIUM","score":5.3,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00166},{"id":"CVE-2026-103391","published":"2026-10-28T16:33:32.354Z","updated":"2026-10-28T16:33:32.354Z","title":"Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00207},{"id":"CVE-2026-103390","published":"2026-10-28T16:33:16.471Z","updated":"2026-10-29T01:52:04.374Z","title":"Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00432},{"id":"CVE-2026-93524","published":"2026-10-28T16:24:52.508Z","updated":"2026-10-28T16:24:52.508Z","title":"X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read","severity":"MEDIUM","score":6.9,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00177},{"id":"CVE-2026-93523","published":"2026-10-28T16:16:42.058Z","updated":"2026-10-28T16:16:42.058Z","title":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-118510","published":"2026-10-28T16:15:08.426Z","updated":"2026-10-28T16:15:08.426Z","title":"Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs","severity":"HIGH","score":7.7,"vendor":"MongoDB","product":"Laravel MongoDB","kev":false,"epss":0.00282},{"id":"CVE-2026-93522","published":"2026-10-28T16:03:56.072Z","updated":"2026-10-28T16:03:56.072Z","title":"X.Org Server Glamor CopyArea Heap Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-116778","published":"2026-10-28T15:49:59.899Z","updated":"2026-10-28T16:06:35.677Z","title":"FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution","severity":"HIGH","score":8.8,"vendor":"FOGProject","product":"fogproject","kev":false,"epss":0.00467},{"id":"CVE-2026-116776","published":"2026-10-28T15:42:11.023Z","updated":"2026-10-29T18:37:18.070Z","title":"USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS","severity":"HIGH","score":7,"vendor":"n-romanovich","product":"usb-test","kev":false,"epss":0.00177},{"id":"CVE-2026-56828","published":"2026-10-28T15:40:39.294Z","updated":"2026-10-28T15:40:39.294Z","title":"Shopper: read-only team permissions allow administrator creation and permission escalation","severity":"HIGH","score":8.8,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00441},{"id":"CVE-2026-47235","published":"2026-10-28T15:38:21.113Z","updated":"2026-10-29T18:38:47.642Z","title":"SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array","severity":"HIGH","score":7.5,"vendor":"simulationcraft","product":"simc","kev":false,"epss":0.00153},{"id":"CVE-2026-93521","published":"2026-10-28T15:37:43.432Z","updated":"2026-10-28T15:37:43.432Z","title":"X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-59979","published":"2026-10-28T15:36:57.833Z","updated":"2026-11-02T20:20:43.233Z","title":"YosemiteCrew: Missing organization authorization on service and PMS library/template routes","severity":"HIGH","score":8.3,"vendor":"YosemiteCrew","product":"Yosemite-Crew","kev":false,"epss":0.00295},{"id":"CVE-2026-44179","published":"2026-10-28T15:35:45.630Z","updated":"2026-11-02T20:19:48.008Z","title":"XWiki Pro Macros: excerpt-include title and content injection executes code","severity":"CRITICAL","score":9.9,"vendor":"xwikisas","product":"xwiki-pro-macros","kev":false,"epss":0.0069},{"id":"CVE-2026-50542","published":"2026-10-28T15:34:27.453Z","updated":"2026-10-28T16:06:41.811Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure","severity":"MEDIUM","score":5.4,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00251},{"id":"CVE-2026-118029","published":"2026-10-28T15:32:56.602Z","updated":"2026-10-28T15:32:56.602Z","title":"Unverified ownership of the default Athena query result location in AWS SDK for pandas","severity":"MEDIUM","score":5.9,"vendor":"aws","product":"aws-sdk-pandas","kev":false,"epss":0.0017},{"id":"CVE-2026-50543","published":"2026-10-28T15:32:51.861Z","updated":"2026-10-28T15:32:51.861Z","title":"Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices","severity":"MEDIUM","score":4.3,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00222},{"id":"CVE-2026-112357","published":"2026-10-28T15:32:47.972Z","updated":"2026-10-28T18:53:58.772Z","title":"GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation","severity":"HIGH","score":8.5,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.00129},{"id":"CVE-2026-50539","published":"2026-10-28T15:31:12.074Z","updated":"2026-10-28T16:06:48.627Z","title":"Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments","severity":"MEDIUM","score":6.5,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00368},{"id":"CVE-2026-112356","published":"2026-10-28T15:26:52.847Z","updated":"2026-10-28T18:03:52.733Z","title":"GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter","severity":"MEDIUM","score":5.1,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.0025},{"id":"CVE-2026-67187","published":"2026-10-28T15:19:16.649Z","updated":"2026-10-28T15:19:16.649Z","title":"Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields","severity":"MEDIUM","score":5.1,"vendor":"Saturday Drive","product":"Ninja Forms","kev":false,"epss":0.00172},{"id":"CVE-2026-115402","published":"2026-10-28T15:00:23.951Z","updated":"2026-10-28T15:00:23.951Z","title":"OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…","severity":"MEDIUM","score":5.7,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.0012},{"id":"CVE-2026-93520","published":"2026-10-28T14:59:50.140Z","updated":"2026-10-28T14:59:50.140Z","title":"X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-93519","published":"2026-10-28T14:41:33.873Z","updated":"2026-10-28T14:41:33.873Z","title":"X.Org Server XFixes Pointer Barrier Event List Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-93518","published":"2026-10-28T14:32:01.702Z","updated":"2026-10-28T14:32:01.702Z","title":"X.Org Server XKB ResizeKeyType Numeric Truncation","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202},{"id":"CVE-2026-115603","published":"2026-10-28T14:02:57.872Z","updated":"2026-10-29T13:47:37.343Z","title":"WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Advanced Ads GmbH","product":"Advanced Ads – Tracking","kev":false,"epss":0.00211},{"id":"CVE-2026-115968","published":"2026-10-28T14:02:57.496Z","updated":"2026-10-28T16:07:03.811Z","title":"WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Ultimate Member","product":"Ultimate Member","kev":false,"epss":0.00408},{"id":"CVE-2026-116390","published":"2026-10-28T14:02:57.098Z","updated":"2026-10-29T13:47:37.495Z","title":"WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"stepasyuk","product":"Filter Everything&nbsp;— WordPress &amp; WooCommerce Filters","kev":false,"epss":0.003},{"id":"CVE-2026-116389","published":"2026-10-28T14:02:56.685Z","updated":"2026-10-29T13:47:37.643Z","title":"WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"crossi72","product":"Phoenix Media Rename","kev":false,"epss":0.00288},{"id":"CVE-2026-115590","published":"2026-10-28T14:02:56.306Z","updated":"2026-10-29T13:47:37.789Z","title":"WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"weDevs","product":"Dokan","kev":false,"epss":0.003},{"id":"CVE-2026-116078","published":"2026-10-28T13:26:25.372Z","updated":"2026-10-28T13:26:25.372Z","title":"HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00493},{"id":"CVE-2026-50541","published":"2026-10-28T13:25:10.271Z","updated":"2026-10-28T13:25:10.271Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export","severity":"MEDIUM","score":6.5,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00368},{"id":"CVE-2026-52729","published":"2026-10-28T13:23:13.291Z","updated":"2026-11-02T20:18:20.327Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion","severity":"HIGH","score":7.1,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00292},{"id":"CVE-2026-105420","published":"2026-10-28T13:19:31.908Z","updated":"2026-10-28T13:19:31.908Z","title":"Path Traversal in Wing WFTP Server leading to Remote Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Wing Soft Technology","product":"Wing FTP Server","kev":false,"epss":0.00518},{"id":"CVE-2026-59959","published":"2026-10-28T13:17:29.214Z","updated":"2026-10-29T18:39:38.355Z","title":"SAIL: WebP decoder division by zero through malformed animated canvas metadata","severity":"MEDIUM","score":4.8,"vendor":"HappySeaFox","product":"sail","kev":false,"epss":0.00125},{"id":"CVE-2026-93517","published":"2026-10-28T13:16:39.431Z","updated":"2026-10-28T13:16:39.431Z","title":"X.Org Server GLX RenderLarge Heap Buffer Overflow","severity":"HIGH","score":8.5,"vendor":"x.orgg","product":"xorg-x11-server","kev":false,"epss":0.00193},{"id":"CVE-2026-59185","published":"2026-10-28T13:15:53.456Z","updated":"2026-10-28T16:07:10.634Z","title":"identrail: Cross-tenant GitHub installation binding without ownership verification","severity":"HIGH","score":8.5,"vendor":"identrail","product":"identrail","kev":false,"epss":0.0032},{"id":"CVE-2026-59179","published":"2026-10-28T13:14:13.689Z","updated":"2026-10-29T18:33:40.230Z","title":"OpenHop: Path Traversal in Flow ID File Operations","severity":"HIGH","score":8.3,"vendor":"naorsabag","product":"openhop","kev":false,"epss":0.0039},{"id":"CVE-2026-59177","published":"2026-10-28T13:12:14.620Z","updated":"2026-11-02T20:15:52.405Z","title":"ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces","severity":"HIGH","score":8.8,"vendor":"esphome","product":"device-builder","kev":false,"epss":0.01168},{"id":"CVE-2026-59176","published":"2026-10-28T13:08:52.592Z","updated":"2026-10-28T13:08:52.592Z","title":"Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import","severity":"HIGH","score":7.8,"vendor":"jordanburke","product":"functype","kev":false,"epss":0.00212},{"id":"CVE-2026-59172","published":"2026-10-28T13:07:35.230Z","updated":"2026-10-28T16:07:17.268Z","title":"Joker linter executed project-local .jokerd/linter.* files during linting","severity":"HIGH","score":7.8,"vendor":"candid82","product":"joker","kev":false,"epss":0.00162},{"id":"CVE-2026-59164","published":"2026-10-28T13:05:47.302Z","updated":"2026-10-29T18:32:53.555Z","title":"NORA missing cross-user token-management authorization","severity":"HIGH","score":7.1,"vendor":"getnora-io","product":"nora","kev":false,"epss":0.00199},{"id":"CVE-2026-93516","published":"2026-10-28T13:03:30.088Z","updated":"2026-10-28T13:03:30.088Z","title":".Org Server XInput Passive Grab Use-After-Free","severity":"MEDIUM","score":5.5,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00192},{"id":"CVE-2026-116391","published":"2026-10-28T13:00:28.765Z","updated":"2026-10-29T13:47:37.936Z","title":"WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Logo Slider","kev":false,"epss":0.00374},{"id":"CVE-2026-116392","published":"2026-10-28T13:00:28.367Z","updated":"2026-10-29T13:47:38.092Z","title":"WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"PickPlugins","product":"Accordion","kev":false,"epss":0.003},{"id":"CVE-2026-116393","published":"2026-10-28T13:00:28.337Z","updated":"2026-10-28T16:07:23.809Z","title":"WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"iHomefinder, Inc.","product":"Optima Express","kev":false,"epss":0.00317},{"id":"CVE-2026-116404","published":"2026-10-28T13:00:27.971Z","updated":"2026-10-29T13:47:38.245Z","title":"WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Anderson","product":"Redux Framework","kev":false,"epss":0.00201},{"id":"CVE-2026-111850","published":"2026-10-28T13:00:27.940Z","updated":"2026-10-29T13:47:38.415Z","title":"WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"BuddyPress","product":"BuddyPress","kev":false,"epss":0.00211},{"id":"CVE-2026-115612","published":"2026-10-28T13:00:14.372Z","updated":"2026-10-28T16:07:30.579Z","title":"WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"iova.mihai","product":"SliceWP","kev":false,"epss":0.00201},{"id":"CVE-2026-115591","published":"2026-10-28T13:00:13.962Z","updated":"2026-10-29T13:47:38.566Z","title":"WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Supsystic","product":"Contact Form by Supsystic","kev":false,"epss":0.00335},{"id":"CVE-2026-115593","published":"2026-10-28T13:00:13.871Z","updated":"2026-10-29T13:47:38.730Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.0019},{"id":"CVE-2026-115596","published":"2026-10-28T13:00:13.283Z","updated":"2026-10-28T16:07:36.842Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00201},{"id":"CVE-2026-111411","published":"2026-10-28T13:00:13.279Z","updated":"2026-10-30T20:04:18.969Z","title":"WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.00342},{"id":"CVE-2026-115607","published":"2026-10-28T13:00:12.493Z","updated":"2026-10-29T13:47:38.888Z","title":"WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Crowd Favorite","product":"DXP ToolKit","kev":false,"epss":0.00236},{"id":"CVE-2026-115957","published":"2026-10-28T13:00:12.485Z","updated":"2026-10-30T20:05:31.800Z","title":"WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Discussion Board","product":"WP Discussion Board","kev":false,"epss":0.0017},{"id":"CVE-2026-115606","published":"2026-10-28T13:00:11.719Z","updated":"2026-10-29T13:47:39.191Z","title":"WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Crowd Favorite","product":"DXP ToolKit","kev":false,"epss":0.00146},{"id":"CVE-2026-115609","published":"2026-10-28T13:00:11.577Z","updated":"2026-10-29T13:47:39.348Z","title":"WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Stiofan","product":"GetPaid","kev":false,"epss":0.00146},{"id":"CVE-2026-55369","published":"2026-10-28T12:56:15.822Z","updated":"2026-11-02T20:14:55.849Z","title":"Waline login accepts a non-string email as a match-all MongoDB query","severity":"MEDIUM","score":6.5,"vendor":"walinejs","product":"waline","kev":false,"epss":0.00262},{"id":"CVE-2026-115904","published":"2026-10-28T12:55:04.432Z","updated":"2026-10-28T12:55:04.432Z","title":"Topluyo Desktop for Linux has an OS Command Injection issue","severity":"CRITICAL","score":9.6,"vendor":"topluyo","product":"App","kev":false,"epss":0.00743},{"id":"CVE-2026-93515","published":"2026-10-28T12:39:44.890Z","updated":"2026-10-28T12:39:44.890Z","title":".Org Server Present Extension Use-After-Free","severity":"MEDIUM","score":6.8,"vendor":"X.org","product":"xorg-x11-server","kev":false,"epss":0.00194},{"id":"CVE-2026-21830","published":"2026-10-28T12:37:35.527Z","updated":"2026-10-28T12:37:35.527Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00249},{"id":"CVE-2026-118037","published":"2026-10-28T12:34:09.534Z","updated":"2026-10-28T12:34:09.534Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00274},{"id":"CVE-2026-118036","published":"2026-10-28T12:33:04.373Z","updated":"2026-10-28T12:33:04.373Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00375},{"id":"CVE-2026-118035","published":"2026-10-28T12:31:56.249Z","updated":"2026-10-28T12:31:56.249Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00292},{"id":"CVE-2026-118040","published":"2026-10-28T12:30:41.623Z","updated":"2026-10-28T12:30:41.623Z","title":"Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00089},{"id":"CVE-2026-118039","published":"2026-10-28T12:29:35.667Z","updated":"2026-10-28T12:29:35.667Z","title":"XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00268},{"id":"CVE-2026-118038","published":"2026-10-28T12:27:47.560Z","updated":"2026-10-28T12:27:47.560Z","title":"Path Traversal in Telerik Document Processing Libraries AI Agent Tools","severity":"HIGH","score":7.1,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00252},{"id":"CVE-2026-67077","published":"2026-10-28T12:26:30.628Z","updated":"2026-10-28T12:26:30.628Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.2,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00119},{"id":"CVE-2026-67079","published":"2026-10-28T12:25:55.234Z","updated":"2026-10-28T12:25:55.234Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.4,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00163},{"id":"CVE-2026-67080","published":"2026-10-28T12:25:19.455Z","updated":"2026-10-28T12:25:19.455Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.5,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00336},{"id":"CVE-2026-67073","published":"2026-10-28T12:24:30.101Z","updated":"2026-10-28T12:24:30.101Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"HIGH","score":8.6,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00223},{"id":"CVE-2026-67074","published":"2026-10-28T12:22:54.795Z","updated":"2026-10-28T12:22:54.795Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"CRITICAL","score":9.1,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00457},{"id":"CVE-2026-102790","published":"2026-10-28T11:56:12.050Z","updated":"2026-10-28T11:56:12.050Z","title":"Joomla Extension - icagenda.com -  Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12","severity":"HIGH","score":8.6,"vendor":"icagenda.com","product":"iCagenda extension for Joomla","kev":false,"epss":0.00284},{"id":"CVE-2026-81472","published":"2026-10-28T11:55:34.088Z","updated":"2026-10-29T10:45:43.551Z","title":"Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to…","severity":"MEDIUM","score":4.2,"vendor":"Dell","product":"iDRAC Service Module for Windows","kev":false,"epss":0.00166},{"id":"CVE-2026-114278","published":"2026-10-28T11:55:05.600Z","updated":"2026-10-28T11:55:05.600Z","title":"Unauthenticated Command Injection via kubeconfig Username in che-machine-exec","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00899},{"id":"CVE-2026-102799","published":"2026-10-28T11:53:05.596Z","updated":"2026-10-28T11:53:05.596Z","title":"Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16","severity":"MEDIUM","score":5.3,"vendor":"icagenda.com","product":"iCagenda extension for Joomla","kev":false,"epss":0.00288},{"id":"CVE-2026-118485","published":"2026-10-28T11:26:59.053Z","updated":"2026-10-28T11:26:59.053Z","title":"Axel Download Accelerator Path Traversal via URL Filename Decoding","severity":"HIGH","score":7,"vendor":"Axel Download Accelerator","product":"Axel","kev":false,"epss":0.0056},{"id":"CVE-2026-116855","published":"2026-10-28T11:17:47.505Z","updated":"2026-10-29T13:47:39.509Z","title":"WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"wphocus","product":"My auctions allegro","kev":false,"epss":0.00138},{"id":"CVE-2026-118477","published":"2026-10-28T11:09:58.882Z","updated":"2026-10-28T11:09:58.882Z","title":"KaliFast Project Management Platform ei_git_repo_url OS Command Injection","severity":"HIGH","score":8.7,"vendor":"EISGE","product":"Kalifast","kev":false,"epss":0.01111},{"id":"CVE-2026-6064","published":"2026-10-28T10:47:51.974Z","updated":"2026-10-28T10:47:51.974Z","title":"Norton, Avast, and AVG local privilege escalation via link following in Data Shredder","severity":"HIGH","score":7.3,"vendor":"Gen Digital","product":"Norton Antivirus","kev":false,"epss":0.00124},{"id":"CVE-2026-115223","published":"2026-10-28T10:45:14.251Z","updated":"2026-10-28T17:47:59.351Z","title":"Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Smart Popup by Supsystic","kev":false,"epss":0.00418},{"id":"CVE-2026-110508","published":"2026-10-28T10:45:13.617Z","updated":"2026-10-28T17:47:59.601Z","title":"Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00272},{"id":"CVE-2026-106648","published":"2026-10-28T10:45:12.999Z","updated":"2026-10-28T17:47:59.741Z","title":"Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Elementor Addons","kev":false,"epss":0.00303},{"id":"CVE-2026-103330","published":"2026-10-28T10:45:12.352Z","updated":"2026-10-28T17:47:59.887Z","title":"Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Sadad QA Payment","kev":false,"epss":0.00162},{"id":"CVE-2026-103313","published":"2026-10-28T10:45:11.700Z","updated":"2026-10-28T17:48:00.036Z","title":"BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BitPay Gateway for WooCommerce","kev":false,"epss":0.00162},{"id":"CVE-2026-99216","published":"2026-10-28T10:36:09.383Z","updated":"2026-10-31T12:45:15.499Z","title":"Drivers: hv: Don't reset VMBus connection state on error/exit paths","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00137},{"id":"CVE-2026-99215","published":"2026-10-28T10:36:08.618Z","updated":"2026-10-28T10:36:08.618Z","title":"power: supply: core: prevent unregistering a power supply while a callback runs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0016},{"id":"CVE-2026-99214","published":"2026-10-28T10:36:07.867Z","updated":"2026-10-30T12:43:00.909Z","title":"drm/vc4: hdmi: Move packet RAM enable to PM runtime","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-99213","published":"2026-10-28T10:36:06.441Z","updated":"2026-10-31T12:45:10.380Z","title":"vsock: treat TCP_CLOSING as once-established","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00125},{"id":"CVE-2026-99212","published":"2026-10-28T10:36:05.612Z","updated":"2026-10-31T12:45:05.538Z","title":"net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00118},{"id":"CVE-2026-99211","published":"2026-10-28T10:36:04.864Z","updated":"2026-10-30T12:42:57.701Z","title":"netlink: reset skb headers before unicast and multicast filtering","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99210","published":"2026-10-28T10:36:04.110Z","updated":"2026-10-28T10:36:04.110Z","title":"accel/rocket: clear rdev on device init failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-99209","published":"2026-10-28T10:36:03.274Z","updated":"2026-10-28T10:36:03.274Z","title":"drm/xe: skip eviction of a BO with no resource","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-99208","published":"2026-10-28T10:36:01.473Z","updated":"2026-10-28T10:36:01.473Z","title":"drm/xe/oa: Zero OA buffer at allocation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-99207","published":"2026-10-28T10:36:00.728Z","updated":"2026-10-28T10:36:00.728Z","title":"scsi: target: Disable interrupts while holding delayed_cmd_lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99206","published":"2026-10-28T10:35:59.851Z","updated":"2026-10-30T12:42:55.447Z","title":"scsi: target: iscsi: Fix race in discovery auth updates","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-99205","published":"2026-10-28T10:35:59.093Z","updated":"2026-10-28T10:35:59.093Z","title":"sched/core: Call wakeup_preempt() for queued tasks during class change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99204","published":"2026-10-28T10:35:58.336Z","updated":"2026-10-30T12:42:54.359Z","title":"ocfs2/dlm: Protect the recovery list during debugfs reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-99203","published":"2026-10-28T10:35:57.589Z","updated":"2026-10-31T12:45:00.735Z","title":"pipe: preserve existing fasync readers on writer setup failure","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121},{"id":"CVE-2026-99202","published":"2026-10-28T10:35:56.827Z","updated":"2026-10-30T12:42:52.198Z","title":"scsi: libsas: Fix SMP IO deadlock during HA resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99201","published":"2026-10-28T10:35:56.069Z","updated":"2026-10-30T12:42:51.128Z","title":"netlink: avoid hashing the network namespace pointer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-99200","published":"2026-10-28T10:35:55.323Z","updated":"2026-10-28T10:35:55.323Z","title":"net: hisilicon: hisi_femac: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99199","published":"2026-10-28T10:35:54.538Z","updated":"2026-10-28T10:35:54.538Z","title":"net: hisilicon: hip04_eth: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99198","published":"2026-10-28T10:35:53.740Z","updated":"2026-10-28T10:35:53.740Z","title":"net: ethernet: actions: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99197","published":"2026-10-28T10:35:52.987Z","updated":"2026-10-28T10:35:52.987Z","title":"net: mv643xx: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99196","published":"2026-10-28T10:35:52.223Z","updated":"2026-10-28T10:35:52.223Z","title":"net: au1000: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99195","published":"2026-10-28T10:35:51.485Z","updated":"2026-10-28T10:35:51.485Z","title":"net: ethoc: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99194","published":"2026-10-28T10:35:50.670Z","updated":"2026-10-28T10:35:50.670Z","title":"net: ethernet: aeroflex: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99193","published":"2026-10-28T10:35:49.441Z","updated":"2026-10-28T10:35:49.441Z","title":"net: ti: icssm-prueth: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99192","published":"2026-10-28T10:35:48.686Z","updated":"2026-10-30T12:42:50.060Z","title":"net: bcmgenet: unshare the skb before writing the control block","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-99191","published":"2026-10-28T10:35:47.854Z","updated":"2026-10-30T12:42:48.993Z","title":"calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99190","published":"2026-10-28T10:35:47.107Z","updated":"2026-10-30T12:42:47.929Z","title":"gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99189","published":"2026-10-28T10:35:46.366Z","updated":"2026-10-28T10:35:46.366Z","title":"gpio: mxc: fix race between chained IRQ handler install and probe completion","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-99188","published":"2026-10-28T10:35:45.591Z","updated":"2026-10-28T10:35:45.591Z","title":"net: stmmac: dwmac1000: clear the RGMII status interrupt","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99187","published":"2026-10-28T10:35:44.813Z","updated":"2026-10-30T12:42:46.871Z","title":"perf: Fix perf_pmu_migrate_context() leaving events behind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99186","published":"2026-10-28T10:35:44.049Z","updated":"2026-10-28T10:35:44.049Z","title":"x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99185","published":"2026-10-28T10:35:43.282Z","updated":"2026-10-31T12:44:55.216Z","title":"firewire: core: fix race condition in split transaction handling","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00219},{"id":"CVE-2026-99184","published":"2026-10-28T10:35:42.469Z","updated":"2026-10-28T10:35:42.469Z","title":"accel/rocket: search every core slot when a core is removed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99183","published":"2026-10-28T10:35:36.754Z","updated":"2026-10-28T10:35:36.754Z","title":"accel/rocket: search every core slot when looking up a scheduler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99182","published":"2026-10-28T10:35:35.193Z","updated":"2026-10-30T12:42:45.813Z","title":"ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99181","published":"2026-10-28T10:35:34.443Z","updated":"2026-10-30T12:42:44.732Z","title":"autofs: ignore notification errors from a replaced pipe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00197},{"id":"CVE-2026-99180","published":"2026-10-28T10:35:33.578Z","updated":"2026-10-31T12:44:50.381Z","title":"unicode: free the map after a grace period","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99179","published":"2026-10-28T10:35:32.734Z","updated":"2026-10-30T12:42:42.438Z","title":"watch_queue: Fix note pool publication race in watch_queue_set_size()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183},{"id":"CVE-2026-99178","published":"2026-10-28T10:35:31.961Z","updated":"2026-11-01T12:42:11.076Z","title":"x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99177","published":"2026-10-28T10:35:31.315Z","updated":"2026-10-31T12:44:45.294Z","title":"KVM: SEV: Fix page dirtying in sev_gmem_post_populate()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121},{"id":"CVE-2026-99176","published":"2026-10-28T10:35:30.615Z","updated":"2026-10-30T12:42:40.156Z","title":"KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00201},{"id":"CVE-2026-99175","published":"2026-10-28T10:35:29.760Z","updated":"2026-10-30T12:42:39.046Z","title":"fsnotify: prevent mark additions during connector teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99174","published":"2026-10-28T10:35:28.758Z","updated":"2026-10-30T12:42:37.969Z","title":"ext4: free the sbi after a grace period","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-99173","published":"2026-10-28T10:35:28.017Z","updated":"2026-10-31T12:44:40.199Z","title":"eventfs: Free the eventfs_inode after an rcu grace period too","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00125},{"id":"CVE-2026-99172","published":"2026-10-28T10:35:27.245Z","updated":"2026-10-28T10:35:27.245Z","title":"ipc: drop the mqueue mount with kern_unmount() on setup failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-99171","published":"2026-10-28T10:35:26.598Z","updated":"2026-10-30T12:42:35.809Z","title":"ntfs3: free the sbi after a grace period","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99170","published":"2026-10-28T10:35:25.923Z","updated":"2026-10-31T12:44:35.158Z","title":"namespace: a mount that copy_tree() leaves out can't take over a lock","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99169","published":"2026-10-28T10:35:20.170Z","updated":"2026-10-30T12:42:34.724Z","title":"futex: Fix mm reuse handling for FUT_OFF_MMSHARED","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183},{"id":"CVE-2026-99168","published":"2026-10-28T10:35:19.539Z","updated":"2026-10-28T10:35:19.539Z","title":"mshv_vtl: Check per-CPU register page before mmap","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99167","published":"2026-10-28T10:35:18.850Z","updated":"2026-10-31T12:44:30.175Z","title":"net/sched: fix use-after-free in __tcf_action_put()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99166","published":"2026-10-28T10:35:18.050Z","updated":"2026-10-30T12:42:32.571Z","title":"net: rds: fix uninitialized trans dereference in CM event handler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183},{"id":"CVE-2026-99165","published":"2026-10-28T10:35:17.366Z","updated":"2026-10-30T12:42:30.300Z","title":"sctp: revalidate output stream after association connect wait","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183},{"id":"CVE-2026-99164","published":"2026-10-28T10:35:16.694Z","updated":"2026-10-31T12:44:24.973Z","title":"spi: imx: fix slab corruption from undersized DMA bounce buffers","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99163","published":"2026-10-28T10:35:15.577Z","updated":"2026-10-31T12:44:20.055Z","title":"tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00134},{"id":"CVE-2026-99162","published":"2026-10-28T10:35:14.755Z","updated":"2026-10-28T10:35:14.755Z","title":"gpio: shared: fix use-after-free bug when adding shared proxies","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99161","published":"2026-10-28T10:35:13.970Z","updated":"2026-10-30T12:42:28.035Z","title":"i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191},{"id":"CVE-2026-99160","published":"2026-10-28T10:35:13.341Z","updated":"2026-10-30T12:42:26.948Z","title":"ring-buffer: Do not show buffer_meta for CPUs without a buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99159","published":"2026-10-28T10:35:12.520Z","updated":"2026-10-30T12:42:25.874Z","title":"ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-99158","published":"2026-10-28T10:35:11.848Z","updated":"2026-10-30T12:42:24.782Z","title":"ring-buffer: Fix false warning in ring_buffer_map_get_reader()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99157","published":"2026-10-28T10:35:11.192Z","updated":"2026-10-30T12:42:23.683Z","title":"scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99156","published":"2026-10-28T10:35:10.493Z","updated":"2026-10-31T12:44:14.895Z","title":"scsi: st: Fix use-after-free race between st_remove() and st_open()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99155","published":"2026-10-28T10:35:09.733Z","updated":"2026-10-30T12:42:21.472Z","title":"scsi: xen/scsifront: Check for a NULL shadow entry on a backend response","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-99154","published":"2026-10-28T10:35:08.968Z","updated":"2026-10-31T12:44:09.854Z","title":"scsi: libiscsi: Reject a negative task index from parse_pdu_itt","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00514},{"id":"CVE-2026-99153","published":"2026-10-28T10:35:08.287Z","updated":"2026-10-31T12:44:04.972Z","title":"scsi: libiscsi: Validate the ITT reflected in a Reject PDU","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00552},{"id":"CVE-2026-99152","published":"2026-10-28T10:35:07.622Z","updated":"2026-10-31T12:44:00.040Z","title":"scsi: libiscsi: Validate the task named by a management response","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00523},{"id":"CVE-2026-99151","published":"2026-10-28T10:35:06.866Z","updated":"2026-10-28T10:35:06.866Z","title":"drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99150","published":"2026-10-28T10:35:05.753Z","updated":"2026-10-30T12:42:17.152Z","title":"drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183},{"id":"CVE-2026-99149","published":"2026-10-28T10:35:05.015Z","updated":"2026-10-28T10:35:05.015Z","title":"drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99148","published":"2026-10-28T10:35:04.360Z","updated":"2026-10-31T12:43:54.856Z","title":"drm/amdgpu: keep the eviction fence until the last handle is closed","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012},{"id":"CVE-2026-99147","published":"2026-10-28T10:35:03.580Z","updated":"2026-10-30T12:42:16.086Z","title":"drm/exec: don't immediately add prelocked obj to array of locked objs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99146","published":"2026-10-28T10:35:02.847Z","updated":"2026-10-28T10:35:02.847Z","title":"drm/i915/dmc: Add sanity check for DMC load address","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99145","published":"2026-10-28T10:35:02.038Z","updated":"2026-10-28T10:35:02.038Z","title":"drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-99144","published":"2026-10-28T10:35:00.602Z","updated":"2026-10-28T10:35:00.602Z","title":"sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99143","published":"2026-10-28T10:34:54.527Z","updated":"2026-10-31T12:43:49.775Z","title":"tracing: Keep the predicate limit separate from program capacity","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00129},{"id":"CVE-2026-99142","published":"2026-10-28T10:34:53.839Z","updated":"2026-10-31T12:43:44.895Z","title":"tracing: Check operator stack capacity before pushing","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00135},{"id":"CVE-2026-99141","published":"2026-10-28T10:34:52.091Z","updated":"2026-10-28T10:34:52.091Z","title":"tracing: Fix crash in print_graph_function_event()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99140","published":"2026-10-28T10:34:51.421Z","updated":"2026-10-30T12:42:12.896Z","title":"tracing: Fix hist trigger timestamps for buffered events","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99139","published":"2026-10-28T10:34:50.674Z","updated":"2026-10-30T12:42:11.824Z","title":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99138","published":"2026-10-28T10:34:49.993Z","updated":"2026-10-30T12:42:10.759Z","title":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99137","published":"2026-10-28T10:34:49.266Z","updated":"2026-10-28T10:34:49.266Z","title":"cifs: don't update i_size in cifs_do_truncate without a cached handle","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99136","published":"2026-10-28T10:34:48.558Z","updated":"2026-10-31T12:43:39.281Z","title":"dm-crypt: fix a tiny race condition in crypt_dec_pending","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122},{"id":"CVE-2026-99135","published":"2026-10-28T10:34:47.902Z","updated":"2026-10-30T12:42:08.647Z","title":"dm-integrity: fix infinite loop on discard with large tag size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99134","published":"2026-10-28T10:34:47.193Z","updated":"2026-10-30T12:42:07.557Z","title":"mac802154: fix data race and NULL deref on local->assoc_dev","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99133","published":"2026-10-28T10:34:46.398Z","updated":"2026-10-30T12:42:06.467Z","title":"net/iucv: fix the recvmsg window update","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181},{"id":"CVE-2026-99132","published":"2026-10-28T10:34:45.756Z","updated":"2026-10-30T12:42:05.352Z","title":"xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99131","published":"2026-10-28T10:34:45.102Z","updated":"2026-10-31T12:43:34.118Z","title":"xfs: fix capability check in xfs","severity":"HIGH","score":8.2,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0045},{"id":"CVE-2026-99130","published":"2026-10-28T10:34:43.514Z","updated":"2026-10-30T12:42:03.208Z","title":"io_uring/cancel: don't spin on local work the task can't run","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99129","published":"2026-10-28T10:34:42.881Z","updated":"2026-10-28T10:34:42.881Z","title":"selinux: fix BPF token permission checks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99128","published":"2026-10-28T10:34:42.229Z","updated":"2026-10-30T12:42:02.124Z","title":"sctp: validate chunk length in the inqueue parser","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99127","published":"2026-10-28T10:34:41.448Z","updated":"2026-10-30T12:42:01.046Z","title":"page_pool: keep frag_offset aligned for odd-sized requests","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99126","published":"2026-10-28T10:34:40.661Z","updated":"2026-10-30T12:41:59.971Z","title":"s390/ctcm: Prevent XID null dereference","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99125","published":"2026-10-28T10:34:40.025Z","updated":"2026-10-28T10:34:40.025Z","title":"s390/pai: Handle multiple PMU stop callback invocations","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99124","published":"2026-10-28T10:34:39.370Z","updated":"2026-10-30T12:41:58.903Z","title":"s390/pci: Fix leak of uninitialized kernel data in SCLP report","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99123","published":"2026-10-28T10:34:38.600Z","updated":"2026-10-31T12:43:28.598Z","title":"vsock/virtio: validate packet source for connected sockets","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126},{"id":"CVE-2026-99122","published":"2026-10-28T10:34:37.859Z","updated":"2026-10-31T12:43:23.512Z","title":"vsock/vmci: validate packet source for connected sockets","severity":"HIGH","score":7.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012},{"id":"CVE-2026-99121","published":"2026-10-28T10:34:37.082Z","updated":"2026-10-30T12:41:56.754Z","title":"ipv4: avoid divide by zero in fib_rebalance","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99120","published":"2026-10-28T10:34:36.224Z","updated":"2026-10-28T10:34:36.224Z","title":"KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-99119","published":"2026-10-28T10:34:35.364Z","updated":"2026-10-28T10:34:35.364Z","title":"drm/amdgpu/userq: actually validate userq BOs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-99118","published":"2026-10-28T10:34:34.627Z","updated":"2026-10-30T12:41:55.667Z","title":"drm/i915/dmc: Harden DMC firmware payload parsing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99117","published":"2026-10-28T10:34:33.874Z","updated":"2026-10-31T12:43:18.238Z","title":"net: bridge: mcast: don't truncate the port group walk on teardown","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126},{"id":"CVE-2026-99116","published":"2026-10-28T10:34:33.109Z","updated":"2026-10-31T12:43:13.361Z","title":"net: psp: do not inherit the Rx association on clone","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00133},{"id":"CVE-2026-99115","published":"2026-10-28T10:34:32.347Z","updated":"2026-10-30T12:41:53.529Z","title":"ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99114","published":"2026-10-28T10:34:31.576Z","updated":"2026-10-30T12:41:52.446Z","title":"ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99113","published":"2026-10-28T10:34:30.767Z","updated":"2026-10-30T12:41:51.384Z","title":"ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99112","published":"2026-10-28T10:34:29.881Z","updated":"2026-10-31T12:43:08.195Z","title":"net/sched: cls_flower: validate mask pointer after nla_next()","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00132},{"id":"CVE-2026-99111","published":"2026-10-28T10:34:29.053Z","updated":"2026-10-28T10:34:29.053Z","title":"smb: client: fix data corruption with concurrent writes and O_TRUNC","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99110","published":"2026-10-28T10:34:28.239Z","updated":"2026-10-31T12:43:03.377Z","title":"smb: client: fix heap overflow in cifs_do_set_acl()","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00134},{"id":"CVE-2026-99109","published":"2026-10-28T10:34:27.507Z","updated":"2026-10-31T12:42:58.137Z","title":"smb: client: reject SetEA requests that do not fit the request buffer","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013},{"id":"CVE-2026-99108","published":"2026-10-28T10:34:26.772Z","updated":"2026-10-28T10:34:26.772Z","title":"ntfs: fix FITRIM range alignment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-99107","published":"2026-10-28T10:34:26.017Z","updated":"2026-10-31T12:42:53.060Z","title":"ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121},{"id":"CVE-2026-99106","published":"2026-10-28T10:34:25.279Z","updated":"2026-10-30T12:41:47.227Z","title":"drm/amdgpu: free the userptr ranges when a CS fails after parser_bos","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-99105","published":"2026-10-28T10:34:24.456Z","updated":"2026-10-30T12:41:46.163Z","title":"sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99104","published":"2026-10-28T10:34:23.729Z","updated":"2026-10-28T10:34:23.729Z","title":"sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99103","published":"2026-10-28T10:34:22.945Z","updated":"2026-10-30T12:41:45.076Z","title":"workqueue: Fix unbound pool lifetime for pending pwqs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99102","published":"2026-10-28T10:34:17.224Z","updated":"2026-10-28T10:34:17.224Z","title":"ntfs: take invalidate_lock in ntfs_setattr_size()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99101","published":"2026-10-28T10:34:16.583Z","updated":"2026-11-01T12:42:05.410Z","title":"ntfs: move attribute payload before shrinking its record","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-110541","published":"2026-10-28T10:33:32.058Z","updated":"2026-10-29T03:57:05.465Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.01811},{"id":"CVE-2026-101272","published":"2026-10-28T10:33:31.936Z","updated":"2026-10-28T10:33:31.936Z","title":"Incorrect session validation for API-created shredder exports","severity":"LOW","score":2.3,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00346},{"id":"CVE-2026-101274","published":"2026-10-28T10:31:23.485Z","updated":"2026-10-28T10:31:23.485Z","title":"When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type`…","severity":"MEDIUM","score":6.9,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00392},{"id":"CVE-2026-110540","published":"2026-10-28T10:30:13.735Z","updated":"2026-10-28T10:30:13.735Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00315},{"id":"CVE-2026-101273","published":"2026-10-28T10:29:06.786Z","updated":"2026-10-28T10:29:06.786Z","title":"Giftcard enumeration","severity":"MEDIUM","score":5.3,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00366},{"id":"CVE-2026-103792","published":"2026-10-28T10:26:41.330Z","updated":"2026-10-29T10:45:43.691Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.6,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00369},{"id":"CVE-2026-103779","published":"2026-10-28T10:22:38.482Z","updated":"2026-10-29T03:57:07.897Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00468},{"id":"CVE-2026-112198","published":"2026-10-28T10:20:06.729Z","updated":"2026-10-28T10:21:56.415Z","title":"Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App","severity":"HIGH","score":8.3,"vendor":"Tactis","product":"NoviGest Desktop App","kev":false,"epss":0.00162},{"id":"CVE-2026-103799","published":"2026-10-28T10:18:59.100Z","updated":"2026-10-28T10:18:59.100Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.6,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.0034},{"id":"CVE-2026-112197","published":"2026-10-28T10:17:12.401Z","updated":"2026-10-28T10:17:12.401Z","title":"Missing Authentication for Critical Function in Tactis' NoviGest Desktop App","severity":"CRITICAL","score":9.4,"vendor":"Tactis","product":"NoviGest Desktop App","kev":false,"epss":0.00379},{"id":"CVE-2026-103780","published":"2026-10-28T10:14:39.716Z","updated":"2026-10-29T10:45:43.826Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0083},{"id":"CVE-2026-87879","published":"2026-10-28T10:12:07.066Z","updated":"2026-10-28T10:12:07.066Z","title":"Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"MEDIUM","score":5.9,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00216},{"id":"CVE-2026-87878","published":"2026-10-28T10:11:49.731Z","updated":"2026-10-29T10:45:43.972Z","title":"Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.","severity":"MEDIUM","score":6.3,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00142},{"id":"CVE-2026-87102","published":"2026-10-28T10:11:31.104Z","updated":"2026-10-29T10:45:44.118Z","title":"Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…","severity":"HIGH","score":7.4,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00224},{"id":"CVE-2026-87100","published":"2026-10-28T10:11:11.891Z","updated":"2026-10-28T10:11:11.891Z","title":"Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before…","severity":"LOW","score":3.6,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00097},{"id":"CVE-2026-87099","published":"2026-10-28T10:10:24.198Z","updated":"2026-10-28T10:10:24.198Z","title":"Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)…","severity":"MEDIUM","score":5.7,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00242},{"id":"CVE-2025-30414","published":"2026-10-28T10:09:55.733Z","updated":"2026-10-29T10:45:44.259Z","title":"Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569,…","severity":"HIGH","score":7.1,"vendor":"Acronis","product":"Acronis Cyber Protect Cloud Agent","kev":false,"epss":0.00212},{"id":"CVE-2026-87098","published":"2026-10-28T10:09:30.508Z","updated":"2026-10-28T10:09:30.508Z","title":"Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"LOW","score":3.1,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00178},{"id":"CVE-2026-87880","published":"2026-10-28T10:09:09.456Z","updated":"2026-10-29T10:45:44.416Z","title":"Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber…","severity":"MEDIUM","score":6.8,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00119},{"id":"CVE-2026-87103","published":"2026-10-28T10:08:45.683Z","updated":"2026-10-29T10:45:44.554Z","title":"Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…","severity":"HIGH","score":7.4,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00224},{"id":"CVE-2026-86377","published":"2026-10-28T10:08:44.878Z","updated":"2026-10-29T01:52:04.703Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.6,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00303},{"id":"CVE-2026-87101","published":"2026-10-28T10:08:23.100Z","updated":"2026-10-28T10:08:23.100Z","title":"Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"MEDIUM","score":6.2,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00096},{"id":"CVE-2026-87097","published":"2026-10-28T10:08:02.180Z","updated":"2026-10-28T10:08:02.180Z","title":"Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)…","severity":"MEDIUM","score":5.3,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00223},{"id":"CVE-2026-86378","published":"2026-10-28T10:05:06.420Z","updated":"2026-10-29T10:45:44.691Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00367},{"id":"CVE-2026-86379","published":"2026-10-28T10:01:35.942Z","updated":"2026-10-29T10:45:44.831Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.02835},{"id":"CVE-2026-86380","published":"2026-10-28T09:58:22.935Z","updated":"2026-10-29T03:57:20.755Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00461},{"id":"CVE-2026-86383","published":"2026-10-28T09:54:54.400Z","updated":"2026-10-28T09:54:54.400Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0046},{"id":"CVE-2026-86384","published":"2026-10-28T09:51:07.110Z","updated":"2026-10-29T10:45:44.969Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00472},{"id":"CVE-2026-86385","published":"2026-10-28T09:47:44.687Z","updated":"2026-10-29T03:57:22.936Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00371},{"id":"CVE-2026-86386","published":"2026-10-28T09:44:28.379Z","updated":"2026-11-02T20:13:51.894Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"MEDIUM","score":4.3,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00211},{"id":"CVE-2026-86388","published":"2026-10-28T09:40:58.851Z","updated":"2026-10-28T09:40:58.851Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00313},{"id":"CVE-2026-92665","published":"2026-10-28T09:37:15.380Z","updated":"2026-10-29T01:52:04.985Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00414},{"id":"CVE-2026-105457","published":"2026-10-28T09:35:00.833Z","updated":"2026-10-28T09:35:00.833Z","title":"Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS","severity":"MEDIUM","score":6.5,"vendor":"HAVELSAN Inc.","product":"Liman MYS","kev":false,"epss":0.00424},{"id":"CVE-2026-86389","published":"2026-10-28T09:33:34.221Z","updated":"2026-10-30T03:55:59.623Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00535},{"id":"CVE-2026-86390","published":"2026-10-28T09:29:48.671Z","updated":"2026-11-02T20:12:03.361Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00326},{"id":"CVE-2026-86391","published":"2026-10-28T09:25:47.501Z","updated":"2026-10-29T01:52:05.274Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00377},{"id":"CVE-2026-86392","published":"2026-10-28T09:21:54.318Z","updated":"2026-10-29T01:52:05.425Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00339},{"id":"CVE-2026-86393","published":"2026-10-28T09:18:00.266Z","updated":"2026-10-30T03:56:00.554Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00334},{"id":"CVE-2026-14571","published":"2026-10-28T09:15:03.663Z","updated":"2026-10-28T09:15:03.663Z","title":"SQL injection (SQLi) in the user authentication module of Futurum Software","severity":"CRITICAL","score":9.1,"vendor":"Futurum Software","product":"Futurum Software User Authentication Module","kev":false,"epss":0.00251},{"id":"CVE-2026-86394","published":"2026-10-28T09:14:24.715Z","updated":"2026-10-30T17:18:29.171Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02186},{"id":"CVE-2026-86395","published":"2026-10-28T09:10:39.838Z","updated":"2026-10-30T03:56:03.864Z","title":"Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.02186},{"id":"CVE-2026-86396","published":"2026-10-28T09:05:55.474Z","updated":"2026-10-30T17:18:29.317Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02168},{"id":"CVE-2026-86397","published":"2026-10-28T09:02:11.392Z","updated":"2026-10-30T17:18:29.445Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00336},{"id":"CVE-2026-86398","published":"2026-10-28T08:58:15.053Z","updated":"2026-10-30T17:18:29.579Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00344},{"id":"CVE-2026-86399","published":"2026-10-28T08:54:03.557Z","updated":"2026-10-30T17:18:29.711Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02186},{"id":"CVE-2026-86400","published":"2026-10-28T08:50:11.332Z","updated":"2026-10-30T17:18:29.842Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00896},{"id":"CVE-2026-86401","published":"2026-10-28T08:46:36.081Z","updated":"2026-10-28T08:46:36.081Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186},{"id":"CVE-2026-90717","published":"2026-10-28T08:42:53.657Z","updated":"2026-11-02T18:08:31.413Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.1,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00233},{"id":"CVE-2026-16020","published":"2026-10-28T08:41:50.528Z","updated":"2026-10-28T08:41:50.528Z","title":"Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform","severity":"MEDIUM","score":5.4,"vendor":"Fazile BACAK","product":"DefterAsist Financial Advisor Platform","kev":false,"epss":0.00133},{"id":"CVE-2026-90719","published":"2026-10-28T08:36:16.969Z","updated":"2026-11-02T20:11:25.266Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186},{"id":"CVE-2026-90720","published":"2026-10-28T08:32:31.338Z","updated":"2026-10-30T03:56:11.819Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00083},{"id":"CVE-2026-90721","published":"2026-10-28T08:28:43.038Z","updated":"2026-10-29T01:52:05.577Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"LOW","score":3.4,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0012},{"id":"CVE-2026-90723","published":"2026-10-28T08:24:47.194Z","updated":"2026-11-02T20:07:57.709Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186},{"id":"CVE-2026-90724","published":"2026-10-28T08:20:39.490Z","updated":"2026-10-28T08:20:39.490Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186},{"id":"CVE-2026-118435","published":"2026-10-28T07:49:14.205Z","updated":"2026-10-28T07:54:29.600Z","title":"Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.","severity":"MEDIUM","score":5.4,"vendor":"Samsung Open Source","product":"escargot","kev":false,"epss":0.00208},{"id":"CVE-2026-85655","published":"2026-10-28T07:48:29.420Z","updated":"2026-10-29T01:41:49.939Z","title":"Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow","severity":"MEDIUM","score":4.3,"vendor":"shortpixel","product":"Enable Media Replace","kev":false,"epss":0.00272},{"id":"CVE-2026-101935","published":"2026-10-28T07:48:29.075Z","updated":"2026-10-29T01:41:50.091Z","title":"Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter","severity":"MEDIUM","score":6.1,"vendor":"echoplugins","product":"Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search","kev":false,"epss":0.00254},{"id":"CVE-2026-92797","published":"2026-10-28T07:48:28.598Z","updated":"2026-10-29T01:41:50.240Z","title":"Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter","severity":"HIGH","score":8.8,"vendor":"MemberPress","product":"Memberpress","kev":false,"epss":0.00148},{"id":"CVE-2026-63286","published":"2026-10-28T06:54:23.362Z","updated":"2026-10-28T06:54:23.362Z","title":"Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro…","severity":"HIGH","score":7.1,"vendor":"Axis Communications AB","product":"AXIS Camera Station Pro","kev":false,"epss":0.00078},{"id":"CVE-2026-109975","published":"2026-10-28T06:45:22.335Z","updated":"2026-10-29T01:41:50.395Z","title":"Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"cozythemes","product":"Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox","kev":false,"epss":0.00201},{"id":"CVE-2026-76005","published":"2026-10-28T06:45:21.929Z","updated":"2026-10-29T01:41:50.537Z","title":"WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"chuck1982","product":"WP Inventory Manager","kev":false,"epss":0.00281},{"id":"CVE-2026-118169","published":"2026-10-28T06:45:21.540Z","updated":"2026-10-29T01:41:50.681Z","title":"Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter","severity":"MEDIUM","score":4.9,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00189},{"id":"CVE-2026-104743","published":"2026-10-28T06:45:21.148Z","updated":"2026-10-29T01:41:50.825Z","title":"Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment","severity":"MEDIUM","score":4.9,"vendor":"tainacan","product":"Tainacan","kev":false,"epss":0.00841},{"id":"CVE-2026-76780","published":"2026-10-28T06:45:20.777Z","updated":"2026-10-29T01:41:50.965Z","title":"BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation","severity":"MEDIUM","score":6.3,"vendor":"rankingcoach","product":"BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility","kev":false,"epss":0.00206},{"id":"CVE-2026-110185","published":"2026-10-28T06:45:20.364Z","updated":"2026-10-28T16:09:28.549Z","title":"Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters","severity":"MEDIUM","score":5.9,"vendor":"bitpressadmin","product":"Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More","kev":false,"epss":0.00552},{"id":"CVE-2026-116750","published":"2026-10-28T06:45:19.953Z","updated":"2026-10-29T01:41:51.112Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute","severity":"MEDIUM","score":6.5,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00261},{"id":"CVE-2026-109218","published":"2026-10-28T06:45:19.576Z","updated":"2026-10-29T01:41:51.263Z","title":"Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass","severity":"CRITICAL","score":9.8,"vendor":"kleor","product":"Contact Manager","kev":false,"epss":0.00643},{"id":"CVE-2026-109370","published":"2026-10-28T06:45:19.156Z","updated":"2026-10-29T01:41:51.425Z","title":"Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"bplugins","product":"Document Embedder – let visitors read files without downloading","kev":false,"epss":0.00216},{"id":"CVE-2026-77871","published":"2026-10-28T06:45:18.731Z","updated":"2026-10-29T01:41:51.567Z","title":"Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"saadiqbal","product":"Post Snippets – Custom WordPress Code Snippets Customizer","kev":false,"epss":0.00241},{"id":"CVE-2026-107710","published":"2026-10-28T06:45:18.336Z","updated":"2026-10-28T16:09:34.692Z","title":"Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title","severity":"MEDIUM","score":6.4,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00201},{"id":"CVE-2026-109988","published":"2026-10-28T06:45:17.956Z","updated":"2026-10-29T01:41:51.709Z","title":"Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter","severity":"MEDIUM","score":4.4,"vendor":"acowebs","product":"Product Addons for Woocommerce – Product Options with Custom Fields","kev":false,"epss":0.00208},{"id":"CVE-2026-2839","published":"2026-10-28T06:45:17.566Z","updated":"2026-10-29T01:41:51.846Z","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints","severity":"MEDIUM","score":5.3,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00275},{"id":"CVE-2026-116761","published":"2026-10-28T06:45:17.138Z","updated":"2026-10-29T01:41:51.992Z","title":"CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form","severity":"MEDIUM","score":5.4,"vendor":"jtsternberg","product":"CMB2","kev":false,"epss":0.00221},{"id":"CVE-2026-108366","published":"2026-10-28T06:45:16.742Z","updated":"2026-10-29T01:41:52.136Z","title":"easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00206},{"id":"CVE-2026-110071","published":"2026-10-28T06:45:16.337Z","updated":"2026-10-29T01:41:52.280Z","title":"Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.00201},{"id":"CVE-2026-111111","published":"2026-10-28T06:45:15.943Z","updated":"2026-10-29T01:41:52.430Z","title":"Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape","severity":"HIGH","score":7.2,"vendor":"bdthemes","product":"Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons","kev":false,"epss":0.00241},{"id":"CVE-2026-111213","published":"2026-10-28T06:45:15.536Z","updated":"2026-10-29T01:41:52.570Z","title":"Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter","severity":"MEDIUM","score":4.3,"vendor":"magepeopleteam","product":"Travelly – Tour & Travel Booking Manager for WooCommerce","kev":false,"epss":0.00222},{"id":"CVE-2026-116610","published":"2026-10-28T06:45:15.107Z","updated":"2026-10-28T16:09:40.610Z","title":"Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook","severity":"MEDIUM","score":4.3,"vendor":"hornero","product":"Clean Login","kev":false,"epss":0.00196},{"id":"CVE-2026-116749","published":"2026-10-28T06:45:14.677Z","updated":"2026-10-29T01:41:52.709Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00193},{"id":"CVE-2026-92098","published":"2026-10-28T06:45:14.277Z","updated":"2026-10-28T16:09:47.127Z","title":"Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter","severity":"MEDIUM","score":6.1,"vendor":"webheadllc","product":"Webheadcoder Multi-Step Forms for Contact Form 7","kev":false,"epss":0.00215},{"id":"CVE-2026-109980","published":"2026-10-28T06:45:13.840Z","updated":"2026-10-28T16:09:53.821Z","title":"Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter","severity":"MEDIUM","score":4.3,"vendor":"barrykooij","product":"Related Posts for WordPress","kev":false,"epss":0.00218},{"id":"CVE-2026-104729","published":"2026-10-28T06:45:13.360Z","updated":"2026-10-29T01:41:52.852Z","title":"Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"themefusion","product":"Avada (Fusion) Builder","kev":false,"epss":0.00156},{"id":"CVE-2026-118164","published":"2026-10-28T06:45:12.978Z","updated":"2026-10-28T16:09:59.980Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00206},{"id":"CVE-2026-100175","published":"2026-10-28T06:45:12.519Z","updated":"2026-10-29T01:41:52.993Z","title":"Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink","severity":"MEDIUM","score":5.4,"vendor":"wayneallen-1","product":"Postie","kev":false,"epss":0.00332},{"id":"CVE-2026-109384","published":"2026-10-28T06:45:12.110Z","updated":"2026-10-29T01:41:53.142Z","title":"The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload","severity":"HIGH","score":8.8,"vendor":"melograno","product":"The Innovative Form Builder – IvyForms","kev":false,"epss":0.00725},{"id":"CVE-2026-77188","published":"2026-10-28T06:45:11.697Z","updated":"2026-10-29T01:41:53.282Z","title":"Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"xootix","product":"Waitlist Woocommerce ( Back in stock notifier )","kev":false,"epss":0.00193},{"id":"CVE-2026-110020","published":"2026-10-28T06:45:11.326Z","updated":"2026-10-29T01:41:53.443Z","title":"Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page","severity":"MEDIUM","score":6.5,"vendor":"widgetpack","product":"Rich Showcase for Google Reviews","kev":false,"epss":0.00382},{"id":"CVE-2026-109979","published":"2026-10-28T06:45:10.920Z","updated":"2026-10-29T01:41:53.590Z","title":"Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter","severity":"MEDIUM","score":4.3,"vendor":"barrykooij","product":"Related Posts for WordPress","kev":false,"epss":0.00298},{"id":"CVE-2026-111120","published":"2026-10-28T06:45:10.550Z","updated":"2026-10-28T16:10:10.199Z","title":"VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task","severity":"HIGH","score":8.8,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00315},{"id":"CVE-2026-104740","published":"2026-10-28T06:45:10.177Z","updated":"2026-10-29T01:41:53.729Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00243},{"id":"CVE-2026-111372","published":"2026-10-28T06:45:09.788Z","updated":"2026-10-29T01:41:53.869Z","title":"AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"quantumcloud","product":"AI ChatBot for WooCommerce – WoowBot","kev":false,"epss":0.00268},{"id":"CVE-2026-109978","published":"2026-10-28T06:45:09.376Z","updated":"2026-10-29T01:41:54.013Z","title":"Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"cozythemes","product":"Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox","kev":false,"epss":0.00243},{"id":"CVE-2026-76058","published":"2026-10-28T06:45:08.964Z","updated":"2026-10-28T16:10:15.959Z","title":"PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action","severity":"MEDIUM","score":5.3,"vendor":"odefranca","product":"PayPal Brasil para WooCommerce","kev":false,"epss":0.0026},{"id":"CVE-2026-109972","published":"2026-10-28T06:45:08.551Z","updated":"2026-10-28T16:10:21.905Z","title":"s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"clavaque","product":"s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions","kev":false,"epss":0.00275},{"id":"CVE-2026-111068","published":"2026-10-28T06:45:08.113Z","updated":"2026-10-29T01:41:54.160Z","title":"DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute","severity":"MEDIUM","score":4.4,"vendor":"justinnealey","product":"DesignSetGo","kev":false,"epss":0.00213},{"id":"CVE-2026-109590","published":"2026-10-28T06:45:07.717Z","updated":"2026-10-29T01:41:54.301Z","title":"Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"magepeopleteam","product":"Travelly – Tour & Travel Booking Manager for WooCommerce","kev":false,"epss":0.00243},{"id":"CVE-2026-109385","published":"2026-10-28T06:45:07.291Z","updated":"2026-10-29T01:41:54.439Z","title":"UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL","severity":"MEDIUM","score":6.4,"vendor":"posimyththemes","product":"UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks","kev":false,"epss":0.00256},{"id":"CVE-2026-103996","published":"2026-10-28T06:45:06.903Z","updated":"2026-10-28T16:10:28.642Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00243},{"id":"CVE-2026-110662","published":"2026-10-28T06:45:06.494Z","updated":"2026-10-29T01:41:54.592Z","title":"MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating","severity":"HIGH","score":7.2,"vendor":"mxchat","product":"MxChat – AI Chatbot & Content Generation for WordPress","kev":false,"epss":0.00307},{"id":"CVE-2026-109381","published":"2026-10-28T06:45:05.954Z","updated":"2026-10-28T16:10:34.580Z","title":"Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter","severity":"HIGH","score":7.2,"vendor":"magepeopleteam","product":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar","kev":false,"epss":0.00431},{"id":"CVE-2026-103370","published":"2026-10-28T06:45:05.565Z","updated":"2026-10-29T01:41:54.736Z","title":"Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion","severity":"MEDIUM","score":6.4,"vendor":"awesomesupport","product":"Awesome Support – WordPress HelpDesk & Support Plugin","kev":false,"epss":0.00256},{"id":"CVE-2026-116609","published":"2026-10-28T06:45:04.986Z","updated":"2026-10-29T01:41:54.871Z","title":"WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"osamaesh","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00336},{"id":"CVE-2026-115281","published":"2026-10-28T06:00:27.397Z","updated":"2026-10-28T17:58:03.936Z","title":"Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Recipe Card Blocks Lite","kev":false,"epss":0.00297},{"id":"CVE-2026-115255","published":"2026-10-28T06:00:27.222Z","updated":"2026-10-28T17:58:04.092Z","title":"WP Roster < 2.35 - Unauthenticated Roster Member Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP Roster","kev":false,"epss":0.00231},{"id":"CVE-2026-115225","published":"2026-10-28T06:00:27.049Z","updated":"2026-10-28T17:58:04.260Z","title":"Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup","severity":"MEDIUM","score":5.8,"vendor":"Unknown","product":"Customer Engagement System","kev":false,"epss":0.00245},{"id":"CVE-2026-115224","published":"2026-10-28T06:00:26.878Z","updated":"2026-10-28T17:58:04.411Z","title":"Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding","severity":"MEDIUM","score":4.1,"vendor":"Unknown","product":"Customer Engagement System","kev":false,"epss":0.0024},{"id":"CVE-2026-113813","published":"2026-10-28T06:00:26.467Z","updated":"2026-10-28T17:58:04.601Z","title":"PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PayPlug for WooCommerce (Official)","kev":false,"epss":0.00209},{"id":"CVE-2026-113494","published":"2026-10-28T06:00:26.281Z","updated":"2026-10-28T17:58:04.748Z","title":"GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode","severity":"LOW","score":2.7,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.0024},{"id":"CVE-2026-113488","published":"2026-10-28T06:00:26.104Z","updated":"2026-10-28T17:58:04.973Z","title":"GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00317},{"id":"CVE-2026-113487","published":"2026-10-28T06:00:25.932Z","updated":"2026-10-28T17:58:05.133Z","title":"GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00317},{"id":"CVE-2026-113486","published":"2026-10-28T06:00:25.753Z","updated":"2026-10-28T17:58:05.308Z","title":"Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00134},{"id":"CVE-2026-113485","published":"2026-10-28T06:00:25.578Z","updated":"2026-10-28T17:58:05.466Z","title":"Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00134},{"id":"CVE-2026-111967","published":"2026-10-28T06:00:25.402Z","updated":"2026-10-28T17:58:05.640Z","title":"MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"MP3 Audio Player","kev":false,"epss":0.00317},{"id":"CVE-2026-111961","published":"2026-10-28T06:00:25.225Z","updated":"2026-10-28T17:58:05.821Z","title":"Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00194},{"id":"CVE-2026-111960","published":"2026-10-28T06:00:25.046Z","updated":"2026-10-28T17:58:06.002Z","title":"Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00206},{"id":"CVE-2026-111577","published":"2026-10-28T06:00:24.868Z","updated":"2026-10-28T17:58:06.169Z","title":"GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"GoSMTP","kev":false,"epss":0.0034},{"id":"CVE-2026-111032","published":"2026-10-28T06:00:24.660Z","updated":"2026-10-28T17:58:06.341Z","title":"Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.00194},{"id":"CVE-2026-111031","published":"2026-10-28T06:00:24.488Z","updated":"2026-10-28T17:58:06.485Z","title":"Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter","severity":"MEDIUM","score":4.7,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.0024},{"id":"CVE-2026-111027","published":"2026-10-28T06:00:24.314Z","updated":"2026-10-28T17:58:06.628Z","title":"Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.00297},{"id":"CVE-2026-111021","published":"2026-10-28T06:00:24.132Z","updated":"2026-10-28T17:58:06.765Z","title":"Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"افزونه پیامک ووکامرس | Persian WooCommerce SMS","kev":false,"epss":0.00191},{"id":"CVE-2026-110691","published":"2026-10-28T06:00:23.955Z","updated":"2026-10-28T17:58:06.900Z","title":"WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WPOrLogin","kev":false,"epss":0.00261},{"id":"CVE-2026-110524","published":"2026-10-28T06:00:23.783Z","updated":"2026-10-28T17:58:07.037Z","title":"Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Copy Anything to Clipboard for WordPress","kev":false,"epss":0.00317},{"id":"CVE-2026-110509","published":"2026-10-28T06:00:23.607Z","updated":"2026-10-28T17:58:07.202Z","title":"Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00251},{"id":"CVE-2026-110507","published":"2026-10-28T06:00:23.185Z","updated":"2026-10-28T17:58:07.345Z","title":"Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Page Builder by SiteOrigin","kev":false,"epss":0.0024},{"id":"CVE-2026-110506","published":"2026-10-28T06:00:23.013Z","updated":"2026-10-28T17:58:07.498Z","title":"Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Page Builder by SiteOrigin","kev":false,"epss":0.00317},{"id":"CVE-2026-110292","published":"2026-10-28T06:00:22.829Z","updated":"2026-10-28T17:58:07.648Z","title":"PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PayPlug for WooCommerce (Official)","kev":false,"epss":0.00223},{"id":"CVE-2026-107100","published":"2026-10-28T06:00:22.651Z","updated":"2026-10-28T17:58:07.790Z","title":"Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00262},{"id":"CVE-2026-107098","published":"2026-10-28T06:00:22.478Z","updated":"2026-10-28T17:58:07.940Z","title":"Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00317},{"id":"CVE-2026-107097","published":"2026-10-28T06:00:22.291Z","updated":"2026-10-28T17:58:08.091Z","title":"Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00231},{"id":"CVE-2026-106647","published":"2026-10-28T06:00:21.875Z","updated":"2026-10-28T17:58:08.236Z","title":"Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00194},{"id":"CVE-2026-106003","published":"2026-10-28T06:00:21.700Z","updated":"2026-10-28T17:58:08.395Z","title":"Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Court Reservation","kev":false,"epss":0.00268},{"id":"CVE-2026-106002","published":"2026-10-28T06:00:21.524Z","updated":"2026-10-28T17:58:08.549Z","title":"Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Court Reservation","kev":false,"epss":0.00231},{"id":"CVE-2026-105997","published":"2026-10-28T06:00:21.342Z","updated":"2026-10-28T17:58:08.731Z","title":"Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00299},{"id":"CVE-2026-105972","published":"2026-10-28T06:00:21.162Z","updated":"2026-10-28T17:58:08.920Z","title":"WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Menu Cart for WooCommerce","kev":false,"epss":0.00291},{"id":"CVE-2026-104694","published":"2026-10-28T06:00:20.983Z","updated":"2026-10-28T17:58:09.090Z","title":"Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Thrive Automator","kev":false,"epss":0.00297},{"id":"CVE-2026-103688","published":"2026-10-28T06:00:20.809Z","updated":"2026-10-28T17:58:09.254Z","title":"Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Checkout Files Upload for WooCommerce","kev":false,"epss":0.00611},{"id":"CVE-2026-103382","published":"2026-10-28T06:00:20.631Z","updated":"2026-10-28T17:58:09.436Z","title":"Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Casso Flow","kev":false,"epss":0.00231},{"id":"CVE-2026-103372","published":"2026-10-28T06:00:20.224Z","updated":"2026-10-28T17:58:09.601Z","title":"Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payconiq","kev":false,"epss":0.00262},{"id":"CVE-2026-103331","published":"2026-10-28T06:00:19.793Z","updated":"2026-10-28T17:58:09.780Z","title":"UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"UniPAY Payment Gateway For WooCommerce","kev":false,"epss":0.00231},{"id":"CVE-2026-15323","published":"2026-10-28T05:33:31.729Z","updated":"2026-10-29T01:41:55.027Z","title":"Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload","severity":"HIGH","score":7.5,"vendor":"King-Theme","product":"Product Designer for WooCommerce WordPress | Lumise","kev":false,"epss":0.00861},{"id":"CVE-2026-109236","published":"2026-10-28T05:33:31.213Z","updated":"2026-10-28T16:10:40.810Z","title":"Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter","severity":"MEDIUM","score":4.8,"vendor":"zorem","product":"Customer Email Verification for WooCommerce","kev":false,"epss":0.00344},{"id":"CVE-2026-115522","published":"2026-10-28T04:36:49.927Z","updated":"2026-10-28T04:36:49.927Z","title":"Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Agent Development Kit (ADK) for Python","kev":false,"epss":0.00378},{"id":"CVE-2026-104384","published":"2026-10-28T04:21:29.717Z","updated":"2026-10-28T04:21:29.717Z","title":"Insufficiently protected credentials in EagleCloud Aquila on-premises version","severity":"HIGH","score":8.7,"vendor":"EagleCloud","product":"Aquila","kev":false,"epss":0.00426},{"id":"CVE-2026-104383","published":"2026-10-28T04:21:22.924Z","updated":"2026-10-28T04:21:22.924Z","title":"Code injection in EagleCloud Aquila on-premises version","severity":"CRITICAL","score":9.4,"vendor":"EagleCloud","product":"Aquila","kev":false,"epss":0.00367},{"id":"CVE-2026-99100","published":"2026-10-28T03:55:38.898Z","updated":"2026-11-01T12:42:04.550Z","title":"wifi: p54: validate firmware record lengths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-118276","published":"2026-10-28T03:45:18.266Z","updated":"2026-11-02T20:07:16.071Z","title":"a2ui-project a2ui Parser expression_parser.ts formatString resource consumption","severity":"MEDIUM","score":5.1,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00239},{"id":"CVE-2026-111727","published":"2026-10-28T03:42:54.736Z","updated":"2026-10-29T01:41:55.179Z","title":"Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00206},{"id":"CVE-2026-1928","published":"2026-10-28T03:42:54.378Z","updated":"2026-10-29T01:41:55.325Z","title":"Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"rankmath","product":"Rank Math SEO – AI SEO Tools to Dominate SEO Rankings","kev":false,"epss":0.00538},{"id":"CVE-2026-116613","published":"2026-10-28T03:42:54.035Z","updated":"2026-10-29T01:41:55.485Z","title":"Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute","severity":"HIGH","score":7.5,"vendor":"bplugins","product":"Animated Text Block – Add Typing and Looping Text Effects","kev":false,"epss":0.00277},{"id":"CVE-2026-111255","published":"2026-10-28T03:42:53.522Z","updated":"2026-10-28T16:10:48.081Z","title":"affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter","severity":"HIGH","score":7.5,"vendor":"cservit","product":"affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display","kev":false,"epss":0.00515},{"id":"CVE-2026-118275","published":"2026-10-28T03:30:18.509Z","updated":"2026-10-28T16:10:54.352Z","title":"a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption","severity":"MEDIUM","score":6.9,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00428},{"id":"CVE-2026-118384","published":"2026-10-28T02:53:38.786Z","updated":"2026-11-02T17:10:04.070Z","title":"GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.","severity":"MEDIUM","score":6.1,"vendor":"GNU","product":"mtools","kev":false,"epss":0.0032},{"id":"CVE-2026-118274","published":"2026-10-28T02:45:10.858Z","updated":"2026-10-28T02:45:10.858Z","title":"a2ui-project a2ui Binder generic-binder.ts resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031},{"id":"CVE-2026-118273","published":"2026-10-28T02:30:20.889Z","updated":"2026-11-02T20:06:25.459Z","title":"a2ui-project a2ui data-model.ts DataModel.set resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031},{"id":"CVE-2026-107745","published":"2026-10-28T02:29:59.766Z","updated":"2026-10-29T01:51:59.196Z","title":"AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter","severity":"MEDIUM","score":4.2,"vendor":"tigroumeow","product":"AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini","kev":false,"epss":0.00322},{"id":"CVE-2026-109209","published":"2026-10-28T02:29:59.405Z","updated":"2026-10-29T01:51:59.353Z","title":"All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPC","severity":"MEDIUM","score":6.4,"vendor":"plugins360","product":"All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos","kev":false,"epss":0.00207},{"id":"CVE-2026-111314","published":"2026-10-28T02:29:59.059Z","updated":"2026-10-29T01:51:59.496Z","title":"affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter","severity":"HIGH","score":7.2,"vendor":"cservit","product":"affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display","kev":false,"epss":0.00241},{"id":"CVE-2026-97019","published":"2026-10-28T02:29:58.709Z","updated":"2026-10-29T01:51:59.638Z","title":"AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute","severity":"HIGH","score":7.2,"vendor":"mohammed_kaludi","product":"AMP for WP – Accelerated Mobile Pages","kev":false,"epss":0.00236},{"id":"CVE-2026-109999","published":"2026-10-28T02:29:58.364Z","updated":"2026-10-28T16:11:01.240Z","title":"AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter","severity":"HIGH","score":7.2,"vendor":"nalam-1","product":"AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot","kev":false,"epss":0.00292},{"id":"CVE-2026-109974","published":"2026-10-28T02:29:57.994Z","updated":"2026-10-29T01:51:59.778Z","title":"All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"plugins360","product":"All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos","kev":false,"epss":0.00193},{"id":"CVE-2026-84999","published":"2026-10-28T02:29:57.638Z","updated":"2026-10-29T01:51:59.919Z","title":"Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler","severity":"CRITICAL","score":9.8,"vendor":"Pie Register","product":"Pie Register Premium","kev":false,"epss":0.00483},{"id":"CVE-2026-107625","published":"2026-10-28T02:29:57.142Z","updated":"2026-10-28T16:11:08.360Z","title":"Ultimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile Field","severity":"MEDIUM","score":6.4,"vendor":"ultimatemember","product":"Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin","kev":false,"epss":0.00193},{"id":"CVE-2026-115624","published":"2026-10-28T02:21:49.154Z","updated":"2026-10-28T02:21:49.154Z","title":"GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only…","severity":"MEDIUM","score":6.9,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00219},{"id":"CVE-2026-109848","published":"2026-10-28T02:21:37.093Z","updated":"2026-10-28T02:21:37.093Z","title":"GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a user-controlled key. By exploiting…","severity":"LOW","score":2.3,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00222},{"id":"CVE-2026-105272","published":"2026-10-28T02:21:24.458Z","updated":"2026-10-28T02:21:24.458Z","title":"GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By…","severity":"LOW","score":2.3,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00177},{"id":"CVE-2026-118378","published":"2026-10-28T02:03:24.996Z","updated":"2026-11-02T20:08:49.001Z","title":"Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name","severity":"HIGH","score":8.5,"vendor":"TabularisDB","product":"tabularis","kev":false,"epss":0.00151},{"id":"CVE-2026-118377","published":"2026-10-28T02:03:24.283Z","updated":"2026-10-28T02:03:24.283Z","title":"mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks","severity":"HIGH","score":8.7,"vendor":"mewebstudio","product":"pos","kev":false,"epss":0.0018},{"id":"CVE-2026-118376","published":"2026-10-28T02:03:23.589Z","updated":"2026-10-28T16:11:20.194Z","title":"WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses","severity":"MEDIUM","score":6,"vendor":"Tencent","product":"WeKnora","kev":false,"epss":0.00273},{"id":"CVE-2026-118375","published":"2026-10-28T02:03:22.895Z","updated":"2026-10-28T02:03:22.895Z","title":"llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()","severity":"CRITICAL","score":9.2,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00368},{"id":"CVE-2026-118374","published":"2026-10-28T02:03:22.183Z","updated":"2026-11-02T19:57:56.079Z","title":"LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response","severity":"HIGH","score":8.2,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00212},{"id":"CVE-2026-118373","published":"2026-10-28T02:03:21.525Z","updated":"2026-10-28T02:03:21.525Z","title":"LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.0009},{"id":"CVE-2026-118372","published":"2026-10-28T02:03:20.849Z","updated":"2026-10-28T16:11:41.029Z","title":"LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00145},{"id":"CVE-2026-118371","published":"2026-10-28T02:03:20.152Z","updated":"2026-10-28T02:03:20.152Z","title":"LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00135},{"id":"CVE-2026-118370","published":"2026-10-28T02:03:19.447Z","updated":"2026-11-02T19:56:23.246Z","title":"libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes","severity":"HIGH","score":8.2,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00442},{"id":"CVE-2026-117610","published":"2026-10-28T02:03:18.766Z","updated":"2026-10-28T02:03:18.766Z","title":"libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser","severity":"HIGH","score":8.2,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00425},{"id":"CVE-2026-117609","published":"2026-10-28T02:03:18.083Z","updated":"2026-10-28T16:12:02.323Z","title":"rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder","severity":"HIGH","score":7.1,"vendor":"merbanan","product":"rtl_433","kev":false,"epss":0.0035},{"id":"CVE-2026-117608","published":"2026-10-28T02:03:17.365Z","updated":"2026-10-28T02:03:17.365Z","title":"Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow","severity":"MEDIUM","score":6.9,"vendor":"assimp","product":"assimp","kev":false,"epss":0.00135},{"id":"CVE-2026-117607","published":"2026-10-28T02:03:16.664Z","updated":"2026-11-02T19:55:05.548Z","title":"Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import","severity":"HIGH","score":8.6,"vendor":"thexerteproject","product":"xerteonlinetoolkits","kev":false,"epss":0.00684},{"id":"CVE-2026-117606","published":"2026-10-28T02:03:15.947Z","updated":"2026-10-28T02:03:15.947Z","title":"NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions","severity":"MEDIUM","score":5.3,"vendor":"Blair2004","product":"NexoPOS","kev":false,"epss":0.00278},{"id":"CVE-2026-117605","published":"2026-10-28T02:03:15.191Z","updated":"2026-10-28T16:12:20.568Z","title":"nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers","severity":"MEDIUM","score":5.3,"vendor":"nopSolutions","product":"nopCommerce","kev":false,"epss":0.00259},{"id":"CVE-2015-20129","published":"2026-10-28T02:03:14.501Z","updated":"2026-10-28T02:03:14.501Z","title":"CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/","severity":"HIGH","score":8.6,"vendor":"CrushFTP","product":"CrushFTP","kev":false,"epss":0.00152},{"id":"CVE-2014-125138","published":"2026-10-28T02:03:13.805Z","updated":"2026-11-02T19:54:09.045Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields","severity":"HIGH","score":8.7,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00423},{"id":"CVE-2014-125137","published":"2026-10-28T02:03:13.087Z","updated":"2026-10-28T02:03:13.087Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php","severity":"HIGH","score":7.1,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00718},{"id":"CVE-2014-125136","published":"2026-10-28T02:03:12.414Z","updated":"2026-10-28T16:12:26.616Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup","severity":"HIGH","score":8.2,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00412},{"id":"CVE-2013-20009","published":"2026-10-28T02:03:11.721Z","updated":"2026-10-28T02:03:11.721Z","title":"Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter","severity":"MEDIUM","score":4.8,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.00223},{"id":"CVE-2013-20008","published":"2026-10-28T02:03:11.024Z","updated":"2026-11-02T19:50:18.154Z","title":"Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password","severity":"HIGH","score":7,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.00252},{"id":"CVE-2013-20007","published":"2026-10-28T02:03:10.353Z","updated":"2026-10-28T02:03:10.353Z","title":"Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi","severity":"HIGH","score":8.6,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.02004},{"id":"CVE-2026-118272","published":"2026-10-28T02:00:21.447Z","updated":"2026-10-28T16:12:32.352Z","title":"a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00248},{"id":"CVE-2026-106013","published":"2026-10-28T01:30:48.320Z","updated":"2026-10-29T01:52:00.079Z","title":"Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter","severity":"CRITICAL","score":9.8,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00553},{"id":"CVE-2026-118271","published":"2026-10-28T01:30:47.285Z","updated":"2026-10-28T01:30:47.285Z","title":"a2ui-project a2ui data-context Resolver data-context.ts resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031},{"id":"CVE-2026-110879","published":"2026-10-28T00:07:41.577Z","updated":"2026-10-28T00:07:41.577Z","title":"jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)","severity":"CRITICAL","score":9.8,"vendor":"FasterXML","product":"jackson-databind","kev":false,"epss":0.01196},{"id":"CVE-2026-110747","published":"2026-10-28T00:02:32.462Z","updated":"2026-10-28T00:02:32.462Z","title":"jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-protobuf","kev":false,"epss":0.00387},{"id":"CVE-2026-104895","published":"2026-10-28T00:01:44.496Z","updated":"2026-10-28T00:01:44.496Z","title":"jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-smile","kev":false,"epss":0.0038},{"id":"CVE-2026-106972","published":"2026-10-28T00:00:00.000Z","updated":"2026-10-30T17:14:25.522Z","title":"Uncontrolled recursion in MessagePack\\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00339},{"id":"CVE-2026-106971","published":"2026-10-28T00:00:00.000Z","updated":"2026-10-29T17:10:24.531Z","title":"An integer overflow in the MessagePack\\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-104016","published":"2026-10-27T23:52:20.141Z","updated":"2026-10-27T23:52:20.141Z","title":"jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-protobuf","kev":false,"epss":0.00679},{"id":"CVE-2026-118129","published":"2026-10-27T23:15:19.571Z","updated":"2026-11-02T19:49:23.471Z","title":"jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication","severity":"MEDIUM","score":5.3,"vendor":"jeremyckahn","product":"Chitchatter","kev":false,"epss":0.00343},{"id":"CVE-2026-118338","published":"2026-10-27T23:03:21.158Z","updated":"2026-10-29T03:55:38.791Z","title":"Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118312","published":"2026-10-27T23:03:20.918Z","updated":"2026-10-28T17:37:51.486Z","title":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307},{"id":"CVE-2026-118319","published":"2026-10-27T23:03:20.699Z","updated":"2026-10-29T14:14:27.973Z","title":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00173},{"id":"CVE-2026-118309","published":"2026-10-27T23:03:20.473Z","updated":"2026-10-28T17:37:51.623Z","title":"Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307},{"id":"CVE-2026-118356","published":"2026-10-27T23:03:20.252Z","updated":"2026-10-29T03:55:39.873Z","title":"Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118315","published":"2026-10-27T23:03:20.026Z","updated":"2026-10-29T03:55:40.935Z","title":"Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118330","published":"2026-10-27T23:03:19.788Z","updated":"2026-10-29T03:55:43.478Z","title":"Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334},{"id":"CVE-2026-118341","published":"2026-10-27T23:03:19.541Z","updated":"2026-10-29T03:55:44.953Z","title":"Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118347","published":"2026-10-27T23:03:19.320Z","updated":"2026-10-29T03:55:46.396Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118314","published":"2026-10-27T23:03:19.094Z","updated":"2026-10-29T03:55:47.854Z","title":"Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275},{"id":"CVE-2026-118308","published":"2026-10-27T23:03:18.858Z","updated":"2026-10-28T17:37:51.768Z","title":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307},{"id":"CVE-2026-118335","published":"2026-10-27T23:03:18.612Z","updated":"2026-10-29T03:55:49.255Z","title":"Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118310","published":"2026-10-27T23:03:18.388Z","updated":"2026-10-28T17:37:51.918Z","title":"Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307},{"id":"CVE-2026-118342","published":"2026-10-27T23:03:18.174Z","updated":"2026-10-28T17:37:52.056Z","title":"Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295},{"id":"CVE-2026-118346","published":"2026-10-27T23:03:17.935Z","updated":"2026-10-29T03:55:50.814Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118316","published":"2026-10-27T23:03:17.720Z","updated":"2026-10-28T17:37:52.204Z","title":"Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295},{"id":"CVE-2026-118304","published":"2026-10-27T23:03:17.508Z","updated":"2026-10-29T03:55:51.896Z","title":"Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275},{"id":"CVE-2026-118345","published":"2026-10-27T23:03:17.254Z","updated":"2026-10-28T13:05:34.073Z","title":"Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118313","published":"2026-10-27T23:03:17.021Z","updated":"2026-10-29T03:55:52.956Z","title":"Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275},{"id":"CVE-2026-118332","published":"2026-10-27T23:03:16.794Z","updated":"2026-10-28T17:37:52.345Z","title":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295},{"id":"CVE-2026-118334","published":"2026-10-27T23:03:16.569Z","updated":"2026-10-29T03:55:54.016Z","title":"Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118311","published":"2026-10-27T23:03:16.341Z","updated":"2026-10-29T03:55:55.081Z","title":"Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275},{"id":"CVE-2026-118343","published":"2026-10-27T23:03:16.113Z","updated":"2026-10-29T03:55:56.157Z","title":"Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118359","published":"2026-10-27T23:03:15.892Z","updated":"2026-10-29T03:55:57.233Z","title":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00283},{"id":"CVE-2026-118327","published":"2026-10-27T23:03:15.662Z","updated":"2026-10-29T03:55:58.812Z","title":"Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275},{"id":"CVE-2026-118349","published":"2026-10-27T23:03:15.427Z","updated":"2026-10-29T03:56:00.406Z","title":"Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118353","published":"2026-10-27T23:03:15.202Z","updated":"2026-10-29T03:56:10.618Z","title":"Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118358","published":"2026-10-27T23:03:14.971Z","updated":"2026-10-29T03:56:05.093Z","title":"Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00358},{"id":"CVE-2026-118336","published":"2026-10-27T23:03:14.746Z","updated":"2026-10-29T03:56:06.635Z","title":"Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317},{"id":"CVE-2026-118333","published":"2026-10-27T23:03:14.507Z","updated":"2026-10-30T13:37:34.012Z","title":"Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00201},{"id":"CVE-2026-118328","published":"2026-10-27T23:03:14.278Z","updated":"2026-10-29T03:56:08.189Z","title":"Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00401},{"id":"CVE-2026-118351","published":"2026-10-27T23:03:13.982Z","updated":"2026-10-29T03:56:09.407Z","title":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118307","published":"2026-10-27T23:03:13.760Z","updated":"2026-10-29T03:56:11.733Z","title":"Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-118355","published":"2026-10-27T23:03:13.548Z","updated":"2026-10-28T17:37:52.484Z","title":"Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295},{"id":"CVE-2026-118352","published":"2026-10-27T23:03:13.321Z","updated":"2026-10-29T03:56:12.889Z","title":"Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118337","published":"2026-10-27T23:03:13.074Z","updated":"2026-10-30T13:37:10.489Z","title":"Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00201},{"id":"CVE-2026-118321","published":"2026-10-27T23:03:12.843Z","updated":"2026-10-28T17:37:52.625Z","title":"Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00354},{"id":"CVE-2026-118340","published":"2026-10-27T23:03:12.611Z","updated":"2026-10-28T17:37:52.763Z","title":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00354},{"id":"CVE-2026-118354","published":"2026-10-27T23:03:12.396Z","updated":"2026-10-29T03:56:13.973Z","title":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118329","published":"2026-10-27T23:03:12.181Z","updated":"2026-10-29T03:56:15.712Z","title":"Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388},{"id":"CVE-2026-118322","published":"2026-10-27T23:03:11.846Z","updated":"2026-10-29T14:14:50.833Z","title":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00205},{"id":"CVE-2026-118320","published":"2026-10-27T23:03:11.628Z","updated":"2026-10-29T03:56:17.159Z","title":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317},{"id":"CVE-2026-118317","published":"2026-10-27T23:03:11.418Z","updated":"2026-10-29T03:56:18.874Z","title":"Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317},{"id":"CVE-2026-118305","published":"2026-10-27T23:03:11.199Z","updated":"2026-10-28T17:37:52.934Z","title":"Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00369},{"id":"CVE-2026-118339","published":"2026-10-27T23:03:10.980Z","updated":"2026-10-29T03:56:20.340Z","title":"Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317},{"id":"CVE-2026-118350","published":"2026-10-27T23:03:10.539Z","updated":"2026-10-29T03:56:21.913Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264},{"id":"CVE-2026-118318","published":"2026-10-27T23:03:10.313Z","updated":"2026-10-29T14:14:05.516Z","title":"Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198},{"id":"CVE-2026-118357","published":"2026-10-27T23:03:10.088Z","updated":"2026-10-29T03:56:23.359Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00283},{"id":"CVE-2026-118344","published":"2026-10-27T23:03:09.848Z","updated":"2026-10-29T03:56:24.832Z","title":"Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034},{"id":"CVE-2026-118348","published":"2026-10-27T23:03:09.516Z","updated":"2026-10-29T03:56:31.370Z","title":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034},{"id":"CVE-2026-118331","published":"2026-10-27T23:03:09.097Z","updated":"2026-10-29T03:56:27.737Z","title":"Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034},{"id":"CVE-2026-118306","published":"2026-10-27T23:03:08.662Z","updated":"2026-10-28T17:37:53.096Z","title":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00369},{"id":"CVE-2026-50571","published":"2026-10-27T22:40:54.912Z","updated":"2026-10-28T16:12:40.129Z","title":"WebSub: Reflected script execution through intent-verification challenges","severity":"MEDIUM","score":5.7,"vendor":"w3c","product":"websub","kev":false,"epss":0.00233},{"id":"CVE-2026-59158","published":"2026-10-27T22:36:09.750Z","updated":"2026-10-29T18:23:47.915Z","title":"Nuxt Ollama: public runtime configuration discloses the configured cloud API key","severity":"HIGH","score":7.5,"vendor":"thoda-dev","product":"nuxt-ollama","kev":false,"epss":0.00502},{"id":"CVE-2026-58257","published":"2026-10-27T22:34:47.670Z","updated":"2026-11-02T19:47:13.898Z","title":"GRR vulnerable to Arbitrary File Read and Deletion","severity":"HIGH","score":7.2,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00466},{"id":"CVE-2026-58256","published":"2026-10-27T22:32:12.589Z","updated":"2026-10-27T22:32:12.589Z","title":"GRR vulnerable to Remote Code Execution Via PHP Code Injection","severity":"CRITICAL","score":9.1,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00575},{"id":"CVE-2026-58255","published":"2026-10-27T22:30:09.563Z","updated":"2026-10-28T16:12:46.274Z","title":"Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401","severity":"HIGH","score":8.8,"vendor":"jhuckaby","product":"Cronicle","kev":false,"epss":0.00415},{"id":"CVE-2026-58205","published":"2026-10-27T22:26:14.705Z","updated":"2026-10-29T18:22:43.499Z","title":"GRR has a Reflected XSS issue","severity":"HIGH","score":8.1,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00287},{"id":"CVE-2026-22063","published":"2026-10-27T22:20:43.242Z","updated":"2026-10-27T22:20:43.242Z","title":"CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products","severity":"MEDIUM","score":6,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00137},{"id":"CVE-2026-58496","published":"2026-10-27T22:18:34.301Z","updated":"2026-11-02T19:46:26.453Z","title":"ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API","severity":"MEDIUM","score":4.3,"vendor":"thorvg","product":"thorvg","kev":false,"epss":0.00211},{"id":"CVE-2026-118128","published":"2026-10-27T22:15:19.102Z","updated":"2026-10-28T16:12:56.611Z","title":"a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-js","kev":false,"epss":0.00358},{"id":"CVE-2026-57199","published":"2026-10-27T21:52:42.436Z","updated":"2026-10-27T21:52:42.436Z","title":"Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00481},{"id":"CVE-2026-57203","published":"2026-10-27T21:48:40.078Z","updated":"2026-10-29T18:22:00.568Z","title":"Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location","severity":"MEDIUM","score":6.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00145},{"id":"CVE-2026-57190","published":"2026-10-27T21:45:50.075Z","updated":"2026-10-28T16:13:06.105Z","title":"Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field","severity":"HIGH","score":7,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00679},{"id":"CVE-2026-97045","published":"2026-10-27T21:38:56.700Z","updated":"2026-10-27T21:38:56.700Z","title":"Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net","severity":"UNKNOWN","score":null,"vendor":"golang.org/x/net","product":"golang.org/x/net/html","kev":false,"epss":0.00202},{"id":"CVE-2026-78661","published":"2026-10-27T21:38:56.517Z","updated":"2026-10-27T21:38:56.517Z","title":"Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net","severity":"UNKNOWN","score":null,"vendor":"golang.org/x/net","product":"golang.org/x/net/html","kev":false,"epss":0.00185},{"id":"CVE-2026-62765","published":"2026-10-27T21:37:20.753Z","updated":"2026-10-31T18:13:36.551Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00438},{"id":"CVE-2026-57191","published":"2026-10-27T21:32:23.714Z","updated":"2026-11-02T19:45:36.758Z","title":"Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing","severity":"HIGH","score":8.2,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00592},{"id":"CVE-2026-57192","published":"2026-10-27T21:25:40.363Z","updated":"2026-10-27T21:25:40.363Z","title":"Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch","severity":"MEDIUM","score":6,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0065},{"id":"CVE-2026-57186","published":"2026-10-27T21:21:55.833Z","updated":"2026-10-28T16:13:12.086Z","title":"Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00602},{"id":"CVE-2026-57200","published":"2026-10-27T21:13:03.777Z","updated":"2026-10-30T20:18:00.957Z","title":"Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00879},{"id":"CVE-2026-57195","published":"2026-10-27T21:04:25.747Z","updated":"2026-11-02T19:44:27.494Z","title":"Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00573},{"id":"CVE-2026-85898","published":"2026-10-27T20:37:28.112Z","updated":"2026-10-31T18:01:13.467Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00767},{"id":"CVE-2026-83831","published":"2026-10-27T20:37:26.445Z","updated":"2026-10-31T18:01:11.998Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00767},{"id":"CVE-2026-116775","published":"2026-10-27T20:27:30.852Z","updated":"2026-10-27T20:27:30.852Z","title":"pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)","severity":"LOW","score":2.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00294},{"id":"CVE-2026-116774","published":"2026-10-27T20:25:26.914Z","updated":"2026-10-28T16:13:18.607Z","title":"russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)","severity":"MEDIUM","score":4.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00259},{"id":"CVE-2026-116773","published":"2026-10-27T20:23:25.559Z","updated":"2026-10-30T15:17:49.289Z","title":"russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets","severity":"MEDIUM","score":4.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00258},{"id":"CVE-2026-116696","published":"2026-10-27T20:14:32.973Z","updated":"2026-11-02T19:43:36.484Z","title":"russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages","severity":"LOW","score":3.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.0011},{"id":"CVE-2026-116695","published":"2026-10-27T20:10:34.010Z","updated":"2026-10-27T20:10:34.010Z","title":"Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass","severity":"MEDIUM","score":5.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00353},{"id":"CVE-2026-116694","published":"2026-10-27T20:09:06.484Z","updated":"2026-10-28T16:13:25.340Z","title":"OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation","severity":"MEDIUM","score":6.3,"vendor":"open-telemetry","product":"opentelemetry-python","kev":false,"epss":0.00378},{"id":"CVE-2026-116693","published":"2026-10-27T20:07:01.195Z","updated":"2026-10-30T19:25:57.583Z","title":"dd-trace: ReDOS in URL query string obfuscation","severity":"HIGH","score":8.7,"vendor":"DataDog","product":"dd-trace-js","kev":false,"epss":0.00449},{"id":"CVE-2026-116692","published":"2026-10-27T20:03:49.661Z","updated":"2026-11-02T19:42:28.160Z","title":"MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules","severity":"CRITICAL","score":9.8,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00704},{"id":"CVE-2026-103995","published":"2026-10-27T19:58:52.521Z","updated":"2026-10-28T00:33:14.944Z","title":"Lenient parsing of integers for response body and chunk framing","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0036},{"id":"CVE-2026-116691","published":"2026-10-27T19:56:22.083Z","updated":"2026-10-27T19:56:22.083Z","title":"MLflow CrewAI autologging records LLM provider API keys in logged trace spans","severity":"MEDIUM","score":6.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00207},{"id":"CVE-2026-112352","published":"2026-10-27T19:43:34.052Z","updated":"2026-10-28T16:13:31.837Z","title":"Sunhillo SureLine Authentication Bypass via Session Cookie","severity":"CRITICAL","score":9.1,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.01319},{"id":"CVE-2026-112351","published":"2026-10-27T19:43:19.355Z","updated":"2026-10-27T19:43:42.029Z","title":"Sunhillo SureLine OS Command Injection via networkDiag.cgi","severity":"HIGH","score":8.7,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.02683},{"id":"CVE-2026-112350","published":"2026-10-27T19:43:01.386Z","updated":"2026-11-02T19:41:38.553Z","title":"Sunhillo SureLine Path Traversal via radarUpdater.cgi","severity":"HIGH","score":8.7,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.00949},{"id":"CVE-2026-116690","published":"2026-10-27T19:42:35.798Z","updated":"2026-10-28T16:13:38.096Z","title":"MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source","severity":"HIGH","score":7.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00559},{"id":"CVE-2026-116689","published":"2026-10-27T19:38:46.034Z","updated":"2026-10-30T18:47:54.616Z","title":"follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects","severity":"MEDIUM","score":5.9,"vendor":"follow-redirects","product":"follow-redirects","kev":false,"epss":0.00266},{"id":"CVE-2026-116688","published":"2026-10-27T19:36:28.906Z","updated":"2026-11-02T19:40:48.630Z","title":"CKEditor: Cross-site scripting (XSS) in the engine package","severity":"HIGH","score":8.1,"vendor":"ckeditor","product":"ckeditor5","kev":false,"epss":0.00497},{"id":"CVE-2026-116687","published":"2026-10-27T19:33:11.074Z","updated":"2026-10-27T19:33:11.074Z","title":"CKEditor: Cross-site scripting (XSS) in the engine package","severity":"LOW","score":3.1,"vendor":"ckeditor","product":"ckeditor5","kev":false,"epss":0.00252},{"id":"CVE-2026-116686","published":"2026-10-27T19:29:16.001Z","updated":"2026-10-28T16:13:45.473Z","title":"Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas","severity":"MEDIUM","score":6.5,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00337},{"id":"CVE-2026-116685","published":"2026-10-27T19:26:46.926Z","updated":"2026-10-30T15:03:50.436Z","title":"Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies","severity":"MEDIUM","score":5.9,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00399},{"id":"CVE-2026-112355","published":"2026-10-27T19:15:49.546Z","updated":"2026-10-27T19:15:49.546Z","title":"MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API","severity":"HIGH","score":8.7,"vendor":"MembershipWorks","product":"MembershipWorks","kev":false,"epss":0.00269},{"id":"CVE-2026-116684","published":"2026-10-27T19:12:24.255Z","updated":"2026-11-02T19:40:02.808Z","title":"Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server","severity":"MEDIUM","score":6.8,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00365},{"id":"CVE-2026-116683","published":"2026-10-27T18:25:50.885Z","updated":"2026-10-27T18:25:50.885Z","title":"CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values","severity":"HIGH","score":7.1,"vendor":"ctfer-io","product":"terraform-provider-ctfd","kev":false,"epss":0.00379},{"id":"CVE-2026-118180","published":"2026-10-27T18:16:33.495Z","updated":"2026-10-27T18:27:53.280Z","title":"Matrix homeserver could redirect the chat session to a local file or network share","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00174},{"id":"CVE-2026-118179","published":"2026-10-27T18:16:32.658Z","updated":"2026-10-27T18:27:52.176Z","title":"Request forgery via news: links","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00179},{"id":"CVE-2026-118178","published":"2026-10-27T18:16:31.904Z","updated":"2026-10-27T18:27:51.092Z","title":"RSS feed could redirect its subscription to a local file or network share","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00179},{"id":"CVE-2026-118177","published":"2026-10-27T18:16:31.083Z","updated":"2026-10-27T18:27:49.964Z","title":"Calendar discovery accepted local file and remote network share locations","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00179},{"id":"CVE-2026-118176","published":"2026-10-27T18:16:30.272Z","updated":"2026-10-27T18:27:48.875Z","title":"Bypass of remote UNC path restriction in mailbox: URLs","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00218},{"id":"CVE-2026-118175","published":"2026-10-27T18:16:29.537Z","updated":"2026-10-27T18:27:47.611Z","title":"Content of other messages could be included when replying to a crafted message","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00179},{"id":"CVE-2026-118174","published":"2026-10-27T18:16:28.729Z","updated":"2026-10-27T18:27:46.521Z","title":"Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.0019},{"id":"CVE-2026-118173","published":"2026-10-27T18:11:51.815Z","updated":"2026-10-27T18:11:51.815Z","title":"MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement","severity":"MEDIUM","score":6.1,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.003},{"id":"CVE-2026-115413","published":"2026-10-27T18:10:28.758Z","updated":"2026-10-27T18:10:28.758Z","title":"AWS API MCP Server OAuth Token Audience Validation Bypass","severity":"HIGH","score":7.3,"vendor":"AWS","product":"aws-api-mcp-server","kev":false,"epss":0.00097},{"id":"CVE-2026-118171","published":"2026-10-27T18:05:18.037Z","updated":"2026-10-27T18:05:18.037Z","title":"CVE-2026-118171","severity":"UNKNOWN","score":null,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00142},{"id":"CVE-2026-118172","published":"2026-10-27T18:04:13.270Z","updated":"2026-10-27T18:04:13.270Z","title":"CVE-2026-118172","severity":"UNKNOWN","score":null,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00183},{"id":"CVE-2026-118170","published":"2026-10-27T18:02:55.025Z","updated":"2026-10-27T18:02:55.025Z","title":"CVE-2026-118170","severity":"UNKNOWN","score":null,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00142},{"id":"CVE-2026-57202","published":"2026-10-27T17:58:46.257Z","updated":"2026-10-28T16:13:52.414Z","title":"Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes","severity":"HIGH","score":8.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0044},{"id":"CVE-2026-57188","published":"2026-10-27T17:55:29.170Z","updated":"2026-10-30T20:22:55.339Z","title":"Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling","severity":"HIGH","score":7.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00522},{"id":"CVE-2026-116682","published":"2026-10-27T17:48:04.364Z","updated":"2026-11-02T19:38:28.867Z","title":"FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory","severity":"HIGH","score":8.6,"vendor":"gtsteffaniak","product":"filebrowser","kev":false,"epss":0.00536},{"id":"CVE-2026-117526","published":"2026-10-27T17:45:15.061Z","updated":"2026-10-28T11:19:16.821Z","title":"reduxjs redux-devtools Remotedev Server evalAction code injection","severity":"MEDIUM","score":4.8,"vendor":"reduxjs","product":"redux-devtools","kev":false,"epss":0.00142},{"id":"CVE-2026-116680","published":"2026-10-27T17:43:52.502Z","updated":"2026-10-27T17:43:52.502Z","title":"Homebox generic notifier SSRF via HTTP redirect after URL validation","severity":"MEDIUM","score":6.4,"vendor":"sysadminsmedia","product":"homebox","kev":false,"epss":0.0019},{"id":"CVE-2026-88812","published":"2026-10-27T17:43:18.583Z","updated":"2026-10-27T17:43:18.583Z","title":"X.Org Server XKB SetGeometry TextDoodad Double Free","severity":"HIGH","score":7.8,"vendor":"X.org","product":"xorg-x11-server","kev":false,"epss":0.00187},{"id":"CVE-2026-102816","published":"2026-10-27T17:41:21.636Z","updated":"2026-10-27T17:41:21.636Z","title":"Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305","severity":"MEDIUM","score":5.3,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00168},{"id":"CVE-2026-102815","published":"2026-10-27T17:40:59.514Z","updated":"2026-10-29T10:45:45.539Z","title":"Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305","severity":"MEDIUM","score":6.9,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00598},{"id":"CVE-2026-102814","published":"2026-10-27T17:40:43.627Z","updated":"2026-10-29T10:45:45.682Z","title":"Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305","severity":"HIGH","score":8.7,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.0036},{"id":"CVE-2026-102813","published":"2026-10-27T17:40:31.857Z","updated":"2026-10-27T17:40:31.857Z","title":"Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305","severity":"MEDIUM","score":6.1,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00198},{"id":"CVE-2026-102812","published":"2026-10-27T17:40:13.729Z","updated":"2026-10-27T17:40:13.729Z","title":"Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7","severity":"MEDIUM","score":6.9,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.0012},{"id":"CVE-2026-118132","published":"2026-10-27T17:38:13.552Z","updated":"2026-10-27T17:38:13.552Z","title":"CVE-2026-118132","severity":"UNKNOWN","score":null,"vendor":"NextChat","product":"NextChat","kev":false,"epss":0.00221},{"id":"CVE-2026-108311","published":"2026-10-27T17:35:43.548Z","updated":"2026-10-27T17:35:43.548Z","title":"Tanium addressed an insufficient logging vulnerability in Tanium Server.","severity":"LOW","score":2.7,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00241},{"id":"CVE-2026-108303","published":"2026-10-27T17:35:43.298Z","updated":"2026-10-27T17:35:43.298Z","title":"Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.","severity":"HIGH","score":8.8,"vendor":"Tanium","product":"Certificate Manager","kev":false,"epss":0.00253},{"id":"CVE-2026-108316","published":"2026-10-27T17:35:43.092Z","updated":"2026-10-27T17:35:43.092Z","title":"Tanium addressed an information disclosure vulnerability in Tanium Server.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00252},{"id":"CVE-2026-116656","published":"2026-10-27T17:35:42.916Z","updated":"2026-10-27T17:35:42.916Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00375},{"id":"CVE-2026-108325","published":"2026-10-27T17:35:42.735Z","updated":"2026-10-27T17:35:42.735Z","title":"Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.","severity":"MEDIUM","score":6.6,"vendor":"Tanium","product":"Reputation","kev":false,"epss":0.00244},{"id":"CVE-2026-116659","published":"2026-10-27T17:35:42.543Z","updated":"2026-10-27T17:35:42.543Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00303},{"id":"CVE-2026-108302","published":"2026-10-27T17:35:42.350Z","updated":"2026-10-27T17:35:42.350Z","title":"Tanium addressed an improper access controls vulnerability in Comply.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00169},{"id":"CVE-2026-108306","published":"2026-10-27T17:35:42.154Z","updated":"2026-10-27T17:35:42.154Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00137},{"id":"CVE-2026-108329","published":"2026-10-27T17:35:41.970Z","updated":"2026-10-27T17:35:41.970Z","title":"Tanium addressed an unauthorized code execution vulnerability in Threat Response.","severity":"HIGH","score":8.8,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00496},{"id":"CVE-2026-108332","published":"2026-10-27T17:35:41.790Z","updated":"2026-10-27T17:35:41.790Z","title":"Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.","severity":"MEDIUM","score":6.3,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00149},{"id":"CVE-2026-108301","published":"2026-10-27T17:35:24.243Z","updated":"2026-10-27T17:35:24.243Z","title":"Tanium addressed an improper access controls vulnerability in Comply.","severity":"MEDIUM","score":6,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00135},{"id":"CVE-2026-108304","published":"2026-10-27T17:35:24.064Z","updated":"2026-10-27T17:35:24.064Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00121},{"id":"CVE-2026-87086","published":"2026-10-27T17:35:23.877Z","updated":"2026-10-27T17:35:23.877Z","title":"Tanium addressed a denial of service vulnerability in Provision.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Provision","kev":false,"epss":0.00375},{"id":"CVE-2026-108309","published":"2026-10-27T17:35:23.693Z","updated":"2026-10-27T17:35:23.693Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","severity":"MEDIUM","score":5.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.0011},{"id":"CVE-2026-116658","published":"2026-10-27T17:35:23.506Z","updated":"2026-10-27T17:35:23.506Z","title":"Tanium addressed a denial of service vulnerability in Enforce.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00335},{"id":"CVE-2026-108313","published":"2026-10-27T17:35:06.612Z","updated":"2026-10-27T17:35:06.612Z","title":"Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.","severity":"MEDIUM","score":6.6,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00301},{"id":"CVE-2026-116649","published":"2026-10-27T17:35:06.420Z","updated":"2026-10-27T17:35:06.420Z","title":"Tanium addressed an improper output sanitization vulnerability in Enforce.","severity":"HIGH","score":7.1,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00202},{"id":"CVE-2026-116647","published":"2026-10-27T17:35:06.241Z","updated":"2026-10-27T17:35:06.241Z","title":"Tanium addressed an improper output sanitization vulnerability in Comply.","severity":"HIGH","score":7.1,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00243},{"id":"CVE-2026-116660","published":"2026-10-27T17:35:06.053Z","updated":"2026-10-27T17:35:06.053Z","title":"Tanium addressed an improper access controls vulnerability in Enforce.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00231},{"id":"CVE-2026-108326","published":"2026-10-27T17:35:05.870Z","updated":"2026-10-27T17:35:05.870Z","title":"Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00176},{"id":"CVE-2026-108330","published":"2026-10-27T17:35:05.683Z","updated":"2026-10-27T17:35:05.683Z","title":"Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.","severity":"LOW","score":3.6,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00127},{"id":"CVE-2026-116657","published":"2026-10-27T17:34:47.970Z","updated":"2026-10-27T17:34:47.970Z","title":"Tanium addressed a denial of service vulnerability in Enforce.","severity":"MEDIUM","score":5.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00339},{"id":"CVE-2026-108333","published":"2026-10-27T17:33:55.473Z","updated":"2026-10-27T17:33:55.473Z","title":"Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.","severity":"LOW","score":2.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00125},{"id":"CVE-2026-108307","published":"2026-10-27T17:33:55.273Z","updated":"2026-10-27T17:33:55.273Z","title":"Tanium addressed a heap-based buffer overflow vulnerability in Index.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00129},{"id":"CVE-2026-116679","published":"2026-10-27T17:33:35.883Z","updated":"2026-10-28T16:13:59.494Z","title":"Neko: Authorization bypass in legacy WebRTC input handling","severity":"MEDIUM","score":5.4,"vendor":"m1k1o","product":"neko","kev":false,"epss":0.00311},{"id":"CVE-2026-108310","published":"2026-10-27T17:33:33.737Z","updated":"2026-10-27T17:33:33.737Z","title":"Tanium addressed a denial of service vulnerability in Tanium Server.","severity":"MEDIUM","score":5.3,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00306},{"id":"CVE-2026-116662","published":"2026-10-27T17:33:33.558Z","updated":"2026-10-27T17:33:33.558Z","title":"Tanium addressed a compression bomb vulnerability in Enforce.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00375},{"id":"CVE-2026-108305","published":"2026-10-27T17:33:33.369Z","updated":"2026-10-27T17:33:33.369Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00139},{"id":"CVE-2026-108331","published":"2026-10-27T17:32:07.314Z","updated":"2026-10-27T17:32:07.314Z","title":"Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.","severity":"LOW","score":3.3,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00142},{"id":"CVE-2026-87085","published":"2026-10-27T17:31:29.433Z","updated":"2026-10-27T17:31:29.433Z","title":"Tanium addressed a SQL injection vulnerability in Provision.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Provision","kev":false,"epss":0.00205},{"id":"CVE-2026-108308","published":"2026-10-27T17:30:53.396Z","updated":"2026-10-27T17:30:53.396Z","title":"Tanium addressed a SQL injection vulnerability in Patch.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Patch","kev":false,"epss":0.00352},{"id":"CVE-2026-117516","published":"2026-10-27T17:30:18.655Z","updated":"2026-11-02T19:36:15.499Z","title":"oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412},{"id":"CVE-2026-108328","published":"2026-10-27T17:27:10.729Z","updated":"2026-10-27T17:27:10.729Z","title":"Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.","severity":"MEDIUM","score":4.2,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00231},{"id":"CVE-2026-116678","published":"2026-10-27T17:27:03.509Z","updated":"2026-10-30T14:24:42.185Z","title":"Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs","severity":"MEDIUM","score":5.8,"vendor":"dani-garcia","product":"vaultwarden","kev":false,"epss":0.0033},{"id":"CVE-2026-118131","published":"2026-10-27T17:23:46.474Z","updated":"2026-10-27T17:23:46.474Z","title":"CVE-2026-118131","severity":"UNKNOWN","score":null,"vendor":"GnuPG","product":"GnuPG","kev":false,"epss":0.00187},{"id":"CVE-2026-116677","published":"2026-10-27T17:23:01.792Z","updated":"2026-11-02T19:35:29.805Z","title":"OpenWISP Controller CA CRL REST API does not scope requests to managed organizations","severity":"MEDIUM","score":5.3,"vendor":"openwisp","product":"openwisp-controller","kev":false,"epss":0.00175},{"id":"CVE-2026-16491","published":"2026-10-27T17:21:38.467Z","updated":"2026-10-27T17:21:38.467Z","title":"CVE-2026-16491 CVE Record","severity":"MEDIUM","score":6.5,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00289},{"id":"CVE-2026-117515","published":"2026-10-27T17:15:14.553Z","updated":"2026-10-28T16:14:08.352Z","title":"oretnom23 php-travel-agency-system traceapplication.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412},{"id":"CVE-2026-116676","published":"2026-10-27T17:11:12.744Z","updated":"2026-10-27T17:11:12.744Z","title":"Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan","severity":"HIGH","score":8.8,"vendor":"runatlantis","product":"atlantis","kev":false,"epss":0.00466},{"id":"CVE-2026-104353","published":"2026-10-27T17:03:36.381Z","updated":"2026-10-27T17:03:36.381Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.013},{"id":"CVE-2026-105780","published":"2026-10-27T17:03:36.035Z","updated":"2026-11-02T19:30:48.456Z","title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.0049},{"id":"CVE-2026-105489","published":"2026-10-27T17:03:35.705Z","updated":"2026-10-28T13:44:41.171Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00476},{"id":"CVE-2026-104350","published":"2026-10-27T17:03:34.960Z","updated":"2026-11-02T19:33:52.659Z","title":"Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)","severity":"CRITICAL","score":9.3,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00605},{"id":"CVE-2026-105781","published":"2026-10-27T17:03:34.741Z","updated":"2026-10-27T17:03:34.741Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":10,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00518},{"id":"CVE-2026-104351","published":"2026-10-27T17:03:34.527Z","updated":"2026-11-02T19:29:52.930Z","title":"Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00573},{"id":"CVE-2026-104354","published":"2026-10-27T17:03:34.305Z","updated":"2026-10-28T16:14:22.371Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.1,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00496},{"id":"CVE-2026-105779","published":"2026-10-27T17:03:34.085Z","updated":"2026-11-02T19:33:13.218Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.1,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00295},{"id":"CVE-2026-117514","published":"2026-10-27T17:00:16.415Z","updated":"2026-11-02T19:28:55.869Z","title":"oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412},{"id":"CVE-2026-57189","published":"2026-10-27T16:59:46.057Z","updated":"2026-10-28T16:14:48.359Z","title":"Asterisk: Possible RED T.140 Generation Accumulation OOB Write","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00737},{"id":"CVE-2026-57201","published":"2026-10-27T16:56:37.203Z","updated":"2026-10-30T20:19:58.895Z","title":"Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.007},{"id":"CVE-2026-114598","published":"2026-10-27T16:53:28.775Z","updated":"2026-10-27T16:53:28.775Z","title":"Access of resource using incompatible type ('type confusion') in EPICS Base","severity":"HIGH","score":8.7,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00298},{"id":"CVE-2026-108015","published":"2026-10-27T16:53:19.893Z","updated":"2026-10-27T20:29:23.260Z","title":"eMudhra Compromised Certificate vulnerability impacts HCL Notes Client","severity":"CRITICAL","score":9.1,"vendor":"HCLSoftware","product":"Notes Client","kev":false,"epss":0.00128},{"id":"CVE-2026-57194","published":"2026-10-27T16:52:47.225Z","updated":"2026-11-02T19:31:49.547Z","title":"Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk","severity":"MEDIUM","score":5.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00442},{"id":"CVE-2026-114597","published":"2026-10-27T16:51:59.240Z","updated":"2026-10-27T16:51:59.240Z","title":"Improper handling of length parameter inconsistency in EPICS Base","severity":"HIGH","score":8.7,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00298},{"id":"CVE-2026-114596","published":"2026-10-27T16:50:09.514Z","updated":"2026-10-27T16:50:09.514Z","title":"Integer overflow or wraparound in EPICS Base","severity":"HIGH","score":8.8,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.0026},{"id":"CVE-2026-114595","published":"2026-10-27T16:48:37.138Z","updated":"2026-10-27T16:48:37.138Z","title":"Integer overflow or wraparound in EPICS Base","severity":"CRITICAL","score":9.3,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00502},{"id":"CVE-2026-57198","published":"2026-10-27T16:47:20.717Z","updated":"2026-11-02T19:28:01.932Z","title":"Asterisk: Possible RED T.140 Heap Buffer Overflow","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00825},{"id":"CVE-2026-116675","published":"2026-10-27T16:47:01.183Z","updated":"2026-10-28T16:15:12.999Z","title":"TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization","severity":"HIGH","score":8.5,"vendor":"tinymce","product":"tinymce","kev":false,"epss":0.00349},{"id":"CVE-2026-117513","published":"2026-10-27T16:45:10.269Z","updated":"2026-11-02T19:30:50.660Z","title":"oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00263},{"id":"CVE-2026-116674","published":"2026-10-27T16:40:46.246Z","updated":"2026-11-02T19:30:12.615Z","title":"systeminformation: Prototype pollution in `networkStats()` via the interface name","severity":"MEDIUM","score":6.5,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00287},{"id":"CVE-2026-57185","published":"2026-10-27T16:40:27.615Z","updated":"2026-10-30T20:21:55.599Z","title":"Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser","severity":"MEDIUM","score":6.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00478},{"id":"CVE-2026-48360","published":"2026-10-27T16:38:56.785Z","updated":"2026-10-29T03:56:34.974Z","title":"Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)","severity":"CRITICAL","score":9.6,"vendor":"Adobe","product":"Adobe Connect Desktop App","kev":false,"epss":0.0045},{"id":"CVE-2026-116673","published":"2026-10-27T16:38:15.558Z","updated":"2026-10-28T16:15:47.864Z","title":"systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net","severity":"LOW","score":3.3,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00127},{"id":"CVE-2026-108014","published":"2026-10-27T16:36:57.891Z","updated":"2026-10-27T20:41:13.359Z","title":"eMudhra Compromised Certificate vulnerability impacts HCL Domino Server","severity":"CRITICAL","score":9.1,"vendor":"HCLSoftware","product":"Domino Server","kev":false,"epss":0.00128},{"id":"CVE-2026-57197","published":"2026-10-27T16:35:59.337Z","updated":"2026-11-02T19:27:17.564Z","title":"Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)","severity":"HIGH","score":7.7,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00531},{"id":"CVE-2026-109090","published":"2026-10-27T16:32:56.867Z","updated":"2026-10-27T16:32:56.867Z","title":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"x.org","product":"libXi","kev":false,"epss":0.00258},{"id":"CVE-2026-116672","published":"2026-10-27T16:31:48.429Z","updated":"2026-10-30T20:15:42.022Z","title":"Authlib RFC 7592 examples omit registration-access-token client binding","severity":"HIGH","score":8.8,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00274},{"id":"CVE-2026-117512","published":"2026-10-27T16:30:18.263Z","updated":"2026-10-28T16:15:55.262Z","title":"oretnom23 php-travel-agency-system employee_insert.php unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00371},{"id":"CVE-2026-109088","published":"2026-10-27T16:26:20.597Z","updated":"2026-10-27T16:26:20.597Z","title":"libXtst RECORD EnableContext Reply Endless Loop","severity":"MEDIUM","score":6.5,"vendor":"X.org","product":"libXtst","kev":false,"epss":0.00272},{"id":"CVE-2026-48380","published":"2026-10-27T16:23:08.580Z","updated":"2026-10-28T16:16:04.990Z","title":"Substance3D - Painter | Out-of-bounds Read (CWE-125)","severity":"MEDIUM","score":5.5,"vendor":"Adobe","product":"Adobe Substance 3D Painter","kev":false,"epss":0.00186},{"id":"CVE-2026-48379","published":"2026-10-27T16:23:08.363Z","updated":"2026-10-29T10:45:45.823Z","title":"Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)","severity":"HIGH","score":7.8,"vendor":"Adobe","product":"Adobe Substance 3D Painter","kev":false,"epss":0.00187},{"id":"CVE-2026-104349","published":"2026-10-27T16:21:54.690Z","updated":"2026-10-29T10:45:45.965Z","title":"Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)","severity":"HIGH","score":7.3,"vendor":"Adobe","product":"Creative Cloud Desktop Application","kev":false,"epss":0.00156},{"id":"CVE-2025-64394","published":"2026-10-27T16:16:58.979Z","updated":"2026-10-27T16:16:58.979Z","title":"A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365,…","severity":"MEDIUM","score":4.3,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00107},{"id":"CVE-2026-108141","published":"2026-10-27T16:16:58.971Z","updated":"2026-10-27T16:16:58.971Z","title":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…","severity":"MEDIUM","score":5.9,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00357},{"id":"CVE-2026-106078","published":"2026-10-27T16:16:58.925Z","updated":"2026-10-27T16:16:58.925Z","title":"A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API…","severity":"MEDIUM","score":6.9,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00261},{"id":"CVE-2026-107671","published":"2026-10-27T16:16:58.921Z","updated":"2026-10-27T16:16:58.921Z","title":"A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA…","severity":"HIGH","score":8.5,"vendor":"Veeam","product":"ONE","kev":false,"epss":0.00346},{"id":"CVE-2026-108142","published":"2026-10-27T16:16:58.907Z","updated":"2026-10-27T16:16:58.907Z","title":"A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.","severity":"CRITICAL","score":9.1,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00401},{"id":"CVE-2026-106077","published":"2026-10-27T16:16:58.905Z","updated":"2026-10-27T16:16:58.905Z","title":"A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem…","severity":"HIGH","score":8.3,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00229},{"id":"CVE-2026-106076","published":"2026-10-27T16:16:58.882Z","updated":"2026-10-27T16:16:58.882Z","title":"A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365…","severity":"CRITICAL","score":9,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00367},{"id":"CVE-2026-108140","published":"2026-10-27T16:16:58.797Z","updated":"2026-10-27T16:16:58.797Z","title":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…","severity":"MEDIUM","score":5.9,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00357},{"id":"CVE-2026-105477","published":"2026-10-27T16:16:58.785Z","updated":"2026-10-27T16:16:58.785Z","title":"A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance…","severity":"HIGH","score":7.3,"vendor":"Veeam","product":"Agent for Linux","kev":false,"epss":0.00131},{"id":"CVE-2026-82984","published":"2026-10-27T16:15:34.831Z","updated":"2026-10-27T16:15:34.831Z","title":"When a team was configured as \"visible to everyone\", the web UI correctly blocked non-members from viewing the team (\"You are not a member of ...\"), but the…","severity":"MEDIUM","score":4.3,"vendor":"Nextcloud","product":"Server","kev":false,"epss":0.00274},{"id":"CVE-2026-77167","published":"2026-10-27T16:15:34.778Z","updated":"2026-10-27T16:15:34.778Z","title":"Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there…","severity":"HIGH","score":7.5,"vendor":"Nextcloud","product":"server","kev":false,"epss":0.00367},{"id":"CVE-2026-77173","published":"2026-10-27T16:15:34.777Z","updated":"2026-10-27T16:15:34.777Z","title":"A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as…","severity":"MEDIUM","score":4.3,"vendor":"Nextcloud","product":"Files Confidential","kev":false,"epss":0.00213},{"id":"CVE-2026-67400","published":"2026-10-27T16:15:34.773Z","updated":"2026-10-27T16:15:34.773Z","title":"A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.","severity":"LOW","score":3.5,"vendor":"Nextcloud","product":"Richdocuments","kev":false,"epss":0.0018},{"id":"CVE-2026-77171","published":"2026-10-27T16:15:34.770Z","updated":"2026-10-27T16:15:34.770Z","title":"A public shared collective always allowed recipients of the link to create pages.","severity":"LOW","score":3.5,"vendor":"Nextcloud","product":"Collectives","kev":false,"epss":0.00174},{"id":"CVE-2026-77172","published":"2026-10-27T16:15:34.765Z","updated":"2026-10-27T16:15:34.765Z","title":"App passwords were allowed to bypass password confirmation on sensitive endpoints.","severity":"MEDIUM","score":5.3,"vendor":"Nextcloud","product":"Server","kev":false,"epss":0.00294},{"id":"CVE-2026-87897","published":"2026-10-27T16:15:34.742Z","updated":"2026-10-27T16:15:34.742Z","title":"A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low…","severity":"MEDIUM","score":4.6,"vendor":"Nextcloud","product":"whiteboard","kev":false,"epss":0.00203},{"id":"CVE-2026-82983","published":"2026-10-27T16:15:34.683Z","updated":"2026-10-27T16:15:34.683Z","title":"The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the…","severity":"LOW","score":3.3,"vendor":"Nextcloud","product":"Tables","kev":false,"epss":0.00114},{"id":"CVE-2026-82986","published":"2026-10-27T16:15:34.671Z","updated":"2026-10-27T16:15:34.671Z","title":"The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have…","severity":"MEDIUM","score":4.6,"vendor":"Nextcloud","product":"Tables","kev":false,"epss":0.00168},{"id":"CVE-2026-54462","published":"2026-10-27T16:12:32.516Z","updated":"2026-11-02T19:29:02.459Z","title":"knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion","severity":"MEDIUM","score":6.5,"vendor":"knative","product":"pkg","kev":false,"epss":0.00376},{"id":"CVE-2026-112353","published":"2026-10-27T16:10:08.568Z","updated":"2026-10-28T16:16:12.399Z","title":"GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment","severity":"MEDIUM","score":6.2,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.00243},{"id":"CVE-2026-113775","published":"2026-10-27T16:06:22.013Z","updated":"2026-10-29T10:45:46.129Z","title":"Dynamic Library Loading Process Control in Autodesk Fusion Desktop","severity":"HIGH","score":7.8,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00168},{"id":"CVE-2026-109089","published":"2026-10-27T16:05:56.113Z","updated":"2026-10-27T16:05:56.113Z","title":"libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"X.Org","product":"libXi","kev":false,"epss":0.00258},{"id":"CVE-2026-102638","published":"2026-10-27T16:05:47.605Z","updated":"2026-10-27T16:05:47.605Z","title":"Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172},{"id":"CVE-2026-102637","published":"2026-10-27T16:05:20.237Z","updated":"2026-10-27T16:05:20.237Z","title":"Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172},{"id":"CVE-2026-102636","published":"2026-10-27T16:04:54.299Z","updated":"2026-10-27T16:04:54.299Z","title":"Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172},{"id":"CVE-2026-107672","published":"2026-10-27T16:04:04.713Z","updated":"2026-10-29T10:45:46.291Z","title":"Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility","severity":"HIGH","score":8.8,"vendor":"Autodesk","product":"Fusion Post Processor Utility","kev":false,"epss":0.00337},{"id":"CVE-2026-117511","published":"2026-10-27T16:00:16.451Z","updated":"2026-11-02T19:26:28.971Z","title":"desmondmorris node-tesseract Command Builder tesseract.js process os command injection","severity":"MEDIUM","score":6.9,"vendor":"desmondmorris","product":"node-tesseract","kev":false,"epss":0.01635},{"id":"CVE-2026-116863","published":"2026-10-27T15:56:41.312Z","updated":"2026-10-29T13:47:39.657Z","title":"WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"CRITICAL","score":9.6,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00177},{"id":"CVE-2026-115495","published":"2026-10-27T15:55:13.638Z","updated":"2026-10-29T17:10:25.690Z","title":"Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket","severity":"MEDIUM","score":5.7,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00078},{"id":"CVE-2026-90465","published":"2026-10-27T15:52:29.859Z","updated":"2026-10-29T10:45:46.468Z","title":"Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00237},{"id":"CVE-2026-93862","published":"2026-10-27T15:52:28.633Z","updated":"2026-10-29T01:52:05.734Z","title":"Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00165},{"id":"CVE-2026-112709","published":"2026-10-27T15:52:28.465Z","updated":"2026-10-27T15:52:28.465Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419},{"id":"CVE-2026-90464","published":"2026-10-27T15:52:28.267Z","updated":"2026-10-27T15:52:28.267Z","title":"Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00364},{"id":"CVE-2026-103593","published":"2026-10-27T15:52:28.244Z","updated":"2026-10-29T10:45:46.609Z","title":"Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.001},{"id":"CVE-2026-113881","published":"2026-10-27T15:52:28.229Z","updated":"2026-10-27T15:52:28.229Z","title":"Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution","severity":"MEDIUM","score":6.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00356},{"id":"CVE-2026-93434","published":"2026-10-27T15:52:28.182Z","updated":"2026-10-27T15:52:28.182Z","title":"Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00458},{"id":"CVE-2026-90442","published":"2026-10-27T15:52:28.165Z","updated":"2026-10-27T15:52:28.165Z","title":"Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00243},{"id":"CVE-2026-112710","published":"2026-10-27T15:52:28.053Z","updated":"2026-10-27T15:52:28.053Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419},{"id":"CVE-2026-82332","published":"2026-10-27T15:52:27.999Z","updated":"2026-10-27T15:52:27.999Z","title":"Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking","severity":"MEDIUM","score":5.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00116},{"id":"CVE-2026-93857","published":"2026-10-27T15:52:27.970Z","updated":"2026-10-29T10:45:46.751Z","title":"Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00557},{"id":"CVE-2026-93866","published":"2026-10-27T15:52:27.871Z","updated":"2026-10-27T15:52:27.871Z","title":"Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00509},{"id":"CVE-2026-93864","published":"2026-10-27T15:52:27.765Z","updated":"2026-10-29T10:45:46.897Z","title":"Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133},{"id":"CVE-2026-103594","published":"2026-10-27T15:52:27.758Z","updated":"2026-10-27T15:52:27.758Z","title":"Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution","severity":"CRITICAL","score":9.5,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00432},{"id":"CVE-2026-104381","published":"2026-10-27T15:52:27.697Z","updated":"2026-10-27T15:52:27.697Z","title":"Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service","severity":"MEDIUM","score":6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133},{"id":"CVE-2026-111107","published":"2026-10-27T15:52:27.690Z","updated":"2026-10-27T15:52:27.690Z","title":"Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00355},{"id":"CVE-2026-93865","published":"2026-10-27T15:52:27.668Z","updated":"2026-10-29T10:45:47.040Z","title":"Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00463},{"id":"CVE-2026-109823","published":"2026-10-27T15:47:36.862Z","updated":"2026-10-27T15:47:36.862Z","title":"Host filesystem path disclosure via DNS rebinding","severity":"LOW","score":2.3,"vendor":"tidewave-ai","product":"tidewave","kev":false,"epss":0.00368},{"id":"CVE-2026-117510","published":"2026-10-27T15:45:17.291Z","updated":"2026-11-02T19:26:02.462Z","title":"Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal","severity":"MEDIUM","score":5.3,"vendor":"Dexmal","product":"Dexbotic","kev":false,"epss":0.00486},{"id":"CVE-2026-117509","published":"2026-10-27T15:30:18.930Z","updated":"2026-10-28T16:16:18.865Z","title":"crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal","severity":"MEDIUM","score":5.3,"vendor":"crownpku","product":"Rasa_NLU_Chi","kev":false,"epss":0.00407},{"id":"CVE-2026-104189","published":"2026-10-27T15:22:14.210Z","updated":"2026-11-02T19:24:37.473Z","title":"3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share","severity":"HIGH","score":7.5,"vendor":"maz1987in","product":"3Dviewer-Nextcloud","kev":false,"epss":0.00353},{"id":"CVE-2026-111585","published":"2026-10-27T15:19:40.571Z","updated":"2026-10-27T15:19:40.571Z","title":"Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00288},{"id":"CVE-2026-111584","published":"2026-10-27T15:18:50.953Z","updated":"2026-10-27T15:18:50.953Z","title":"Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"TeamViewer Remote - Patch Management","kev":false,"epss":0.00108},{"id":"CVE-2026-111583","published":"2026-10-27T15:15:44.411Z","updated":"2026-10-27T15:15:44.411Z","title":"Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00193},{"id":"CVE-2026-111582","published":"2026-10-27T15:13:13.769Z","updated":"2026-10-27T15:13:13.769Z","title":"Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"Remote Management - Monitoring","kev":false,"epss":0.00099},{"id":"CVE-2026-92377","published":"2026-10-27T15:11:55.955Z","updated":"2026-10-27T15:11:55.955Z","title":"Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00109},{"id":"CVE-2026-92376","published":"2026-10-27T15:11:08.772Z","updated":"2026-10-27T15:11:08.772Z","title":"Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Remote Management - Monitoring","kev":false,"epss":0.00129},{"id":"CVE-2026-92375","published":"2026-10-27T15:10:09.611Z","updated":"2026-10-27T15:10:09.611Z","title":"Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.001},{"id":"CVE-2026-92374","published":"2026-10-27T15:09:25.189Z","updated":"2026-10-27T15:09:25.189Z","title":"Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00092},{"id":"CVE-2026-92372","published":"2026-10-27T15:08:28.439Z","updated":"2026-10-27T15:08:28.439Z","title":"Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00426},{"id":"CVE-2026-117507","published":"2026-10-27T15:00:21.118Z","updated":"2026-11-02T19:21:03.858Z","title":"a2aproject a2a-java TaskManager.saveTaskEvent race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00343},{"id":"CVE-2026-117506","published":"2026-10-27T14:45:14.820Z","updated":"2026-11-02T19:24:53.453Z","title":"a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.0031},{"id":"CVE-2026-117604","published":"2026-10-27T14:39:10.858Z","updated":"2026-11-02T19:20:16.074Z","title":"Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00307},{"id":"CVE-2026-117505","published":"2026-10-27T14:30:19.859Z","updated":"2026-10-28T16:16:24.531Z","title":"a2aproject a2a-java ChildQueue queue.offer resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.0031},{"id":"CVE-2026-105987","published":"2026-10-27T14:19:02.333Z","updated":"2026-10-27T14:19:02.333Z","title":"Stored XSS in KGS Software tia Viewer","severity":"MEDIUM","score":5.1,"vendor":"KGS Software","product":"tia Viewer","kev":false,"epss":0.00239},{"id":"CVE-2026-118027","published":"2026-10-27T14:06:06.303Z","updated":"2026-10-27T14:06:06.303Z","title":"Frame poisoning in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00133},{"id":"CVE-2026-118026","published":"2026-10-27T14:06:05.943Z","updated":"2026-10-27T18:18:37.886Z","title":"Invalid pointer in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118025","published":"2026-10-27T14:06:05.536Z","updated":"2026-10-27T18:18:33.578Z","title":"Other issue in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118024","published":"2026-10-27T14:06:05.145Z","updated":"2026-10-27T18:18:32.888Z","title":"Use-after-free in the Graphics: Text component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118023","published":"2026-10-27T14:06:04.734Z","updated":"2026-10-27T18:18:26.392Z","title":"Sandbox escape due to use-after-free in the Graphics: WebRender component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118022","published":"2026-10-27T14:06:04.383Z","updated":"2026-10-27T18:18:21.367Z","title":"Sandbox escape due to use-after-free in the Disability Access APIs component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118021","published":"2026-10-27T14:06:04.037Z","updated":"2026-10-27T18:18:11.169Z","title":"Sandbox escape due to use-after-free in the XPCOM component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118020","published":"2026-10-27T14:06:03.687Z","updated":"2026-10-27T18:18:06.754Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118019","published":"2026-10-27T14:06:03.344Z","updated":"2026-10-27T18:17:56.498Z","title":"Race condition, use-after-free in the DOM: File component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118018","published":"2026-10-27T14:06:02.952Z","updated":"2026-10-27T14:06:02.952Z","title":"Spoofing issue in the Downloads component in Firefox for Android","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00133},{"id":"CVE-2026-118017","published":"2026-10-27T14:06:02.550Z","updated":"2026-10-27T18:17:55.060Z","title":"Use-after-free in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118016","published":"2026-10-27T14:06:02.197Z","updated":"2026-10-27T18:17:48.307Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00142},{"id":"CVE-2026-118015","published":"2026-10-27T14:06:01.814Z","updated":"2026-10-27T18:17:46.874Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118014","published":"2026-10-27T14:06:01.470Z","updated":"2026-10-27T18:17:44.493Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118013","published":"2026-10-27T14:06:01.113Z","updated":"2026-10-27T18:17:42.258Z","title":"Use-after-free in the Layout: Images, Video, and HTML Frames component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118012","published":"2026-10-27T14:06:00.756Z","updated":"2026-10-27T18:17:36.916Z","title":"Use-after-free in the DOM: Animation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118011","published":"2026-10-27T14:06:00.409Z","updated":"2026-10-27T18:17:36.146Z","title":"Frame poisoning in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118010","published":"2026-10-27T14:06:00.056Z","updated":"2026-10-27T18:16:59.477Z","title":"Use-after-free in the Disability Access APIs component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118009","published":"2026-10-27T14:05:59.709Z","updated":"2026-10-27T18:16:52.906Z","title":"Integer overflow, use-after-free in the Graphics: Text component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118008","published":"2026-10-27T14:05:59.374Z","updated":"2026-10-28T03:55:51.977Z","title":"Privilege escalation in the DOM: Navigation component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0035},{"id":"CVE-2026-118007","published":"2026-10-27T14:05:59.029Z","updated":"2026-10-27T18:16:49.281Z","title":"Use-after-free in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118006","published":"2026-10-27T14:05:58.678Z","updated":"2026-10-27T18:16:47.829Z","title":"Privilege escalation due to use-after-free in the WebRTC: Signaling component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118005","published":"2026-10-27T14:05:58.322Z","updated":"2026-10-27T18:16:44.947Z","title":"Use-after-free in the WebRTC: Signaling component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00151},{"id":"CVE-2026-118004","published":"2026-10-27T14:05:57.018Z","updated":"2026-10-27T18:30:31.194Z","title":"Incorrect boundary conditions in the CSS Transitions and Animations component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-118003","published":"2026-10-27T14:05:56.677Z","updated":"2026-10-27T18:30:30.106Z","title":"Information disclosure in the Networking: DNS component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-118002","published":"2026-10-27T14:05:56.271Z","updated":"2026-10-27T18:30:29.034Z","title":"Information disclosure due to race condition in the Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-118000","published":"2026-10-27T14:05:55.917Z","updated":"2026-10-27T18:30:27.970Z","title":"Information disclosure in the Networking: HTTP component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117999","published":"2026-10-27T14:05:55.569Z","updated":"2026-10-27T18:30:26.874Z","title":"Race condition in the IPC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117998","published":"2026-10-27T14:05:55.174Z","updated":"2026-10-27T18:30:25.821Z","title":"Mitigation bypass in the DOM: Push Subscriptions component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0019},{"id":"CVE-2026-117997","published":"2026-10-27T14:05:54.821Z","updated":"2026-10-27T18:30:24.710Z","title":"Sandbox escape due to use-after-free in the Widget component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117996","published":"2026-10-27T14:05:54.475Z","updated":"2026-10-27T18:30:23.636Z","title":"Incorrect boundary conditions in the WebRTC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117995","published":"2026-10-27T14:05:54.125Z","updated":"2026-10-27T18:30:22.031Z","title":"Privilege escalation in the DOM: UI Events & Focus Handling component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117994","published":"2026-10-27T14:05:53.780Z","updated":"2026-10-27T18:30:20.973Z","title":"Use-after-free in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117993","published":"2026-10-27T14:05:53.429Z","updated":"2026-10-27T18:30:19.908Z","title":"Integer overflow in the Graphics: Text component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117992","published":"2026-10-27T14:05:53.063Z","updated":"2026-10-27T18:30:18.849Z","title":"Information disclosure in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117991","published":"2026-10-27T14:05:52.643Z","updated":"2026-10-27T18:30:17.794Z","title":"Incorrect boundary conditions in the Layout: Text and Fonts component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117990","published":"2026-10-27T14:05:52.279Z","updated":"2026-10-27T18:30:16.748Z","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117989","published":"2026-10-27T14:05:51.927Z","updated":"2026-10-27T18:30:15.688Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117988","published":"2026-10-27T14:05:51.557Z","updated":"2026-10-27T18:30:14.644Z","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117987","published":"2026-10-27T14:05:51.161Z","updated":"2026-10-27T18:30:13.617Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117986","published":"2026-10-27T14:05:50.796Z","updated":"2026-10-27T18:30:12.571Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117985","published":"2026-10-27T14:05:50.440Z","updated":"2026-10-27T18:30:11.523Z","title":"Sandbox escape due to use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117984","published":"2026-10-27T14:05:50.057Z","updated":"2026-10-27T18:30:10.478Z","title":"Incorrect boundary conditions in the Layout: Scrolling and Overflow component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117983","published":"2026-10-27T14:05:49.710Z","updated":"2026-10-27T18:30:09.435Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117982","published":"2026-10-27T14:05:48.359Z","updated":"2026-10-27T18:30:08.385Z","title":"Invalid pointer in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117981","published":"2026-10-27T14:05:47.977Z","updated":"2026-10-27T18:30:07.297Z","title":"Privilege escalation in the Toolkit component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117980","published":"2026-10-27T14:05:47.640Z","updated":"2026-10-27T18:30:06.220Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117979","published":"2026-10-27T14:05:47.274Z","updated":"2026-10-27T18:30:05.167Z","title":"Incorrect boundary conditions in the Graphics: WebRender component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117978","published":"2026-10-27T14:05:46.876Z","updated":"2026-10-27T18:30:04.130Z","title":"Incorrect boundary conditions in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117977","published":"2026-10-27T14:05:46.518Z","updated":"2026-10-27T18:30:03.076Z","title":"Other issue in the Console component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117976","published":"2026-10-27T14:05:46.140Z","updated":"2026-10-27T18:30:02.000Z","title":"Site isolation issue in the DOM: Navigation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117975","published":"2026-10-27T14:05:45.789Z","updated":"2026-10-27T18:30:00.950Z","title":"Sandbox escape due to invalid pointer in the Graphics: WebRender component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117974","published":"2026-10-27T14:05:45.441Z","updated":"2026-10-27T18:29:59.853Z","title":"Use-after-free in the XML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117973","published":"2026-10-27T14:05:45.055Z","updated":"2026-10-27T18:29:57.600Z","title":"Use-after-free in the Networking: DNS component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117972","published":"2026-10-27T14:05:44.663Z","updated":"2026-10-27T18:29:56.557Z","title":"Use-after-free in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117971","published":"2026-10-27T14:05:44.302Z","updated":"2026-10-27T18:29:55.504Z","title":"Sandbox escape due to use-after-free in the Print Preview component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117970","published":"2026-10-27T14:05:43.941Z","updated":"2026-10-27T18:29:54.435Z","title":"Race condition in the Disability Access APIs component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117969","published":"2026-10-27T14:05:43.586Z","updated":"2026-10-27T18:29:53.353Z","title":"Invalid pointer in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117968","published":"2026-10-27T14:05:43.234Z","updated":"2026-10-27T18:29:52.251Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117967","published":"2026-10-27T14:05:42.858Z","updated":"2026-10-27T18:29:51.152Z","title":"Mitigation bypass in the DOM: Security component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0019},{"id":"CVE-2026-117966","published":"2026-10-27T14:05:42.521Z","updated":"2026-10-27T18:29:50.014Z","title":"Site isolation issue in the Networking: HTTP component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117965","published":"2026-10-27T14:05:42.156Z","updated":"2026-10-27T18:29:48.957Z","title":"Same-origin policy bypass in the Address Bar component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0019},{"id":"CVE-2026-117964","published":"2026-10-27T14:05:41.799Z","updated":"2026-10-27T18:29:47.757Z","title":"Use-after-free in the Panning and Zooming component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117963","published":"2026-10-27T14:05:41.450Z","updated":"2026-10-27T18:29:46.660Z","title":"Incorrect boundary conditions in the DOM: Service Workers component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117962","published":"2026-10-27T14:05:41.077Z","updated":"2026-10-27T18:29:45.594Z","title":"Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117961","published":"2026-10-27T14:05:40.723Z","updated":"2026-10-27T18:29:44.557Z","title":"Incorrect boundary conditions in the Layout: Text and Fonts component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117960","published":"2026-10-27T14:05:40.350Z","updated":"2026-10-27T18:29:43.507Z","title":"Spoofing issue in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117959","published":"2026-10-27T14:05:39.996Z","updated":"2026-10-27T18:29:42.467Z","title":"Site isolation issue in the DOM: Service Workers component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117958","published":"2026-10-27T14:05:39.645Z","updated":"2026-10-27T18:29:41.393Z","title":"Site isolation issue in the Networking: HTTP component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117957","published":"2026-10-27T14:05:39.278Z","updated":"2026-10-27T18:29:40.337Z","title":"Cryptographic issue in the WebRTC: Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117956","published":"2026-10-27T14:05:38.914Z","updated":"2026-10-27T18:29:39.269Z","title":"Invalid pointer in the Nimbus Desktop Client component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117955","published":"2026-10-27T14:05:38.574Z","updated":"2026-10-27T18:29:38.223Z","title":"JIT miscompilation in the JavaScript: WebAssembly component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117954","published":"2026-10-27T14:05:38.226Z","updated":"2026-10-27T18:29:37.009Z","title":"Use-after-free in the Layout: Positioned component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117953","published":"2026-10-27T14:05:37.858Z","updated":"2026-10-27T18:29:35.960Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117952","published":"2026-10-27T14:05:37.514Z","updated":"2026-10-27T18:29:34.910Z","title":"Uninitialized memory in the Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117951","published":"2026-10-27T14:05:37.144Z","updated":"2026-10-27T18:29:33.840Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117950","published":"2026-10-27T14:05:36.778Z","updated":"2026-10-27T18:29:32.670Z","title":"Incorrect boundary conditions in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117949","published":"2026-10-27T14:05:36.420Z","updated":"2026-10-27T18:29:31.626Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117948","published":"2026-10-27T14:05:36.047Z","updated":"2026-10-27T18:29:30.566Z","title":"Use-after-free in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117947","published":"2026-10-27T14:05:35.706Z","updated":"2026-10-27T18:29:29.514Z","title":"Use-after-free in the XML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117946","published":"2026-10-27T14:05:35.349Z","updated":"2026-10-27T18:29:28.463Z","title":"Incorrect boundary conditions in the JavaScript Engine component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117945","published":"2026-10-27T14:05:34.990Z","updated":"2026-10-27T18:29:27.418Z","title":"Incorrect boundary conditions in the XML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117944","published":"2026-10-27T14:05:34.637Z","updated":"2026-10-27T18:29:26.366Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117943","published":"2026-10-27T14:05:34.256Z","updated":"2026-10-27T18:29:25.289Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117942","published":"2026-10-27T14:05:33.884Z","updated":"2026-10-27T18:29:24.238Z","title":"Incorrect boundary conditions in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117941","published":"2026-10-27T14:05:33.523Z","updated":"2026-10-27T18:29:23.182Z","title":"Use-after-free in the DOM: CSS Object Model component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117940","published":"2026-10-27T14:05:33.159Z","updated":"2026-10-27T18:29:22.109Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117939","published":"2026-10-27T14:05:32.807Z","updated":"2026-10-27T18:29:21.063Z","title":"Use-after-free in the XML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117938","published":"2026-10-27T14:05:32.451Z","updated":"2026-10-27T18:29:20.003Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117937","published":"2026-10-27T14:05:32.085Z","updated":"2026-10-27T18:29:18.952Z","title":"Invalid pointer in the JavaScript Engine component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117936","published":"2026-10-27T14:05:31.732Z","updated":"2026-10-27T18:29:17.870Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117935","published":"2026-10-27T14:05:31.354Z","updated":"2026-10-27T18:29:16.806Z","title":"Use-after-free in the DOM: Bindings (WebIDL) component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117934","published":"2026-10-27T14:05:30.970Z","updated":"2026-10-27T18:29:15.751Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117933","published":"2026-10-27T14:05:30.626Z","updated":"2026-10-27T18:29:14.702Z","title":"Frame poisoning in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117932","published":"2026-10-27T14:05:30.258Z","updated":"2026-10-27T18:29:13.645Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117931","published":"2026-10-27T14:05:29.907Z","updated":"2026-10-27T18:29:12.603Z","title":"Use-after-free in the DOM: Events component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117930","published":"2026-10-27T14:05:29.486Z","updated":"2026-10-27T18:29:11.525Z","title":"Use-after-free in the DOM: Bindings (WebIDL) component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117929","published":"2026-10-27T14:05:29.101Z","updated":"2026-10-27T18:29:10.470Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117928","published":"2026-10-27T14:05:28.726Z","updated":"2026-10-27T18:29:09.421Z","title":"Same-origin policy bypass in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0019},{"id":"CVE-2026-117927","published":"2026-10-27T14:05:28.370Z","updated":"2026-10-27T18:29:08.347Z","title":"Use-after-free in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117926","published":"2026-10-27T14:05:27.992Z","updated":"2026-10-27T18:29:07.283Z","title":"Incorrect boundary conditions in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117925","published":"2026-10-27T14:05:27.620Z","updated":"2026-10-27T18:29:06.217Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00195},{"id":"CVE-2026-117924","published":"2026-10-27T14:05:27.233Z","updated":"2026-10-27T18:29:05.158Z","title":"Use-after-free in the XSLT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117923","published":"2026-10-27T14:05:26.871Z","updated":"2026-10-27T18:29:04.109Z","title":"Use-after-free in the Audio/Video component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117922","published":"2026-10-27T14:05:26.524Z","updated":"2026-10-27T18:29:03.050Z","title":"Use-after-free in the Networking: WebSockets component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117921","published":"2026-10-27T14:05:26.114Z","updated":"2026-10-27T18:29:01.992Z","title":"Use-after-free in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117920","published":"2026-10-27T14:05:25.763Z","updated":"2026-10-27T18:29:00.904Z","title":"Use-after-free in the DOM: HTML Parser component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117919","published":"2026-10-27T14:05:25.379Z","updated":"2026-10-27T18:28:59.826Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117918","published":"2026-10-27T14:05:25.019Z","updated":"2026-10-27T18:28:58.759Z","title":"Use-after-free in the Graphics: Canvas2D component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117917","published":"2026-10-27T14:05:24.639Z","updated":"2026-10-27T18:28:57.706Z","title":"Invalid pointer in the Graphics: WebRender component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117916","published":"2026-10-27T14:05:24.259Z","updated":"2026-10-27T18:28:56.659Z","title":"Use-after-free in the XSLT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117915","published":"2026-10-27T14:05:23.893Z","updated":"2026-10-27T18:28:55.577Z","title":"Incorrect boundary conditions in the Layout: Block and Inline component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117914","published":"2026-10-27T14:05:23.505Z","updated":"2026-10-27T18:28:54.508Z","title":"Use-after-free in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117913","published":"2026-10-27T14:05:23.143Z","updated":"2026-10-27T18:28:51.976Z","title":"Use-after-free in the SVG component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117912","published":"2026-10-27T14:05:22.771Z","updated":"2026-10-27T18:28:50.926Z","title":"Same-origin policy bypass in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00196},{"id":"CVE-2026-117911","published":"2026-10-27T14:05:22.431Z","updated":"2026-10-27T18:28:49.799Z","title":"Use-after-free in the Audio/Video: Playback component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117910","published":"2026-10-27T14:05:22.061Z","updated":"2026-10-27T18:28:48.699Z","title":"Invalid pointer in the JavaScript Engine component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117909","published":"2026-10-27T14:05:21.716Z","updated":"2026-10-27T18:28:47.667Z","title":"Use-after-free in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117908","published":"2026-10-27T14:05:21.347Z","updated":"2026-10-27T18:28:46.615Z","title":"Use-after-free in the Graphics: ImageLib component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117907","published":"2026-10-27T14:05:20.953Z","updated":"2026-10-27T18:28:45.522Z","title":"Use-after-free in the Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117906","published":"2026-10-27T14:05:20.592Z","updated":"2026-10-27T18:28:44.468Z","title":"Use-after-free in the CSS Parsing and Computation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117905","published":"2026-10-27T14:05:20.199Z","updated":"2026-10-27T18:28:43.434Z","title":"Use-after-free in the Audio/Video: Playback component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117904","published":"2026-10-27T14:05:18.650Z","updated":"2026-10-27T18:28:42.353Z","title":"Use-after-free in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117903","published":"2026-10-27T14:05:18.278Z","updated":"2026-10-27T18:28:41.268Z","title":"Use-after-free in the Audio/Video component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.002},{"id":"CVE-2026-117902","published":"2026-10-27T14:05:17.896Z","updated":"2026-10-27T18:28:40.228Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117901","published":"2026-10-27T14:05:17.549Z","updated":"2026-10-27T18:28:39.180Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117900","published":"2026-10-27T14:05:17.165Z","updated":"2026-10-27T18:28:38.095Z","title":"Use-after-free in the DOM: Editor component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117899","published":"2026-10-27T14:05:16.815Z","updated":"2026-10-27T18:28:37.028Z","title":"Use-after-free in the Networking: HTTP component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117898","published":"2026-10-27T14:05:16.471Z","updated":"2026-10-27T18:28:35.952Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117897","published":"2026-10-27T14:05:16.079Z","updated":"2026-10-27T18:28:34.902Z","title":"Incorrect boundary conditions in the Layout: Tables component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117896","published":"2026-10-27T14:05:15.705Z","updated":"2026-10-27T18:28:33.834Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117895","published":"2026-10-27T14:05:15.348Z","updated":"2026-10-27T18:28:32.748Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117894","published":"2026-10-27T14:05:14.972Z","updated":"2026-10-27T18:28:31.702Z","title":"Incorrect boundary conditions in the WebRTC: Signaling component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117893","published":"2026-10-27T14:05:14.624Z","updated":"2026-10-27T18:28:30.644Z","title":"Incorrect boundary conditions in the Security: PSM component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117892","published":"2026-10-27T14:05:14.254Z","updated":"2026-10-27T18:28:29.584Z","title":"Privilege escalation due to use-after-free in the WebRTC: Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117891","published":"2026-10-27T14:05:13.894Z","updated":"2026-10-27T18:28:28.523Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117890","published":"2026-10-27T14:05:13.549Z","updated":"2026-10-27T18:28:27.467Z","title":"JIT miscompilation in the JavaScript Engine: JIT component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117889","published":"2026-10-27T14:05:13.190Z","updated":"2026-10-27T18:28:26.418Z","title":"Incorrect boundary conditions in the JavaScript Engine component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117888","published":"2026-10-27T14:05:12.828Z","updated":"2026-10-27T18:28:25.369Z","title":"Uninitialized memory in the Graphics: Canvas2D component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117887","published":"2026-10-27T14:05:12.482Z","updated":"2026-10-27T18:28:24.300Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117886","published":"2026-10-27T14:05:12.088Z","updated":"2026-10-27T18:28:23.234Z","title":"Incorrect boundary conditions in the Graphics: Text component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117885","published":"2026-10-27T14:05:11.733Z","updated":"2026-10-27T18:28:22.180Z","title":"Use-after-free in the Layout: Grid component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117884","published":"2026-10-27T14:05:11.380Z","updated":"2026-10-27T18:28:21.112Z","title":"Use-after-free in the Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117883","published":"2026-10-27T14:05:10.993Z","updated":"2026-10-27T18:28:20.060Z","title":"Use-after-free in the DOM: HTML Parser component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117882","published":"2026-10-27T14:05:10.636Z","updated":"2026-10-27T18:28:19.002Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117881","published":"2026-10-27T14:05:10.263Z","updated":"2026-10-27T18:28:17.938Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117880","published":"2026-10-27T14:05:09.909Z","updated":"2026-10-27T18:28:16.883Z","title":"Use-after-free in the XML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117879","published":"2026-10-27T14:05:09.466Z","updated":"2026-10-27T18:28:15.832Z","title":"Incorrect boundary conditions in the Layout: Tables component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117878","published":"2026-10-27T14:05:09.050Z","updated":"2026-10-27T18:28:14.775Z","title":"Other issue, use-after-free in the Storage: IndexedDB component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117877","published":"2026-10-27T14:05:08.672Z","updated":"2026-10-27T18:28:13.719Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117876","published":"2026-10-27T14:05:08.240Z","updated":"2026-10-27T18:28:12.644Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117875","published":"2026-10-27T14:05:07.820Z","updated":"2026-10-27T18:28:11.594Z","title":"Use-after-free in the Layout: Scrolling and Overflow component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117874","published":"2026-10-27T14:05:07.346Z","updated":"2026-10-27T18:28:10.533Z","title":"Use-after-free in the Internationalization component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117873","published":"2026-10-27T14:05:06.953Z","updated":"2026-10-27T18:28:09.474Z","title":"Incorrect boundary conditions in the Audio/Video: Playback component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117872","published":"2026-10-27T14:05:06.575Z","updated":"2026-10-27T18:28:08.404Z","title":"Use-after-free in the JavaScript: Standard Library component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117871","published":"2026-10-27T14:05:06.208Z","updated":"2026-10-27T18:28:07.340Z","title":"Invalid pointer in the Graphics component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117870","published":"2026-10-27T14:05:05.850Z","updated":"2026-10-27T18:28:06.263Z","title":"Use-after-free in the JavaScript Engine component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117869","published":"2026-10-27T14:05:05.469Z","updated":"2026-10-27T18:28:05.204Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117868","published":"2026-10-27T14:05:05.099Z","updated":"2026-10-27T18:28:04.105Z","title":"Sandbox escape in the DOM: Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117867","published":"2026-10-27T14:05:04.736Z","updated":"2026-10-27T18:28:03.053Z","title":"Use-after-free in the Layout component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117866","published":"2026-10-27T14:05:04.390Z","updated":"2026-10-27T18:28:01.985Z","title":"Privilege escalation due to use-after-free in the Graphics: Canvas2D component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117865","published":"2026-10-27T14:05:03.939Z","updated":"2026-10-27T18:28:00.926Z","title":"Use-after-free in the JavaScript: GC component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117864","published":"2026-10-27T14:05:03.590Z","updated":"2026-10-27T18:27:59.857Z","title":"Sandbox escape in the Form Manager component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117863","published":"2026-10-27T14:05:03.187Z","updated":"2026-10-27T18:27:58.788Z","title":"Information disclosure due to uninitialized memory in the Audio/Video component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117862","published":"2026-10-27T14:05:02.811Z","updated":"2026-10-27T18:27:57.729Z","title":"Privilege escalation due to incorrect boundary conditions in the Networking component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00187},{"id":"CVE-2026-117861","published":"2026-10-27T14:05:02.369Z","updated":"2026-10-27T18:27:56.656Z","title":"Sandbox escape in the DOM: Navigation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00181},{"id":"CVE-2026-117860","published":"2026-10-27T14:05:01.971Z","updated":"2026-10-27T18:27:55.582Z","title":"Same-origin policy bypass in the DOM: Navigation component","severity":"UNKNOWN","score":null,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0019},{"id":"CVE-2026-117504","published":"2026-10-27T14:00:17.060Z","updated":"2026-11-02T19:19:32.173Z","title":"a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.00552},{"id":"CVE-2026-90725","published":"2026-10-27T13:47:19.359Z","updated":"2026-10-29T01:52:05.879Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00261},{"id":"CVE-2026-117503","published":"2026-10-27T13:45:17.953Z","updated":"2026-11-02T16:03:13.590Z","title":"a2aproject a2a-go REST SSE handler rest.go resource consumption","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.0071},{"id":"CVE-2026-68866","published":"2026-10-27T13:43:03.424Z","updated":"2026-10-29T01:52:06.024Z","title":"PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00221},{"id":"CVE-2026-90726","published":"2026-10-27T13:37:21.805Z","updated":"2026-10-28T16:16:30.645Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00124},{"id":"CVE-2026-90727","published":"2026-10-27T13:33:17.837Z","updated":"2026-11-02T19:18:35.588Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"LOW","score":3.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00262},{"id":"CVE-2026-94347","published":"2026-10-27T13:28:14.623Z","updated":"2026-10-29T10:45:47.284Z","title":"PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.00295},{"id":"CVE-2026-10537","published":"2026-10-27T13:26:13.078Z","updated":"2026-10-27T13:26:13.078Z","title":"Remote unauthenticated information disclosure and denial of service due to unauthenticated service access","severity":"MEDIUM","score":6.9,"vendor":"BMC","product":"Control-M/Enterprise Manager","kev":false,"epss":0.00286},{"id":"CVE-2026-94346","published":"2026-10-27T13:23:56.292Z","updated":"2026-10-29T03:56:49.680Z","title":"PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.00531},{"id":"CVE-2026-16307","published":"2026-10-27T13:23:02.346Z","updated":"2026-10-27T13:23:02.346Z","title":"IDOR in Netiket Information Technologies' EdoWEB","severity":"MEDIUM","score":4.3,"vendor":"Netiket Information Technologies","product":"EdoWEB","kev":false,"epss":0.00191},{"id":"CVE-2026-12887","published":"2026-10-27T13:15:22.608Z","updated":"2026-10-27T13:15:22.608Z","title":"In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes…","severity":"MEDIUM","score":5.1,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00242},{"id":"CVE-2026-117603","published":"2026-10-27T13:09:52.728Z","updated":"2026-11-02T16:01:22.924Z","title":"Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass","severity":"CRITICAL","score":9.3,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.00194},{"id":"CVE-2026-117602","published":"2026-10-27T13:09:52.040Z","updated":"2026-10-27T13:09:52.040Z","title":"Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution","severity":"HIGH","score":8.6,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.0011},{"id":"CVE-2026-117601","published":"2026-10-27T13:09:51.347Z","updated":"2026-10-28T16:16:43.752Z","title":"Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions","severity":"CRITICAL","score":9.3,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.00176},{"id":"CVE-2026-117573","published":"2026-10-27T13:08:03.276Z","updated":"2026-11-02T19:17:53.870Z","title":"hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools","severity":"HIGH","score":8.5,"vendor":"masc-ucsc","product":"hagent","kev":false,"epss":0.00701},{"id":"CVE-2026-117570","published":"2026-10-27T13:08:02.571Z","updated":"2026-11-02T16:00:36.944Z","title":"nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities","severity":"MEDIUM","score":4.8,"vendor":"Vorota-ai","product":"nmap-mcp","kev":false,"epss":0.00243},{"id":"CVE-2026-117569","published":"2026-10-27T13:08:01.873Z","updated":"2026-10-27T13:08:01.873Z","title":"Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters","severity":"HIGH","score":8.5,"vendor":"alishahid74","product":"kali-gpt","kev":false,"epss":0.00666},{"id":"CVE-2026-117568","published":"2026-10-27T13:08:01.183Z","updated":"2026-10-28T16:16:50.835Z","title":"mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir","severity":"HIGH","score":7.3,"vendor":"bitscorp-mcp","product":"mcp-ffmpeg","kev":false,"epss":0.00596},{"id":"CVE-2026-117567","published":"2026-10-27T13:08:00.469Z","updated":"2026-11-02T19:16:58.907Z","title":"esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters","severity":"HIGH","score":8.5,"vendor":"horw","product":"esp-mcp","kev":false,"epss":0.00652},{"id":"CVE-2026-117566","published":"2026-10-27T13:07:59.767Z","updated":"2026-11-02T15:59:35.751Z","title":"EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php","severity":"MEDIUM","score":6.9,"vendor":"icret","product":"EasyImages2.0","kev":false,"epss":0.00353},{"id":"CVE-2026-117565","published":"2026-10-27T13:07:59.080Z","updated":"2026-10-27T13:07:59.080Z","title":"Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch","severity":"MEDIUM","score":6.9,"vendor":"ArtalkJS","product":"Artalk","kev":false,"epss":0.00394},{"id":"CVE-2026-117564","published":"2026-10-27T13:07:58.360Z","updated":"2026-10-28T16:16:56.709Z","title":"nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret","severity":"CRITICAL","score":9.3,"vendor":"buqiyuan","product":"nest-admin","kev":false,"epss":0.00599},{"id":"CVE-2026-117563","published":"2026-10-27T13:07:57.656Z","updated":"2026-11-02T19:15:30.217Z","title":"MrDoc through 1.1.1 Broken Access Control via manage_doc_share","severity":"MEDIUM","score":5.3,"vendor":"zmister2016","product":"MrDoc","kev":false,"epss":0.00223},{"id":"CVE-2026-117562","published":"2026-10-27T13:07:56.982Z","updated":"2026-11-02T15:58:02.117Z","title":"rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint","severity":"MEDIUM","score":6.9,"vendor":"anyant","product":"rssant","kev":false,"epss":0.00323},{"id":"CVE-2026-117561","published":"2026-10-27T13:07:56.281Z","updated":"2026-10-27T13:07:56.281Z","title":"sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values","severity":"HIGH","score":8.5,"vendor":"codefriar","product":"sf-mcp","kev":false,"epss":0.00652},{"id":"CVE-2026-117560","published":"2026-10-27T13:07:55.594Z","updated":"2026-10-28T16:17:06.328Z","title":"ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools","severity":"HIGH","score":8.5,"vendor":"atxp","product":"gemini-cli-extension","kev":false,"epss":0.00652},{"id":"CVE-2026-117559","published":"2026-10-27T13:07:53.788Z","updated":"2026-11-02T19:14:40.415Z","title":"DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass","severity":"HIGH","score":8.5,"vendor":"hyperb1iss","product":"droidmind","kev":false,"epss":0.00685},{"id":"CVE-2026-117558","published":"2026-10-27T13:07:53.099Z","updated":"2026-11-02T15:56:03.121Z","title":"ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status","severity":"HIGH","score":8.5,"vendor":"ai-sdlc-framework","product":"ai-sdlc","kev":false,"epss":0.00687},{"id":"CVE-2026-117557","published":"2026-10-27T13:07:52.419Z","updated":"2026-10-27T13:07:52.419Z","title":"SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader","severity":"MEDIUM","score":6.9,"vendor":"libsdl-org","product":"SDL_image","kev":false,"epss":0.00129},{"id":"CVE-2026-117556","published":"2026-10-27T13:07:51.708Z","updated":"2026-10-28T16:17:15.487Z","title":"zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()","severity":"MEDIUM","score":5.3,"vendor":"zchunk","product":"zchunk","kev":false,"epss":0.00328},{"id":"CVE-2026-117555","published":"2026-10-27T13:07:51.020Z","updated":"2026-11-02T19:13:16.930Z","title":"GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()","severity":"MEDIUM","score":6.9,"vendor":"GreycLab","product":"CImg","kev":false,"epss":0.00129},{"id":"CVE-2026-117554","published":"2026-10-27T13:07:50.357Z","updated":"2026-11-02T15:54:22.023Z","title":"Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php","severity":"MEDIUM","score":5.3,"vendor":"admidio","product":"admidio","kev":false,"epss":0.00289},{"id":"CVE-2026-117553","published":"2026-10-27T13:07:49.671Z","updated":"2026-10-27T13:07:49.671Z","title":"Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning","severity":"HIGH","score":7.7,"vendor":"umbraco","product":"Umbraco-CMS","kev":false,"epss":0.00495},{"id":"CVE-2026-92546","published":"2026-10-27T12:58:42.332Z","updated":"2026-10-27T12:58:42.332Z","title":"Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally","severity":"HIGH","score":7.5,"vendor":"Keepnet Labs Cybersecurity Inc.","product":"Agentic AI / Agentic Ally","kev":false,"epss":0.00299},{"id":"CVE-2026-116627","published":"2026-10-27T12:45:34.223Z","updated":"2026-10-27T12:45:34.223Z","title":"Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0…","severity":"UNKNOWN","score":null,"vendor":"Devolutions","product":"PowerShell Universal","kev":false,"epss":0.00159},{"id":"CVE-2026-15586","published":"2026-10-27T12:32:04.384Z","updated":"2026-10-27T12:32:04.384Z","title":"OTP Brute-Force Account Takeover in Idvlabs Software's Ontime","severity":"MEDIUM","score":5.3,"vendor":"İdvlabs Software and Consulting Services Inc.","product":"Ontime","kev":false,"epss":0.00214},{"id":"CVE-2026-114409","published":"2026-10-27T12:25:57.894Z","updated":"2026-10-27T12:25:57.894Z","title":"Docker Desktop logs can expose stored third-party credentials","severity":"MEDIUM","score":5.7,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00107},{"id":"CVE-2026-107590","published":"2026-10-27T12:24:53.005Z","updated":"2026-10-27T12:24:53.005Z","title":"Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt","severity":"LOW","score":1.9,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012},{"id":"CVE-2026-47486","published":"2026-10-27T12:17:18.717Z","updated":"2026-10-29T10:45:47.441Z","title":"NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might…","severity":"HIGH","score":7.8,"vendor":"NVIDIA","product":"PhysX","kev":false,"epss":0.00154},{"id":"CVE-2026-65145","published":"2026-10-27T12:16:45.287Z","updated":"2026-10-27T12:16:45.287Z","title":"NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code…","severity":"CRITICAL","score":10,"vendor":"NVIDIA","product":"NeMo Agent Toolkit","kev":false,"epss":0.00526},{"id":"CVE-2026-65151","published":"2026-10-27T12:16:44.388Z","updated":"2026-10-27T12:16:44.388Z","title":"NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to…","severity":"HIGH","score":8.4,"vendor":"NVIDIA","product":"NeMo Agent Toolkit","kev":false,"epss":0.00182},{"id":"CVE-2026-65120","published":"2026-10-27T12:15:07.629Z","updated":"2026-10-27T12:15:07.629Z","title":"NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead…","severity":"HIGH","score":7.1,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00145},{"id":"CVE-2026-24269","published":"2026-10-27T12:15:06.731Z","updated":"2026-10-27T12:15:06.731Z","title":"NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead…","severity":"HIGH","score":7.1,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00145},{"id":"CVE-2026-65119","published":"2026-10-27T12:15:05.891Z","updated":"2026-10-27T12:15:05.891Z","title":"NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality…","severity":"HIGH","score":8.4,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00162},{"id":"CVE-2026-100164","published":"2026-10-27T12:03:27.458Z","updated":"2026-10-27T12:03:27.458Z","title":"User Enumeration in Rolantis Information Technologies' Agentis","severity":"HIGH","score":7.5,"vendor":"Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.","product":"Agentis","kev":false,"epss":0.00303},{"id":"CVE-2026-106087","published":"2026-10-27T11:56:54.738Z","updated":"2026-10-27T11:56:54.738Z","title":"TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the…","severity":"HIGH","score":8.7,"vendor":"Hitachi Energy","product":"TRO600 Series Firmware","kev":false,"epss":0.00247},{"id":"CVE-2026-10756","published":"2026-10-27T11:56:05.906Z","updated":"2026-10-27T11:56:05.906Z","title":"TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…","severity":"HIGH","score":7.7,"vendor":"Hitachi Energy","product":"TRO600 Series Firmware","kev":false,"epss":0.0018},{"id":"CVE-2026-115408","published":"2026-10-27T11:55:15.600Z","updated":"2026-10-27T11:55:15.600Z","title":"ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont","kev":false,"epss":0.00083},{"id":"CVE-2026-13162","published":"2026-10-27T11:50:44.803Z","updated":"2026-10-27T11:50:44.803Z","title":"An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control…","severity":"HIGH","score":7.7,"vendor":"Hitachi Energy","product":"CoreTec 5","kev":false,"epss":0.00185},{"id":"CVE-2026-113644","published":"2026-10-27T11:43:28.824Z","updated":"2026-10-27T11:43:28.824Z","title":"iofogctl command injection via Controller provisioning response","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00183},{"id":"CVE-2026-90728","published":"2026-10-27T11:39:36.832Z","updated":"2026-10-29T10:45:47.578Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00098},{"id":"CVE-2026-105323","published":"2026-10-27T11:39:34.238Z","updated":"2026-10-27T11:39:34.238Z","title":"Reflected XSS in Kulga Software's Kulga News Software","severity":"MEDIUM","score":6.1,"vendor":"Kulga Software and Telecommunications Limited Company","product":"Kulga News Software","kev":false,"epss":0.00181},{"id":"CVE-2026-90729","published":"2026-10-27T11:35:11.026Z","updated":"2026-10-29T10:45:47.717Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00216},{"id":"CVE-2026-115216","published":"2026-10-27T11:34:47.619Z","updated":"2026-10-27T11:34:47.619Z","title":"Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00236},{"id":"CVE-2026-41022","published":"2026-10-27T11:32:04.448Z","updated":"2026-10-27T11:32:04.448Z","title":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a…","severity":"MEDIUM","score":5.9,"vendor":"Eaton","product":"easySoft","kev":false,"epss":0.00085},{"id":"CVE-2026-10752","published":"2026-10-27T11:32:04.243Z","updated":"2026-10-29T01:52:00.370Z","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field","severity":"MEDIUM","score":4.8,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00253},{"id":"CVE-2026-109995","published":"2026-10-27T11:32:03.735Z","updated":"2026-10-29T01:52:00.520Z","title":"Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"wplakeorg","product":"Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode","kev":false,"epss":0.00236},{"id":"CVE-2026-90730","published":"2026-10-27T11:31:02.254Z","updated":"2026-10-27T14:11:59.726Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00203},{"id":"CVE-2026-112362","published":"2026-10-27T11:27:59.364Z","updated":"2026-10-27T11:27:59.364Z","title":"@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets","severity":"CRITICAL","score":9.1,"vendor":"@fastify/express","product":"@fastify/express","kev":false,"epss":0.00365},{"id":"CVE-2026-90731","published":"2026-10-27T11:26:19.331Z","updated":"2026-10-29T01:52:06.174Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00255},{"id":"CVE-2026-41021","published":"2026-10-27T11:23:34.366Z","updated":"2026-10-27T11:23:34.366Z","title":"Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline…","severity":"HIGH","score":7.5,"vendor":"Eaton","product":"easyE4","kev":false,"epss":0.00181},{"id":"CVE-2026-90732","published":"2026-10-27T11:21:01.459Z","updated":"2026-10-29T01:52:06.323Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00255},{"id":"CVE-2026-117499","published":"2026-10-27T11:19:22.090Z","updated":"2026-10-27T11:19:22.090Z","title":"@fastify/session vulnerable to session revocation bypass via a logout race condition","severity":"LOW","score":3.7,"vendor":"@fastify/session","product":"@fastify/session","kev":false,"epss":0.00094},{"id":"CVE-2026-56084","published":"2026-10-27T11:15:06.091Z","updated":"2026-11-02T15:52:18.386Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00213},{"id":"CVE-2026-102800","published":"2026-10-27T11:06:50.198Z","updated":"2026-10-27T11:06:50.198Z","title":"Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0","severity":"HIGH","score":8.7,"vendor":"dj-extensions.com","product":"DJ-HelpfulArticles extension for Joomla","kev":false,"epss":0.00388},{"id":"CVE-2026-41020","published":"2026-10-27T11:05:51.545Z","updated":"2026-10-27T11:05:51.545Z","title":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…","severity":"HIGH","score":7.5,"vendor":"Eaton","product":"easyE4","kev":false,"epss":0.00226},{"id":"CVE-2026-4337","published":"2026-10-27T11:03:15.829Z","updated":"2026-10-27T11:03:15.829Z","title":"Unrestricted Upload of File in PuMuKIT application","severity":"HIGH","score":8.8,"vendor":"PuMuKIT","product":"PuMuKIT","kev":false,"epss":0.00325},{"id":"CVE-2026-117541","published":"2026-10-27T10:59:34.783Z","updated":"2026-10-27T14:12:13.476Z","title":"svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()","severity":"MEDIUM","score":6.9,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00313},{"id":"CVE-2026-117540","published":"2026-10-27T10:59:34.119Z","updated":"2026-11-02T19:11:08.157Z","title":"svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop","severity":"HIGH","score":8.7,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00354},{"id":"CVE-2026-117539","published":"2026-10-27T10:59:33.466Z","updated":"2026-11-02T15:51:40.586Z","title":"darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass","severity":"MEDIUM","score":5.1,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00176},{"id":"CVE-2026-117538","published":"2026-10-27T10:59:32.772Z","updated":"2026-10-27T10:59:32.772Z","title":"REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00179},{"id":"CVE-2026-117537","published":"2026-10-27T10:59:32.121Z","updated":"2026-10-27T14:12:21.902Z","title":"REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00179},{"id":"CVE-2026-117536","published":"2026-10-27T10:59:31.445Z","updated":"2026-11-02T19:12:24.220Z","title":"REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation","severity":"HIGH","score":8.6,"vendor":"redaxo","product":"core","kev":false,"epss":0.00135},{"id":"CVE-2026-117535","published":"2026-10-27T10:59:30.773Z","updated":"2026-11-02T15:50:30.131Z","title":"REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00199},{"id":"CVE-2026-117534","published":"2026-10-27T10:59:30.139Z","updated":"2026-10-27T10:59:30.139Z","title":"REDAXO before 5.21.3 CSRF in Article History Plugin","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00099},{"id":"CVE-2026-117533","published":"2026-10-27T10:59:29.443Z","updated":"2026-10-27T14:12:29.808Z","title":"REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00127},{"id":"CVE-2026-117532","published":"2026-10-27T10:59:28.811Z","updated":"2026-11-02T19:10:25.669Z","title":"REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin","severity":"CRITICAL","score":9.3,"vendor":"redaxo","product":"core","kev":false,"epss":0.00679},{"id":"CVE-2026-116900","published":"2026-10-27T10:59:28.149Z","updated":"2026-10-31T02:39:35.418Z","title":"REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00138},{"id":"CVE-2026-116899","published":"2026-10-27T10:59:27.511Z","updated":"2026-10-27T10:59:27.511Z","title":"REDAXO before 5.21.4 Broken Access Control in Slice Operations","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00181},{"id":"CVE-2026-116898","published":"2026-10-27T10:59:26.830Z","updated":"2026-10-27T14:12:38.103Z","title":"REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00168},{"id":"CVE-2026-116897","published":"2026-10-27T10:59:26.165Z","updated":"2026-11-02T19:09:23.345Z","title":"REDAXO before 5.21.4 Missing Authorization in Version and History Previews","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00209},{"id":"CVE-2026-116896","published":"2026-10-27T10:59:25.485Z","updated":"2026-10-31T02:38:46.225Z","title":"REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables","severity":"HIGH","score":7.7,"vendor":"redaxo","product":"core","kev":false,"epss":0.00223},{"id":"CVE-2026-116895","published":"2026-10-27T10:59:24.719Z","updated":"2026-10-27T10:59:24.719Z","title":"REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00099},{"id":"CVE-2026-116894","published":"2026-10-27T10:59:24.060Z","updated":"2026-10-27T14:12:45.367Z","title":"REDAXO before 5.21.5 Insufficient Session Expiration on Password Change","severity":"LOW","score":2.3,"vendor":"redaxo","product":"core","kev":false,"epss":0.00163},{"id":"CVE-2026-116893","published":"2026-10-27T10:59:23.400Z","updated":"2026-11-02T19:08:38.657Z","title":"REDAXO core before 5.21.5 Missing Authorization in rex_api_package API","severity":"MEDIUM","score":6.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00252},{"id":"CVE-2026-117466","published":"2026-10-27T10:40:49.413Z","updated":"2026-10-27T10:40:49.413Z","title":"In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.","severity":"HIGH","score":8.6,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00229},{"id":"CVE-2026-117341","published":"2026-10-27T10:36:00.773Z","updated":"2026-10-27T10:36:00.773Z","title":"In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space,…","severity":"HIGH","score":7.7,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00226},{"id":"CVE-2026-116870","published":"2026-10-27T10:28:11.007Z","updated":"2026-10-27T10:28:11.007Z","title":"In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably…","severity":"HIGH","score":8.7,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00226},{"id":"CVE-2026-110737","published":"2026-10-27T10:26:37.752Z","updated":"2026-10-27T13:03:37.752Z","title":"Push Endpoint Returns Permissive CORS Headers","severity":"LOW","score":2.3,"vendor":"vaadin","product":"vaadin","kev":false,"epss":0.00195},{"id":"CVE-2026-116892","published":"2026-10-27T10:23:40.564Z","updated":"2026-10-31T02:37:56.331Z","title":"SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00211},{"id":"CVE-2026-116891","published":"2026-10-27T10:23:39.863Z","updated":"2026-10-27T10:26:51.529Z","title":"SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate","severity":"MEDIUM","score":5.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174},{"id":"CVE-2026-116890","published":"2026-10-27T10:23:39.191Z","updated":"2026-10-27T14:12:54.564Z","title":"Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00191},{"id":"CVE-2026-116889","published":"2026-10-27T10:23:38.486Z","updated":"2026-11-02T19:07:54.239Z","title":"SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.0016},{"id":"CVE-2026-116888","published":"2026-10-27T10:23:37.790Z","updated":"2026-10-31T02:36:53.689Z","title":"SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00148},{"id":"CVE-2026-116887","published":"2026-10-27T10:23:37.137Z","updated":"2026-10-27T10:26:48.819Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00139},{"id":"CVE-2026-116886","published":"2026-10-27T10:23:36.490Z","updated":"2026-10-27T14:13:01.153Z","title":"Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00139},{"id":"CVE-2026-116885","published":"2026-10-27T10:23:35.816Z","updated":"2026-11-02T19:06:44.594Z","title":"Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00183},{"id":"CVE-2026-116884","published":"2026-10-27T10:23:35.114Z","updated":"2026-10-31T02:35:53.341Z","title":"SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.0016},{"id":"CVE-2026-116883","published":"2026-10-27T10:23:34.396Z","updated":"2026-10-27T10:26:46.130Z","title":"Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00148},{"id":"CVE-2026-116882","published":"2026-10-27T10:23:33.731Z","updated":"2026-10-27T14:13:13.223Z","title":"Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00148},{"id":"CVE-2026-116881","published":"2026-10-27T10:23:33.089Z","updated":"2026-11-02T19:03:48.505Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00155},{"id":"CVE-2026-116880","published":"2026-10-27T10:23:32.391Z","updated":"2026-10-31T02:34:43.400Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions","severity":"HIGH","score":7.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00105},{"id":"CVE-2026-116879","published":"2026-10-27T10:23:31.684Z","updated":"2026-10-27T10:26:43.410Z","title":"Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00214},{"id":"CVE-2026-116878","published":"2026-10-27T10:23:30.985Z","updated":"2026-10-27T14:13:22.135Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00365},{"id":"CVE-2026-116877","published":"2026-10-27T10:23:30.296Z","updated":"2026-11-02T19:03:01.165Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00329},{"id":"CVE-2026-116876","published":"2026-10-27T10:23:29.626Z","updated":"2026-10-31T02:33:35.937Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected","severity":"HIGH","score":7.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00235},{"id":"CVE-2026-116875","published":"2026-10-27T10:23:28.974Z","updated":"2026-10-27T10:26:40.799Z","title":"SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174},{"id":"CVE-2026-116874","published":"2026-10-27T10:23:28.295Z","updated":"2026-10-27T14:13:33.657Z","title":"SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174},{"id":"CVE-2026-116873","published":"2026-10-27T10:23:27.606Z","updated":"2026-11-02T19:01:34.538Z","title":"Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00191},{"id":"CVE-2026-116872","published":"2026-10-27T10:23:26.944Z","updated":"2026-10-31T02:30:17.617Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00354},{"id":"CVE-2026-116871","published":"2026-10-27T10:23:26.290Z","updated":"2026-10-27T10:26:38.191Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00366},{"id":"CVE-2026-117530","published":"2026-10-27T10:21:27.255Z","updated":"2026-10-27T10:21:27.255Z","title":"In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands","severity":"MEDIUM","score":6.7,"vendor":"JetBrains","product":"Junie CLI","kev":false,"epss":0.00111},{"id":"CVE-2026-111548","published":"2026-10-27T10:17:26.193Z","updated":"2026-10-27T10:17:26.193Z","title":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker…","severity":"MEDIUM","score":5.3,"vendor":"Moxa","product":"NPort W2150A-W4/W2250A-W4 Series","kev":false,"epss":0.00344},{"id":"CVE-2026-82117","published":"2026-10-27T09:37:26.156Z","updated":"2026-10-27T09:37:26.156Z","title":"Authentication Bypass by Spoofing Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00643},{"id":"CVE-2026-82116","published":"2026-10-27T09:37:25.232Z","updated":"2026-10-27T09:37:25.232Z","title":"Missing Authentication for Critical Function Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00606},{"id":"CVE-2026-82118","published":"2026-10-27T09:37:24.314Z","updated":"2026-10-27T09:37:24.314Z","title":"Stack-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00519},{"id":"CVE-2026-82120","published":"2026-10-27T09:37:23.382Z","updated":"2026-10-27T09:37:23.382Z","title":"Heap-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00363},{"id":"CVE-2026-82119","published":"2026-10-27T09:37:22.455Z","updated":"2026-10-27T09:37:22.455Z","title":"OS Command Injection Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.01046},{"id":"CVE-2026-82121","published":"2026-10-27T09:37:21.507Z","updated":"2026-10-27T09:37:21.507Z","title":"Origin Validation Error Vulnerability in HiRDB","severity":"HIGH","score":7.5,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00205},{"id":"CVE-2026-82122","published":"2026-10-27T09:37:20.580Z","updated":"2026-10-27T09:37:20.580Z","title":"Stack-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00454},{"id":"CVE-2026-76939","published":"2026-10-27T09:37:19.629Z","updated":"2026-10-27T09:37:19.629Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00519},{"id":"CVE-2026-76936","published":"2026-10-27T09:37:18.688Z","updated":"2026-10-27T09:37:18.688Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-76937","published":"2026-10-27T09:37:17.763Z","updated":"2026-10-27T09:37:17.763Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-76938","published":"2026-10-27T09:37:16.816Z","updated":"2026-10-27T09:37:16.816Z","title":"Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00643},{"id":"CVE-2026-76935","published":"2026-10-27T09:37:15.880Z","updated":"2026-10-27T09:37:15.880Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00328},{"id":"CVE-2026-76934","published":"2026-10-27T09:37:14.930Z","updated":"2026-10-27T09:37:14.930Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00519},{"id":"CVE-2026-76932","published":"2026-10-27T09:37:13.989Z","updated":"2026-10-27T09:37:13.989Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-76933","published":"2026-10-27T09:37:13.048Z","updated":"2026-10-27T09:37:13.048Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-86577","published":"2026-10-27T09:37:12.119Z","updated":"2026-10-27T09:37:12.119Z","title":"Out-of-bounds Write Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00456},{"id":"CVE-2026-86576","published":"2026-10-27T09:37:11.181Z","updated":"2026-10-27T09:37:11.181Z","title":"Heap-based Buffer Overflow Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-86575","published":"2026-10-27T09:37:10.239Z","updated":"2026-10-27T09:37:10.239Z","title":"Stack-based Buffer Overflow Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00454},{"id":"CVE-2026-86574","published":"2026-10-27T09:37:09.275Z","updated":"2026-10-27T09:37:09.275Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Base","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Base","kev":false,"epss":0.00519},{"id":"CVE-2026-107147","published":"2026-10-27T09:36:01.938Z","updated":"2026-10-27T09:36:01.938Z","title":"Authentication bypass by spoofing in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00392},{"id":"CVE-2026-107146","published":"2026-10-27T09:35:21.367Z","updated":"2026-10-27T09:35:21.367Z","title":"Insufficient session expiration in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00346},{"id":"CVE-2026-107145","published":"2026-10-27T09:34:36.692Z","updated":"2026-10-27T09:34:36.692Z","title":"Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00301},{"id":"CVE-2026-102787","published":"2026-10-27T09:32:09.184Z","updated":"2026-10-27T09:32:09.184Z","title":"Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5","severity":"MEDIUM","score":5.3,"vendor":"phoca.cz","product":"Phoca Download extension for Joomla","kev":false,"epss":0.00165},{"id":"CVE-2026-102788","published":"2026-10-27T09:30:08.133Z","updated":"2026-10-27T09:30:08.133Z","title":"Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2","severity":"CRITICAL","score":9.3,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00386},{"id":"CVE-2026-102789","published":"2026-10-27T09:23:55.679Z","updated":"2026-10-27T09:23:55.679Z","title":"Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2","severity":"CRITICAL","score":9.3,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00315},{"id":"CVE-2026-117494","published":"2026-10-27T09:21:06.837Z","updated":"2026-10-27T09:21:06.837Z","title":"Multiple vulnerabilities in Sisense’s Cloud BI Platform","severity":"HIGH","score":8.3,"vendor":"Sisense","product":"Cloud BI Platform","kev":false,"epss":0.00284},{"id":"CVE-2026-117493","published":"2026-10-27T09:15:40.736Z","updated":"2026-10-27T09:17:28.701Z","title":"Multiple vulnerabilities in Sisense’s Cloud BI Platform","severity":"HIGH","score":8.3,"vendor":"Sisense","product":"Cloud BI Platform","kev":false,"epss":0.00284},{"id":"CVE-2026-85299","published":"2026-10-27T09:02:32.461Z","updated":"2026-10-27T09:02:32.461Z","title":"Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration","severity":"HIGH","score":8.3,"vendor":"Google Cloud","product":"Compute Engine","kev":false,"epss":0.00255},{"id":"CVE-2026-92885","published":"2026-10-27T08:28:43.933Z","updated":"2026-10-27T14:13:43.451Z","title":"Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login","severity":"CRITICAL","score":9.8,"vendor":"Qode Themes","product":"Qode Membership","kev":false,"epss":0.00368},{"id":"CVE-2026-65213","published":"2026-10-27T08:15:32.294Z","updated":"2026-10-27T08:15:32.294Z","title":"Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability","severity":"MEDIUM","score":6.6,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00541},{"id":"CVE-2026-65211","published":"2026-10-27T08:12:15.451Z","updated":"2026-10-27T08:12:15.451Z","title":"Supermicro BMC IPMI  feature contains Critical Privilege Escalation and Arbitrary Access vulnerability","severity":"HIGH","score":7.2,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00316},{"id":"CVE-2026-65210","published":"2026-10-27T08:07:16.704Z","updated":"2026-10-27T08:07:16.704Z","title":"Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability","severity":"MEDIUM","score":4.9,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00234},{"id":"CVE-2026-65220","published":"2026-10-27T08:02:49.783Z","updated":"2026-10-27T08:02:49.783Z","title":"Supermicro BMC IPMI feature contains a Privilege escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00257},{"id":"CVE-2026-65219","published":"2026-10-27T07:57:12.003Z","updated":"2026-10-27T07:57:12.003Z","title":"Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability","severity":"HIGH","score":7.4,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00453},{"id":"CVE-2026-18451","published":"2026-10-27T07:51:10.336Z","updated":"2026-10-27T07:51:10.336Z","title":"Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token","severity":"LOW","score":3.1,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00151},{"id":"CVE-2026-18450","published":"2026-10-27T07:46:02.598Z","updated":"2026-10-27T07:46:02.598Z","title":"Supermicro BMC  contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability","severity":"CRITICAL","score":9.8,"vendor":"SMCI","product":"X12SPI","kev":false,"epss":0.004},{"id":"CVE-2026-10511","published":"2026-10-27T07:42:53.188Z","updated":"2026-10-29T01:52:00.657Z","title":"Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter","severity":"MEDIUM","score":6.4,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00193},{"id":"CVE-2026-18449","published":"2026-10-27T07:32:36.594Z","updated":"2026-10-27T07:32:36.594Z","title":"Supermicro BMC contains a SMCRAKP Fixed Key vulnerability","severity":"HIGH","score":7.5,"vendor":"SMCI","product":"X12SPI","kev":false,"epss":0.00339},{"id":"CVE-2026-107472","published":"2026-10-27T07:32:31.991Z","updated":"2026-10-27T07:32:31.991Z","title":"Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012},{"id":"CVE-2026-16521","published":"2026-10-27T07:22:05.661Z","updated":"2026-10-27T07:22:05.661Z","title":"Supermicro BMC's syslog feature contains a command injection vulnerability","severity":"HIGH","score":7.2,"vendor":"SMCI","product":"MBD-X12STW-F","kev":false,"epss":0.00877},{"id":"CVE-2026-111461","published":"2026-10-27T07:17:01.566Z","updated":"2026-10-27T07:17:01.566Z","title":"SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series","severity":"HIGH","score":7.5,"vendor":"Moxa","product":"OnCell G3150A-LTE Series","kev":false,"epss":0.0137},{"id":"CVE-2026-101034","published":"2026-10-27T07:15:11.281Z","updated":"2026-10-27T07:15:11.281Z","title":"Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials","severity":"MEDIUM","score":6.8,"vendor":"Broadcom","product":"Symantec Ghost Solution Suite","kev":false,"epss":0.00149},{"id":"CVE-2026-111460","published":"2026-10-27T07:13:51.550Z","updated":"2026-10-27T07:13:51.550Z","title":"Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series","severity":"HIGH","score":7.7,"vendor":"Moxa","product":"OnCell G3150A-LTE Series","kev":false,"epss":0.00301},{"id":"CVE-2026-111459","published":"2026-10-27T07:08:17.598Z","updated":"2026-10-27T07:08:17.598Z","title":"Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)","severity":"HIGH","score":7.6,"vendor":"Moxa","product":"Moxa Remote Connect Suite (MRC Client)","kev":false,"epss":0.00173},{"id":"CVE-2026-106174","published":"2026-10-27T06:54:54.066Z","updated":"2026-10-27T10:13:38.390Z","title":"A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…","severity":"MEDIUM","score":6.7,"vendor":"Fortinet","product":"FortiOS","kev":false,"epss":0.00282},{"id":"CVE-2026-105946","published":"2026-10-27T06:45:36.400Z","updated":"2026-10-27T06:45:36.400Z","title":"Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt","severity":"MEDIUM","score":5.3,"vendor":"qt","product":"qt","kev":false,"epss":0.00455},{"id":"CVE-2026-103325","published":"2026-10-27T06:42:43.940Z","updated":"2026-10-28T17:36:08.352Z","title":"TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass","severity":"LOW","score":3.7,"vendor":"Unknown","product":"TiendaCrypto para WooCommerce","kev":false,"epss":0.00112},{"id":"CVE-2026-103359","published":"2026-10-27T06:42:43.340Z","updated":"2026-10-28T17:35:39.229Z","title":"PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PayDunya WooCommerce Payment Gateway","kev":false,"epss":0.00114},{"id":"CVE-2026-110910","published":"2026-10-27T06:42:42.365Z","updated":"2026-10-27T19:32:36.456Z","title":"qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection","severity":"MEDIUM","score":6.3,"vendor":"ljharb","product":"qs","kev":false,"epss":0.00286},{"id":"CVE-2026-75891","published":"2026-10-27T06:40:42.359Z","updated":"2026-10-29T01:52:00.797Z","title":"Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint","severity":"HIGH","score":8.8,"vendor":"themeum","product":"Kirki – Freeform Page Builder, Website Builder & Customizer","kev":false,"epss":0.00305},{"id":"CVE-2026-103312","published":"2026-10-27T06:00:20.103Z","updated":"2026-10-28T17:58:09.938Z","title":"Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Integration Wompi","kev":false,"epss":0.00236},{"id":"CVE-2026-103332","published":"2026-10-27T06:00:19.925Z","updated":"2026-10-28T17:58:10.127Z","title":"Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payex Payment Gateway for Woocommerce","kev":false,"epss":0.00176},{"id":"CVE-2026-117472","published":"2026-10-27T05:56:16.775Z","updated":"2026-10-27T05:56:16.775Z","title":"URL prefix handling permits API key read-scope bypass in Psono Server","severity":"MEDIUM","score":4.3,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00323},{"id":"CVE-2026-117471","published":"2026-10-27T05:55:07.068Z","updated":"2026-10-27T05:55:07.068Z","title":"User-controlled Duo host permits authenticated SSRF in Psono Server","severity":"MEDIUM","score":5.4,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00242},{"id":"CVE-2026-117470","published":"2026-10-27T05:53:41.709Z","updated":"2026-10-27T05:53:41.709Z","title":"WebAuthn assertion replay permits second-factor bypass in Psono Server","severity":"MEDIUM","score":6.5,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00408},{"id":"CVE-2026-117469","published":"2026-10-27T05:52:24.709Z","updated":"2026-10-27T05:52:24.709Z","title":"File-transfer type confusion permits unauthorized repository writes in Psono Server","severity":"MEDIUM","score":5.4,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00337},{"id":"CVE-2026-117468","published":"2026-10-27T05:41:30.742Z","updated":"2026-10-27T05:59:08.920Z","title":"Device-code claim permits restricted token escalation in Psono Server","severity":"MEDIUM","score":6.5,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00468},{"id":"CVE-2026-111820","published":"2026-10-27T05:30:30.909Z","updated":"2026-10-29T01:52:00.940Z","title":"Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title","severity":"HIGH","score":7.2,"vendor":"deconf","product":"Analytics Insights – Google Analytics Dashboard for WordPress","kev":false,"epss":0.00238},{"id":"CVE-2026-88781","published":"2026-10-27T02:01:00.588Z","updated":"2026-10-27T02:01:00.588Z","title":"Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…","severity":"MEDIUM","score":6.8,"vendor":"ASUS","product":"motherboards firmware","kev":false,"epss":0.00112},{"id":"CVE-2026-116640","published":"2026-10-27T01:30:24.793Z","updated":"2026-10-27T14:13:53.511Z","title":"Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"Saruf-Ratul","product":"HR-Payroll-Management-System","kev":false,"epss":0.00199},{"id":"CVE-2026-116639","published":"2026-10-27T01:15:24.435Z","updated":"2026-11-02T19:00:23.984Z","title":"MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"MD-MAFUJUL-HASAN","product":"Online-Payroll-Management-System","kev":false,"epss":0.00199},{"id":"CVE-2026-116839","published":"2026-10-27T00:51:23.745Z","updated":"2026-10-29T01:52:06.475Z","title":"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices…","severity":"HIGH","score":7.1,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00101},{"id":"CVE-2026-116838","published":"2026-10-27T00:48:17.932Z","updated":"2026-10-27T00:48:17.932Z","title":"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.0038},{"id":"CVE-2026-116623","published":"2026-10-27T00:45:20.926Z","updated":"2026-10-31T02:29:02.083Z","title":"code-projects Simple Content Management System Admin welcome.php authorization","severity":"MEDIUM","score":6.9,"vendor":"code-projects","product":"Simple Content Management System","kev":false,"epss":0.00388},{"id":"CVE-2026-116837","published":"2026-10-27T00:44:48.129Z","updated":"2026-10-27T00:44:48.129Z","title":"A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00214},{"id":"CVE-2026-116844","published":"2026-10-27T00:34:02.373Z","updated":"2026-10-29T10:52:21.022Z","title":"Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P","severity":"MEDIUM","score":6.3,"vendor":"fclairamb","product":"ftpserverlib","kev":false,"epss":0.0009},{"id":"CVE-2026-116843","published":"2026-10-27T00:34:01.754Z","updated":"2026-11-02T18:57:45.553Z","title":"Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode","severity":"HIGH","score":8.7,"vendor":"mistralai","product":"mistral-vibe","kev":false,"epss":0.00433},{"id":"CVE-2026-116842","published":"2026-10-27T00:34:01.167Z","updated":"2026-10-31T02:27:46.916Z","title":"DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup","severity":"MEDIUM","score":6.9,"vendor":"diasurgical","product":"DevilutionX","kev":false,"epss":0.00134},{"id":"CVE-2026-116841","published":"2026-10-27T00:34:00.513Z","updated":"2026-10-27T00:34:00.513Z","title":"DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup","severity":"MEDIUM","score":6.8,"vendor":"diasurgical","product":"DevilutionX","kev":false,"epss":0.00121},{"id":"CVE-2026-116840","published":"2026-10-27T00:33:59.834Z","updated":"2026-10-27T14:14:10.931Z","title":"llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00126},{"id":"CVE-2026-116829","published":"2026-10-27T00:33:59.223Z","updated":"2026-11-02T18:56:09.937Z","title":"llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00126},{"id":"CVE-2026-116816","published":"2026-10-27T00:33:58.581Z","updated":"2026-10-31T02:24:46.005Z","title":"llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer","severity":"HIGH","score":8.5,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00135},{"id":"CVE-2025-71439","published":"2026-10-27T00:33:57.956Z","updated":"2026-10-27T00:33:57.956Z","title":"llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info","severity":"MEDIUM","score":6.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00121},{"id":"CVE-2024-58400","published":"2026-10-27T00:33:57.354Z","updated":"2026-10-27T14:14:21.519Z","title":"llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs","severity":"HIGH","score":8.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00422},{"id":"CVE-2024-58399","published":"2026-10-27T00:33:56.695Z","updated":"2026-11-02T18:54:43.336Z","title":"llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.0012},{"id":"CVE-2026-116836","published":"2026-10-27T00:32:06.956Z","updated":"2026-10-27T00:32:06.956Z","title":"A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00194},{"id":"CVE-2026-116620","published":"2026-10-27T00:30:22.548Z","updated":"2026-10-27T14:14:50.011Z","title":"Tencent RapidJSON Regex stream.h Take out-of-bounds","severity":"MEDIUM","score":6.9,"vendor":"Tencent","product":"RapidJSON","kev":false,"epss":0.00304},{"id":"CVE-2026-116608","published":"2026-10-27T00:15:18.298Z","updated":"2026-11-02T18:51:42.827Z","title":"DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check","severity":"MEDIUM","score":5.3,"vendor":"DAMO Academy","product":"VideoLLaMA2","kev":false,"epss":0.0015},{"id":"CVE-2026-116605","published":"2026-10-27T00:00:20.582Z","updated":"2026-10-31T02:23:52.697Z","title":"SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00301},{"id":"CVE-2026-107067","published":"2026-10-27T00:00:00.000Z","updated":"2026-10-30T17:14:50.522Z","title":"An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.00132},{"id":"CVE-2026-78845","published":"2026-10-27T00:00:00.000Z","updated":"2026-10-31T02:22:16.950Z","title":"Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00775},{"id":"CVE-2026-116604","published":"2026-10-26T23:45:20.080Z","updated":"2026-10-27T14:15:12.149Z","title":"SourceCodester Online Food Ordering System delete_admin.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00569},{"id":"CVE-2026-116603","published":"2026-10-26T23:30:13.680Z","updated":"2026-11-02T18:48:56.748Z","title":"SourceCodester Online Food Ordering System add_food.php unrestricted upload","severity":"MEDIUM","score":5.1,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00292},{"id":"CVE-2026-111422","published":"2026-10-26T23:29:30.363Z","updated":"2026-10-29T10:38:09.290Z","title":"Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Airflow SSH provider","kev":false,"epss":0.00643},{"id":"CVE-2026-116828","published":"2026-10-26T23:05:52.662Z","updated":"2026-10-31T02:16:21.959Z","title":"YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0025},{"id":"CVE-2026-116827","published":"2026-10-26T23:05:51.992Z","updated":"2026-10-26T23:05:51.992Z","title":"YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import","severity":"HIGH","score":8.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00345},{"id":"CVE-2026-116826","published":"2026-10-26T23:05:51.286Z","updated":"2026-10-27T14:15:19.006Z","title":"YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile","severity":"HIGH","score":8.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00241},{"id":"CVE-2026-116825","published":"2026-10-26T23:05:50.597Z","updated":"2026-11-02T18:47:58.288Z","title":"YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox","severity":"HIGH","score":8.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00225},{"id":"CVE-2026-116824","published":"2026-10-26T23:05:49.898Z","updated":"2026-10-31T02:19:07.188Z","title":"YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00179},{"id":"CVE-2026-116823","published":"2026-10-26T23:05:49.182Z","updated":"2026-10-26T23:05:49.182Z","title":"YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00179},{"id":"CVE-2026-116822","published":"2026-10-26T23:05:48.458Z","updated":"2026-10-27T14:15:27.706Z","title":"YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0021},{"id":"CVE-2026-116821","published":"2026-10-26T23:05:47.763Z","updated":"2026-11-02T18:45:58.730Z","title":"YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames","severity":"HIGH","score":7.1,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00279},{"id":"CVE-2026-116820","published":"2026-10-26T23:05:47.054Z","updated":"2026-10-31T02:11:26.333Z","title":"YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00231},{"id":"CVE-2026-116819","published":"2026-10-26T23:05:46.288Z","updated":"2026-10-26T23:05:46.288Z","title":"OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query","severity":"HIGH","score":8.4,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00303},{"id":"CVE-2026-116818","published":"2026-10-26T23:05:45.602Z","updated":"2026-10-27T14:15:35.476Z","title":"OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket","severity":"HIGH","score":8.8,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0043},{"id":"CVE-2026-116817","published":"2026-10-26T23:05:44.806Z","updated":"2026-11-02T18:59:38.557Z","title":"OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00269},{"id":"CVE-2026-116815","published":"2026-10-26T23:05:44.097Z","updated":"2026-10-31T02:10:20.052Z","title":"OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0023},{"id":"CVE-2026-116814","published":"2026-10-26T23:05:43.404Z","updated":"2026-10-26T23:05:43.404Z","title":"OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00277},{"id":"CVE-2026-116813","published":"2026-10-26T23:05:41.783Z","updated":"2026-10-27T14:15:43.266Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00234},{"id":"CVE-2026-116812","published":"2026-10-26T23:05:41.107Z","updated":"2026-11-02T18:45:02.745Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00234},{"id":"CVE-2026-116811","published":"2026-10-26T23:05:40.470Z","updated":"2026-10-31T02:08:36.588Z","title":"OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template","severity":"HIGH","score":8.7,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00494},{"id":"CVE-2026-116810","published":"2026-10-26T23:05:39.854Z","updated":"2026-10-26T23:05:39.854Z","title":"OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0025},{"id":"CVE-2026-116809","published":"2026-10-26T23:05:39.208Z","updated":"2026-10-27T14:15:52.170Z","title":"OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0021},{"id":"CVE-2026-116808","published":"2026-10-26T23:05:38.546Z","updated":"2026-11-02T18:43:10.129Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values","severity":"HIGH","score":8.6,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00385},{"id":"CVE-2026-116807","published":"2026-10-26T23:05:37.872Z","updated":"2026-10-31T02:07:19.295Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query","severity":"HIGH","score":7,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00267},{"id":"CVE-2026-116806","published":"2026-10-26T23:05:37.220Z","updated":"2026-10-26T23:05:37.220Z","title":"OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutation","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00238},{"id":"CVE-2026-116805","published":"2026-10-26T23:05:36.532Z","updated":"2026-10-27T14:15:58.367Z","title":"OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.list","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0022},{"id":"CVE-2026-116804","published":"2026-10-26T23:05:35.850Z","updated":"2026-11-02T18:41:37.395Z","title":"DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root Content","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00178},{"id":"CVE-2026-116803","published":"2026-10-26T23:05:35.135Z","updated":"2026-10-31T02:06:02.382Z","title":"DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached Subtrees","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00164},{"id":"CVE-2026-116802","published":"2026-10-26T23:05:34.457Z","updated":"2026-10-26T23:05:34.457Z","title":"DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00217},{"id":"CVE-2026-116801","published":"2026-10-26T23:05:33.735Z","updated":"2026-10-27T14:16:07.428Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query","severity":"MEDIUM","score":5.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00253},{"id":"CVE-2026-116800","published":"2026-10-26T23:05:33.044Z","updated":"2026-11-02T18:39:51.263Z","title":"WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header","severity":"MEDIUM","score":6.9,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00506},{"id":"CVE-2026-116602","published":"2026-10-26T23:00:08.972Z","updated":"2026-10-31T02:04:51.368Z","title":"SourceCodester Online Food Ordering System delete.php unlink path traversal","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00469},{"id":"CVE-2026-116556","published":"2026-10-26T22:45:06.821Z","updated":"2026-10-27T14:16:13.865Z","title":"Argilla TextField.vue cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Argilla","kev":false,"epss":0.0021},{"id":"CVE-2026-116555","published":"2026-10-26T22:30:16.499Z","updated":"2026-11-02T18:37:34.486Z","title":"Argilla Sandbox.vue cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Argilla","kev":false,"epss":0.0021},{"id":"CVE-2026-2270","published":"2026-10-26T22:30:02.445Z","updated":"2026-10-29T10:45:47.863Z","title":"StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation","severity":"MEDIUM","score":5.9,"vendor":"Kubernetes","product":"Kubernetes","kev":false,"epss":0.00338},{"id":"CVE-2026-76654","published":"2026-10-26T22:29:23.944Z","updated":"2026-10-26T23:10:47.018Z","title":"Subpath symlinking on Windows nodes permits NTLM coercion","severity":"MEDIUM","score":5.8,"vendor":"Kubernetes","product":"Kubernetes","kev":false,"epss":0.00427},{"id":"CVE-2026-116554","published":"2026-10-26T22:15:08.212Z","updated":"2026-10-31T02:03:28.542Z","title":"Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Argilla","kev":false,"epss":0.00253},{"id":"CVE-2026-116515","published":"2026-10-26T22:00:17.488Z","updated":"2026-10-27T14:16:22.247Z","title":"itsourcecode Online Book Store book.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Book Store","kev":false,"epss":0.0025},{"id":"CVE-2026-116591","published":"2026-10-26T21:54:33.109Z","updated":"2026-10-27T14:16:30.395Z","title":"compress zstd: Panic on two-block frames","severity":"HIGH","score":8.7,"vendor":"klauspost","product":"compress","kev":false,"epss":0.00333},{"id":"CVE-2026-116748","published":"2026-10-26T21:52:45.799Z","updated":"2026-10-31T02:02:38.641Z","title":"Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token","severity":"HIGH","score":8.7,"vendor":"transmission","product":"transmission","kev":false,"epss":0.01246},{"id":"CVE-2026-116747","published":"2026-10-26T21:52:45.058Z","updated":"2026-10-26T21:52:45.058Z","title":"Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret","severity":"CRITICAL","score":9.2,"vendor":"rajnandan1","product":"kener","kev":false,"epss":0.00623},{"id":"CVE-2026-116746","published":"2026-10-26T21:52:44.250Z","updated":"2026-10-27T14:16:39.214Z","title":"QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview","severity":"MEDIUM","score":6.9,"vendor":"qloapps","product":"qloapps","kev":false,"epss":0.0025},{"id":"CVE-2026-116745","published":"2026-10-26T21:52:43.567Z","updated":"2026-11-02T18:35:19.484Z","title":"QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation","severity":"MEDIUM","score":6.9,"vendor":"qloapps","product":"qloapps","kev":false,"epss":0.00226},{"id":"CVE-2026-116744","published":"2026-10-26T21:52:42.875Z","updated":"2026-10-31T02:01:54.934Z","title":"ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector","severity":"MEDIUM","score":6.9,"vendor":"ntop","product":"nDPI","kev":false,"epss":0.00431},{"id":"CVE-2026-116743","published":"2026-10-26T21:52:42.185Z","updated":"2026-10-26T21:52:42.185Z","title":"libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data","severity":"MEDIUM","score":6.8,"vendor":"libyal","product":"libmsiecf","kev":false,"epss":0.00127},{"id":"CVE-2026-116742","published":"2026-10-26T21:52:41.511Z","updated":"2026-10-27T14:16:48.820Z","title":"HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count","severity":"MEDIUM","score":4.8,"vendor":"samtools","product":"htslib","kev":false,"epss":0.00123},{"id":"CVE-2026-116741","published":"2026-10-26T21:52:40.782Z","updated":"2026-11-02T18:32:03.764Z","title":"Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes","severity":"HIGH","score":8.3,"vendor":"xiph","product":"speex","kev":false,"epss":0.00409},{"id":"CVE-2026-116740","published":"2026-10-26T21:52:39.177Z","updated":"2026-10-31T02:01:07.069Z","title":"libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser","severity":"HIGH","score":7.1,"vendor":"netsurf-browser","product":"libcss","kev":false,"epss":0.00327},{"id":"CVE-2026-116739","published":"2026-10-26T21:52:38.496Z","updated":"2026-10-26T21:52:38.496Z","title":"VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder","severity":"MEDIUM","score":5.3,"vendor":"kisli","product":"vmime","kev":false,"epss":0.00252},{"id":"CVE-2026-116738","published":"2026-10-26T21:52:37.804Z","updated":"2026-10-27T14:16:56.633Z","title":"VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder","severity":"HIGH","score":8.7,"vendor":"kisli","product":"vmime","kev":false,"epss":0.00725},{"id":"CVE-2026-116737","published":"2026-10-26T21:52:37.080Z","updated":"2026-11-02T18:28:30.467Z","title":"libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libphdi","kev":false,"epss":0.00126},{"id":"CVE-2026-116736","published":"2026-10-26T21:52:36.380Z","updated":"2026-10-31T02:00:14.554Z","title":"libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_array","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libpff","kev":false,"epss":0.00126},{"id":"CVE-2026-116735","published":"2026-10-26T21:52:35.680Z","updated":"2026-10-27T10:14:06.821Z","title":"libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libpff","kev":false,"epss":0.00126},{"id":"CVE-2026-116734","published":"2026-10-26T21:52:34.998Z","updated":"2026-10-27T14:17:08.680Z","title":"flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header","severity":"MEDIUM","score":6.3,"vendor":"dvidelabs","product":"flatcc","kev":false,"epss":0.00382},{"id":"CVE-2026-116733","published":"2026-10-26T21:52:34.304Z","updated":"2026-11-02T18:26:35.453Z","title":"flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number","severity":"MEDIUM","score":6.3,"vendor":"dvidelabs","product":"flatcc","kev":false,"epss":0.00382},{"id":"CVE-2026-116732","published":"2026-10-26T21:52:33.622Z","updated":"2026-10-31T01:59:17.377Z","title":"libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table","severity":"MEDIUM","score":4.8,"vendor":"davea42","product":"libdwarf","kev":false,"epss":0.00131},{"id":"CVE-2026-116731","published":"2026-10-26T21:52:32.953Z","updated":"2026-10-26T21:52:32.953Z","title":"Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import","severity":"MEDIUM","score":6.9,"vendor":"tildearrow","product":"furnace","kev":false,"epss":0.00136},{"id":"CVE-2026-116730","published":"2026-10-26T21:52:32.251Z","updated":"2026-10-27T14:17:14.912Z","title":"Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Import","severity":"MEDIUM","score":6.8,"vendor":"tildearrow","product":"furnace","kev":false,"epss":0.00136},{"id":"CVE-2026-116729","published":"2026-10-26T21:52:31.564Z","updated":"2026-11-02T18:23:30.662Z","title":"libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a","severity":"MEDIUM","score":4.8,"vendor":"libyal","product":"libfvde","kev":false,"epss":0.00132},{"id":"CVE-2026-116728","published":"2026-10-26T21:52:30.883Z","updated":"2026-10-31T01:57:19.838Z","title":"libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024","severity":"MEDIUM","score":6.8,"vendor":"libyal","product":"libfvde","kev":false,"epss":0.00136},{"id":"CVE-2026-116727","published":"2026-10-26T21:52:30.198Z","updated":"2026-10-26T21:52:30.198Z","title":"gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.c","severity":"MEDIUM","score":4.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00132},{"id":"CVE-2026-116726","published":"2026-10-26T21:52:29.528Z","updated":"2026-10-27T14:17:32.379Z","title":"gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title","severity":"MEDIUM","score":4.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00127},{"id":"CVE-2026-116725","published":"2026-10-26T21:52:28.842Z","updated":"2026-11-02T18:20:53.778Z","title":"gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index","severity":"MEDIUM","score":6.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00136},{"id":"CVE-2026-116724","published":"2026-10-26T21:52:28.153Z","updated":"2026-10-31T01:56:12.570Z","title":"FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow","severity":"HIGH","score":8.5,"vendor":"fltk","product":"fltk","kev":false,"epss":0.00147},{"id":"CVE-2026-116723","published":"2026-10-26T21:52:27.469Z","updated":"2026-10-26T21:52:27.469Z","title":"FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field","severity":"HIGH","score":8.5,"vendor":"fltk","product":"fltk","kev":false,"epss":0.0016},{"id":"CVE-2026-116590","published":"2026-10-26T21:48:15.468Z","updated":"2026-10-30T15:12:40.754Z","title":"snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite","severity":"MEDIUM","score":5.9,"vendor":"xerial","product":"snappy-java","kev":false,"epss":0.00407},{"id":"CVE-2026-116514","published":"2026-10-26T21:45:14.583Z","updated":"2026-11-02T18:19:09.059Z","title":"itsourcecode Airline Reservation System book_flight.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Airline Reservation System","kev":false,"epss":0.00347},{"id":"CVE-2026-116508","published":"2026-10-26T21:30:18.376Z","updated":"2026-10-31T01:55:01.083Z","title":"TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00609},{"id":"CVE-2026-116589","published":"2026-10-26T21:26:58.832Z","updated":"2026-10-31T01:53:57.070Z","title":"Datadog dd-trace-py: IAST instrumentation can lead to application DOS","severity":"HIGH","score":8.2,"vendor":"DataDog","product":"dd-trace-py","kev":false,"epss":0.00328},{"id":"CVE-2026-116588","published":"2026-10-26T21:22:46.130Z","updated":"2026-11-02T18:14:38.663Z","title":"Datadog dd-trace-py: ReDOS in URL query string obfuscation","severity":"HIGH","score":8.7,"vendor":"DataDog","product":"dd-trace-py","kev":false,"epss":0.00468},{"id":"CVE-2026-116507","published":"2026-10-26T21:15:18.291Z","updated":"2026-10-27T14:17:44.541Z","title":"TOTOLINK A950RG global.so getLanguageCfg information disclosure","severity":"MEDIUM","score":6.9,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00396},{"id":"CVE-2026-116587","published":"2026-10-26T21:12:21.326Z","updated":"2026-10-27T14:17:50.939Z","title":"Go JOSE: DoS when parsing JWKs that contain RSA keys","severity":"HIGH","score":7.5,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00366},{"id":"CVE-2026-116586","published":"2026-10-26T21:09:26.349Z","updated":"2026-10-30T18:46:23.244Z","title":"Go JOSE: Panics in JSON parsing","severity":"MEDIUM","score":6.9,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00292},{"id":"CVE-2026-116585","published":"2026-10-26T21:06:35.189Z","updated":"2026-10-31T01:52:17.352Z","title":"Go JOSE: Panic during CBC-HMAC processing","severity":"MEDIUM","score":6.9,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00264},{"id":"CVE-2026-116506","published":"2026-10-26T21:00:16.563Z","updated":"2026-11-02T18:13:30.833Z","title":"TOTOLINK A950RG firewall.so apmib_set command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.0188},{"id":"CVE-2026-116584","published":"2026-10-26T20:52:38.339Z","updated":"2026-11-02T18:12:43.612Z","title":"Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length","severity":"HIGH","score":7.5,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00365},{"id":"CVE-2026-116583","published":"2026-10-26T20:49:35.952Z","updated":"2026-10-27T14:18:01.418Z","title":"Seroval: Code injection through a typed array's own constructor property","severity":"MEDIUM","score":5.3,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00268},{"id":"CVE-2026-116582","published":"2026-10-26T20:46:46.069Z","updated":"2026-10-30T15:16:29.460Z","title":"Seroval: Script injection through RegExp sources in serialized output","severity":"MEDIUM","score":4.7,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00188},{"id":"CVE-2026-116505","published":"2026-10-26T20:45:18.066Z","updated":"2026-10-31T01:50:45.075Z","title":"TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.02741},{"id":"CVE-2026-86925","published":"2026-10-26T20:44:37.328Z","updated":"2026-10-29T13:00:13.783Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00146},{"id":"CVE-2026-84627","published":"2026-10-26T20:44:35.462Z","updated":"2026-10-26T20:44:35.462Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00244},{"id":"CVE-2026-113945","published":"2026-10-26T20:44:34.502Z","updated":"2026-10-26T20:44:34.502Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00182},{"id":"CVE-2026-65327","published":"2026-10-26T20:44:33.440Z","updated":"2026-10-27T03:56:20.484Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00253},{"id":"CVE-2026-112529","published":"2026-10-26T20:44:32.508Z","updated":"2026-10-26T20:44:32.508Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00201},{"id":"CVE-2026-86972","published":"2026-10-26T20:44:31.556Z","updated":"2026-10-26T20:44:31.556Z","title":"A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00244},{"id":"CVE-2026-112483","published":"2026-10-26T20:44:29.682Z","updated":"2026-10-26T20:44:29.682Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00201},{"id":"CVE-2026-113912","published":"2026-10-26T20:44:27.691Z","updated":"2026-10-29T12:59:33.991Z","title":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00381},{"id":"CVE-2026-112495","published":"2026-10-26T20:44:26.733Z","updated":"2026-10-26T20:44:26.733Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00201},{"id":"CVE-2026-86964","published":"2026-10-26T20:44:25.787Z","updated":"2026-10-26T20:44:25.787Z","title":"A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-113904","published":"2026-10-26T20:44:23.809Z","updated":"2026-10-26T20:44:23.809Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00182},{"id":"CVE-2026-112616","published":"2026-10-26T20:44:22.746Z","updated":"2026-10-29T13:02:33.245Z","title":"An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00146},{"id":"CVE-2026-112568","published":"2026-10-26T20:44:19.808Z","updated":"2026-10-26T20:44:19.808Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00213},{"id":"CVE-2026-112704","published":"2026-10-26T20:44:16.874Z","updated":"2026-10-26T20:44:16.874Z","title":"An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00213},{"id":"CVE-2026-112456","published":"2026-10-26T20:44:11.955Z","updated":"2026-10-26T20:44:11.955Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00203},{"id":"CVE-2026-112513","published":"2026-10-26T20:44:10.054Z","updated":"2026-10-26T20:44:10.054Z","title":"This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00175},{"id":"CVE-2026-112544","published":"2026-10-26T20:44:07.294Z","updated":"2026-10-27T00:02:09.390Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00377},{"id":"CVE-2026-112682","published":"2026-10-26T20:44:05.121Z","updated":"2026-10-26T20:44:05.121Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00332},{"id":"CVE-2026-112417","published":"2026-10-26T20:44:04.091Z","updated":"2026-10-26T20:44:04.091Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"visionOS","kev":false,"epss":0.00189},{"id":"CVE-2026-112552","published":"2026-10-26T20:44:01.047Z","updated":"2026-10-26T20:44:01.047Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112505","published":"2026-10-26T20:43:57.996Z","updated":"2026-10-26T20:43:57.996Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-113949","published":"2026-10-26T20:43:54.853Z","updated":"2026-10-26T20:43:54.853Z","title":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-86929","published":"2026-10-26T20:43:53.806Z","updated":"2026-10-27T03:56:16.360Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00653},{"id":"CVE-2026-112437","published":"2026-10-26T20:43:51.710Z","updated":"2026-10-26T20:43:51.710Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112525","published":"2026-10-26T20:43:47.516Z","updated":"2026-10-26T20:43:47.516Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-86991","published":"2026-10-26T20:43:44.001Z","updated":"2026-10-26T20:43:44.001Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00262},{"id":"CVE-2026-65385","published":"2026-10-26T20:43:42.956Z","updated":"2026-10-26T20:43:42.956Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00254},{"id":"CVE-2026-113908","published":"2026-10-26T20:43:41.890Z","updated":"2026-10-29T13:20:02.972Z","title":"A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00122},{"id":"CVE-2026-86968","published":"2026-10-26T20:43:39.915Z","updated":"2026-10-26T20:43:39.915Z","title":"An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112533","published":"2026-10-26T20:43:38.966Z","updated":"2026-10-29T13:17:16.319Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0015},{"id":"CVE-2026-112476","published":"2026-10-26T20:43:38.022Z","updated":"2026-10-26T20:43:38.022Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-86987","published":"2026-10-26T20:43:36.993Z","updated":"2026-10-29T13:17:16.467Z","title":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155},{"id":"CVE-2026-112708","published":"2026-10-26T20:43:35.088Z","updated":"2026-10-27T00:08:21.376Z","title":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"MEDIUM","score":5.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00162},{"id":"CVE-2026-112421","published":"2026-10-26T20:43:32.175Z","updated":"2026-10-26T20:43:32.175Z","title":"A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-43736","published":"2026-10-26T20:43:28.280Z","updated":"2026-10-29T13:17:16.611Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00148},{"id":"CVE-2026-112548","published":"2026-10-26T20:43:22.332Z","updated":"2026-10-26T20:43:22.332Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112677","published":"2026-10-26T20:43:20.413Z","updated":"2026-10-30T20:02:26.419Z","title":"An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00194},{"id":"CVE-2026-112698","published":"2026-10-26T20:43:18.419Z","updated":"2026-10-26T20:43:18.419Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-113898","published":"2026-10-26T20:43:16.524Z","updated":"2026-10-26T20:43:16.524Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00251},{"id":"CVE-2026-65350","published":"2026-10-26T20:43:15.489Z","updated":"2026-10-26T20:43:15.489Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00243},{"id":"CVE-2026-112620","published":"2026-10-26T20:43:14.531Z","updated":"2026-10-26T20:43:14.531Z","title":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112508","published":"2026-10-26T20:43:09.511Z","updated":"2026-10-26T20:43:09.511Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-113899","published":"2026-10-26T20:43:07.520Z","updated":"2026-10-26T20:43:07.520Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-112621","published":"2026-10-26T20:43:05.427Z","updated":"2026-10-26T20:43:05.427Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00231},{"id":"CVE-2026-112676","published":"2026-10-26T20:43:02.382Z","updated":"2026-10-26T20:43:02.382Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112699","published":"2026-10-26T20:42:59.234Z","updated":"2026-10-26T20:42:59.234Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-84493","published":"2026-10-26T20:42:58.280Z","updated":"2026-10-26T20:42:58.280Z","title":"An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00208},{"id":"CVE-2026-84539","published":"2026-10-26T20:42:56.382Z","updated":"2026-10-26T20:42:56.382Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00212},{"id":"CVE-2026-112660","published":"2026-10-26T20:42:54.409Z","updated":"2026-10-26T20:42:54.409Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00246},{"id":"CVE-2026-84610","published":"2026-10-26T20:42:51.260Z","updated":"2026-10-26T20:42:51.260Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00239},{"id":"CVE-2026-86945","published":"2026-10-26T20:42:50.318Z","updated":"2026-10-26T20:42:50.318Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112637","published":"2026-10-26T20:42:48.227Z","updated":"2026-10-26T21:47:49.823Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00544},{"id":"CVE-2026-112565","published":"2026-10-26T20:42:43.305Z","updated":"2026-10-26T20:42:43.305Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00227},{"id":"CVE-2026-112532","published":"2026-10-26T20:42:39.510Z","updated":"2026-10-26T20:42:39.510Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-86969","published":"2026-10-26T20:42:38.570Z","updated":"2026-10-26T20:42:38.570Z","title":"An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112498","published":"2026-10-26T20:42:37.319Z","updated":"2026-10-26T20:42:37.319Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112477","published":"2026-10-26T20:42:36.366Z","updated":"2026-10-26T20:42:36.366Z","title":"A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-86986","published":"2026-10-26T20:42:35.426Z","updated":"2026-10-26T20:42:35.426Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00182},{"id":"CVE-2026-84542","published":"2026-10-26T20:42:34.361Z","updated":"2026-10-26T20:42:34.361Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-65384","published":"2026-10-26T20:42:33.221Z","updated":"2026-10-26T20:42:33.221Z","title":"An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may cause an…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00251},{"id":"CVE-2026-113909","published":"2026-10-26T20:42:32.294Z","updated":"2026-10-26T20:42:32.294Z","title":"A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112524","published":"2026-10-26T20:42:31.336Z","updated":"2026-10-26T20:42:31.336Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-86990","published":"2026-10-26T20:42:28.304Z","updated":"2026-10-26T20:42:28.304Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00254},{"id":"CVE-2026-112461","published":"2026-10-26T20:42:27.264Z","updated":"2026-10-26T20:42:27.264Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-65392","published":"2026-10-26T20:42:26.184Z","updated":"2026-10-26T20:42:26.184Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-113948","published":"2026-10-26T20:42:22.003Z","updated":"2026-10-26T20:42:22.003Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-112441","published":"2026-10-26T20:42:19.182Z","updated":"2026-10-26T20:42:19.182Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112504","published":"2026-10-26T20:42:18.231Z","updated":"2026-10-26T20:42:18.231Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112695","published":"2026-10-26T20:42:17.175Z","updated":"2026-10-26T20:42:17.175Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112416","published":"2026-10-26T20:42:15.182Z","updated":"2026-10-26T20:42:15.182Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112553","published":"2026-10-26T20:42:12.049Z","updated":"2026-10-26T20:42:12.049Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112683","published":"2026-10-26T20:42:10.162Z","updated":"2026-10-26T20:42:10.162Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112545","published":"2026-10-26T20:42:07.321Z","updated":"2026-10-26T20:42:07.321Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112457","published":"2026-10-26T20:42:06.292Z","updated":"2026-10-27T00:08:34.294Z","title":"A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00352},{"id":"CVE-2026-112512","published":"2026-10-26T20:42:04.168Z","updated":"2026-10-26T20:42:04.168Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112705","published":"2026-10-26T20:42:02.600Z","updated":"2026-10-26T20:42:02.600Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-113952","published":"2026-10-26T20:41:59.460Z","updated":"2026-10-26T20:41:59.460Z","title":"A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00231},{"id":"CVE-2026-112640","published":"2026-10-26T20:41:58.513Z","updated":"2026-10-26T20:41:58.513Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00193},{"id":"CVE-2026-112569","published":"2026-10-26T20:41:57.560Z","updated":"2026-10-26T20:41:57.560Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-86877","published":"2026-10-26T20:41:54.637Z","updated":"2026-10-26T20:41:54.637Z","title":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00152},{"id":"CVE-2026-116581","published":"2026-10-26T20:41:52.905Z","updated":"2026-10-31T01:49:33.208Z","title":"Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)","severity":"HIGH","score":7.5,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00451},{"id":"CVE-2026-112617","published":"2026-10-26T20:41:52.626Z","updated":"2026-10-29T13:20:44.204Z","title":"An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00175},{"id":"CVE-2026-112494","published":"2026-10-26T20:41:51.590Z","updated":"2026-10-26T20:41:51.590Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00214},{"id":"CVE-2026-112601","published":"2026-10-26T20:41:49.490Z","updated":"2026-10-26T20:41:49.490Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a denial-of-service.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00197},{"id":"CVE-2026-113913","published":"2026-10-26T20:41:48.445Z","updated":"2026-10-27T00:01:30.612Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00614},{"id":"CVE-2026-86973","published":"2026-10-26T20:41:47.396Z","updated":"2026-10-26T20:41:47.396Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112482","published":"2026-10-26T20:41:45.316Z","updated":"2026-10-26T20:41:45.316Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112656","published":"2026-10-26T20:41:42.359Z","updated":"2026-10-26T20:41:42.359Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0024},{"id":"CVE-2026-113944","published":"2026-10-26T20:41:41.340Z","updated":"2026-10-26T20:41:41.340Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-64750","published":"2026-10-26T20:41:36.188Z","updated":"2026-10-26T20:41:36.188Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-86978","published":"2026-10-26T20:41:34.313Z","updated":"2026-10-26T20:41:34.313Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112523","published":"2026-10-26T20:41:33.332Z","updated":"2026-10-26T20:41:33.332Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112466","published":"2026-10-26T20:41:31.146Z","updated":"2026-10-26T20:41:31.146Z","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112535","published":"2026-10-26T20:41:27.167Z","updated":"2026-10-26T20:41:27.167Z","title":"A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-84545","published":"2026-10-26T20:41:26.225Z","updated":"2026-10-26T20:41:26.225Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00245},{"id":"CVE-2026-112470","published":"2026-10-26T20:41:25.281Z","updated":"2026-10-26T20:41:25.281Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112562","published":"2026-10-26T20:41:22.444Z","updated":"2026-10-26T20:41:22.444Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-86939","published":"2026-10-26T20:41:21.512Z","updated":"2026-10-26T20:41:21.512Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00212},{"id":"CVE-2026-112427","published":"2026-10-26T20:41:20.561Z","updated":"2026-10-27T03:56:19.089Z","title":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause…","severity":"HIGH","score":8.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00688},{"id":"CVE-2026-112630","published":"2026-10-26T20:41:17.725Z","updated":"2026-10-26T20:41:17.725Z","title":"An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-86942","published":"2026-10-26T20:41:12.360Z","updated":"2026-10-26T20:41:12.360Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-112519","published":"2026-10-26T20:41:11.230Z","updated":"2026-10-26T20:41:11.230Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112688","published":"2026-10-26T20:41:09.158Z","updated":"2026-10-26T21:58:23.091Z","title":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00635},{"id":"CVE-2026-84494","published":"2026-10-26T20:41:06.935Z","updated":"2026-10-26T20:41:06.935Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112671","published":"2026-10-26T20:41:04.509Z","updated":"2026-10-26T20:41:04.509Z","title":"A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00352},{"id":"CVE-2026-84528","published":"2026-10-26T20:41:02.320Z","updated":"2026-10-26T20:41:02.320Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112558","published":"2026-10-26T20:41:01.295Z","updated":"2026-10-26T20:41:01.295Z","title":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112626","published":"2026-10-26T20:40:58.116Z","updated":"2026-10-26T21:59:22.693Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00575},{"id":"CVE-2026-113934","published":"2026-10-26T20:40:56.910Z","updated":"2026-10-26T20:40:56.910Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-86954","published":"2026-10-26T20:40:55.809Z","updated":"2026-10-30T20:00:58.329Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00545},{"id":"CVE-2026-84590","published":"2026-10-26T20:40:54.778Z","updated":"2026-10-26T20:40:54.778Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0032},{"id":"CVE-2026-86923","published":"2026-10-26T20:40:52.774Z","updated":"2026-10-26T20:40:52.774Z","title":"An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112651","published":"2026-10-26T20:40:49.503Z","updated":"2026-10-27T03:56:21.546Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00539},{"id":"CVE-2026-113943","published":"2026-10-26T20:40:48.171Z","updated":"2026-10-27T00:10:49.392Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00444},{"id":"CVE-2026-86974","published":"2026-10-26T20:40:47.225Z","updated":"2026-10-26T20:40:47.225Z","title":"A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112485","published":"2026-10-26T20:40:46.282Z","updated":"2026-10-26T20:40:46.282Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112606","published":"2026-10-26T20:40:43.224Z","updated":"2026-10-26T20:40:43.224Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0024},{"id":"CVE-2026-113914","published":"2026-10-26T20:40:42.234Z","updated":"2026-10-29T13:17:16.749Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00119},{"id":"CVE-2026-112493","published":"2026-10-26T20:40:39.799Z","updated":"2026-10-26T20:40:39.799Z","title":"A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112539","published":"2026-10-26T20:40:38.714Z","updated":"2026-10-26T20:40:38.714Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112610","published":"2026-10-26T20:40:35.559Z","updated":"2026-10-26T20:40:35.559Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112647","published":"2026-10-26T20:40:30.104Z","updated":"2026-10-26T20:40:30.104Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112515","published":"2026-10-26T20:40:28.110Z","updated":"2026-10-26T20:40:28.110Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-84498","published":"2026-10-26T20:40:26.028Z","updated":"2026-10-26T20:40:26.028Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-64789","published":"2026-10-26T20:40:24.879Z","updated":"2026-10-26T20:40:24.879Z","title":"This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00239},{"id":"CVE-2026-112542","published":"2026-10-26T20:40:22.769Z","updated":"2026-10-26T20:40:22.769Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112684","published":"2026-10-26T20:40:20.694Z","updated":"2026-10-26T20:40:20.694Z","title":"This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00193},{"id":"CVE-2026-112554","published":"2026-10-26T20:40:18.789Z","updated":"2026-10-26T20:40:18.789Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-112692","published":"2026-10-26T20:40:17.783Z","updated":"2026-10-26T20:40:17.783Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0023},{"id":"CVE-2026-112446","published":"2026-10-26T20:40:16.691Z","updated":"2026-10-26T20:40:16.691Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00229},{"id":"CVE-2026-86958","published":"2026-10-26T20:40:14.703Z","updated":"2026-10-26T20:40:14.703Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0031},{"id":"CVE-2026-113938","published":"2026-10-26T20:40:13.559Z","updated":"2026-10-26T20:40:13.559Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-113939","published":"2026-10-26T20:40:12.610Z","updated":"2026-10-27T00:10:49.535Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00444},{"id":"CVE-2026-112447","published":"2026-10-26T20:40:11.670Z","updated":"2026-10-26T20:40:11.670Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112502","published":"2026-10-26T20:40:08.723Z","updated":"2026-10-26T20:40:08.723Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00233},{"id":"CVE-2026-112693","published":"2026-10-26T20:40:07.783Z","updated":"2026-10-26T20:40:07.783Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00188},{"id":"CVE-2026-112410","published":"2026-10-26T20:40:05.687Z","updated":"2026-10-26T20:40:05.687Z","title":"A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00324},{"id":"CVE-2026-112555","published":"2026-10-26T20:40:04.631Z","updated":"2026-10-26T20:40:04.631Z","title":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112685","published":"2026-10-26T20:40:01.497Z","updated":"2026-10-29T13:17:16.892Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00161},{"id":"CVE-2026-112543","published":"2026-10-26T20:39:57.726Z","updated":"2026-10-26T20:39:57.726Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112451","published":"2026-10-26T20:39:53.689Z","updated":"2026-10-26T20:39:53.689Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00324},{"id":"CVE-2026-112514","published":"2026-10-26T20:39:52.589Z","updated":"2026-10-26T20:39:52.589Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112646","published":"2026-10-26T20:39:49.651Z","updated":"2026-10-27T00:10:49.813Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00551},{"id":"CVE-2026-113903","published":"2026-10-26T20:39:45.249Z","updated":"2026-10-26T20:39:45.249Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112611","published":"2026-10-26T20:39:44.296Z","updated":"2026-10-26T20:39:44.296Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112492","published":"2026-10-26T20:39:41.398Z","updated":"2026-11-02T19:58:06.059Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"HIGH","score":7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112607","published":"2026-10-26T20:39:36.434Z","updated":"2026-10-26T20:39:36.434Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A remote attacker…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00322},{"id":"CVE-2026-113915","published":"2026-10-26T20:39:35.495Z","updated":"2026-10-26T20:39:35.495Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00243},{"id":"CVE-2026-112484","published":"2026-10-26T20:39:33.603Z","updated":"2026-10-27T03:56:22.589Z","title":"This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00211},{"id":"CVE-2026-113942","published":"2026-10-26T20:39:31.605Z","updated":"2026-10-26T20:39:31.605Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00197},{"id":"CVE-2026-112596","published":"2026-10-26T20:39:28.457Z","updated":"2026-10-26T20:39:28.457Z","title":"An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112627","published":"2026-10-26T20:39:25.413Z","updated":"2026-10-26T20:39:25.413Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-113935","published":"2026-10-26T20:39:24.479Z","updated":"2026-10-26T20:39:24.479Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00197},{"id":"CVE-2026-112559","published":"2026-10-26T20:39:21.217Z","updated":"2026-10-29T13:17:17.035Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00152},{"id":"CVE-2026-112670","published":"2026-10-26T20:39:17.536Z","updated":"2026-10-26T20:39:17.536Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-84495","published":"2026-10-26T20:39:14.099Z","updated":"2026-10-26T20:39:14.099Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00243},{"id":"CVE-2026-112666","published":"2026-10-26T20:39:08.640Z","updated":"2026-10-26T20:39:08.640Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00188},{"id":"CVE-2026-112689","published":"2026-10-26T20:39:06.745Z","updated":"2026-10-26T20:39:06.745Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112518","published":"2026-10-26T20:39:03.875Z","updated":"2026-10-26T20:39:03.875Z","title":"An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-86943","published":"2026-10-26T20:39:02.764Z","updated":"2026-10-26T20:39:02.764Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause a…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112563","published":"2026-10-26T20:38:58.593Z","updated":"2026-10-26T20:38:58.593Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112534","published":"2026-10-26T20:38:54.493Z","updated":"2026-10-26T20:38:54.493Z","title":"This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112471","published":"2026-10-26T20:38:52.280Z","updated":"2026-10-26T23:55:41.625Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00481},{"id":"CVE-2026-112488","published":"2026-10-26T20:38:50.301Z","updated":"2026-10-26T20:38:50.301Z","title":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00236},{"id":"CVE-2026-112522","published":"2026-10-26T20:38:49.342Z","updated":"2026-10-26T20:38:49.342Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112467","published":"2026-10-26T20:38:46.209Z","updated":"2026-10-26T20:38:46.209Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass network…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112575","published":"2026-10-26T20:38:44.324Z","updated":"2026-10-26T20:38:44.324Z","title":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112430","published":"2026-10-26T20:38:40.230Z","updated":"2026-10-26T20:38:40.230Z","title":"An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00259},{"id":"CVE-2026-113936","published":"2026-10-26T20:38:38.129Z","updated":"2026-10-26T20:38:38.129Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-112624","published":"2026-10-26T20:38:37.070Z","updated":"2026-10-26T20:38:37.070Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00246},{"id":"CVE-2026-112673","published":"2026-10-26T20:38:34.035Z","updated":"2026-10-26T20:38:34.035Z","title":"A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-84496","published":"2026-10-26T20:38:30.070Z","updated":"2026-10-27T00:10:49.673Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00462},{"id":"CVE-2026-112665","published":"2026-10-26T20:38:26.057Z","updated":"2026-10-26T20:38:26.057Z","title":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-112632","published":"2026-10-26T20:38:22.920Z","updated":"2026-10-26T20:38:22.920Z","title":"An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-112425","published":"2026-10-26T20:38:19.979Z","updated":"2026-10-26T20:38:19.979Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112560","published":"2026-10-26T20:38:17.884Z","updated":"2026-10-26T20:38:17.884Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00227},{"id":"CVE-2026-112537","published":"2026-10-26T20:38:13.797Z","updated":"2026-10-26T20:38:13.797Z","title":"This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112464","published":"2026-10-26T20:38:08.762Z","updated":"2026-10-26T20:38:08.762Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112521","published":"2026-10-26T20:38:06.669Z","updated":"2026-10-26T20:38:06.669Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00233},{"id":"CVE-2026-112608","published":"2026-10-26T20:38:05.621Z","updated":"2026-10-26T20:38:05.621Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00171},{"id":"CVE-2026-65397","published":"2026-10-26T20:38:03.518Z","updated":"2026-10-29T13:17:17.633Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00159},{"id":"CVE-2026-112599","published":"2026-10-26T20:38:01.442Z","updated":"2026-10-26T20:38:01.442Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00193},{"id":"CVE-2026-112576","published":"2026-10-26T20:37:58.398Z","updated":"2026-10-26T20:37:58.398Z","title":"A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0024},{"id":"CVE-2026-112628","published":"2026-10-26T20:37:55.501Z","updated":"2026-10-26T20:37:55.501Z","title":"This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112501","published":"2026-10-26T20:37:53.468Z","updated":"2026-10-26T20:37:53.468Z","title":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112444","published":"2026-10-26T20:37:51.464Z","updated":"2026-10-26T20:37:51.464Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112690","published":"2026-10-26T20:37:50.437Z","updated":"2026-10-26T20:37:50.437Z","title":"This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00352},{"id":"CVE-2026-112556","published":"2026-10-26T20:37:49.374Z","updated":"2026-10-26T22:10:26.842Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker…","severity":"MEDIUM","score":4.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00374},{"id":"CVE-2026-112413","published":"2026-10-26T20:37:48.341Z","updated":"2026-10-26T20:37:48.341Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112686","published":"2026-10-26T20:37:45.515Z","updated":"2026-10-26T20:37:45.515Z","title":"A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00193},{"id":"CVE-2026-112669","published":"2026-10-26T20:37:44.546Z","updated":"2026-10-26T20:37:44.546Z","title":"A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112540","published":"2026-10-26T20:37:42.984Z","updated":"2026-10-26T20:37:42.984Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112517","published":"2026-10-26T20:37:38.369Z","updated":"2026-10-26T20:37:38.369Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112429","published":"2026-10-26T20:37:32.056Z","updated":"2026-10-26T20:37:32.056Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-86937","published":"2026-10-26T20:37:29.147Z","updated":"2026-10-26T20:37:29.147Z","title":"A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0024},{"id":"CVE-2026-112612","published":"2026-10-26T20:37:28.196Z","updated":"2026-10-26T20:37:28.196Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00174},{"id":"CVE-2026-113900","published":"2026-10-26T20:37:27.243Z","updated":"2026-11-02T19:56:33.532Z","title":"A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112491","published":"2026-10-26T20:37:25.168Z","updated":"2026-10-26T20:37:25.168Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112604","published":"2026-10-26T20:37:23.164Z","updated":"2026-10-26T20:37:23.164Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00212},{"id":"CVE-2026-112468","published":"2026-10-26T20:37:22.118Z","updated":"2026-10-26T20:37:22.118Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112487","published":"2026-10-26T20:37:20.206Z","updated":"2026-11-02T19:55:10.009Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-113941","published":"2026-10-26T20:37:19.181Z","updated":"2026-10-26T20:37:19.181Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-112653","published":"2026-10-26T20:37:18.223Z","updated":"2026-10-26T20:37:18.223Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-112595","published":"2026-10-26T20:37:15.202Z","updated":"2026-10-26T20:37:15.202Z","title":"This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0027},{"id":"CVE-2026-86920","published":"2026-10-26T20:37:11.101Z","updated":"2026-10-29T13:17:17.187Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00159},{"id":"CVE-2026-113940","published":"2026-10-26T20:37:10.156Z","updated":"2026-10-26T20:37:10.156Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-112652","published":"2026-10-26T20:37:09.214Z","updated":"2026-10-26T20:37:09.214Z","title":"A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00164},{"id":"CVE-2026-112469","published":"2026-10-26T20:37:07.323Z","updated":"2026-10-26T20:37:07.323Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-112486","published":"2026-10-26T20:37:05.330Z","updated":"2026-10-26T20:37:05.330Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00224},{"id":"CVE-2026-113901","published":"2026-10-26T20:37:02.195Z","updated":"2026-10-26T20:37:02.195Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00191},{"id":"CVE-2026-65363","published":"2026-10-26T20:37:01.245Z","updated":"2026-10-26T20:37:01.245Z","title":"The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112428","published":"2026-10-26T20:37:00.304Z","updated":"2026-10-26T20:37:00.304Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-86936","published":"2026-10-26T20:36:59.248Z","updated":"2026-10-26T20:36:59.248Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112701","published":"2026-10-26T20:36:57.372Z","updated":"2026-10-29T13:17:17.340Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00119},{"id":"CVE-2026-84634","published":"2026-10-26T20:36:56.323Z","updated":"2026-10-26T20:36:56.323Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able…","severity":"MEDIUM","score":6.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00169},{"id":"CVE-2026-112516","published":"2026-10-26T20:36:54.429Z","updated":"2026-10-26T20:36:54.429Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112453","published":"2026-10-26T20:36:53.286Z","updated":"2026-10-26T20:36:53.286Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112541","published":"2026-10-26T20:36:50.345Z","updated":"2026-10-26T20:36:50.345Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112687","published":"2026-10-26T20:36:46.245Z","updated":"2026-10-26T20:36:46.245Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00212},{"id":"CVE-2026-112668","published":"2026-10-26T20:36:45.095Z","updated":"2026-10-26T20:36:45.095Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112557","published":"2026-10-26T20:36:44.163Z","updated":"2026-10-26T20:36:44.163Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112691","published":"2026-10-26T20:36:42.160Z","updated":"2026-10-26T20:36:42.160Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00227},{"id":"CVE-2026-112500","published":"2026-10-26T20:36:39.119Z","updated":"2026-10-26T20:36:39.119Z","title":"A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112629","published":"2026-10-26T20:36:36.693Z","updated":"2026-10-26T23:57:08.218Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.006},{"id":"CVE-2026-112432","published":"2026-10-26T20:36:32.722Z","updated":"2026-10-26T20:36:32.722Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112577","published":"2026-10-26T20:36:29.711Z","updated":"2026-10-26T20:36:29.711Z","title":"A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-112609","published":"2026-10-26T20:36:27.792Z","updated":"2026-10-29T13:27:20.436Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00131},{"id":"CVE-2026-112473","published":"2026-10-26T20:36:21.917Z","updated":"2026-10-26T20:36:21.917Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112536","published":"2026-10-26T20:36:18.135Z","updated":"2026-10-26T20:36:18.135Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112424","published":"2026-10-26T20:36:15.325Z","updated":"2026-10-26T20:36:15.325Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112561","published":"2026-10-26T20:36:12.895Z","updated":"2026-10-26T20:36:12.895Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112633","published":"2026-10-26T20:36:11.860Z","updated":"2026-10-26T23:57:38.402Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00552},{"id":"CVE-2026-86941","published":"2026-10-26T20:36:09.752Z","updated":"2026-10-26T20:36:09.752Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0024},{"id":"CVE-2026-84614","published":"2026-10-26T20:36:07.660Z","updated":"2026-10-26T20:36:07.660Z","title":"A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access…","severity":"MEDIUM","score":4.6,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00193},{"id":"CVE-2026-86916","published":"2026-10-26T20:36:06.607Z","updated":"2026-10-27T03:56:08.138Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00203},{"id":"CVE-2026-112672","published":"2026-10-26T20:36:03.577Z","updated":"2026-10-26T20:36:03.577Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00223},{"id":"CVE-2026-113937","published":"2026-10-26T20:36:00.538Z","updated":"2026-10-26T20:36:00.538Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00175},{"id":"CVE-2026-112625","published":"2026-10-26T20:35:59.571Z","updated":"2026-10-26T20:35:59.571Z","title":"An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00215},{"id":"CVE-2026-112449","published":"2026-10-26T20:35:56.628Z","updated":"2026-10-26T20:35:56.628Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00218},{"id":"CVE-2026-113896","published":"2026-10-26T20:35:55.612Z","updated":"2026-10-29T20:09:18.137Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00114},{"id":"CVE-2026-112507","published":"2026-10-26T20:35:53.518Z","updated":"2026-10-26T20:35:53.518Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to cause…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00169},{"id":"CVE-2026-112442","published":"2026-10-26T20:35:52.552Z","updated":"2026-10-26T20:35:52.552Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0021},{"id":"CVE-2026-116580","published":"2026-10-26T20:35:49.975Z","updated":"2026-11-02T18:11:49.130Z","title":"Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check","severity":"HIGH","score":7.3,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00342},{"id":"CVE-2026-112696","published":"2026-10-26T20:35:49.610Z","updated":"2026-10-26T20:35:49.610Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00206},{"id":"CVE-2026-112679","published":"2026-10-26T20:35:47.632Z","updated":"2026-10-26T20:35:47.632Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00203},{"id":"CVE-2026-112550","published":"2026-10-26T20:35:46.683Z","updated":"2026-10-26T20:35:46.683Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00201},{"id":"CVE-2026-112415","published":"2026-10-26T20:35:44.696Z","updated":"2026-10-27T00:10:49.967Z","title":"An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00547},{"id":"CVE-2026-112680","published":"2026-10-26T20:35:41.447Z","updated":"2026-10-26T20:35:41.447Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00175},{"id":"CVE-2026-112546","published":"2026-10-26T20:35:40.501Z","updated":"2026-10-26T20:35:40.501Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00214},{"id":"CVE-2026-112638","published":"2026-10-26T20:35:37.251Z","updated":"2026-10-26T20:35:37.251Z","title":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00241},{"id":"CVE-2026-112511","published":"2026-10-26T20:35:36.199Z","updated":"2026-10-26T20:35:36.199Z","title":"A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00213},{"id":"CVE-2026-112454","published":"2026-10-26T20:35:34.206Z","updated":"2026-10-26T20:35:34.206Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00212},{"id":"CVE-2026-84633","published":"2026-10-26T20:35:31.993Z","updated":"2026-10-26T20:35:31.993Z","title":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00136},{"id":"CVE-2026-112706","published":"2026-10-26T20:35:30.955Z","updated":"2026-10-29T13:27:20.295Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00141},{"id":"CVE-2026-86931","published":"2026-10-26T20:35:29.928Z","updated":"2026-10-26T20:35:29.928Z","title":"A privacy issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00203},{"id":"CVE-2026-112614","published":"2026-10-26T20:35:28.023Z","updated":"2026-10-26T23:59:40.874Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00496},{"id":"CVE-2026-113906","published":"2026-10-26T20:35:27.000Z","updated":"2026-10-26T20:35:27.000Z","title":"A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155},{"id":"CVE-2026-86989","published":"2026-10-26T20:35:23.977Z","updated":"2026-10-26T20:35:23.977Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155},{"id":"CVE-2026-112478","published":"2026-10-26T20:35:22.887Z","updated":"2026-10-26T20:35:22.887Z","title":"An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.002},{"id":"CVE-2026-112497","published":"2026-10-26T20:35:21.949Z","updated":"2026-10-26T20:35:21.949Z","title":"This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-86966","published":"2026-10-26T20:35:20.995Z","updated":"2026-10-26T20:35:20.995Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00227},{"id":"CVE-2026-113910","published":"2026-10-26T20:35:18.893Z","updated":"2026-10-26T20:35:18.893Z","title":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-86970","published":"2026-10-26T20:35:17.934Z","updated":"2026-10-26T20:35:17.934Z","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112481","published":"2026-10-26T20:35:16.806Z","updated":"2026-10-26T20:35:16.806Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-113947","published":"2026-10-26T20:35:15.753Z","updated":"2026-10-27T03:56:09.187Z","title":"This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00513},{"id":"CVE-2026-112655","published":"2026-10-26T20:35:14.744Z","updated":"2026-10-27T03:56:10.268Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00593},{"id":"CVE-2026-112593","published":"2026-10-26T20:35:11.562Z","updated":"2026-10-26T20:35:11.562Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00205},{"id":"CVE-2026-84594","published":"2026-10-26T20:35:07.362Z","updated":"2026-10-26T20:35:07.362Z","title":"A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00185},{"id":"CVE-2026-112622","published":"2026-10-26T20:35:06.320Z","updated":"2026-10-26T20:35:06.320Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-84605","published":"2026-10-26T20:35:02.351Z","updated":"2026-10-26T20:35:02.351Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00166},{"id":"CVE-2026-112675","published":"2026-10-26T20:35:01.395Z","updated":"2026-10-29T13:27:20.140Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0015},{"id":"CVE-2026-86946","published":"2026-10-26T20:34:54.475Z","updated":"2026-10-26T20:34:54.475Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112634","published":"2026-10-26T20:34:52.470Z","updated":"2026-10-26T23:59:31.641Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00583},{"id":"CVE-2026-112423","published":"2026-10-26T20:34:50.377Z","updated":"2026-10-26T20:34:50.377Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00234},{"id":"CVE-2026-112566","published":"2026-10-26T20:34:45.924Z","updated":"2026-10-26T20:34:45.924Z","title":"A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00227},{"id":"CVE-2026-112474","published":"2026-10-26T20:34:42.837Z","updated":"2026-10-26T20:34:42.837Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-86985","published":"2026-10-26T20:34:41.891Z","updated":"2026-10-26T20:34:41.891Z","title":"This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00182},{"id":"CVE-2026-112531","published":"2026-10-26T20:34:40.959Z","updated":"2026-10-26T20:34:40.959Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00228},{"id":"CVE-2026-65368","published":"2026-10-26T20:34:38.948Z","updated":"2026-10-26T20:34:38.948Z","title":"A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229},{"id":"CVE-2026-112618","published":"2026-10-26T20:34:37.983Z","updated":"2026-10-29T13:12:23.856Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00142},{"id":"CVE-2026-112462","published":"2026-10-26T20:34:36.959Z","updated":"2026-10-26T20:34:36.959Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00239},{"id":"CVE-2026-112570","published":"2026-10-26T20:34:34.013Z","updated":"2026-10-26T20:34:34.013Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216},{"id":"CVE-2026-112659","published":"2026-10-26T20:34:31.091Z","updated":"2026-10-27T03:56:11.360Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00555},{"id":"CVE-2026-112658","published":"2026-10-26T20:34:29.088Z","updated":"2026-10-29T13:12:57.993Z","title":"This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155},{"id":"CVE-2026-112434","published":"2026-10-26T20:34:26.993Z","updated":"2026-10-26T20:34:26.993Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-112571","published":"2026-10-26T20:34:25.956Z","updated":"2026-10-26T20:34:25.956Z","title":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0024},{"id":"CVE-2026-86880","published":"2026-10-26T20:34:24.907Z","updated":"2026-10-26T20:34:24.907Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00166},{"id":"CVE-2026-86992","published":"2026-10-26T20:34:22.804Z","updated":"2026-10-26T20:34:22.804Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-112526","published":"2026-10-26T20:34:19.670Z","updated":"2026-10-26T20:34:19.670Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00379},{"id":"CVE-2026-112619","published":"2026-10-26T20:34:17.554Z","updated":"2026-10-26T20:34:17.554Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00231},{"id":"CVE-2026-112475","published":"2026-10-26T20:34:14.480Z","updated":"2026-10-26T20:34:14.480Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-86984","published":"2026-10-26T20:34:13.376Z","updated":"2026-10-26T20:34:13.376Z","title":"A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112530","published":"2026-10-26T20:34:12.300Z","updated":"2026-10-26T20:34:12.300Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-86896","published":"2026-10-26T20:34:07.283Z","updated":"2026-11-02T19:52:00.074Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-112567","published":"2026-10-26T20:34:06.339Z","updated":"2026-10-26T20:34:06.339Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00246},{"id":"CVE-2025-13833","published":"2026-10-26T20:34:03.630Z","updated":"2026-10-27T13:04:51.882Z","title":"Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution","severity":"HIGH","score":7.7,"vendor":"Forescout Technologies","product":"SecureConnector","kev":false,"epss":0.0015},{"id":"CVE-2026-112459","published":"2026-10-26T20:34:03.325Z","updated":"2026-10-26T20:34:03.325Z","title":"A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-84604","published":"2026-10-26T20:33:57.429Z","updated":"2026-10-26T20:33:57.429Z","title":"A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00241},{"id":"CVE-2026-112623","published":"2026-10-26T20:33:54.598Z","updated":"2026-10-27T03:56:12.467Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00539},{"id":"CVE-2026-84595","published":"2026-10-26T20:33:53.548Z","updated":"2026-10-26T20:33:53.548Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-112438","published":"2026-10-26T20:33:52.606Z","updated":"2026-10-27T03:56:13.539Z","title":"A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00729},{"id":"CVE-2026-64759","published":"2026-10-26T20:33:51.666Z","updated":"2026-10-27T03:56:14.960Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00451},{"id":"CVE-2026-113946","published":"2026-10-26T20:33:49.767Z","updated":"2026-10-26T20:33:49.767Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00189},{"id":"CVE-2026-112654","published":"2026-10-26T20:33:48.739Z","updated":"2026-10-26T20:33:48.739Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00182},{"id":"CVE-2026-86971","published":"2026-10-26T20:33:46.675Z","updated":"2026-10-26T23:59:52.652Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00583},{"id":"CVE-2026-112480","published":"2026-10-26T20:33:45.573Z","updated":"2026-10-26T20:33:45.573Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00225},{"id":"CVE-2026-65373","published":"2026-10-26T20:33:44.533Z","updated":"2026-11-02T19:50:13.607Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00218},{"id":"CVE-2026-86988","published":"2026-10-26T20:33:43.496Z","updated":"2026-11-02T19:44:32.320Z","title":"The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2.…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-112479","published":"2026-10-26T20:33:42.429Z","updated":"2026-11-02T19:40:33.122Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228},{"id":"CVE-2026-112615","published":"2026-10-26T20:33:40.397Z","updated":"2026-11-02T19:38:18.855Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00193},{"id":"CVE-2026-113907","published":"2026-10-26T20:33:39.392Z","updated":"2026-10-27T00:09:41.492Z","title":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00219},{"id":"CVE-2026-112642","published":"2026-10-26T20:33:34.473Z","updated":"2026-11-02T19:10:18.472Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00237},{"id":"CVE-2026-113950","published":"2026-10-26T20:33:33.570Z","updated":"2026-11-02T18:49:21.948Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00221},{"id":"CVE-2026-112707","published":"2026-10-26T20:33:30.477Z","updated":"2026-11-02T18:51:34.555Z","title":"A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2.…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00166},{"id":"CVE-2026-112510","published":"2026-10-26T20:33:29.536Z","updated":"2026-11-02T18:48:01.314Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00343},{"id":"CVE-2026-112455","published":"2026-10-26T20:33:27.547Z","updated":"2026-10-29T13:17:17.483Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00161},{"id":"CVE-2026-112639","published":"2026-10-26T20:33:25.668Z","updated":"2026-11-02T18:46:27.262Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.002},{"id":"CVE-2026-112547","published":"2026-10-26T20:33:24.592Z","updated":"2026-10-29T13:10:13.737Z","title":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00136},{"id":"CVE-2026-112681","published":"2026-10-26T20:33:22.520Z","updated":"2026-11-02T18:43:54.410Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00166},{"id":"CVE-2026-112551","published":"2026-10-26T20:33:21.572Z","updated":"2026-11-02T18:42:54.757Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00203},{"id":"CVE-2026-112414","published":"2026-10-26T20:33:19.666Z","updated":"2026-11-02T18:42:14.445Z","title":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00253},{"id":"CVE-2026-112697","published":"2026-10-26T20:33:18.628Z","updated":"2026-11-02T18:41:14.743Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00209},{"id":"CVE-2026-112678","published":"2026-10-26T20:33:17.689Z","updated":"2026-10-29T13:27:19.842Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00154},{"id":"CVE-2026-84599","published":"2026-10-26T20:33:16.738Z","updated":"2026-11-02T19:11:35.880Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00189},{"id":"CVE-2026-112506","published":"2026-10-26T20:33:15.709Z","updated":"2026-10-29T13:27:19.992Z","title":"A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0014},{"id":"CVE-2026-112443","published":"2026-10-26T20:33:14.733Z","updated":"2026-10-26T20:33:14.733Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00214},{"id":"CVE-2026-113897","published":"2026-10-26T20:33:12.644Z","updated":"2026-10-26T20:33:12.644Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2.…","severity":"UNKNOWN","score":null,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00347},{"id":"CVE-2026-116504","published":"2026-10-26T20:30:16.475Z","updated":"2026-10-27T14:18:09.375Z","title":"TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.01547},{"id":"CVE-2026-116579","published":"2026-10-26T20:29:22.906Z","updated":"2026-10-27T14:18:18.772Z","title":"Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)","severity":"MEDIUM","score":5.9,"vendor":"crossbario","product":"autobahn-python","kev":false,"epss":0.00425},{"id":"CVE-2026-116578","published":"2026-10-26T20:22:32.217Z","updated":"2026-10-30T14:28:27.285Z","title":"Tornado: Open redirect in RedirectHandler via protocol-relative URLs","severity":"LOW","score":2.1,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00459},{"id":"CVE-2026-116577","published":"2026-10-26T20:20:22.104Z","updated":"2026-10-31T01:48:45.286Z","title":"Tornado: Quadratic CPU usage when parsing HTTP headers with line folding","severity":"MEDIUM","score":5.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00384},{"id":"CVE-2026-116576","published":"2026-10-26T20:18:33.224Z","updated":"2026-11-02T18:10:44.741Z","title":"systeminformation: Windows command injection in services() through Unicode quotation marks","severity":"HIGH","score":7.8,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00145},{"id":"CVE-2026-116502","published":"2026-10-26T20:15:07.238Z","updated":"2026-11-02T18:09:11.913Z","title":"turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write","severity":"MEDIUM","score":4.8,"vendor":"turboderp-org","product":"ExLlamaV2","kev":false,"epss":0.00152},{"id":"CVE-2026-116575","published":"2026-10-26T20:15:01.875Z","updated":"2026-10-27T14:18:25.039Z","title":"Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)","severity":"MEDIUM","score":6.3,"vendor":"mem0ai","product":"mem0","kev":false,"epss":0.00108},{"id":"CVE-2026-116671","published":"2026-10-26T20:10:20.067Z","updated":"2026-10-26T20:10:20.067Z","title":"Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder","severity":"LOW","score":2.1,"vendor":"Xpdf","product":"Xpdf","kev":false,"epss":0.0011},{"id":"CVE-2026-116482","published":"2026-10-26T20:00:21.140Z","updated":"2026-10-31T01:47:51.709Z","title":"subhajitkhan online-clinic-management-system patientregistration.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00253},{"id":"CVE-2026-70382","published":"2026-10-26T19:59:46.065Z","updated":"2026-10-26T19:59:46.065Z","title":"Stored Cross-Site Scripting in Web Interface","severity":"MEDIUM","score":5.1,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00253},{"id":"CVE-2026-65630","published":"2026-10-26T19:54:07.686Z","updated":"2026-10-26T19:54:07.686Z","title":"Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00137},{"id":"CVE-2026-65632","published":"2026-10-26T19:53:56.649Z","updated":"2026-10-26T19:53:56.649Z","title":"ECDSA signature length is not validated in jose, allowing signature malleability","severity":"MEDIUM","score":5.1,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00092},{"id":"CVE-2026-65631","published":"2026-10-26T19:53:45.204Z","updated":"2026-10-26T19:53:45.204Z","title":"erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service","severity":"MEDIUM","score":6.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00235},{"id":"CVE-2026-65629","published":"2026-10-26T19:53:35.646Z","updated":"2026-10-26T19:53:35.646Z","title":"Weak PBKDF2 parameters for password-encrypted private-key export in jose","severity":"HIGH","score":7.4,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00062},{"id":"CVE-2026-65628","published":"2026-10-26T19:53:27.625Z","updated":"2026-10-26T19:53:27.625Z","title":"Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00136},{"id":"CVE-2026-65627","published":"2026-10-26T19:53:16.336Z","updated":"2026-10-26T19:53:16.336Z","title":"Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2","severity":"MEDIUM","score":6.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00249},{"id":"CVE-2026-57184","published":"2026-10-26T19:53:10.021Z","updated":"2026-10-29T01:52:01.081Z","title":"Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)","severity":"MEDIUM","score":6.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0056},{"id":"CVE-2026-65626","published":"2026-10-26T19:53:05.620Z","updated":"2026-11-02T19:43:05.115Z","title":"Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00092},{"id":"CVE-2026-65625","published":"2026-10-26T19:52:54.987Z","updated":"2026-11-02T19:43:05.255Z","title":"Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00115},{"id":"CVE-2026-70381","published":"2026-10-26T19:52:44.232Z","updated":"2026-11-02T19:43:05.406Z","title":"Unauthorized Access to Internal Web Resources","severity":"MEDIUM","score":6.9,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00256},{"id":"CVE-2026-57193","published":"2026-10-26T19:46:01.924Z","updated":"2026-10-31T01:46:55.030Z","title":"Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)","severity":"MEDIUM","score":6.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.01963},{"id":"CVE-2026-70380","published":"2026-10-26T19:45:17.820Z","updated":"2026-11-02T19:43:05.539Z","title":"Resource Exhaustion in MICE Service","severity":"MEDIUM","score":6.9,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00306},{"id":"CVE-2026-116479","published":"2026-10-26T19:45:11.028Z","updated":"2026-10-27T14:18:35.499Z","title":"a2aproject a2a-java JSON-RPC Error getMessage information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00315},{"id":"CVE-2026-115533","published":"2026-10-26T19:38:54.907Z","updated":"2026-10-26T19:38:54.907Z","title":"CVE-2026-115533","severity":"UNKNOWN","score":null,"vendor":"Hugging Face","product":"LeRobot","kev":false,"epss":0.00342},{"id":"CVE-2026-115927","published":"2026-10-26T19:37:40.584Z","updated":"2026-10-27T14:18:44.227Z","title":"Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks","severity":"MEDIUM","score":5.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00384},{"id":"CVE-2026-57187","published":"2026-10-26T19:31:52.937Z","updated":"2026-11-02T18:07:20.728Z","title":"Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing","severity":"HIGH","score":7.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00481},{"id":"CVE-2026-116478","published":"2026-10-26T19:30:19.254Z","updated":"2026-11-02T18:04:28.991Z","title":"a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.00432},{"id":"CVE-2026-57196","published":"2026-10-26T19:27:35.360Z","updated":"2026-10-26T20:13:49.872Z","title":"Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00767},{"id":"CVE-2026-115924","published":"2026-10-26T19:22:52.720Z","updated":"2026-10-31T01:44:42.402Z","title":"Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs","severity":"HIGH","score":8.6,"vendor":"danielgatis","product":"rembg","kev":false,"epss":0.00394},{"id":"CVE-2026-116477","published":"2026-10-26T19:15:22.114Z","updated":"2026-10-31T01:43:26.819Z","title":"a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-dotnet","kev":false,"epss":0.00315},{"id":"CVE-2014-125135","published":"2026-10-26T19:00:19.803Z","updated":"2026-10-26T19:34:15.433Z","title":"OctoPrint Flask Secret Key hard-coded key","severity":"MEDIUM","score":6.9,"vendor":null,"product":"OctoPrint","kev":false,"epss":0.00478},{"id":"CVE-2026-116476","published":"2026-10-26T18:45:20.493Z","updated":"2026-11-02T18:03:12.392Z","title":"a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-dotnet","kev":false,"epss":0.00202},{"id":"CVE-2026-110720","published":"2026-10-26T18:38:14.209Z","updated":"2026-10-26T19:38:28.240Z","title":"Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules","severity":"CRITICAL","score":9.9,"vendor":"HashiCorp","product":"Tooling","kev":false,"epss":0.00365},{"id":"CVE-2026-116631","published":"2026-10-26T18:32:36.715Z","updated":"2026-10-26T18:57:54.011Z","title":"External protocol handler (tel:) address bar spoof","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox for iOS","kev":false,"epss":0.00213},{"id":"CVE-2026-116632","published":"2026-10-26T18:32:35.728Z","updated":"2026-10-26T18:56:21.288Z","title":"Facetime protocol handler enabled spoofing","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox for iOS","kev":false,"epss":0.00213},{"id":"CVE-2026-116471","published":"2026-10-26T18:30:15.152Z","updated":"2026-10-31T01:42:29.614Z","title":"BKWLD Decoy Authorization Policy Policy.php privileges management","severity":"MEDIUM","score":5.3,"vendor":"BKWLD","product":"Decoy","kev":false,"epss":0.00198},{"id":"CVE-2026-116467","published":"2026-10-26T18:15:14.725Z","updated":"2026-10-26T19:34:25.208Z","title":"ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00638},{"id":"CVE-2026-115804","published":"2026-10-26T18:09:52.286Z","updated":"2026-10-26T19:38:28.416Z","title":"Consul vulnerable to an authorization bypass in health check registration","severity":"MEDIUM","score":6.4,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.0029},{"id":"CVE-2026-116634","published":"2026-10-26T18:09:41.236Z","updated":"2026-10-26T19:34:36.562Z","title":"OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens","severity":"HIGH","score":8.2,"vendor":"cheaper-inference","product":"OmniRoute","kev":false,"epss":0.00499},{"id":"CVE-2026-50096","published":"2026-10-26T18:08:38.927Z","updated":"2026-10-26T19:38:28.569Z","title":"BUG-000187164 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251},{"id":"CVE-2026-50095","published":"2026-10-26T18:08:17.080Z","updated":"2026-10-26T19:38:28.708Z","title":"BUG-000187165 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251},{"id":"CVE-2026-33522","published":"2026-10-26T18:07:42.491Z","updated":"2026-10-26T19:38:28.853Z","title":"BUG-000182936 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":5.3,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00288},{"id":"CVE-2026-33521","published":"2026-10-26T18:07:20.638Z","updated":"2026-10-26T19:38:29.004Z","title":"BUG-000186514 - ArcGIS Server has a security vulnerability.","severity":"HIGH","score":7.5,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00448},{"id":"CVE-2026-33520","published":"2026-10-26T18:06:47.087Z","updated":"2026-10-26T19:38:29.146Z","title":"BUG-000185167 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251},{"id":"CVE-2026-10757","published":"2026-10-26T18:05:59.365Z","updated":"2026-10-29T12:15:56.185Z","title":"BUG-000187511 - ArcGIS Server has a security vulnerability.","severity":"CRITICAL","score":9.8,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00445},{"id":"CVE-2026-105626","published":"2026-10-26T18:02:25.376Z","updated":"2026-10-26T19:38:29.471Z","title":"Consul vulnerable to a denial of service in HTTP APIs","severity":"HIGH","score":7.5,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.0043},{"id":"CVE-2026-116463","published":"2026-10-26T18:00:15.404Z","updated":"2026-11-02T18:01:40.292Z","title":"FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds","severity":"MEDIUM","score":5.3,"vendor":"FastStone","product":"Image Viewer","kev":false,"epss":0.00231},{"id":"CVE-2026-115923","published":"2026-10-26T17:56:20.105Z","updated":"2026-11-02T17:52:00.619Z","title":"Backstage catalog rules can be bypassed for URL locations using encoded path segments","severity":"MEDIUM","score":6.5,"vendor":"backstage","product":"backstage","kev":false,"epss":0.00317},{"id":"CVE-2026-105608","published":"2026-10-26T17:52:33.021Z","updated":"2026-10-26T19:38:29.607Z","title":"Consul vulnerable to an authorization bypass in service mesh registration","severity":"HIGH","score":8.8,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.00452},{"id":"CVE-2026-70379","published":"2026-10-26T17:48:55.829Z","updated":"2026-11-02T19:43:05.667Z","title":"Unauthorized Access to vSolution Matrix RTSP","severity":"HIGH","score":7.1,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro","kev":false,"epss":0.00112},{"id":"CVE-2026-116461","published":"2026-10-26T17:45:12.006Z","updated":"2026-10-31T01:40:55.371Z","title":"Omega Solution Restro POS sale-invoice logic error","severity":"MEDIUM","score":5.3,"vendor":"Omega Solution","product":"Restro POS","kev":false,"epss":0.0022},{"id":"CVE-2026-105765","published":"2026-10-26T17:42:36.012Z","updated":"2026-11-02T19:43:05.803Z","title":"Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API","severity":"HIGH","score":7.5,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.00237},{"id":"CVE-2026-115922","published":"2026-10-26T17:31:03.716Z","updated":"2026-10-30T17:40:32.752Z","title":"ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00131},{"id":"CVE-2026-116408","published":"2026-10-26T17:29:38.120Z","updated":"2026-10-26T17:57:32.081Z","title":"WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Gallery PhotoBlocks","kev":false,"epss":0.0017},{"id":"CVE-2026-111404","published":"2026-10-26T17:28:57.422Z","updated":"2026-10-26T17:57:32.283Z","title":"WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability","severity":"LOW","score":3.7,"vendor":"VillaTheme","product":"Photo Reviews for WooCommerce","kev":false,"epss":0.00202},{"id":"CVE-2026-115921","published":"2026-10-26T17:28:41.420Z","updated":"2026-10-31T01:40:08.161Z","title":"ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00131},{"id":"CVE-2026-112839","published":"2026-10-26T17:28:17.277Z","updated":"2026-10-26T17:57:32.460Z","title":"WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"VillaTheme","product":"Customer Coupons for WooCommerce","kev":false,"epss":0.00198},{"id":"CVE-2026-115966","published":"2026-10-26T17:27:49.307Z","updated":"2026-10-26T17:57:32.653Z","title":"WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Typing Text – Give your texts many typing effects","kev":false,"epss":0.0017},{"id":"CVE-2026-116400","published":"2026-10-26T17:27:17.642Z","updated":"2026-10-26T17:57:32.849Z","title":"WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Button Block","kev":false,"epss":0.0017},{"id":"CVE-2026-116398","published":"2026-10-26T17:26:48.798Z","updated":"2026-10-26T17:57:33.053Z","title":"WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Content Slider Block","kev":false,"epss":0.0017},{"id":"CVE-2026-115920","published":"2026-10-26T17:26:40.506Z","updated":"2026-10-26T19:48:35.202Z","title":"ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00178},{"id":"CVE-2026-115919","published":"2026-10-26T17:24:40.346Z","updated":"2026-10-26T19:34:47.244Z","title":"ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00178},{"id":"CVE-2026-115918","published":"2026-10-26T17:21:49.719Z","updated":"2026-10-30T14:22:20.698Z","title":"vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0035},{"id":"CVE-2026-115917","published":"2026-10-26T17:20:09.065Z","updated":"2026-10-31T01:38:53.155Z","title":"vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server","severity":"LOW","score":3.4,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0024},{"id":"CVE-2026-81509","published":"2026-10-26T17:19:15.467Z","updated":"2026-10-26T19:34:58.155Z","title":"nforwardauth: Unvalidated r parameter allows post-authentication open redirect","severity":"MEDIUM","score":6.1,"vendor":"nosduco","product":"nforwardauth","kev":false,"epss":0.00318},{"id":"CVE-2026-115916","published":"2026-10-26T17:18:17.582Z","updated":"2026-11-02T17:50:28.478Z","title":"vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00312},{"id":"CVE-2026-115915","published":"2026-10-26T17:16:06.387Z","updated":"2026-10-26T19:35:10.423Z","title":"vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE","severity":"HIGH","score":8.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0066},{"id":"CVE-2026-116385","published":"2026-10-26T17:15:19.523Z","updated":"2026-10-26T19:35:21.597Z","title":"Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"Bdtask","product":"Garage 24 Garage Management Software","kev":false,"epss":0.00239},{"id":"CVE-2026-102649","published":"2026-10-26T17:09:08.686Z","updated":"2026-10-31T01:37:08.210Z","title":"Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset","severity":"CRITICAL","score":9.9,"vendor":"padok-team","product":"burrito","kev":false,"epss":0.00458},{"id":"CVE-2026-115914","published":"2026-10-26T17:08:20.839Z","updated":"2026-10-30T14:23:21.521Z","title":"vLLM DeepSeek-OCR image processing vulnerable to denial of service","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00397},{"id":"CVE-2026-72758","published":"2026-10-26T17:07:14.740Z","updated":"2026-10-26T17:57:33.250Z","title":"Routinator may exit on malformed ranges","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397},{"id":"CVE-2026-72757","published":"2026-10-26T17:07:02.239Z","updated":"2026-10-26T17:57:33.452Z","title":"Routinator HTTP server becomes unavailable with many unclosed connections","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00359},{"id":"CVE-2026-72756","published":"2026-10-26T17:06:53.173Z","updated":"2026-10-26T17:57:33.645Z","title":"Routinator exits on malformed rsync URIs","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397},{"id":"CVE-2026-72755","published":"2026-10-26T17:06:43.423Z","updated":"2026-10-26T17:57:33.844Z","title":"Routinator stores TA certificate in cache without validation","severity":"LOW","score":3.8,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00184},{"id":"CVE-2026-72754","published":"2026-10-26T17:06:35.819Z","updated":"2026-10-26T17:57:34.011Z","title":"Routinator exits when parsing an incorrect or very large CRL file","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397},{"id":"CVE-2026-72753","published":"2026-10-26T17:06:25.709Z","updated":"2026-10-26T17:57:34.197Z","title":"Routinator incorrectly handles delta updates","severity":"HIGH","score":8.2,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00396},{"id":"CVE-2026-72752","published":"2026-10-26T17:06:15.152Z","updated":"2026-10-26T17:57:34.344Z","title":"Routinator exits when requesting the output repeatedly","severity":"MEDIUM","score":6.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00241},{"id":"CVE-2026-116384","published":"2026-10-26T17:00:19.729Z","updated":"2026-11-02T17:49:09.074Z","title":"Bdtask Garage 24 Garage Management Software Backend improper authorization","severity":"MEDIUM","score":5.3,"vendor":"Bdtask","product":"Garage 24 Garage Management Software","kev":false,"epss":0.00201},{"id":"CVE-2026-115913","published":"2026-10-26T16:56:59.817Z","updated":"2026-11-02T17:48:14.216Z","title":"vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00329},{"id":"CVE-2026-115912","published":"2026-10-26T16:54:00.643Z","updated":"2026-10-26T19:35:42.879Z","title":"vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled","severity":"HIGH","score":7.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0051},{"id":"CVE-2026-116612","published":"2026-10-26T16:48:37.293Z","updated":"2026-10-27T03:55:30.986Z","title":"A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pipeline description as an effect…","severity":"HIGH","score":7.8,"vendor":"GStreamer project","product":"gst-editing-services","kev":false,"epss":0.00231},{"id":"CVE-2026-115911","published":"2026-10-26T16:47:59.377Z","updated":"2026-10-30T14:20:51.484Z","title":"vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00312},{"id":"CVE-2026-116395","published":"2026-10-26T16:46:39.501Z","updated":"2026-10-26T17:37:09.389Z","title":"WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"LightBox Block","kev":false,"epss":0.0017},{"id":"CVE-2013-10077","published":"2026-10-26T16:45:16.290Z","updated":"2026-10-31T01:36:01.941Z","title":"OctoPrint API Key settings.py getSettings information disclosure","severity":"MEDIUM","score":6.9,"vendor":null,"product":"OctoPrint","kev":false,"epss":0.00433},{"id":"CVE-2026-115598","published":"2026-10-26T16:45:11.621Z","updated":"2026-10-26T17:37:09.543Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00256},{"id":"CVE-2026-115910","published":"2026-10-26T16:44:34.337Z","updated":"2026-10-31T01:34:08.259Z","title":"Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim","severity":"MEDIUM","score":6.8,"vendor":"python-social-auth","product":"social-core","kev":false,"epss":0.00157},{"id":"CVE-2026-114710","published":"2026-10-26T16:43:59.208Z","updated":"2026-10-26T17:37:09.711Z","title":"WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Gallery PhotoBlocks","kev":false,"epss":0.0017},{"id":"CVE-2026-115597","published":"2026-10-26T16:43:22.281Z","updated":"2026-10-26T17:37:09.885Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00179},{"id":"CVE-2026-116388","published":"2026-10-26T16:42:54.795Z","updated":"2026-10-26T17:37:10.026Z","title":"WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.00229},{"id":"CVE-2026-116396","published":"2026-10-26T16:39:18.840Z","updated":"2026-10-26T17:37:10.212Z","title":"WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.0017},{"id":"CVE-2026-115418","published":"2026-10-26T16:39:08.909Z","updated":"2026-10-26T18:13:10.227Z","title":"SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha","severity":"HIGH","score":7,"vendor":"AWS","product":"aws-cdk/aws-redshift-alpha","kev":false,"epss":0.00173},{"id":"CVE-2026-115909","published":"2026-10-26T16:39:00.037Z","updated":"2026-10-26T19:48:35.352Z","title":"zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction","severity":"HIGH","score":7.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00461},{"id":"CVE-2026-116403","published":"2026-10-26T16:37:59.242Z","updated":"2026-10-26T17:37:10.367Z","title":"WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Awesomemotive","product":"Easy Digital Downloads","kev":false,"epss":0.00237},{"id":"CVE-2026-115908","published":"2026-10-26T16:34:29.328Z","updated":"2026-10-26T19:36:11.803Z","title":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)","severity":"HIGH","score":7.4,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00432},{"id":"CVE-2026-115907","published":"2026-10-26T16:32:15.373Z","updated":"2026-10-30T14:13:49.386Z","title":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"HIGH","score":7.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.0035},{"id":"CVE-2026-115906","published":"2026-10-26T16:30:30.954Z","updated":"2026-10-31T01:32:55.292Z","title":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"MEDIUM","score":6.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00151},{"id":"CVE-2026-116371","published":"2026-10-26T16:30:18.290Z","updated":"2026-10-27T13:29:15.385Z","title":"Akuvox Akubela HyPanel PS51 login improper authentication","severity":"MEDIUM","score":5.3,"vendor":"Akuvox","product":"Akubela HyPanel PS51","kev":false,"epss":0.00395},{"id":"CVE-2026-115905","published":"2026-10-26T16:24:44.760Z","updated":"2026-11-02T17:47:27.682Z","title":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"CRITICAL","score":10,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.0032},{"id":"CVE-2026-71456","published":"2026-10-26T16:20:31.605Z","updated":"2026-11-02T19:43:05.947Z","title":"Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech…","severity":"HIGH","score":8.5,"vendor":"Johnson Controls","product":"Kantech Entrapass","kev":false,"epss":0.00096},{"id":"CVE-2026-71455","published":"2026-10-26T16:17:47.898Z","updated":"2026-11-02T19:43:06.089Z","title":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue…","severity":"MEDIUM","score":5.3,"vendor":"Johnson Controls","product":"Kantech Entrapass","kev":false,"epss":0.0008},{"id":"CVE-2026-116596","published":"2026-10-26T16:17:29.178Z","updated":"2026-10-26T16:17:29.178Z","title":"CVE-2026-116596","severity":"UNKNOWN","score":null,"vendor":"Pyrus","product":"Pyrus Sync","kev":false,"epss":0.00131},{"id":"CVE-2026-116370","published":"2026-10-26T16:15:11.957Z","updated":"2026-11-02T17:45:24.361Z","title":"2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion","severity":"MEDIUM","score":5.3,"vendor":"2K Games","product":"Sid Meier's Civilization VI","kev":false,"epss":0.00392},{"id":"CVE-2026-82390","published":"2026-10-26T16:08:54.724Z","updated":"2026-10-26T17:37:10.530Z","title":"Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver","severity":"LOW","score":3.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00198},{"id":"CVE-2026-82389","published":"2026-10-26T16:08:53.604Z","updated":"2026-10-26T17:37:10.685Z","title":"Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.0023},{"id":"CVE-2026-82388","published":"2026-10-26T16:08:52.433Z","updated":"2026-10-26T17:37:10.831Z","title":"Use of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic host","severity":"MEDIUM","score":5.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00209},{"id":"CVE-2026-19742","published":"2026-10-26T16:08:51.255Z","updated":"2026-10-26T17:37:10.987Z","title":"IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key","severity":"LOW","score":3.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00248},{"id":"CVE-2026-81038","published":"2026-10-26T16:08:50.091Z","updated":"2026-10-26T17:37:11.149Z","title":"Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses","severity":"HIGH","score":7.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00148},{"id":"CVE-2026-81039","published":"2026-10-26T16:08:48.940Z","updated":"2026-10-26T17:37:11.318Z","title":"Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identity","severity":"MEDIUM","score":4.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00208},{"id":"CVE-2026-116369","published":"2026-10-26T16:00:14.112Z","updated":"2026-10-31T01:30:30.310Z","title":"Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection","severity":"MEDIUM","score":5.3,"vendor":"Sunwood-ai-labs","product":"github-kanban-mcp-server","kev":false,"epss":0.0139},{"id":"CVE-2026-116394","published":"2026-10-26T16:00:08.893Z","updated":"2026-10-26T17:37:11.529Z","title":"WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"WpEvently","kev":false,"epss":0.003},{"id":"CVE-2026-93846","published":"2026-10-26T15:58:14.443Z","updated":"2026-11-02T19:43:06.229Z","title":"Team admin can escalate a team member's permissions via the team member roles endpoint","severity":"LOW","score":3.8,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00152},{"id":"CVE-2026-112344","published":"2026-10-26T15:56:29.273Z","updated":"2026-11-02T17:59:13.653Z","title":"Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape","severity":"HIGH","score":7.6,"vendor":"Syncplify, Inc.","product":"Syncplify Server!","kev":false,"epss":0.00299},{"id":"CVE-2026-112343","published":"2026-10-26T15:54:12.544Z","updated":"2026-10-31T01:29:13.634Z","title":"Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing","severity":"HIGH","score":8.6,"vendor":"Syncplify, Inc.","product":"Syncplify Server!","kev":false,"epss":0.00472},{"id":"CVE-2026-115680","published":"2026-10-26T15:49:30.643Z","updated":"2026-10-26T16:25:13.217Z","title":"Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission","severity":"MEDIUM","score":6.5,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00345},{"id":"CVE-2026-115679","published":"2026-10-26T15:46:01.084Z","updated":"2026-10-26T16:18:15.567Z","title":"Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer","severity":"MEDIUM","score":6.5,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00324},{"id":"CVE-2026-116368","published":"2026-10-26T15:45:16.223Z","updated":"2026-10-26T19:38:50.597Z","title":"DeepSeek Harness Browser Auth browser-auth.ts improper authorization","severity":"MEDIUM","score":6.9,"vendor":"DeepSeek","product":"Harness","kev":false,"epss":0.00583},{"id":"CVE-2026-115678","published":"2026-10-26T15:38:06.766Z","updated":"2026-10-26T16:17:28.313Z","title":"Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing","severity":"MEDIUM","score":5.3,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00411},{"id":"CVE-2026-112346","published":"2026-10-26T15:34:30.749Z","updated":"2026-10-26T15:34:30.749Z","title":"OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE","severity":"CRITICAL","score":9.3,"vendor":"OpenHands","product":"OpenHands Software Agent SDK","kev":false,"epss":0.01014},{"id":"CVE-2026-116367","published":"2026-10-26T15:30:15.468Z","updated":"2026-11-02T17:44:41.105Z","title":"DeepSeek Harness sandbox.ts createContext","severity":"MEDIUM","score":5.3,"vendor":"DeepSeek","product":"Harness","kev":false,"epss":0.00294},{"id":"CVE-2026-115748","published":"2026-10-26T15:01:40.644Z","updated":"2026-10-26T15:34:11.951Z","title":"Apache Vysper: Authorization bypass","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Vysper","kev":false,"epss":0.00613},{"id":"CVE-2026-115721","published":"2026-10-26T15:01:18.445Z","updated":"2026-10-26T15:01:29.549Z","title":"Apache Vysper: Unbounded allocation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Vysper","kev":false,"epss":0.00474},{"id":"CVE-2026-116544","published":"2026-10-26T14:59:42.931Z","updated":"2026-10-26T16:15:00.617Z","title":"Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output","severity":"MEDIUM","score":6.3,"vendor":"open5gs","product":"open5gs","kev":false,"epss":0.00354},{"id":"CVE-2026-116543","published":"2026-10-26T14:59:42.212Z","updated":"2026-11-02T17:42:53.156Z","title":"Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser","severity":"HIGH","score":8.7,"vendor":"open5gs","product":"open5gs","kev":false,"epss":0.00387},{"id":"CVE-2026-116542","published":"2026-10-26T14:59:41.528Z","updated":"2026-10-31T01:27:08.152Z","title":"Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding","severity":"MEDIUM","score":6.9,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00208},{"id":"CVE-2026-116541","published":"2026-10-26T14:59:40.847Z","updated":"2026-10-26T19:48:35.492Z","title":"netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00493},{"id":"CVE-2026-116540","published":"2026-10-26T14:59:40.154Z","updated":"2026-10-26T16:15:16.184Z","title":"netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00459},{"id":"CVE-2026-116539","published":"2026-10-26T14:59:39.460Z","updated":"2026-11-02T17:40:46.434Z","title":"Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00396},{"id":"CVE-2026-116538","published":"2026-10-26T14:59:38.815Z","updated":"2026-10-31T01:25:48.693Z","title":"HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes","severity":"LOW","score":2.3,"vendor":"mganss","product":"HtmlSanitizer","kev":false,"epss":0.00287},{"id":"CVE-2026-116489","published":"2026-10-26T14:59:38.170Z","updated":"2026-10-26T14:59:38.170Z","title":"Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes","severity":"HIGH","score":7.7,"vendor":"timescale","product":"pgvectorscale","kev":false,"epss":0.00498},{"id":"CVE-2026-85297","published":"2026-10-26T14:58:30.464Z","updated":"2026-10-26T14:58:30.464Z","title":"Bucket Squatting in Cloud Run MCP leads to Service Account Takeover","severity":"HIGH","score":7.7,"vendor":"Google Cloud","product":"Cloud Run MCP","kev":false,"epss":0.00314},{"id":"CVE-2026-99099","published":"2026-10-26T14:52:04.997Z","updated":"2026-10-31T12:42:48.094Z","title":"x86/CPU/AMD: Fix AMD TLBI Erratum #1718","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00127},{"id":"CVE-2026-99098","published":"2026-10-26T14:52:04.416Z","updated":"2026-10-26T14:52:04.416Z","title":"dm-integrity: fix buffer overflow in inline mode with large tag size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181},{"id":"CVE-2026-99097","published":"2026-10-26T14:52:03.824Z","updated":"2026-10-26T14:52:03.824Z","title":"tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99096","published":"2026-10-26T14:52:03.236Z","updated":"2026-10-26T14:52:03.236Z","title":"io_uring/register: don't exempt disabled rings from task restrictions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00152},{"id":"CVE-2026-99095","published":"2026-10-26T14:52:02.647Z","updated":"2026-10-30T12:41:42.869Z","title":"drm/vc4: drain the hangcheck timer and works on V3D unbind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99094","published":"2026-10-26T14:52:02.053Z","updated":"2026-10-31T12:42:42.980Z","title":"Bluetooth: btintel_pcie: fix TX descriptor bounds check","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00226},{"id":"CVE-2026-99093","published":"2026-10-26T14:52:01.450Z","updated":"2026-10-26T14:52:01.450Z","title":"mm: don't schedule deferred kernel page table freeing while booting","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-99092","published":"2026-10-26T14:52:00.860Z","updated":"2026-10-26T14:52:00.860Z","title":"riscv: patch: fix handling of bpf-jit execmem addresses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99091","published":"2026-10-26T14:52:00.262Z","updated":"2026-10-30T12:41:41.779Z","title":"Bluetooth: MGMT: Fix status of pending commands flushed on power off","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99090","published":"2026-10-26T14:51:59.654Z","updated":"2026-10-27T15:53:00.938Z","title":"drm/amdgpu: serialize vblank counter reads against GPU reset","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99089","published":"2026-10-26T14:51:59.055Z","updated":"2026-10-30T12:41:40.718Z","title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-99088","published":"2026-10-26T14:51:58.460Z","updated":"2026-10-30T12:41:39.655Z","title":"net: openvswitch: validate transport header presence in set_ipv6_addr","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-90885","published":"2026-10-26T14:47:03.155Z","updated":"2026-10-26T15:35:49.414Z","title":"Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00597},{"id":"CVE-2026-77062","published":"2026-10-26T14:46:12.663Z","updated":"2026-10-26T15:35:49.560Z","title":"Clickjacking in boneIO","severity":"MEDIUM","score":6.9,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00524},{"id":"CVE-2026-94386","published":"2026-10-26T14:46:11.551Z","updated":"2026-10-26T15:35:49.712Z","title":"Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00345},{"id":"CVE-2026-77061","published":"2026-10-26T14:46:09.722Z","updated":"2026-10-26T15:35:49.857Z","title":"Missing Authentication for Critical Function in boneIO","severity":"MEDIUM","score":5.3,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00331},{"id":"CVE-2026-77060","published":"2026-10-26T14:46:06.547Z","updated":"2026-10-26T15:35:49.996Z","title":"Incorrect Permission Assignment for Critical Resource in boneIO","severity":"MEDIUM","score":6.8,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00126},{"id":"CVE-2026-77059","published":"2026-10-26T14:46:02.659Z","updated":"2026-10-26T15:35:50.139Z","title":"TOCTOU Race Condition in boneIO","severity":"HIGH","score":8.8,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00124},{"id":"CVE-2026-77058","published":"2026-10-26T14:45:59.416Z","updated":"2026-10-26T16:46:44.686Z","title":"Cross-Site Request Forgery (CSRF) in boneIO","severity":"MEDIUM","score":5.1,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.0026},{"id":"CVE-2026-77057","published":"2026-10-26T14:45:56.237Z","updated":"2026-11-02T19:43:06.380Z","title":"Improper Restriction of Excessive Authentication Attempts in boneIO","severity":"LOW","score":2.3,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00277},{"id":"CVE-2026-77056","published":"2026-10-26T14:45:53.279Z","updated":"2026-10-26T16:46:44.867Z","title":"Use of Default Credentials in boneIO","severity":"HIGH","score":7.1,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00355},{"id":"CVE-2026-77055","published":"2026-10-26T14:45:49.260Z","updated":"2026-11-02T19:43:06.534Z","title":"Improper Privilege Assignment in boneIO","severity":"CRITICAL","score":9.3,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00093},{"id":"CVE-2026-77054","published":"2026-10-26T14:45:45.813Z","updated":"2026-10-26T16:46:45.059Z","title":"Cleartext Storage of Sensitive Information in boneIO","severity":"MEDIUM","score":6.9,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00156},{"id":"CVE-2026-77053","published":"2026-10-26T14:45:42.165Z","updated":"2026-11-02T19:43:06.691Z","title":"Missing Authentication in Default Configuration in boneIO","severity":"HIGH","score":8.7,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.0025},{"id":"CVE-2026-77052","published":"2026-10-26T14:45:37.056Z","updated":"2026-11-02T19:43:06.832Z","title":"Missing Authentication for Node-RED in boneIO","severity":"HIGH","score":8.7,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00331},{"id":"CVE-2026-116340","published":"2026-10-26T14:45:22.395Z","updated":"2026-10-31T01:24:33.712Z","title":"iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization","severity":"MEDIUM","score":5.3,"vendor":"iFlytek","product":"astron-agent","kev":false,"epss":0.00303},{"id":"CVE-2026-112345","published":"2026-10-26T14:43:29.943Z","updated":"2026-10-27T10:14:05.557Z","title":"TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure","severity":"HIGH","score":8.6,"vendor":"Sciener","product":"TTLock","kev":false,"epss":0.00245},{"id":"CVE-2026-3322","published":"2026-10-26T14:41:12.655Z","updated":"2026-10-27T08:11:20.312Z","title":"Privilege escalation via request replaying in Lobster_pro","severity":"MEDIUM","score":5.6,"vendor":"Lobster DATA GmbH","product":"Lobster_pro","kev":false,"epss":0.00183},{"id":"CVE-2026-110748","published":"2026-10-26T14:40:39.690Z","updated":"2026-10-31T20:05:05.639Z","title":"Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache SIS","kev":false,"epss":0.00161},{"id":"CVE-2026-92171","published":"2026-10-26T14:35:11.009Z","updated":"2026-11-02T17:39:17.339Z","title":"Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Data Grid 8","kev":false,"epss":0.00293},{"id":"CVE-2026-116497","published":"2026-10-26T14:31:23.205Z","updated":"2026-10-26T17:57:34.509Z","title":"Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00139},{"id":"CVE-2026-116339","published":"2026-10-26T14:30:18.662Z","updated":"2026-10-26T16:15:37.067Z","title":"iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist","severity":"MEDIUM","score":6.9,"vendor":"iFlytek","product":"astron-agent","kev":false,"epss":0.00479},{"id":"CVE-2026-93848","published":"2026-10-26T14:28:23.565Z","updated":"2026-10-26T16:46:45.446Z","title":"Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator","severity":"LOW","score":2.7,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00289},{"id":"CVE-2026-93850","published":"2026-10-26T14:26:56.502Z","updated":"2026-10-26T16:46:45.587Z","title":"Unbounded memory consumption during PDF text extraction","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00384},{"id":"CVE-2026-93849","published":"2026-10-26T14:25:26.554Z","updated":"2026-10-26T16:46:45.736Z","title":"Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00457},{"id":"CVE-2026-93328","published":"2026-10-26T14:24:09.012Z","updated":"2026-10-26T16:46:45.879Z","title":"Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write","severity":"CRITICAL","score":9.3,"vendor":"Google Cloud","product":"MCP Toolbox for Databases (googleapis/mcp-toolbox)","kev":false,"epss":0.00526},{"id":"CVE-2026-110733","published":"2026-10-26T14:15:55.097Z","updated":"2026-10-26T16:29:01.382Z","title":"Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache SIS","kev":false,"epss":0.00319},{"id":"CVE-2026-93847","published":"2026-10-26T14:15:12.711Z","updated":"2026-11-02T19:43:06.964Z","title":"Improper post type validation on scheduled post endpoints","severity":"LOW","score":3.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00174},{"id":"CVE-2026-65184","published":"2026-10-26T14:07:08.235Z","updated":"2026-10-26T16:46:46.017Z","title":"Avocent ACS8000 wsserver command injection","severity":"CRITICAL","score":9.8,"vendor":"Vertiv","product":"Avocent ACS8000","kev":false,"epss":0.00416},{"id":"CVE-2026-115930","published":"2026-10-26T14:02:51.248Z","updated":"2026-11-02T19:43:07.098Z","title":"MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB, Inc.","product":"mongosh","kev":false,"epss":0.00144},{"id":"CVE-2026-116284","published":"2026-10-26T14:00:21.191Z","updated":"2026-11-02T17:37:42.934Z","title":"Kameleo Local API user-info information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00326},{"id":"CVE-2026-116516","published":"2026-10-26T13:56:57.973Z","updated":"2026-10-26T15:35:50.283Z","title":"Insufficient length validation when parsing Zoom chat transcriptions","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00362},{"id":"CVE-2026-97200","published":"2026-10-26T13:49:40.392Z","updated":"2026-10-26T15:35:50.487Z","title":"Unbounded response body buffering and decompression in hackney","severity":"HIGH","score":8.2,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00564},{"id":"CVE-2026-115693","published":"2026-10-26T13:49:29.374Z","updated":"2026-11-02T19:43:07.244Z","title":"Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney","severity":"CRITICAL","score":9.1,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00267},{"id":"CVE-2026-113440","published":"2026-10-26T13:49:17.377Z","updated":"2026-10-26T13:49:17.377Z","title":"HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney","severity":"MEDIUM","score":6,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00313},{"id":"CVE-2026-115700","published":"2026-10-26T13:49:02.744Z","updated":"2026-10-26T13:49:02.744Z","title":"SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney","severity":"MEDIUM","score":6.9,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00138},{"id":"CVE-2026-112880","published":"2026-10-26T13:48:46.589Z","updated":"2026-10-26T15:35:50.632Z","title":"CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney","severity":"LOW","score":2.1,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00188},{"id":"CVE-2026-116283","published":"2026-10-26T13:45:21.554Z","updated":"2026-10-31T01:23:35.054Z","title":"Kameleo Local API profiles information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00282},{"id":"CVE-2026-107656","published":"2026-10-26T13:45:03.962Z","updated":"2026-10-27T06:54:55.555Z","title":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…","severity":"CRITICAL","score":9.6,"vendor":"Fortinet","product":"FortiSandbox","kev":false,"epss":0.00851},{"id":"CVE-2026-111590","published":"2026-10-26T13:39:48.420Z","updated":"2026-10-26T13:39:48.420Z","title":"SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services","severity":"UNKNOWN","score":null,"vendor":"Harbor","product":"Harbor","kev":false,"epss":0.00213},{"id":"CVE-2026-108529","published":"2026-10-26T13:35:26.080Z","updated":"2026-10-26T15:35:50.781Z","title":"SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-59107","published":"2026-10-26T13:33:12.851Z","updated":"2026-10-26T13:33:12.851Z","title":"Shared SSH Authentication Key in vSolution Matrix File Sharing","severity":"CRITICAL","score":9.2,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro","kev":false,"epss":0.00358},{"id":"CVE-2026-110499","published":"2026-10-26T13:32:38.613Z","updated":"2026-10-26T15:35:50.929Z","title":"Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-109584","published":"2026-10-26T13:32:22.359Z","updated":"2026-10-26T15:35:51.081Z","title":"HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-111103","published":"2026-10-26T13:32:06.340Z","updated":"2026-10-26T15:35:51.229Z","title":"HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit","severity":"HIGH","score":8.2,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00632},{"id":"CVE-2026-111101","published":"2026-10-26T13:31:48.184Z","updated":"2026-10-26T15:35:51.401Z","title":"HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-113436","published":"2026-10-26T13:31:35.033Z","updated":"2026-10-26T15:35:51.556Z","title":"Quadratic bignum parsing of Content-Length and Host port values in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-110314","published":"2026-10-26T13:31:18.257Z","updated":"2026-10-26T13:31:18.257Z","title":"WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit","severity":"MEDIUM","score":6.3,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00384},{"id":"CVE-2026-114213","published":"2026-10-26T13:30:58.262Z","updated":"2026-10-26T15:35:51.785Z","title":"WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-114216","published":"2026-10-26T13:30:41.225Z","updated":"2026-10-26T15:35:51.933Z","title":"Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit","severity":"MEDIUM","score":6.3,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-115269","published":"2026-10-26T13:30:24.621Z","updated":"2026-10-26T15:35:52.079Z","title":"HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-108525","published":"2026-10-26T13:29:42.520Z","updated":"2026-10-26T15:35:52.227Z","title":"HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602},{"id":"CVE-2026-116282","published":"2026-10-26T13:15:17.127Z","updated":"2026-10-26T16:15:47.691Z","title":"Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00341},{"id":"CVE-2026-59106","published":"2026-10-26T13:15:02.436Z","updated":"2026-10-26T15:35:52.374Z","title":"Unauthenticated RCE Vulnerability in WolfProt interface implementation","severity":"CRITICAL","score":9.3,"vendor":"WolfVision","product":"Cynap Pure (Next Gen), Cynap Bridge","kev":false,"epss":0.0055},{"id":"CVE-2026-116488","published":"2026-10-26T13:08:53.415Z","updated":"2026-10-31T01:22:44.936Z","title":"NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers","severity":"HIGH","score":7,"vendor":"NXP","product":"mcuxsdk-middleware-usb","kev":false,"epss":0.00374},{"id":"CVE-2026-116487","published":"2026-10-26T13:08:52.737Z","updated":"2026-10-26T13:08:52.737Z","title":"NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read","severity":"MEDIUM","score":5.1,"vendor":"NXP","product":"mcuxsdk-middleware-usb","kev":false,"epss":0.00295},{"id":"CVE-2026-116486","published":"2026-10-26T13:08:52.051Z","updated":"2026-10-26T16:15:59.231Z","title":"Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache","severity":"LOW","score":2,"vendor":"easymock","product":"objenesis","kev":false,"epss":0.00135},{"id":"CVE-2026-116485","published":"2026-10-26T13:08:51.363Z","updated":"2026-11-02T17:36:34.013Z","title":"danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints","severity":"CRITICAL","score":9.3,"vendor":"huangxd-","product":"danmu_api","kev":false,"epss":0.02349},{"id":"CVE-2026-116219","published":"2026-10-26T13:08:50.681Z","updated":"2026-10-31T01:21:13.486Z","title":"Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter","severity":"HIGH","score":8.6,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.02078},{"id":"CVE-2026-116218","published":"2026-10-26T13:08:49.982Z","updated":"2026-10-26T17:47:50.586Z","title":"Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field","severity":"HIGH","score":7.2,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.00271},{"id":"CVE-2026-116217","published":"2026-10-26T13:08:49.288Z","updated":"2026-10-26T17:47:49.908Z","title":"RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php","severity":"MEDIUM","score":5.3,"vendor":"francoisjacquet","product":"rosariosis","kev":false,"epss":0.00286},{"id":"CVE-2026-116216","published":"2026-10-26T13:08:48.563Z","updated":"2026-11-02T17:35:24.018Z","title":"MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment","severity":"MEDIUM","score":6.9,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00271},{"id":"CVE-2026-116215","published":"2026-10-26T13:08:47.862Z","updated":"2026-10-31T01:20:31.938Z","title":"MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption","severity":"LOW","score":2.3,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00164},{"id":"CVE-2026-116214","published":"2026-10-26T13:08:47.141Z","updated":"2026-10-26T13:08:47.141Z","title":"MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code","severity":"CRITICAL","score":9.3,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00458},{"id":"CVE-2026-116213","published":"2026-10-26T13:08:46.452Z","updated":"2026-10-26T16:16:21.761Z","title":"Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks","severity":"MEDIUM","score":6.9,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00448},{"id":"CVE-2026-116212","published":"2026-10-26T13:08:45.751Z","updated":"2026-11-02T17:34:19.524Z","title":"Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL","severity":"MEDIUM","score":5.1,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00171},{"id":"CVE-2026-116210","published":"2026-10-26T13:08:45.044Z","updated":"2026-10-31T01:19:35.986Z","title":"Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions","severity":"HIGH","score":7.1,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00173},{"id":"CVE-2026-116281","published":"2026-10-26T13:00:10.760Z","updated":"2026-11-02T17:33:00.042Z","title":"Kameleo Profile Controller t.cs ListProfiles information disclosure","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00104},{"id":"CVE-2026-107157","published":"2026-10-26T12:52:26.628Z","updated":"2026-10-27T07:52:45.806Z","title":"Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework","severity":"LOW","score":2,"vendor":"qt","product":"Qt","kev":false,"epss":0.00147},{"id":"CVE-2026-115196","published":"2026-10-26T12:50:18.637Z","updated":"2026-10-26T15:35:52.657Z","title":"An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00323},{"id":"CVE-2026-115195","published":"2026-10-26T12:48:59.588Z","updated":"2026-10-26T15:35:52.798Z","title":"A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00336},{"id":"CVE-2026-115194","published":"2026-10-26T12:48:01.035Z","updated":"2026-10-26T15:35:52.938Z","title":"A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00442},{"id":"CVE-2026-115193","published":"2026-10-26T12:46:35.447Z","updated":"2026-10-26T15:35:53.085Z","title":"A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without…","severity":"HIGH","score":8.2,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00309},{"id":"CVE-2026-115192","published":"2026-10-26T12:45:09.462Z","updated":"2026-10-26T15:35:53.230Z","title":"An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the client are not…","severity":"HIGH","score":7.1,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00352},{"id":"CVE-2026-116280","published":"2026-10-26T12:45:07.213Z","updated":"2026-10-31T01:17:00.287Z","title":"Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00161},{"id":"CVE-2026-115191","published":"2026-10-26T12:42:57.873Z","updated":"2026-10-26T15:35:53.390Z","title":"A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the…","severity":"HIGH","score":7.1,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00352},{"id":"CVE-2026-115190","published":"2026-10-26T12:41:17.370Z","updated":"2026-10-26T15:35:53.561Z","title":"An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths…","severity":"HIGH","score":8,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00489},{"id":"CVE-2026-115189","published":"2026-10-26T12:39:14.432Z","updated":"2026-10-26T15:35:53.698Z","title":"A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme…","severity":"HIGH","score":8.8,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00593},{"id":"CVE-2026-115188","published":"2026-10-26T12:33:54.469Z","updated":"2026-10-26T15:35:53.849Z","title":"An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application…","severity":"CRITICAL","score":9.9,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00733},{"id":"CVE-2026-116275","published":"2026-10-26T12:30:19.254Z","updated":"2026-10-26T16:16:35.290Z","title":"AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection","severity":"MEDIUM","score":5.3,"vendor":"AllenAI","product":"AllenNLP","kev":false,"epss":0.00293},{"id":"CVE-2026-116492","published":"2026-10-26T12:21:46.284Z","updated":"2026-11-02T17:31:48.246Z","title":"Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API","severity":"HIGH","score":7.1,"vendor":"frappe","product":"crm","kev":false,"epss":0.00235},{"id":"CVE-2026-110475","published":"2026-10-26T12:20:36.675Z","updated":"2026-11-02T16:22:24.697Z","title":"Improper Authentication Vulnerability in CreditNirvana Collections Platform","severity":"CRITICAL","score":9.3,"vendor":"CreditNirvana","product":"CreditNirvana Collections Platform (CollectionWorkz)","kev":false,"epss":0.00484},{"id":"CVE-2026-116274","published":"2026-10-26T12:15:07.762Z","updated":"2026-11-02T17:56:06.947Z","title":"JIZHICMS Front-end Order OrderController.php pay improper authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"JIZHICMS","kev":false,"epss":0.00198},{"id":"CVE-2026-110474","published":"2026-10-26T12:08:43.439Z","updated":"2026-11-02T16:21:21.282Z","title":"Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application","severity":"HIGH","score":8.7,"vendor":"CreditNirvana","product":"Agentic AI Call Centre","kev":false,"epss":0.00371},{"id":"CVE-2026-115720","published":"2026-10-26T12:02:25.906Z","updated":"2026-10-26T19:48:35.644Z","title":"Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00342},{"id":"CVE-2026-116263","published":"2026-10-26T12:00:25.689Z","updated":"2026-10-31T01:16:00.333Z","title":"HaschekSolutions PictShare File Upload core.php architect race condition","severity":"LOW","score":2.1,"vendor":"HaschekSolutions","product":"PictShare","kev":false,"epss":0.00135},{"id":"CVE-2026-105947","published":"2026-10-26T11:45:42.703Z","updated":"2026-10-26T14:35:17.947Z","title":"Arbitrary File Read in Innotim Software's Logsign SIEM","severity":"MEDIUM","score":6.5,"vendor":"Innotim Software, Telecommunications, and Consulting Co. Ltd.","product":"Logsign SIEM","kev":false,"epss":0.00393},{"id":"CVE-2026-116262","published":"2026-10-26T11:45:13.241Z","updated":"2026-10-26T16:16:49.617Z","title":"libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00324},{"id":"CVE-2026-115717","published":"2026-10-26T11:43:59.635Z","updated":"2026-11-02T17:31:03.894Z","title":"Frappe Builder before 1.36.1 SSRF via convert_to_webp","severity":"MEDIUM","score":6.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00311},{"id":"CVE-2026-115718","published":"2026-10-26T11:40:00.956Z","updated":"2026-10-26T16:17:17.612Z","title":"Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00313},{"id":"CVE-2026-96432","published":"2026-10-26T11:31:20.304Z","updated":"2026-10-26T14:35:18.098Z","title":"Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt","severity":"LOW","score":2.1,"vendor":"qt","product":"qt","kev":false,"epss":0.00329},{"id":"CVE-2026-116261","published":"2026-10-26T11:30:10.544Z","updated":"2026-11-02T17:30:12.813Z","title":"libimobiledevice AFC File afc.c afc_file_open out-of-bounds","severity":"MEDIUM","score":5.1,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00196},{"id":"CVE-2026-94380","published":"2026-10-26T11:15:45.141Z","updated":"2026-10-26T14:35:18.248Z","title":"Host Header Injection in HAVELSAN's Liman MYS","severity":"HIGH","score":8.1,"vendor":"HAVELSAN Inc.","product":"Liman MYS","kev":false,"epss":0.00322},{"id":"CVE-2026-116260","published":"2026-10-26T11:15:06.596Z","updated":"2026-10-31T01:14:47.920Z","title":"libimobiledevice AFC Service afc.c service_receive double free","severity":"MEDIUM","score":6.9,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00294},{"id":"CVE-2026-116259","published":"2026-10-26T11:00:14.559Z","updated":"2026-10-26T16:17:44.505Z","title":"libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption","severity":"MEDIUM","score":4.8,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00145},{"id":"CVE-2026-116258","published":"2026-10-26T10:45:15.007Z","updated":"2026-11-02T17:29:35.315Z","title":"libimobiledevice AFC afc.c heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00242},{"id":"CVE-2026-89209","published":"2026-10-26T10:41:01.088Z","updated":"2026-10-31T01:13:36.246Z","title":"A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4),…","severity":"HIGH","score":7.6,"vendor":"Siemens","product":"Mendix SAML (Mendix 10 compatible)","kev":false,"epss":0.00259},{"id":"CVE-2026-114708","published":"2026-10-26T10:36:32.680Z","updated":"2026-10-26T12:54:32.687Z","title":"WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetSmartFilters","kev":false,"epss":0.0017},{"id":"CVE-2026-115595","published":"2026-10-26T10:36:08.187Z","updated":"2026-10-26T12:54:32.838Z","title":"WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Supsystic","product":"Contact Form by Supsystic","kev":false,"epss":0.00229},{"id":"CVE-2026-116469","published":"2026-10-26T10:35:51.992Z","updated":"2026-10-27T18:14:58.333Z","title":"MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding","severity":"HIGH","score":7.1,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.00366},{"id":"CVE-2026-115959","published":"2026-10-26T10:35:45.823Z","updated":"2026-10-26T12:54:32.987Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00229},{"id":"CVE-2026-115960","published":"2026-10-26T10:35:23.855Z","updated":"2026-10-26T12:54:33.130Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00198},{"id":"CVE-2026-115955","published":"2026-10-26T10:35:04.514Z","updated":"2026-10-26T12:54:33.290Z","title":"WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Advanced Post Block - Post Grid for WordPress block editor","kev":false,"epss":0.0017},{"id":"CVE-2026-115956","published":"2026-10-26T10:34:34.613Z","updated":"2026-10-26T12:54:33.447Z","title":"WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Panorama Viewer – 360 Degree Image + Video Viewer","kev":false,"epss":0.0017},{"id":"CVE-2026-115961","published":"2026-10-26T10:34:10.476Z","updated":"2026-10-26T12:54:33.589Z","title":"WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"B Slider","kev":false,"epss":0.0017},{"id":"CVE-2026-116257","published":"2026-10-26T10:30:14.810Z","updated":"2026-10-31T01:12:22.619Z","title":"BillaBear Installation InstallController.php processInstall missing authentication","severity":"MEDIUM","score":6.9,"vendor":null,"product":"BillaBear","kev":false,"epss":0.00627},{"id":"CVE-2026-114707","published":"2026-10-26T10:28:54.378Z","updated":"2026-10-26T12:54:33.861Z","title":"WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetElements For Elementor","kev":false,"epss":0.00179},{"id":"CVE-2026-115594","published":"2026-10-26T10:28:26.944Z","updated":"2026-10-26T12:54:34.035Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00316},{"id":"CVE-2026-115608","published":"2026-10-26T10:28:00.697Z","updated":"2026-10-26T12:54:34.228Z","title":"WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00289},{"id":"CVE-2026-115953","published":"2026-10-26T10:27:38.261Z","updated":"2026-10-26T12:54:34.394Z","title":"WordPress  Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.0017},{"id":"CVE-2026-115954","published":"2026-10-26T10:27:16.990Z","updated":"2026-10-26T12:54:34.575Z","title":"WordPress  Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.00179},{"id":"CVE-2026-115950","published":"2026-10-26T10:26:54.044Z","updated":"2026-10-26T12:54:34.713Z","title":"WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Smart Widgets","product":"Better Post & Filter Widgets for Elementor","kev":false,"epss":0.0017},{"id":"CVE-2026-115951","published":"2026-10-26T10:26:34.727Z","updated":"2026-10-26T12:54:34.854Z","title":"WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kevin Weber","product":"Lazy Load for Videos","kev":false,"epss":0.0017},{"id":"CVE-2026-116256","published":"2026-10-26T10:15:13.683Z","updated":"2026-10-26T16:31:44.255Z","title":"geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"geesondog","product":"RhaPHP","kev":false,"epss":0.00348},{"id":"CVE-2026-115948","published":"2026-10-26T10:08:37.779Z","updated":"2026-10-26T12:54:35.005Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00289},{"id":"CVE-2026-114709","published":"2026-10-26T10:08:01.188Z","updated":"2026-10-26T10:23:40.064Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.0017},{"id":"CVE-2026-115949","published":"2026-10-26T10:07:24.926Z","updated":"2026-10-26T10:23:40.211Z","title":"WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Smart Widgets","product":"Better Post & Filter Widgets for Elementor","kev":false,"epss":0.00274},{"id":"CVE-2026-115614","published":"2026-10-26T10:05:22.425Z","updated":"2026-10-26T10:23:40.370Z","title":"WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Booking and Rental Manager","kev":false,"epss":0.00229},{"id":"CVE-2026-97255","published":"2026-10-26T10:03:47.707Z","updated":"2026-10-26T10:23:40.524Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.00278},{"id":"CVE-2026-97254","published":"2026-10-26T10:02:36.972Z","updated":"2026-10-26T10:23:40.688Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.0017},{"id":"CVE-2026-97295","published":"2026-10-26T10:01:28.037Z","updated":"2026-10-26T10:23:40.842Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00124},{"id":"CVE-2026-112865","published":"2026-10-26T10:01:03.255Z","updated":"2026-10-26T10:23:41.001Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.0017},{"id":"CVE-2026-116255","published":"2026-10-26T10:00:18.713Z","updated":"2026-11-02T17:23:51.945Z","title":"PGYER codefever URI Sanitizer doc.php _detail path traversal","severity":"MEDIUM","score":6.9,"vendor":"PGYER","product":"codefever","kev":false,"epss":0.00683},{"id":"CVE-2026-110377","published":"2026-10-26T09:59:47.003Z","updated":"2026-10-26T10:23:41.157Z","title":"WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VillaTheme","product":"Bopo – WooCommerce Product Bundle Builder","kev":false,"epss":0.00229},{"id":"CVE-2026-115602","published":"2026-10-26T09:59:24.845Z","updated":"2026-10-26T10:23:41.317Z","title":"WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"Gutenberg Blocks by Kadence Blocks","kev":false,"epss":0.0017},{"id":"CVE-2026-115613","published":"2026-10-26T09:54:36.992Z","updated":"2026-10-26T10:13:37.674Z","title":"WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Image Gallery block – Create and display photo gallery/photo album.","kev":false,"epss":0.0017},{"id":"CVE-2026-115958","published":"2026-10-26T09:54:20.583Z","updated":"2026-10-26T10:13:37.956Z","title":"WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Discussion Board","product":"WP Discussion Board","kev":false,"epss":0.00256},{"id":"CVE-2026-4316","published":"2026-10-26T09:47:57.353Z","updated":"2026-10-26T14:35:18.557Z","title":"Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio","severity":"MEDIUM","score":5.1,"vendor":"Zuinq Studio","product":"IsMyGym","kev":false,"epss":0.00418},{"id":"CVE-2026-116254","published":"2026-10-26T09:45:18.399Z","updated":"2026-10-31T01:11:14.188Z","title":"rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation","severity":"MEDIUM","score":6.9,"vendor":"rathena","product":"FluxCP","kev":false,"epss":0.00261},{"id":"CVE-2026-112250","published":"2026-10-26T09:41:29.352Z","updated":"2026-10-26T14:35:18.697Z","title":"Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files","severity":"MEDIUM","score":4.4,"vendor":"Bizerba SE & Co. KG","product":"BRAIN2","kev":false,"epss":0.00173},{"id":"CVE-2026-116253","published":"2026-10-26T09:30:05.471Z","updated":"2026-10-26T16:31:53.722Z","title":"DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection","severity":"MEDIUM","score":6.9,"vendor":null,"product":"DedeCMS","kev":false,"epss":0.00494},{"id":"CVE-2026-103377","published":"2026-10-26T09:29:50.749Z","updated":"2026-10-26T14:35:18.848Z","title":"Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha","severity":"MEDIUM","score":5.1,"vendor":"Regional Parliament of Castile-La Mancha","product":"Video library of the Regional Parliament of Castile-La Mancha","kev":false,"epss":0.00408},{"id":"CVE-2026-116237","published":"2026-10-26T09:15:17.500Z","updated":"2026-11-02T17:19:33.808Z","title":"Oray Pugongying X5 Pro Dnsmasq crlf injection","severity":"CRITICAL","score":9.3,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00353},{"id":"CVE-2026-116236","published":"2026-10-26T09:00:21.600Z","updated":"2026-10-31T01:10:09.769Z","title":"Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload","severity":"HIGH","score":8.6,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00394},{"id":"CVE-2026-82947","published":"2026-10-26T08:59:09.514Z","updated":"2026-10-26T08:59:09.514Z","title":"Multiple Out-of-Bounds Reads in Frame Processing","severity":"HIGH","score":7.1,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.0017},{"id":"CVE-2026-113438","published":"2026-10-26T08:59:05.476Z","updated":"2026-10-26T14:35:18.988Z","title":"Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If…","severity":"MEDIUM","score":6.9,"vendor":"Implem Inc.","product":"Pleasanter","kev":false,"epss":0.00239},{"id":"CVE-2026-82946","published":"2026-10-26T08:55:20.654Z","updated":"2026-10-26T14:35:19.142Z","title":"Null Pointer Dereference in Mailbox Error Handling","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00169},{"id":"CVE-2026-82945","published":"2026-10-26T08:51:32.194Z","updated":"2026-10-26T14:35:19.284Z","title":"Memory Corruption via FMMU Configuration Table Overflow","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00169},{"id":"CVE-2026-95628","published":"2026-10-26T08:48:48.344Z","updated":"2026-10-26T14:35:19.442Z","title":"Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00335},{"id":"CVE-2026-82944","published":"2026-10-26T08:47:50.412Z","updated":"2026-10-26T08:47:50.412Z","title":"Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers","severity":"HIGH","score":8.8,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.0021},{"id":"CVE-2026-110376","published":"2026-10-26T08:47:06.966Z","updated":"2026-10-26T10:13:38.243Z","title":"WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"VillaTheme","product":"DEPART","kev":false,"epss":0.00152},{"id":"CVE-2026-111841","published":"2026-10-26T08:46:47.663Z","updated":"2026-10-26T10:13:38.533Z","title":"WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.0013},{"id":"CVE-2026-112828","published":"2026-10-26T08:45:37.443Z","updated":"2026-10-26T10:13:38.809Z","title":"WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Meow Apps","product":"AI Engine","kev":false,"epss":0.00152},{"id":"CVE-2026-116235","published":"2026-10-26T08:45:16.165Z","updated":"2026-10-26T16:33:05.507Z","title":"Oray Pugongying X5 Pro L2TP Authentication crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00614},{"id":"CVE-2026-95629","published":"2026-10-26T08:44:22.849Z","updated":"2026-10-26T08:44:22.849Z","title":"Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00335},{"id":"CVE-2026-95663","published":"2026-10-26T08:42:17.403Z","updated":"2026-10-26T08:42:17.403Z","title":"Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00244},{"id":"CVE-2026-82943","published":"2026-10-26T08:41:26.457Z","updated":"2026-10-26T14:35:19.598Z","title":"Out-of-Bounds Read via Unchecked Length Values","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00167},{"id":"CVE-2026-95664","published":"2026-10-26T08:40:32.068Z","updated":"2026-11-02T18:25:14.208Z","title":"Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00836},{"id":"CVE-2026-101259","published":"2026-10-26T08:36:47.439Z","updated":"2026-10-26T08:36:47.439Z","title":"Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00344},{"id":"CVE-2026-116372","published":"2026-10-26T08:36:16.664Z","updated":"2026-11-02T18:18:33.502Z","title":"MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules","severity":"HIGH","score":7.7,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.00362},{"id":"CVE-2026-70388","published":"2026-10-26T08:34:24.036Z","updated":"2026-11-02T18:14:23.968Z","title":"Memory Corruption via Integer Underflow in Message Length Validation","severity":"HIGH","score":8.3,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00213},{"id":"CVE-2026-116234","published":"2026-10-26T08:30:20.627Z","updated":"2026-11-02T17:17:47.735Z","title":"Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00461},{"id":"CVE-2026-116233","published":"2026-10-26T08:15:14.847Z","updated":"2026-10-31T01:08:40.753Z","title":"Oray Pugongying X5 Pro Dnsmasq crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00461},{"id":"CVE-2026-115425","published":"2026-10-26T08:10:14.534Z","updated":"2026-10-26T14:24:20.876Z","title":"Multiple cross-site scripting (XSS) in OPNsense","severity":"MEDIUM","score":5.6,"vendor":"OPNsense","product":"OPNsense firewall","kev":false,"epss":0.00295},{"id":"CVE-2026-116232","published":"2026-10-26T08:00:22.142Z","updated":"2026-10-26T16:33:35.163Z","title":"Oray Pugongying X5 Pro SNMP snmp_set crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00436},{"id":"CVE-2026-116231","published":"2026-10-26T07:45:15.427Z","updated":"2026-11-02T17:16:38.624Z","title":"Oray Pugongying X5 Pro Ser2net crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00436},{"id":"CVE-2026-116230","published":"2026-10-26T07:30:18.027Z","updated":"2026-10-31T01:07:50.371Z","title":"Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization","severity":"MEDIUM","score":5.3,"vendor":"Ndemic Creations","product":"Plague Inc Evolved","kev":false,"epss":0.00268},{"id":"CVE-2026-96581","published":"2026-10-26T07:20:07.186Z","updated":"2026-10-26T14:35:19.745Z","title":"An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records","severity":"HIGH","score":7.6,"vendor":"ash-project","product":"ash","kev":false,"epss":0.00258},{"id":"CVE-2026-116229","published":"2026-10-26T07:15:13.670Z","updated":"2026-10-28T11:20:34.661Z","title":"ffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"ffxiv-teamcraft","product":"FFXIV Teamcraft","kev":false,"epss":0.00203},{"id":"CVE-2026-103300","published":"2026-10-26T07:05:40.577Z","updated":"2026-10-26T10:03:22.006Z","title":"Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Eurobank WooCommerce Payment Gateway","kev":false,"epss":0.00114},{"id":"CVE-2026-111974","published":"2026-10-26T07:05:39.930Z","updated":"2026-10-26T10:03:48.798Z","title":"GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00194},{"id":"CVE-2026-116228","published":"2026-10-26T07:00:16.472Z","updated":"2026-11-02T17:14:49.968Z","title":"777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication","severity":"MEDIUM","score":4.8,"vendor":"777genius","product":"agent-teams-ai","kev":false,"epss":0.00144},{"id":"CVE-2026-116227","published":"2026-10-26T06:45:12.525Z","updated":"2026-10-31T01:05:50.138Z","title":"Edimax BR-6208AC Virtual Server cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"Edimax","product":"BR-6208AC","kev":false,"epss":0.00206},{"id":"CVE-2026-116224","published":"2026-10-26T06:30:19.394Z","updated":"2026-10-26T16:34:26.650Z","title":"fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"fr0tt","product":"benotes","kev":false,"epss":0.00232},{"id":"CVE-2026-107900","published":"2026-10-26T06:27:15.010Z","updated":"2026-10-26T14:35:19.903Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107899","published":"2026-10-26T06:27:05.313Z","updated":"2026-10-26T14:35:20.052Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107898","published":"2026-10-26T06:26:54.014Z","updated":"2026-10-26T14:35:20.204Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107897","published":"2026-10-26T06:26:44.050Z","updated":"2026-10-26T14:35:20.367Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107896","published":"2026-10-26T06:26:33.506Z","updated":"2026-10-26T14:35:20.518Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107895","published":"2026-10-26T06:26:23.661Z","updated":"2026-10-26T14:35:20.665Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127},{"id":"CVE-2026-107894","published":"2026-10-26T06:26:10.199Z","updated":"2026-10-26T14:35:20.814Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.0014},{"id":"CVE-2026-116223","published":"2026-10-26T06:15:13.172Z","updated":"2026-11-02T17:13:13.410Z","title":"icret EasyImage del.php privileges management","severity":"MEDIUM","score":6.9,"vendor":"icret","product":"EasyImage","kev":false,"epss":0.00336},{"id":"CVE-2026-103299","published":"2026-10-26T06:00:18.758Z","updated":"2026-10-30T20:00:58.487Z","title":"nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway","kev":false,"epss":0.00182},{"id":"CVE-2026-103319","published":"2026-10-26T06:00:18.562Z","updated":"2026-10-26T10:13:35.664Z","title":"OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"OPay Payment Gateway for WooCommerce","kev":false,"epss":0.00182},{"id":"CVE-2026-103381","published":"2026-10-26T06:00:18.388Z","updated":"2026-10-26T10:13:35.811Z","title":"Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Mintpay for WooCommerce","kev":false,"epss":0.00164},{"id":"CVE-2026-103306","published":"2026-10-26T06:00:18.216Z","updated":"2026-10-26T10:13:35.951Z","title":"iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Online Payments with iK Pay Gateway","kev":false,"epss":0.00182},{"id":"CVE-2026-103298","published":"2026-10-26T06:00:18.034Z","updated":"2026-10-26T10:13:36.097Z","title":"CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"CCAvenue Payment Gateway for WooCommerce","kev":false,"epss":0.00182},{"id":"CVE-2026-116124","published":"2026-10-26T06:00:16.242Z","updated":"2026-10-29T20:50:15.497Z","title":"GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":"GNOME","product":"libgsf","kev":false,"epss":0.00426},{"id":"CVE-2026-116123","published":"2026-10-26T05:45:14.291Z","updated":"2026-10-26T16:34:51.176Z","title":"NocoDB signup validatePassword excessive authentication","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00511},{"id":"CVE-2026-116122","published":"2026-10-26T05:30:16.615Z","updated":"2026-11-02T17:07:43.307Z","title":"NocoDB Sign-in Endpoint AuthService.validateUser information disclosure","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00443},{"id":"CVE-2026-116121","published":"2026-10-26T05:15:16.078Z","updated":"2026-10-29T20:49:36.116Z","title":"NocoDB Registration users.service.ts race condition","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00228},{"id":"CVE-2026-116120","published":"2026-10-26T05:00:15.565Z","updated":"2026-10-26T16:35:10.529Z","title":"NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00276},{"id":"CVE-2026-116119","published":"2026-10-26T04:45:13.955Z","updated":"2026-11-02T17:53:53.227Z","title":"NocoDB Password-Reset Flow users.service.ts race condition","severity":"MEDIUM","score":5.1,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00142},{"id":"CVE-2026-113345","published":"2026-10-26T04:43:59.645Z","updated":"2026-10-26T14:35:20.967Z","title":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access…","severity":"HIGH","score":8.5,"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","product":"Electronic delivery item Inspection Support System","kev":false,"epss":0.0012},{"id":"CVE-2026-116118","published":"2026-10-26T04:30:43.827Z","updated":"2026-10-29T20:48:50.790Z","title":"Z.ai Zcode Sed Command Filter os command injection","severity":"MEDIUM","score":5.3,"vendor":"Z.ai","product":"Zcode","kev":false,"epss":0.0105},{"id":"CVE-2026-116117","published":"2026-10-26T04:15:13.200Z","updated":"2026-10-26T16:35:42.001Z","title":"halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal","severity":"MEDIUM","score":6.9,"vendor":"halo-dev","product":"halo","kev":false,"epss":0.00502},{"id":"CVE-2026-116116","published":"2026-10-26T04:00:19.398Z","updated":"2026-11-02T17:01:47.514Z","title":"Yoosee GM8135S Camera Secure Boot signature verification","severity":"CRITICAL","score":9.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00089},{"id":"CVE-2026-116115","published":"2026-10-26T03:45:19.003Z","updated":"2026-10-29T20:47:46.895Z","title":"Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization","severity":"LOW","score":2.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00262},{"id":"CVE-2026-116114","published":"2026-10-26T03:30:21.410Z","updated":"2026-10-26T16:36:08.843Z","title":"Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00188},{"id":"CVE-2026-116113","published":"2026-10-26T03:15:16.452Z","updated":"2026-11-02T16:58:45.825Z","title":"GouGuOA Api.php chunkUpload unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":null,"product":"GouGuOA","kev":false,"epss":0.00201},{"id":"CVE-2026-116112","published":"2026-10-26T03:00:16.607Z","updated":"2026-10-29T20:47:07.249Z","title":"HashenUdara edoc-doctor-appointment-system add-new.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"HashenUdara","product":"edoc-doctor-appointment-system","kev":false,"epss":0.00254},{"id":"CVE-2026-116111","published":"2026-10-26T02:45:21.294Z","updated":"2026-10-26T16:36:36.516Z","title":"2K Games Civilization V Lua Sandbox loadstring type confusion","severity":"MEDIUM","score":5.3,"vendor":"2K Games","product":"Civilization V","kev":false,"epss":0.00303},{"id":"CVE-2026-116110","published":"2026-10-26T02:30:27.026Z","updated":"2026-11-02T16:48:57.682Z","title":"GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication","severity":"MEDIUM","score":6.9,"vendor":"GiantappMan","product":"LiveWallPaper","kev":false,"epss":0.0041},{"id":"CVE-2026-116109","published":"2026-10-26T02:15:18.141Z","updated":"2026-10-29T20:46:27.780Z","title":"continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection","severity":"MEDIUM","score":5.3,"vendor":"continuedev","product":"Continue","kev":false,"epss":0.01154},{"id":"CVE-2026-116108","published":"2026-10-26T02:00:22.687Z","updated":"2026-10-26T16:37:10.980Z","title":"openbq-org OpenBB Local API Server api_settings.py access control","severity":"MEDIUM","score":5.3,"vendor":"openbq-org","product":"OpenBB","kev":false,"epss":0.00259},{"id":"CVE-2026-116107","published":"2026-10-26T01:45:13.113Z","updated":"2026-11-02T16:48:22.412Z","title":"Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization","severity":"MEDIUM","score":5.3,"vendor":"Datafeedr","product":"Product Sets Plugin","kev":false,"epss":0.00221},{"id":"CVE-2026-116106","published":"2026-10-26T01:30:20.653Z","updated":"2026-10-29T20:45:50.085Z","title":"HeyCyan App FileProvider access control","severity":"MEDIUM","score":6.9,"vendor":null,"product":"HeyCyan App","kev":false,"epss":0.00348},{"id":"CVE-2026-116105","published":"2026-10-26T01:15:18.741Z","updated":"2026-10-26T16:37:38.696Z","title":"HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":null,"product":"HeyCyan App","kev":false,"epss":0.0027},{"id":"CVE-2026-116104","published":"2026-10-26T01:00:15.928Z","updated":"2026-11-02T16:46:20.614Z","title":"Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection","severity":"MEDIUM","score":5.3,"vendor":"Sony","product":"Neural Network Libraries","kev":false,"epss":0.00234},{"id":"CVE-2026-116103","published":"2026-10-26T00:45:29.142Z","updated":"2026-10-29T20:44:57.767Z","title":"Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection","severity":"MEDIUM","score":5.3,"vendor":"Sony","product":"Neural Network Libraries","kev":false,"epss":0.00234},{"id":"CVE-2026-116102","published":"2026-10-26T00:30:20.752Z","updated":"2026-10-26T16:37:59.373Z","title":"QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection","severity":"MEDIUM","score":5.3,"vendor":"QuantGeekDev","product":"docker-mcp","kev":false,"epss":0.00911},{"id":"CVE-2026-116101","published":"2026-10-26T00:15:20.141Z","updated":"2026-11-02T16:44:51.104Z","title":"itsourcecode Online Cake Ordering System deletetransac.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.002},{"id":"CVE-2026-116100","published":"2026-10-26T00:00:24.725Z","updated":"2026-10-29T20:20:08.630Z","title":"gougucms User Level Level.php add cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"gougucms","kev":false,"epss":0.00202},{"id":"CVE-2026-116638","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:15:33.765Z","title":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00418},{"id":"CVE-2026-107092","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T12:11:50.978Z","title":"NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01036},{"id":"CVE-2026-107091","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:15:15.778Z","title":"An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00155},{"id":"CVE-2026-107090","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:43:45.125Z","title":"An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00189},{"id":"CVE-2026-107080","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:16:04.344Z","title":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00352},{"id":"CVE-2026-106781","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:16:20.207Z","title":"An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00151},{"id":"CVE-2026-106677","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:50:01.139Z","title":"Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and…","severity":"HIGH","score":7.1,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-106676","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:40:50.850Z","title":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00156},{"id":"CVE-2026-104598","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:33:09.481Z","title":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00234},{"id":"CVE-2026-104597","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T15:47:10.676Z","title":"libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00234},{"id":"CVE-2026-104596","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:19:01.668Z","title":"libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00389},{"id":"CVE-2026-104594","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:15:09.899Z","title":"libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00466},{"id":"CVE-2026-104593","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:37:29.210Z","title":"osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00223},{"id":"CVE-2026-104592","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T18:11:30.724Z","title":"libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00266},{"id":"CVE-2026-104591","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:17:45.283Z","title":"libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00452},{"id":"CVE-2026-36698","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T15:51:49.644Z","title":"Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00505},{"id":"CVE-2026-31158","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:12:57.155Z","title":"SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00685},{"id":"CVE-2026-116099","published":"2026-10-25T23:45:16.547Z","updated":"2026-10-26T16:38:24.659Z","title":"Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write","severity":"MEDIUM","score":5.3,"vendor":"Fusion Creators Studio","product":"SCP Containment Breach Multiplayer","kev":false,"epss":0.00378},{"id":"CVE-2026-116098","published":"2026-10-25T23:30:20.866Z","updated":"2026-10-29T16:28:44.796Z","title":"SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization","severity":"MEDIUM","score":5.3,"vendor":"SteelRaven7","product":"Ravenfield","kev":false,"epss":0.00254},{"id":"CVE-2026-116097","published":"2026-10-25T23:15:07.201Z","updated":"2026-10-29T20:11:16.054Z","title":"CloudClassroom-PHP-Project addnewstudent.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":null,"product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00269},{"id":"CVE-2026-116096","published":"2026-10-25T23:00:24.282Z","updated":"2026-10-26T16:38:49.498Z","title":"ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write","severity":"MEDIUM","score":4.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00124},{"id":"CVE-2026-116095","published":"2026-10-25T22:45:20.931Z","updated":"2026-10-29T16:26:13.737Z","title":"smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation","severity":"MEDIUM","score":6.9,"vendor":"smg-project","product":"smg","kev":false,"epss":0.00521},{"id":"CVE-2026-116094","published":"2026-10-25T21:45:13.041Z","updated":"2026-10-29T20:10:43.686Z","title":"EyouCMS function.php remote_file_to_local server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":null,"product":"EyouCMS","kev":false,"epss":0.00356},{"id":"CVE-2026-115627","published":"2026-10-25T19:49:50.510Z","updated":"2026-10-26T14:35:21.109Z","title":"AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash_postgres","kev":false,"epss":0.00246},{"id":"CVE-2026-115635","published":"2026-10-25T19:48:43.829Z","updated":"2026-10-26T14:35:21.261Z","title":"AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash_postgres","kev":false,"epss":0.00246},{"id":"CVE-2026-114214","published":"2026-10-25T19:47:30.612Z","updated":"2026-10-26T14:35:21.414Z","title":"Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash","kev":false,"epss":0.00246},{"id":"CVE-2026-116063","published":"2026-10-25T17:45:12.345Z","updated":"2026-10-26T16:39:15.047Z","title":"DedeCMS update_guide.php require_once code injection","severity":"MEDIUM","score":5.1,"vendor":null,"product":"DedeCMS","kev":false,"epss":0.00253},{"id":"CVE-2026-116062","published":"2026-10-25T17:30:15.803Z","updated":"2026-10-29T16:25:14.951Z","title":"SourceCodester Performance Indicator System save_profile.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00269},{"id":"CVE-2026-116061","published":"2026-10-25T17:15:16.161Z","updated":"2026-10-29T20:10:04.541Z","title":"SourceCodester Performance Indicator System edit_dealer.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00263},{"id":"CVE-2026-115825","published":"2026-10-25T16:51:54.897Z","updated":"2026-11-02T16:23:24.866Z","title":"HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length","severity":"HIGH","score":7.5,"vendor":null,"product":"Plack","kev":false,"epss":0.00329},{"id":"CVE-2026-115824","published":"2026-10-25T16:51:39.510Z","updated":"2026-11-02T16:17:28.862Z","title":"Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00329},{"id":"CVE-2026-115823","published":"2026-10-25T16:51:19.961Z","updated":"2026-11-02T16:12:34.205Z","title":"Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Starman","kev":false,"epss":0.00195},{"id":"CVE-2026-115822","published":"2026-10-25T16:51:00.241Z","updated":"2026-11-02T14:19:20.636Z","title":"Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00273},{"id":"CVE-2026-115817","published":"2026-10-25T16:50:33.914Z","updated":"2026-11-02T14:17:17.089Z","title":"Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00301},{"id":"CVE-2026-116060","published":"2026-10-25T16:30:18.104Z","updated":"2026-10-26T16:39:45.412Z","title":"SourceCodester Performance Indicator System adddealer.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00269},{"id":"CVE-2026-116058","published":"2026-10-25T16:00:08.867Z","updated":"2026-10-29T16:24:09.679Z","title":"Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection","severity":"MEDIUM","score":5.3,"vendor":"Alfresco","product":"Activiti","kev":false,"epss":0.00376},{"id":"CVE-2026-116057","published":"2026-10-25T15:30:13.590Z","updated":"2026-10-29T20:09:16.260Z","title":"KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"KodCloud","product":"KodExplorer","kev":false,"epss":0.00333},{"id":"CVE-2026-116056","published":"2026-10-25T15:15:13.191Z","updated":"2026-10-26T16:40:18.242Z","title":"KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"KodCloud","product":"KodExplorer","kev":false,"epss":0.00362},{"id":"CVE-2026-116055","published":"2026-10-25T14:45:17.375Z","updated":"2026-10-29T16:22:24.136Z","title":"SourceCodester Performance Indicator System deleteproduct.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00319},{"id":"CVE-2026-116054","published":"2026-10-25T14:15:11.104Z","updated":"2026-10-29T20:08:38.135Z","title":"SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash","severity":"LOW","score":2.1,"vendor":null,"product":"SH3","kev":false,"epss":0.00211},{"id":"CVE-2026-116053","published":"2026-10-25T13:30:09.456Z","updated":"2026-10-26T16:40:46.983Z","title":"dbcli mycli Whitelist source.py source_special_command_is_safe os command injection","severity":"MEDIUM","score":4.8,"vendor":"dbcli","product":"mycli","kev":false,"epss":0.00694},{"id":"CVE-2026-116186","published":"2026-10-25T13:22:10.154Z","updated":"2026-10-29T16:21:35.837Z","title":"OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId","severity":"LOW","score":2.3,"vendor":"openremote","product":"core","kev":false,"epss":0.00205},{"id":"CVE-2026-116185","published":"2026-10-25T13:22:09.474Z","updated":"2026-10-29T20:06:21.715Z","title":"OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos","severity":"MEDIUM","score":5.3,"vendor":"openremote","product":"core","kev":false,"epss":0.00186},{"id":"CVE-2026-116184","published":"2026-10-25T13:22:08.792Z","updated":"2026-10-25T13:22:08.792Z","title":"OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket","severity":"LOW","score":2.1,"vendor":"openremote","product":"core","kev":false,"epss":0.0024},{"id":"CVE-2026-116211","published":"2026-10-25T13:20:38.819Z","updated":"2026-10-29T20:05:15.421Z","title":"YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create","severity":"HIGH","score":8.8,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00293},{"id":"CVE-2026-116208","published":"2026-10-25T13:20:38.152Z","updated":"2026-10-25T13:20:38.152Z","title":"YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts","severity":"HIGH","score":7.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00242},{"id":"CVE-2026-116207","published":"2026-10-25T13:20:37.473Z","updated":"2026-10-26T16:41:15.236Z","title":"YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API","severity":"HIGH","score":8.8,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00307},{"id":"CVE-2026-116206","published":"2026-10-25T13:20:36.803Z","updated":"2026-10-29T16:20:55.492Z","title":"YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00156},{"id":"CVE-2026-116205","published":"2026-10-25T13:20:35.879Z","updated":"2026-10-29T20:03:35.437Z","title":"YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0051},{"id":"CVE-2026-116204","published":"2026-10-25T13:20:35.206Z","updated":"2026-10-25T13:20:35.206Z","title":"YesWiki before 4.7.0 CSRF via despam Admin Action","severity":"HIGH","score":7.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0014},{"id":"CVE-2026-116203","published":"2026-10-25T13:20:34.532Z","updated":"2026-10-26T16:41:41.933Z","title":"YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00168},{"id":"CVE-2026-116202","published":"2026-10-25T13:20:33.851Z","updated":"2026-10-29T16:20:12.653Z","title":"YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload","severity":"MEDIUM","score":5.1,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00138},{"id":"CVE-2026-116201","published":"2026-10-25T13:20:33.187Z","updated":"2026-10-29T20:02:39.039Z","title":"Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition","severity":"HIGH","score":8.7,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00303},{"id":"CVE-2026-116200","published":"2026-10-25T13:20:32.506Z","updated":"2026-10-25T13:20:32.506Z","title":"Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()","severity":"HIGH","score":8.2,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00151},{"id":"CVE-2026-116199","published":"2026-10-25T13:20:31.815Z","updated":"2026-10-26T16:41:49.682Z","title":"Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback","severity":"CRITICAL","score":9.2,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00315},{"id":"CVE-2026-116198","published":"2026-10-25T13:20:31.140Z","updated":"2026-10-29T16:24:48.235Z","title":"Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store","severity":"MEDIUM","score":5.3,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00077},{"id":"CVE-2026-116197","published":"2026-10-25T13:20:30.463Z","updated":"2026-10-29T20:01:50.927Z","title":"Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection","severity":"LOW","score":2.1,"vendor":"edgelesssys","product":"contrast","kev":false,"epss":0.00159},{"id":"CVE-2026-116196","published":"2026-10-25T13:20:29.804Z","updated":"2026-10-25T13:20:29.804Z","title":"Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url","severity":"MEDIUM","score":6,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00063},{"id":"CVE-2026-116195","published":"2026-10-25T13:20:29.131Z","updated":"2026-10-26T16:42:00.376Z","title":"Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim","severity":"HIGH","score":7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00229},{"id":"CVE-2026-116194","published":"2026-10-25T13:20:28.466Z","updated":"2026-10-29T16:18:52.204Z","title":"Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback","severity":"HIGH","score":7.6,"vendor":"rclone","product":"rclone","kev":false,"epss":0.0012},{"id":"CVE-2026-116193","published":"2026-10-25T13:20:27.801Z","updated":"2026-10-29T20:00:59.244Z","title":"Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests","severity":"MEDIUM","score":6.9,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00249},{"id":"CVE-2026-116192","published":"2026-10-25T13:20:27.162Z","updated":"2026-10-25T13:20:27.162Z","title":"rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots","severity":"HIGH","score":8.2,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00223},{"id":"CVE-2026-116191","published":"2026-10-25T13:20:26.490Z","updated":"2026-10-26T16:42:11.109Z","title":"Rclone before 1.75.2 Path Traversal via serve webdav MKCOL","severity":"HIGH","score":8.7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00393},{"id":"CVE-2026-116190","published":"2026-10-25T13:20:25.832Z","updated":"2026-10-29T16:17:28.780Z","title":"rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect","severity":"MEDIUM","score":6.3,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00189},{"id":"CVE-2026-116189","published":"2026-10-25T13:20:25.148Z","updated":"2026-10-29T19:59:55.648Z","title":"rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS","severity":"HIGH","score":7.7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00142},{"id":"CVE-2026-116188","published":"2026-10-25T13:20:24.506Z","updated":"2026-10-25T13:20:24.506Z","title":"rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow","severity":"MEDIUM","score":6.9,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00253},{"id":"CVE-2026-116187","published":"2026-10-25T13:20:23.849Z","updated":"2026-10-26T16:42:27.522Z","title":"Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads","severity":"MEDIUM","score":6.1,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00143},{"id":"CVE-2026-116183","published":"2026-10-25T13:20:21.213Z","updated":"2026-10-26T16:42:50.439Z","title":"phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID","severity":"HIGH","score":8.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00242},{"id":"CVE-2026-116182","published":"2026-10-25T13:20:20.563Z","updated":"2026-10-29T16:16:23.262Z","title":"phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching","severity":"MEDIUM","score":5.3,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00204},{"id":"CVE-2026-116181","published":"2026-10-25T13:20:19.874Z","updated":"2026-10-29T19:58:56.330Z","title":"vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00374},{"id":"CVE-2026-116180","published":"2026-10-25T13:20:19.199Z","updated":"2026-10-26T19:48:35.789Z","title":"vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors","severity":"HIGH","score":8.3,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00254},{"id":"CVE-2026-116179","published":"2026-10-25T13:20:18.520Z","updated":"2026-10-26T16:43:21.928Z","title":"vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00321},{"id":"CVE-2026-116178","published":"2026-10-25T13:20:17.838Z","updated":"2026-10-26T19:48:35.925Z","title":"vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00331},{"id":"CVE-2026-116177","published":"2026-10-25T13:20:17.160Z","updated":"2026-10-29T19:58:12.636Z","title":"vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00291},{"id":"CVE-2026-116176","published":"2026-10-25T13:20:16.476Z","updated":"2026-10-25T13:20:16.476Z","title":"vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector","severity":"HIGH","score":8.8,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00318},{"id":"CVE-2026-116175","published":"2026-10-25T13:20:15.794Z","updated":"2026-10-26T16:43:35.143Z","title":"vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00314},{"id":"CVE-2026-116174","published":"2026-10-25T13:20:15.109Z","updated":"2026-10-29T16:14:41.402Z","title":"vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00277},{"id":"CVE-2026-116173","published":"2026-10-25T13:20:14.431Z","updated":"2026-10-26T19:48:36.065Z","title":"vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00339},{"id":"CVE-2026-116172","published":"2026-10-25T13:20:13.759Z","updated":"2026-10-25T13:20:13.759Z","title":"vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00339},{"id":"CVE-2026-116171","published":"2026-10-25T13:20:13.056Z","updated":"2026-10-28T18:59:16.458Z","title":"SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix","severity":"MEDIUM","score":5.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00479},{"id":"CVE-2026-116170","published":"2026-10-25T13:20:12.378Z","updated":"2026-10-29T16:13:59.106Z","title":"SiYuan before v3.8.7 SQL Injection via History Search op and query","severity":"MEDIUM","score":6.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00361},{"id":"CVE-2026-116169","published":"2026-10-25T13:20:11.710Z","updated":"2026-10-29T19:57:27.661Z","title":"SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \\href in Math Blocks","severity":"MEDIUM","score":5.1,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00205},{"id":"CVE-2026-116168","published":"2026-10-25T13:20:11.054Z","updated":"2026-10-25T14:27:41.242Z","title":"SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool","severity":"MEDIUM","score":6.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00186},{"id":"CVE-2026-116167","published":"2026-10-25T13:20:10.372Z","updated":"2026-10-26T16:47:43.293Z","title":"SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter","severity":"HIGH","score":7.6,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00656},{"id":"CVE-2026-116166","published":"2026-10-25T13:20:09.700Z","updated":"2026-10-29T16:12:42.398Z","title":"SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting","severity":"HIGH","score":7.6,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00115},{"id":"CVE-2026-116165","published":"2026-10-25T13:20:09.004Z","updated":"2026-10-29T19:56:28.366Z","title":"Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDB","severity":"HIGH","score":8.8,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00317},{"id":"CVE-2026-116164","published":"2026-10-25T13:20:08.336Z","updated":"2026-10-25T13:20:08.336Z","title":"Parse Server 9.0.0 before 9.10.4-alpha.3 Reserved Field Name Injection via Object Writes","severity":"MEDIUM","score":6.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00344},{"id":"CVE-2026-116163","published":"2026-10-25T13:20:07.658Z","updated":"2026-10-26T16:47:58.712Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses","severity":"CRITICAL","score":9.1,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00282},{"id":"CVE-2026-116162","published":"2026-10-25T13:20:06.994Z","updated":"2026-10-29T16:11:20.725Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Login","severity":"LOW","score":2.1,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00382},{"id":"CVE-2026-116161","published":"2026-10-25T13:20:06.298Z","updated":"2026-10-29T19:55:35.620Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptions","severity":"MEDIUM","score":6,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00289},{"id":"CVE-2026-116160","published":"2026-10-25T13:20:05.634Z","updated":"2026-10-25T13:20:05.634Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123},{"id":"CVE-2026-116159","published":"2026-10-25T13:20:04.937Z","updated":"2026-10-26T16:48:24.183Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111},{"id":"CVE-2026-116158","published":"2026-10-25T13:20:04.263Z","updated":"2026-10-26T19:48:36.208Z","title":"ImageMagick before 7.1.2-33 Memory Leak in magick compare","severity":"LOW","score":2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00103},{"id":"CVE-2026-116157","published":"2026-10-25T13:20:03.602Z","updated":"2026-10-26T19:48:36.366Z","title":"ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111},{"id":"CVE-2026-116156","published":"2026-10-25T13:20:02.956Z","updated":"2026-10-26T19:48:36.513Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111},{"id":"CVE-2026-116155","published":"2026-10-25T13:20:02.349Z","updated":"2026-10-26T16:48:51.205Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00304},{"id":"CVE-2026-116154","published":"2026-10-25T13:20:01.714Z","updated":"2026-10-26T19:58:39.363Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00304},{"id":"CVE-2026-116153","published":"2026-10-25T13:20:01.069Z","updated":"2026-10-29T19:54:06.897Z","title":"ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit","severity":"LOW","score":2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123},{"id":"CVE-2026-116152","published":"2026-10-25T13:20:00.370Z","updated":"2026-10-25T13:20:00.370Z","title":"ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00305},{"id":"CVE-2026-116151","published":"2026-10-25T13:19:59.697Z","updated":"2026-10-26T16:49:17.981Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273},{"id":"CVE-2026-116150","published":"2026-10-25T13:19:59.036Z","updated":"2026-10-26T19:58:39.505Z","title":"ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder","severity":"LOW","score":2.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00215},{"id":"CVE-2026-116149","published":"2026-10-25T13:19:58.386Z","updated":"2026-10-29T19:53:21.313Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images","severity":"HIGH","score":7.2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00348},{"id":"CVE-2026-116148","published":"2026-10-25T13:19:57.729Z","updated":"2026-10-25T13:19:57.729Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00138},{"id":"CVE-2026-116147","published":"2026-10-25T13:19:57.089Z","updated":"2026-10-26T16:49:43.897Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273},{"id":"CVE-2026-116146","published":"2026-10-25T13:19:56.440Z","updated":"2026-10-26T19:58:39.647Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273},{"id":"CVE-2026-116145","published":"2026-10-25T13:19:55.780Z","updated":"2026-10-29T19:52:42.831Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix","severity":"LOW","score":1.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00112},{"id":"CVE-2026-116144","published":"2026-10-25T13:19:55.066Z","updated":"2026-10-26T19:58:39.787Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123},{"id":"CVE-2026-116143","published":"2026-10-25T13:19:54.384Z","updated":"2026-10-26T16:50:00.144Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00116},{"id":"CVE-2026-116142","published":"2026-10-25T13:19:53.714Z","updated":"2026-10-29T16:10:09.915Z","title":"ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00118},{"id":"CVE-2026-116141","published":"2026-10-25T13:19:53.057Z","updated":"2026-10-29T19:51:45.323Z","title":"ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00333},{"id":"CVE-2026-116140","published":"2026-10-25T13:19:52.372Z","updated":"2026-10-25T13:19:52.372Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00129},{"id":"CVE-2026-116139","published":"2026-10-25T13:19:51.674Z","updated":"2026-10-26T16:52:45.479Z","title":"WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering","severity":"MEDIUM","score":5.1,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00226},{"id":"CVE-2026-116052","published":"2026-10-25T12:15:10.995Z","updated":"2026-10-29T16:03:53.631Z","title":"LinkStackOrg LinkStack cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"LinkStackOrg","product":"LinkStack","kev":false,"epss":0.00211},{"id":"CVE-2026-116137","published":"2026-10-25T11:51:01.980Z","updated":"2026-10-29T16:09:24.168Z","title":"adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names","severity":"MEDIUM","score":6.3,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00258},{"id":"CVE-2026-116136","published":"2026-10-25T11:51:01.317Z","updated":"2026-10-29T19:51:01.337Z","title":"ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking","severity":"MEDIUM","score":6,"vendor":"projectsend","product":"ProjectSend","kev":false,"epss":0.00202},{"id":"CVE-2026-116073","published":"2026-10-25T11:51:00.624Z","updated":"2026-10-25T11:51:00.624Z","title":"Leon before commit 50df142 Path Traversal via /download model Command","severity":"MEDIUM","score":6.9,"vendor":"leon-ai","product":"leon","kev":false,"epss":0.00325},{"id":"CVE-2026-116072","published":"2026-10-25T11:50:59.942Z","updated":"2026-10-26T16:53:14.770Z","title":"Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity","severity":"MEDIUM","score":5.3,"vendor":"Docile-Alligator","product":"Infinity for Reddit","kev":false,"epss":0.00122},{"id":"CVE-2026-116071","published":"2026-10-25T11:50:59.252Z","updated":"2026-10-29T15:56:14.804Z","title":"rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption","severity":"HIGH","score":8.2,"vendor":"rotki","product":"rotki","kev":false,"epss":0.00201},{"id":"CVE-2026-116070","published":"2026-10-25T11:50:58.565Z","updated":"2026-10-29T19:49:55.270Z","title":"Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config","severity":"MEDIUM","score":6.9,"vendor":"dqzboy","product":"Docker-Proxy","kev":false,"epss":0.00544},{"id":"CVE-2026-116069","published":"2026-10-25T11:50:57.876Z","updated":"2026-10-25T11:50:57.876Z","title":"NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field","severity":"MEDIUM","score":6.9,"vendor":"Albert-Weasker","product":"niubigeo","kev":false,"epss":0.00262},{"id":"CVE-2026-116068","published":"2026-10-25T11:50:57.177Z","updated":"2026-10-26T16:53:31.091Z","title":"Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router","severity":"HIGH","score":8.7,"vendor":"Dokploy","product":"dokploy","kev":false,"epss":0.00317},{"id":"CVE-2026-116067","published":"2026-10-25T11:50:56.480Z","updated":"2026-10-29T15:53:06.012Z","title":"Paisa before 0.7.8 Path Traversal via Editor and Sheet API","severity":"HIGH","score":8.8,"vendor":"ananthakumaran","product":"paisa","kev":false,"epss":0.01689},{"id":"CVE-2026-116066","published":"2026-10-25T11:50:55.818Z","updated":"2026-10-29T19:48:49.188Z","title":"Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service","severity":"HIGH","score":7,"vendor":"Firecrawl","product":"Firecrawl","kev":false,"epss":0.00277},{"id":"CVE-2026-116050","published":"2026-10-25T08:45:18.342Z","updated":"2026-10-29T19:47:44.517Z","title":"krupalshah Employee Recruitment System Registration registerform3.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"Employee Recruitment System","kev":false,"epss":0.00254},{"id":"CVE-2026-116049","published":"2026-10-25T08:30:16.219Z","updated":"2026-10-26T17:36:48.995Z","title":"krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"EmployeeRecruitmentSystem","kev":false,"epss":0.00254},{"id":"CVE-2026-116048","published":"2026-10-25T08:00:10.951Z","updated":"2026-10-29T15:41:40.858Z","title":"krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"EmployeeRecruitmentSystem","kev":false,"epss":0.00254},{"id":"CVE-2026-116047","published":"2026-10-25T07:30:12.541Z","updated":"2026-10-29T19:46:46.623Z","title":"Privoce Vocechat Query Parameter widget.html cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Privoce","product":"Vocechat","kev":false,"epss":0.00263},{"id":"CVE-2026-116046","published":"2026-10-25T06:45:08.260Z","updated":"2026-10-26T17:36:55.499Z","title":"eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal","severity":"MEDIUM","score":4.8,"vendor":"eventcatalog","product":"sdk","kev":false,"epss":0.00138},{"id":"CVE-2026-116045","published":"2026-10-25T06:30:12.208Z","updated":"2026-10-29T15:38:39.753Z","title":"1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal","severity":"MEDIUM","score":5.3,"vendor":"1999AZZAR","product":"designer-mcp","kev":false,"epss":0.00319},{"id":"CVE-2026-115251","published":"2026-10-25T06:00:22.211Z","updated":"2026-10-26T10:13:36.247Z","title":"Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Duplicator","kev":false,"epss":0.00312},{"id":"CVE-2026-115214","published":"2026-10-25T06:00:22.035Z","updated":"2026-10-26T10:13:36.399Z","title":"Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Datawiza Proxy Auth Plugin","kev":false,"epss":0.00277},{"id":"CVE-2026-115183","published":"2026-10-25T06:00:21.850Z","updated":"2026-10-26T10:13:36.538Z","title":"Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget","severity":"LOW","score":2.4,"vendor":"Unknown","product":"Qi Addons For Elementor","kev":false,"epss":0.00095},{"id":"CVE-2026-114743","published":"2026-10-25T06:00:21.676Z","updated":"2026-10-26T10:13:36.679Z","title":"InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings","severity":"LOW","score":3.1,"vendor":"Unknown","product":"InstaWP Connect","kev":false,"epss":0.00173},{"id":"CVE-2026-114742","published":"2026-10-25T06:00:21.497Z","updated":"2026-10-26T10:13:36.824Z","title":"WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00168},{"id":"CVE-2026-114741","published":"2026-10-25T06:00:21.321Z","updated":"2026-10-26T10:13:36.969Z","title":"WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR","severity":"LOW","score":3.8,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00152},{"id":"CVE-2026-114740","published":"2026-10-25T06:00:21.122Z","updated":"2026-10-26T10:13:37.109Z","title":"WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00251},{"id":"CVE-2026-111981","published":"2026-10-25T06:00:20.949Z","updated":"2026-10-26T10:13:37.251Z","title":"GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses","severity":"LOW","score":2.7,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00168},{"id":"CVE-2026-111980","published":"2026-10-25T06:00:20.775Z","updated":"2026-10-26T10:13:37.394Z","title":"GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00179},{"id":"CVE-2026-111979","published":"2026-10-25T06:00:20.600Z","updated":"2026-10-26T10:13:37.532Z","title":"GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00235},{"id":"CVE-2026-111978","published":"2026-10-25T06:00:20.427Z","updated":"2026-10-26T10:13:37.813Z","title":"GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import","severity":"MEDIUM","score":6,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00276},{"id":"CVE-2026-111976","published":"2026-10-25T06:00:20.218Z","updated":"2026-10-26T10:13:38.100Z","title":"GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00197},{"id":"CVE-2026-110285","published":"2026-10-25T06:00:19.779Z","updated":"2026-10-26T10:13:38.391Z","title":"WP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Webhook Signing Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP Stripe Checkout","kev":false,"epss":0.00197},{"id":"CVE-2025-15705","published":"2026-10-25T06:00:19.597Z","updated":"2026-10-26T10:13:38.671Z","title":"Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00142},{"id":"CVE-2026-94295","published":"2026-10-25T06:00:19.424Z","updated":"2026-10-26T10:13:38.948Z","title":"Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Chikkili- Google Pay India for Woocommerce","kev":false,"epss":0.00182},{"id":"CVE-2026-116044","published":"2026-10-25T05:45:16.032Z","updated":"2026-10-29T19:46:00.515Z","title":"prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"prasathmani","product":"TinyFileManager","kev":false,"epss":0.00206},{"id":"CVE-2026-116007","published":"2026-10-25T03:45:16.651Z","updated":"2026-10-26T17:37:07.642Z","title":"YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"YunaiV","product":"ruoyi-vue-pro","kev":false,"epss":0.0037},{"id":"CVE-2026-116006","published":"2026-10-25T03:30:25.691Z","updated":"2026-10-29T15:33:56.121Z","title":"YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication","severity":"MEDIUM","score":6.9,"vendor":"YunaiV","product":"ruoyi-vue-pro","kev":false,"epss":0.00834},{"id":"CVE-2026-116004","published":"2026-10-25T02:30:20.707Z","updated":"2026-10-29T18:31:06.384Z","title":"onyx-dot-app Onyx PreviewTab.tsx cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"onyx-dot-app","product":"Onyx","kev":false,"epss":0.00199},{"id":"CVE-2026-116000","published":"2026-10-25T02:15:12.758Z","updated":"2026-10-26T17:37:17.406Z","title":"Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"Zylon","product":"PrivateGPT","kev":false,"epss":0.00288},{"id":"CVE-2026-115999","published":"2026-10-25T01:46:02.093Z","updated":"2026-10-29T15:29:46.147Z","title":"mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection","severity":"MEDIUM","score":6.9,"vendor":"mansi-k","product":"Restaurant_IMS","kev":false,"epss":0.0026},{"id":"CVE-2026-115997","published":"2026-10-24T23:45:22.667Z","updated":"2026-10-29T18:30:18.087Z","title":"pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection","severity":"MEDIUM","score":5.3,"vendor":"pig-mesh","product":"pig","kev":false,"epss":0.00234},{"id":"CVE-2026-115996","published":"2026-10-24T22:30:21.197Z","updated":"2026-10-26T17:37:33.986Z","title":"Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation","severity":"MEDIUM","score":6.3,"vendor":"Unitree Robotics","product":"Unitree Go2","kev":false,"epss":0.00231},{"id":"CVE-2026-115995","published":"2026-10-24T22:15:15.915Z","updated":"2026-10-29T15:27:21.823Z","title":"Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection","severity":"CRITICAL","score":9.4,"vendor":"Unitree Robotics","product":"Unitree Go2","kev":false,"epss":0.01377},{"id":"CVE-2026-115982","published":"2026-10-24T22:00:13.102Z","updated":"2026-10-29T18:29:22.668Z","title":"phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting","severity":"MEDIUM","score":5.3,"vendor":null,"product":"phpIPAM","kev":false,"epss":0.00269},{"id":"CVE-2026-115981","published":"2026-10-24T21:45:07.713Z","updated":"2026-10-26T17:37:46.178Z","title":"phpIPAM index.php cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"phpIPAM","kev":false,"epss":0.00253},{"id":"CVE-2026-114820","published":"2026-10-24T18:42:04.571Z","updated":"2026-10-25T03:55:32.751Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00253},{"id":"CVE-2026-115973","published":"2026-10-24T18:15:15.067Z","updated":"2026-10-29T15:25:39.467Z","title":"FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery","severity":"MEDIUM","score":6.9,"vendor":"FaveoSuite","product":"Faveo Helpdesk","kev":false,"epss":0.00278},{"id":"CVE-2026-115972","published":"2026-10-24T18:00:18.162Z","updated":"2026-10-29T18:28:35.718Z","title":"FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization","severity":"MEDIUM","score":6.9,"vendor":"FaveoSuite","product":"Faveo Helpdesk","kev":false,"epss":0.00276},{"id":"CVE-2026-115971","published":"2026-10-24T17:30:17.983Z","updated":"2026-10-26T17:38:02.650Z","title":"Travisun Opptrix preParsing handler webhook Buffer.concat denial of service","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.00372},{"id":"CVE-2026-115970","published":"2026-10-24T17:15:13.273Z","updated":"2026-10-29T15:24:32.723Z","title":"Travisun Opptrix Import Endpoint import code injection","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.00304},{"id":"CVE-2026-115969","published":"2026-10-24T15:30:11.184Z","updated":"2026-10-29T18:26:27.412Z","title":"Travisun Opptrix Schedule API setup command injection","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.01336},{"id":"CVE-2026-115933","published":"2026-10-24T14:17:05.755Z","updated":"2026-11-02T14:12:51.289Z","title":"Forged signed tokens let any registered user take over other users and organizations","severity":"CRITICAL","score":9.9,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00249},{"id":"CVE-2026-115557","published":"2026-10-24T14:15:14.283Z","updated":"2026-11-02T14:11:17.949Z","title":"Distrust compromised intermediate certificates in ssl module","severity":"CRITICAL","score":9.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00534},{"id":"CVE-2026-114191","published":"2026-10-24T14:00:09.573Z","updated":"2026-10-24T14:46:58.028Z","title":"WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Knit Pay","product":"UPI QR Code Payment Gateway for WooCommerce","kev":false,"epss":0.00336},{"id":"CVE-2026-114704","published":"2026-10-24T14:00:09.045Z","updated":"2026-10-24T14:46:58.175Z","title":"WordPress Relevanssi  plugin <= 4.28.4 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Christoph Vielgrader","product":"Relevanssi","kev":false,"epss":0.00413},{"id":"CVE-2026-114192","published":"2026-10-24T14:00:09.029Z","updated":"2026-10-24T14:46:58.324Z","title":"WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Magepeople inc.","product":"WpEvently","kev":false,"epss":0.00219},{"id":"CVE-2026-114629","published":"2026-10-24T13:50:47.616Z","updated":"2026-11-02T14:09:38.670Z","title":"Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters","severity":"HIGH","score":7.5,"vendor":null,"product":"Web-Simple","kev":false,"epss":0.00267},{"id":"CVE-2026-115932","published":"2026-10-24T12:28:36.033Z","updated":"2026-11-02T14:07:12.305Z","title":"Path traversal in post media lets any registered user read server files","severity":"CRITICAL","score":9.6,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00428},{"id":"CVE-2026-116020","published":"2026-10-24T11:40:36.328Z","updated":"2026-10-24T11:40:36.328Z","title":"BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages","severity":"MEDIUM","score":5.3,"vendor":"BookStackApp","product":"BookStack","kev":false,"epss":0.00181},{"id":"CVE-2026-116019","published":"2026-10-24T11:40:35.632Z","updated":"2026-10-26T17:39:42.999Z","title":"Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00349},{"id":"CVE-2026-116018","published":"2026-10-24T11:40:34.948Z","updated":"2026-10-29T15:23:13.164Z","title":"ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint","severity":"MEDIUM","score":5.3,"vendor":"ONEARMY","product":"community-platform","kev":false,"epss":0.00213},{"id":"CVE-2026-116017","published":"2026-10-24T11:40:34.247Z","updated":"2026-10-29T18:24:38.990Z","title":"Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint","severity":"MEDIUM","score":5.3,"vendor":"xinnan-tech","product":"xiaozhi-esp32-server","kev":false,"epss":0.00228},{"id":"CVE-2026-116016","published":"2026-10-24T11:40:33.600Z","updated":"2026-10-24T11:40:33.600Z","title":"yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header","severity":"HIGH","score":7.1,"vendor":"YunaiV","product":"yudao-cloud","kev":false,"epss":0.00254},{"id":"CVE-2026-116015","published":"2026-10-24T11:40:32.903Z","updated":"2026-10-26T17:40:10.123Z","title":"yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint","severity":"MEDIUM","score":5.3,"vendor":"YunaiV","product":"yudao-cloud","kev":false,"epss":0.00218},{"id":"CVE-2026-116014","published":"2026-10-24T11:40:32.200Z","updated":"2026-10-29T16:08:24.942Z","title":"open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType","severity":"CRITICAL","score":9.2,"vendor":"open62541","product":"open62541","kev":false,"epss":0.00432},{"id":"CVE-2026-116013","published":"2026-10-24T11:40:31.527Z","updated":"2026-10-29T18:23:41.998Z","title":"OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing","severity":"MEDIUM","score":6.3,"vendor":"openresty","product":"lua-resty-dns","kev":false,"epss":0.00288},{"id":"CVE-2026-116012","published":"2026-10-24T11:40:30.825Z","updated":"2026-10-24T11:40:30.825Z","title":"Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser","severity":"LOW","score":2,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0021},{"id":"CVE-2026-116011","published":"2026-10-24T11:40:30.179Z","updated":"2026-10-26T17:40:34.096Z","title":"Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()","severity":"HIGH","score":8.7,"vendor":"CrowCpp","product":"Crow","kev":false,"epss":0.00683},{"id":"CVE-2026-116010","published":"2026-10-24T11:40:29.488Z","updated":"2026-10-29T14:46:14.817Z","title":"RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers","severity":"MEDIUM","score":5.3,"vendor":"francoisjacquet","product":"RosarioSIS","kev":false,"epss":0.00204},{"id":"CVE-2026-116009","published":"2026-10-24T11:40:28.810Z","updated":"2026-10-29T18:22:04.998Z","title":"Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action","severity":"HIGH","score":8.7,"vendor":"owen2345","product":"camaleon-cms","kev":false,"epss":0.00415},{"id":"CVE-2026-116008","published":"2026-10-24T11:40:28.129Z","updated":"2026-10-24T11:40:28.129Z","title":"DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign","severity":"MEDIUM","score":5.3,"vendor":"Bottelet","product":"DaybydayCRM","kev":false,"epss":0.00196},{"id":"CVE-2026-110018","published":"2026-10-24T11:30:30.545Z","updated":"2026-10-26T17:40:59.505Z","title":"aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute","severity":"HIGH","score":8.8,"vendor":"kodezen","product":"aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder","kev":false,"epss":0.00387},{"id":"CVE-2026-114705","published":"2026-10-24T10:00:11.514Z","updated":"2026-10-24T14:46:58.465Z","title":"WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"quadlayers","product":"WP Social Feed Gallery","kev":false,"epss":0.00224},{"id":"CVE-2026-115998","published":"2026-10-24T09:28:05.849Z","updated":"2026-11-02T14:05:02.842Z","title":"IDOR: User reads and modifies findings from other people's projects","severity":"MEDIUM","score":4.3,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00198},{"id":"CVE-2026-114194","published":"2026-10-24T09:08:50.102Z","updated":"2026-10-24T14:46:56.574Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.00183},{"id":"CVE-2026-115994","published":"2026-10-24T09:04:02.750Z","updated":"2026-11-02T14:03:51.629Z","title":"BOLA Allows Cross-Project Target Tampering","severity":"MEDIUM","score":5.4,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00221},{"id":"CVE-2026-115993","published":"2026-10-24T08:32:46.940Z","updated":"2026-11-02T14:02:56.947Z","title":"Stored XSS in the “Notes” field of project checklists","severity":"MEDIUM","score":6.8,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00321},{"id":"CVE-2026-114196","published":"2026-10-24T08:00:13.761Z","updated":"2026-10-24T14:46:58.606Z","title":"WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"paytiumsupport","product":"Paytium","kev":false,"epss":0.00449},{"id":"CVE-2026-114695","published":"2026-10-24T08:00:13.590Z","updated":"2026-10-24T14:46:56.713Z","title":"WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Infomaniak Network","product":"VOD Infomaniak","kev":false,"epss":0.00205},{"id":"CVE-2026-114694","published":"2026-10-24T08:00:13.325Z","updated":"2026-10-24T14:46:56.850Z","title":"WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Pixelite","product":"Events Manager","kev":false,"epss":0.00253},{"id":"CVE-2026-114693","published":"2026-10-24T08:00:12.874Z","updated":"2026-10-27T15:06:40.501Z","title":"WordPress All-in-One Video Gallery plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Plugins360 Labs","product":"All-in-One Video Gallery","kev":false,"epss":0.00183},{"id":"CVE-2026-110892","published":"2026-10-24T08:00:12.427Z","updated":"2026-10-24T14:46:58.746Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00296},{"id":"CVE-2026-114697","published":"2026-10-24T08:00:12.424Z","updated":"2026-10-24T14:46:57.138Z","title":"WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"QuarkA","product":"QA Analytics","kev":false,"epss":0.00205},{"id":"CVE-2026-114178","published":"2026-10-24T08:00:11.922Z","updated":"2026-10-24T14:46:57.285Z","title":"WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Bold Grid","product":"W3 Total Cache","kev":false,"epss":0.00205},{"id":"CVE-2026-114190","published":"2026-10-24T08:00:11.901Z","updated":"2026-10-24T14:46:58.879Z","title":"WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Hai Zheng / Lite Speed Cache","product":"LiteSpeed Cache","kev":false,"epss":0.00306},{"id":"CVE-2026-112866","published":"2026-10-24T08:00:11.483Z","updated":"2026-10-24T14:46:59.015Z","title":"WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WPFactory","product":"Product Filter by WBW","kev":false,"epss":0.00356},{"id":"CVE-2026-94075","published":"2026-10-24T08:00:11.463Z","updated":"2026-10-24T14:46:59.162Z","title":"WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00449},{"id":"CVE-2026-112869","published":"2026-10-24T08:00:10.988Z","updated":"2026-10-24T14:46:57.432Z","title":"WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Noah Hearle","product":"We’re Open!","kev":false,"epss":0.00201},{"id":"CVE-2026-111402","published":"2026-10-24T08:00:10.963Z","updated":"2026-10-24T14:46:59.295Z","title":"WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00349},{"id":"CVE-2026-112844","published":"2026-10-24T08:00:10.546Z","updated":"2026-10-24T14:46:57.569Z","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00201},{"id":"CVE-2026-114179","published":"2026-10-24T08:00:10.535Z","updated":"2026-10-24T14:46:57.707Z","title":"WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"wordplus","product":"BP Better Messages","kev":false,"epss":0.00201},{"id":"CVE-2026-115975","published":"2026-10-24T07:39:34.357Z","updated":"2026-11-02T14:00:09.921Z","title":"Broken access control in JiraController","severity":"HIGH","score":7.1,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00215},{"id":"CVE-2026-115803","published":"2026-10-24T06:45:07.253Z","updated":"2026-10-26T17:41:20.319Z","title":"Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Scada-LTS","kev":false,"epss":0.00223},{"id":"CVE-2026-115802","published":"2026-10-24T06:30:15.142Z","updated":"2026-10-29T14:44:54.077Z","title":"InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere","severity":"MEDIUM","score":5.3,"vendor":"InternScience","product":"InternAgent","kev":false,"epss":0.00288},{"id":"CVE-2026-108013","published":"2026-10-24T06:23:11.930Z","updated":"2026-11-02T16:06:28.435Z","title":"HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)","severity":"MEDIUM","score":6.8,"vendor":"HCL Software","product":"BigFix Platform","kev":false,"epss":0.00157},{"id":"CVE-2026-114429","published":"2026-10-24T06:00:20.190Z","updated":"2026-10-24T14:36:53.345Z","title":"WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot Content","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00306},{"id":"CVE-2026-113674","published":"2026-10-24T06:00:20.014Z","updated":"2026-10-24T14:36:53.488Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification","severity":"LOW","score":3.7,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00206},{"id":"CVE-2026-113673","published":"2026-10-24T06:00:19.845Z","updated":"2026-10-24T14:36:53.626Z","title":"GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00595},{"id":"CVE-2026-113493","published":"2026-10-24T06:00:19.669Z","updated":"2026-10-24T14:36:53.764Z","title":"GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00306},{"id":"CVE-2026-113492","published":"2026-10-24T06:00:19.499Z","updated":"2026-10-24T14:36:53.914Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00282},{"id":"CVE-2026-113491","published":"2026-10-24T06:00:19.319Z","updated":"2026-10-24T14:36:54.057Z","title":"GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00249},{"id":"CVE-2026-113490","published":"2026-10-24T06:00:19.138Z","updated":"2026-10-24T14:36:54.215Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00282},{"id":"CVE-2026-113489","published":"2026-10-24T06:00:18.964Z","updated":"2026-10-24T14:36:54.372Z","title":"GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00198},{"id":"CVE-2026-112207","published":"2026-10-24T06:00:18.793Z","updated":"2026-10-24T14:36:54.522Z","title":"Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Download Monitor","kev":false,"epss":0.00213},{"id":"CVE-2026-110956","published":"2026-10-24T06:00:18.623Z","updated":"2026-10-24T14:36:54.674Z","title":"asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"asVereinbase","kev":false,"epss":0.0036},{"id":"CVE-2026-105199","published":"2026-10-24T06:00:18.452Z","updated":"2026-10-24T14:36:54.823Z","title":"Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container ID","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Pixel Tag Manager for WooCommerce","kev":false,"epss":0.00306},{"id":"CVE-2026-97353","published":"2026-10-24T06:00:18.267Z","updated":"2026-10-24T14:36:54.970Z","title":"News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"News Kit Addons For Elementor","kev":false,"epss":0.00221},{"id":"CVE-2026-97352","published":"2026-10-24T06:00:18.095Z","updated":"2026-10-24T14:36:55.114Z","title":"News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"News Kit Addons For Elementor","kev":false,"epss":0.00198},{"id":"CVE-2026-107907","published":"2026-10-24T06:00:17.918Z","updated":"2026-10-24T14:36:55.254Z","title":"MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"MAS Videos","kev":false,"epss":0.00227},{"id":"CVE-2026-87835","published":"2026-10-24T06:00:17.748Z","updated":"2026-10-24T14:36:55.413Z","title":"Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Front End Users","kev":false,"epss":0.00246},{"id":"CVE-2026-107887","published":"2026-10-24T06:00:17.576Z","updated":"2026-10-24T14:36:55.557Z","title":"Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Advanced Twenty Seventeen","kev":false,"epss":0.00142},{"id":"CVE-2026-115806","published":"2026-10-24T04:32:10.565Z","updated":"2026-10-29T01:52:01.233Z","title":"Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace","severity":"CRITICAL","score":9.8,"vendor":"codexonics","product":"Prime Mover – Backup and Migration","kev":false,"epss":0.00549},{"id":"CVE-2026-115807","published":"2026-10-24T04:32:09.994Z","updated":"2026-10-29T01:52:01.385Z","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute","severity":"HIGH","score":7.1,"vendor":"cozmoslabs","product":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor","kev":false,"epss":0.0021},{"id":"CVE-2026-115929","published":"2026-10-24T00:31:30.633Z","updated":"2026-11-02T16:03:07.841Z","title":"MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB, Inc.","product":"Compass","kev":false,"epss":0.00187},{"id":"CVE-2026-115931","published":"2026-10-23T22:02:21.717Z","updated":"2026-11-02T15:07:14.710Z","title":"Arbitrary file read and backend crash through unrestricted provider method calls","severity":"CRITICAL","score":9.9,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00485},{"id":"CVE-2026-115938","published":"2026-10-23T21:58:51.816Z","updated":"2026-11-02T15:03:03.061Z","title":"Low privilege condition filter escapes Twig sandbox, recovers \"securityKey\" and reaches RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369},{"id":"CVE-2026-115937","published":"2026-10-23T21:50:13.188Z","updated":"2026-11-02T15:00:00.257Z","title":"Unauthenticated payment reuse allows unpaid orders to be marked as paid","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"commerce-mollie","kev":false,"epss":0.00166},{"id":"CVE-2026-115801","published":"2026-10-23T21:45:20.151Z","updated":"2026-10-29T18:20:55.523Z","title":"Kakao khaiii JSON Config File Linear.cpp open out-of-bounds","severity":"MEDIUM","score":4.8,"vendor":"Kakao","product":"khaiii","kev":false,"epss":0.00113},{"id":"CVE-2026-115935","published":"2026-10-23T21:40:57.592Z","updated":"2026-11-02T14:45:41.313Z","title":"Control panel only API response emulation replaces \"securityKey\" and reaches server RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369},{"id":"CVE-2026-115897","published":"2026-10-23T21:37:41.097Z","updated":"2026-10-26T17:41:50.594Z","title":"Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body","severity":"LOW","score":2.1,"vendor":"yahoo","product":"serialize-javascript","kev":false,"epss":0.00307},{"id":"CVE-2026-115895","published":"2026-10-23T21:32:24.999Z","updated":"2026-10-30T18:43:41.641Z","title":"Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution","severity":"HIGH","score":8.8,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00473},{"id":"CVE-2026-115893","published":"2026-10-23T21:29:33.917Z","updated":"2026-10-29T18:20:01.899Z","title":"Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0099},{"id":"CVE-2026-115892","published":"2026-10-23T21:26:54.528Z","updated":"2026-10-29T14:44:33.323Z","title":"Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type","severity":"MEDIUM","score":5.7,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00434},{"id":"CVE-2026-115889","published":"2026-10-23T21:23:27.669Z","updated":"2026-10-26T17:42:15.319Z","title":"Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00454},{"id":"CVE-2026-115887","published":"2026-10-23T21:19:42.561Z","updated":"2026-10-30T18:45:04.885Z","title":"graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service","severity":"HIGH","score":7.5,"vendor":"graphql-hive","product":"graphql-scalars","kev":false,"epss":0.00487},{"id":"CVE-2026-115886","published":"2026-10-23T21:17:21.462Z","updated":"2026-10-29T18:18:21.052Z","title":"MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints","severity":"MEDIUM","score":6.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00676},{"id":"CVE-2026-115885","published":"2026-10-23T21:15:09.944Z","updated":"2026-10-29T14:43:01.864Z","title":"LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output","severity":"MEDIUM","score":4.1,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00114},{"id":"CVE-2026-115883","published":"2026-10-23T21:12:34.523Z","updated":"2026-10-26T17:42:32.027Z","title":"LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores","severity":"MEDIUM","score":6,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00298},{"id":"CVE-2026-113951","published":"2026-10-23T20:57:20.150Z","updated":"2026-11-02T14:42:50.614Z","title":"If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf.…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"Container","kev":false,"epss":0.0031},{"id":"CVE-2026-75525","published":"2026-10-23T20:42:21.394Z","updated":"2026-10-30T17:38:14.992Z","title":"OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant","severity":"MEDIUM","score":5.3,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00173},{"id":"CVE-2026-115800","published":"2026-10-23T20:30:23.839Z","updated":"2026-10-26T17:42:38.515Z","title":"UbiquitousLearning mllm Convertor __init__.py load_model path traversal","severity":"MEDIUM","score":4.8,"vendor":"UbiquitousLearning","product":"mllm","kev":false,"epss":0.00138},{"id":"CVE-2026-75524","published":"2026-10-23T20:29:52.583Z","updated":"2026-10-29T14:33:55.695Z","title":"OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent","severity":"MEDIUM","score":5.4,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00266},{"id":"CVE-2026-65825","published":"2026-10-23T20:29:17.174Z","updated":"2026-10-26T17:45:38.981Z","title":"OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants","severity":"HIGH","score":7.5,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00216},{"id":"CVE-2026-65824","published":"2026-10-23T20:27:52.852Z","updated":"2026-10-30T17:36:49.674Z","title":"OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie","severity":"HIGH","score":7.4,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00252},{"id":"CVE-2026-58202","published":"2026-10-23T20:27:36.090Z","updated":"2026-10-29T18:16:47.209Z","title":"OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`","severity":"HIGH","score":8.3,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00236},{"id":"CVE-2026-115877","published":"2026-10-23T20:25:12.031Z","updated":"2026-10-29T14:23:05.736Z","title":"Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value","severity":"MEDIUM","score":5.4,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00257},{"id":"CVE-2026-83813","published":"2026-10-23T20:21:54.364Z","updated":"2026-10-29T18:15:36.711Z","title":"Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation","severity":"LOW","score":3.1,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00114},{"id":"CVE-2026-115778","published":"2026-10-23T20:20:34.591Z","updated":"2026-10-23T20:55:34.866Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer","severity":"HIGH","score":7.5,"vendor":"twisted","product":"twisted","kev":false,"epss":0.0054},{"id":"CVE-2026-115776","published":"2026-10-23T20:18:38.342Z","updated":"2026-10-30T14:27:25.835Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer","severity":"HIGH","score":7.5,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00501},{"id":"CVE-2026-115775","published":"2026-10-23T20:16:29.913Z","updated":"2026-10-29T18:14:18.997Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree","severity":"HIGH","score":8.7,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00444},{"id":"CVE-2026-115774","published":"2026-10-23T20:14:07.480Z","updated":"2026-10-29T14:20:15.738Z","title":"Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH","severity":"MEDIUM","score":4.9,"vendor":"twisted","product":"twisted","kev":false,"epss":0.0052},{"id":"CVE-2026-113877","published":"2026-10-23T20:07:20.677Z","updated":"2026-11-02T15:59:52.574Z","title":"HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Headers-ActionPack","kev":false,"epss":0.00378},{"id":"CVE-2026-115797","published":"2026-10-23T20:00:16.370Z","updated":"2026-10-29T14:19:14.179Z","title":"Tenda F6 Web Management cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":"Tenda","product":"F6","kev":false,"epss":0.00202},{"id":"CVE-2026-79982","published":"2026-10-23T19:56:19.432Z","updated":"2026-11-02T15:56:29.127Z","title":"Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size","severity":"HIGH","score":8.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00229},{"id":"CVE-2026-79981","published":"2026-10-23T19:56:18.319Z","updated":"2026-11-02T13:57:40.720Z","title":"DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00124},{"id":"CVE-2026-79980","published":"2026-10-23T19:56:17.213Z","updated":"2026-11-02T13:55:59.073Z","title":"Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS","severity":"MEDIUM","score":5.6,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00173},{"id":"CVE-2026-79979","published":"2026-10-23T19:56:16.111Z","updated":"2026-11-02T13:54:45.589Z","title":"Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00103},{"id":"CVE-2026-79978","published":"2026-10-23T19:56:14.995Z","updated":"2026-11-02T13:53:33.370Z","title":"Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path","severity":"LOW","score":3.6,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00091},{"id":"CVE-2026-79977","published":"2026-10-23T19:56:13.873Z","updated":"2026-11-02T13:51:16.736Z","title":"WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr","severity":"HIGH","score":8.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00204},{"id":"CVE-2026-19741","published":"2026-10-23T19:56:12.805Z","updated":"2026-11-02T13:48:16.160Z","title":"OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)","severity":"HIGH","score":7.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00263},{"id":"CVE-2026-115796","published":"2026-10-23T19:45:19.860Z","updated":"2026-10-29T18:12:23.630Z","title":"Tenda F6 Web Management cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"Tenda","product":"F6","kev":false,"epss":0.00159},{"id":"CVE-2026-115586","published":"2026-10-23T19:34:46.391Z","updated":"2026-10-23T20:55:42.764Z","title":"virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00271},{"id":"CVE-2026-115585","published":"2026-10-23T19:31:52.598Z","updated":"2026-10-30T15:56:32.681Z","title":"pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.0041},{"id":"CVE-2026-115580","published":"2026-10-23T19:29:49.845Z","updated":"2026-10-29T18:01:23.279Z","title":"pypdf: Possible long runtimes for large xref table header limits","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.0041},{"id":"CVE-2026-115572","published":"2026-10-23T19:24:51.055Z","updated":"2026-10-29T14:18:40.569Z","title":"pypdf: Possible long runtimes for repeated references to the same missing object","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00375},{"id":"CVE-2026-115845","published":"2026-10-23T19:04:44.790Z","updated":"2026-11-02T13:46:34.164Z","title":"Incomplete validation in the run_script Python sandbox in AWS MCP Server","severity":"MEDIUM","score":5.3,"vendor":"AWS","product":"AWS MCP Server","kev":false,"epss":0.00306},{"id":"CVE-2026-91093","published":"2026-10-23T18:33:58.401Z","updated":"2026-10-29T10:45:48.007Z","title":"HP One Agent Software – Security Update","severity":"HIGH","score":8.5,"vendor":"HP Inc.","product":"HP One Agent Software","kev":false,"epss":0.00164},{"id":"CVE-2026-112342","published":"2026-10-23T18:15:16.426Z","updated":"2026-10-27T10:14:04.889Z","title":"Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning","severity":"HIGH","score":7.1,"vendor":"Tandoor Recipes","product":"Tandoor Recipes","kev":false,"epss":0.00268},{"id":"CVE-2026-115570","published":"2026-10-23T18:13:53.961Z","updated":"2026-10-23T20:56:26.712Z","title":"Electron: Mitigation for compromised eMudhra intermediate certificates","severity":"HIGH","score":7.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00377},{"id":"CVE-2026-115569","published":"2026-10-23T18:09:47.722Z","updated":"2026-10-30T19:18:24.488Z","title":"Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root","severity":"LOW","score":3.3,"vendor":"fallow-rs","product":"fallow","kev":false,"epss":0.00187},{"id":"CVE-2026-115863","published":"2026-10-23T17:35:18.517Z","updated":"2026-11-02T16:52:00.300Z","title":"ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME…","severity":"HIGH","score":7.6,"vendor":"ConnMan","product":"ConnMan","kev":false,"epss":0.00299},{"id":"CVE-2026-115813","published":"2026-10-23T17:35:14.102Z","updated":"2026-11-02T13:39:42.306Z","title":"Server-side request forgery in the model download path in Amazon Web Services Multi Model Server","severity":"MEDIUM","score":6.9,"vendor":"AWS","product":"multi-model-server","kev":false,"epss":0.00356},{"id":"CVE-2026-115812","published":"2026-10-23T17:33:53.542Z","updated":"2026-11-02T13:36:07.033Z","title":"Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server","severity":"CRITICAL","score":9.3,"vendor":"AWS","product":"multi-model-server","kev":false,"epss":0.00529},{"id":"CVE-2026-115567","published":"2026-10-23T17:13:16.161Z","updated":"2026-10-29T17:59:47.636Z","title":"Tokio: Race condition in `tokio::time::Interval`","severity":"MEDIUM","score":5.8,"vendor":"tokio-rs","product":"tokio","kev":false,"epss":0.00111},{"id":"CVE-2026-110975","published":"2026-10-23T17:10:46.396Z","updated":"2026-11-02T08:11:23.512Z","title":"Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure","severity":"HIGH","score":7.4,"vendor":null,"product":"kruize-autotune","kev":false,"epss":0.00246},{"id":"CVE-2026-106069","published":"2026-10-23T16:15:05.850Z","updated":"2026-11-02T13:31:52.012Z","title":"A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to,…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00304},{"id":"CVE-2026-105481","published":"2026-10-23T16:15:05.837Z","updated":"2026-11-02T15:54:45.159Z","title":"A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an…","severity":"MEDIUM","score":6.5,"vendor":"nodejs","product":"node","kev":false,"epss":0.00318},{"id":"CVE-2026-105482","published":"2026-10-23T16:15:05.831Z","updated":"2026-11-02T15:51:54.058Z","title":"A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00468},{"id":"CVE-2026-106074","published":"2026-10-23T16:15:05.829Z","updated":"2026-11-02T15:48:44.599Z","title":"A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into…","severity":"MEDIUM","score":4.8,"vendor":"nodejs","product":"node","kev":false,"epss":0.00334},{"id":"CVE-2026-106071","published":"2026-10-23T16:15:05.791Z","updated":"2026-11-02T15:40:27.184Z","title":"A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.…","severity":"LOW","score":3.6,"vendor":"nodejs","product":"node","kev":false,"epss":0.00199},{"id":"CVE-2026-106072","published":"2026-10-23T16:15:05.783Z","updated":"2026-11-02T15:39:59.537Z","title":"A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a…","severity":"MEDIUM","score":6.7,"vendor":"nodejs","product":"node","kev":false,"epss":0.00617},{"id":"CVE-2026-87901","published":"2026-10-23T16:15:05.780Z","updated":"2026-11-02T15:38:00.796Z","title":"Improper sanitization in the registration module allows reflected Cross-Site Scripting.","severity":"HIGH","score":8.3,"vendor":"phpBB","product":"phpBB","kev":false,"epss":0.00322},{"id":"CVE-2026-105483","published":"2026-10-23T16:15:05.773Z","updated":"2026-11-02T15:37:11.172Z","title":"A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00304},{"id":"CVE-2026-106070","published":"2026-10-23T16:15:05.741Z","updated":"2026-11-02T15:33:58.070Z","title":"A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation…","severity":"LOW","score":3.7,"vendor":"nodejs","product":"node","kev":false,"epss":0.00367},{"id":"CVE-2026-106073","published":"2026-10-23T16:15:05.728Z","updated":"2026-11-02T15:31:53.217Z","title":"A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of…","severity":"LOW","score":3.3,"vendor":"nodejs","product":"node","kev":false,"epss":0.00254},{"id":"CVE-2026-115810","published":"2026-10-23T16:12:12.359Z","updated":"2026-10-29T14:13:20.506Z","title":"Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL","severity":"MEDIUM","score":6.3,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00385},{"id":"CVE-2026-57845","published":"2026-10-23T15:14:20.497Z","updated":"2026-10-29T17:58:32.566Z","title":"Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder","severity":"HIGH","score":8.7,"vendor":"huggingface","product":"datasets","kev":false,"epss":0.00547},{"id":"CVE-2026-54668","published":"2026-10-23T14:54:35.530Z","updated":"2026-10-29T14:11:07.235Z","title":"Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)","severity":"HIGH","score":8.7,"vendor":"kitodo","product":"kitodo-production","kev":false,"epss":0.00304},{"id":"CVE-2026-58497","published":"2026-10-23T14:49:42.619Z","updated":"2026-10-23T20:57:14.612Z","title":"Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests","severity":"HIGH","score":8.6,"vendor":"olo-dot-io","product":"Uni-CLI","kev":false,"epss":0.00255},{"id":"CVE-2026-49442","published":"2026-10-23T14:45:13.062Z","updated":"2026-10-30T19:50:20.165Z","title":"Cacti: User Enumeration via Error Messages","severity":"MEDIUM","score":5.3,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00237},{"id":"CVE-2026-39902","published":"2026-10-23T14:42:45.710Z","updated":"2026-10-29T14:04:38.453Z","title":"Cacti: Authenticated RCE on Data Input","severity":"HIGH","score":7.2,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00403},{"id":"CVE-2026-46531","published":"2026-10-23T14:42:27.937Z","updated":"2026-10-29T17:56:17.459Z","title":"Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)","severity":"MEDIUM","score":5.5,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00304},{"id":"CVE-2026-102786","published":"2026-10-23T14:34:55.227Z","updated":"2026-11-02T18:52:52.364Z","title":"Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5","severity":"HIGH","score":8.6,"vendor":"phoca.cz","product":"Phoca Gallery extension for Joomla","kev":false,"epss":0.00262},{"id":"CVE-2026-55222","published":"2026-10-23T14:31:41.863Z","updated":"2026-10-23T20:57:39.282Z","title":"Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap","severity":"MEDIUM","score":5.1,"vendor":"ilbers","product":"isar","kev":false,"epss":0.00126},{"id":"CVE-2026-53942","published":"2026-10-23T14:25:00.085Z","updated":"2026-10-23T14:57:32.991Z","title":"Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN","severity":"CRITICAL","score":9.9,"vendor":"conda","product":"infrastructure","kev":false,"epss":0.00325},{"id":"CVE-2026-55486","published":"2026-10-23T14:17:42.732Z","updated":"2026-10-30T15:08:40.244Z","title":"Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS","severity":"CRITICAL","score":9.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00257},{"id":"CVE-2026-55465","published":"2026-10-23T14:17:27.529Z","updated":"2026-10-29T17:55:19.956Z","title":"Goobi viewer: Solr injection via unvalidated region parameter in spatial search","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00262},{"id":"CVE-2026-55463","published":"2026-10-23T14:17:06.825Z","updated":"2026-10-29T13:59:55.819Z","title":"Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation","severity":"MEDIUM","score":6.5,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00136},{"id":"CVE-2026-112333","published":"2026-10-23T14:16:48.726Z","updated":"2026-10-23T14:16:48.726Z","title":"GFI Archiver < 15.14 Stored XSS via MailInsights.aspx","severity":"MEDIUM","score":5.1,"vendor":"GFI Software","product":"GFI Archiver","kev":false,"epss":0.00138},{"id":"CVE-2026-55459","published":"2026-10-23T14:16:44.995Z","updated":"2026-10-23T14:57:39.675Z","title":"Goobi viewer: OpenID JWT audience not enforced by the verifier","severity":"HIGH","score":7.4,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00205},{"id":"CVE-2026-55457","published":"2026-10-23T14:16:27.063Z","updated":"2026-10-30T15:05:13.543Z","title":"Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass","severity":"HIGH","score":7.4,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00274},{"id":"CVE-2026-55444","published":"2026-10-23T14:16:16.350Z","updated":"2026-10-29T17:54:03.026Z","title":"Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00253},{"id":"CVE-2026-46652","published":"2026-10-23T14:15:46.415Z","updated":"2026-10-30T15:10:02.376Z","title":"Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer","severity":"CRITICAL","score":9.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00703},{"id":"CVE-2026-46651","published":"2026-10-23T14:15:28.088Z","updated":"2026-10-29T17:51:34.661Z","title":"Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer","severity":"CRITICAL","score":9.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00378},{"id":"CVE-2026-46347","published":"2026-10-23T14:14:51.802Z","updated":"2026-10-29T13:57:32.624Z","title":"Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset","severity":"MEDIUM","score":6.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00253},{"id":"CVE-2026-46346","published":"2026-10-23T14:14:39.197Z","updated":"2026-10-23T20:58:03.501Z","title":"Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset","severity":"MEDIUM","score":6.5,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00334},{"id":"CVE-2026-55442","published":"2026-10-23T14:14:26.455Z","updated":"2026-10-29T13:56:19.871Z","title":"Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00262},{"id":"CVE-2026-115478","published":"2026-10-23T14:06:28.128Z","updated":"2026-10-30T17:46:48.838Z","title":"obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes","severity":"HIGH","score":7.1,"vendor":"The-40-Thieves","product":"obsidian-tc","kev":false,"epss":0.00323},{"id":"CVE-2026-115477","published":"2026-10-23T14:04:33.518Z","updated":"2026-10-29T17:50:19.455Z","title":"obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP","severity":"HIGH","score":7.1,"vendor":"The-40-Thieves","product":"obsidian-tc","kev":false,"epss":0.00354},{"id":"CVE-2026-115457","published":"2026-10-23T14:00:33.254Z","updated":"2026-10-29T13:55:12.435Z","title":"baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments","severity":"HIGH","score":7.1,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00421},{"id":"CVE-2026-115786","published":"2026-10-23T13:53:33.918Z","updated":"2026-10-28T19:48:38.750Z","title":"Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion","severity":"MEDIUM","score":6.5,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00374},{"id":"CVE-2026-115785","published":"2026-10-23T13:50:33.115Z","updated":"2026-10-29T10:45:48.181Z","title":"Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00732},{"id":"CVE-2026-114624","published":"2026-10-23T13:47:08.832Z","updated":"2026-10-29T13:37:07.749Z","title":"baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity","severity":"HIGH","score":7.2,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00885},{"id":"CVE-2026-114623","published":"2026-10-23T13:45:29.675Z","updated":"2026-10-23T14:57:47.887Z","title":"baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure","severity":"MEDIUM","score":6.5,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00652},{"id":"CVE-2026-114622","published":"2026-10-23T13:41:33.272Z","updated":"2026-10-30T20:04:28.351Z","title":"baserCMS: Encoded path traversal bypass in the theme file API","severity":"HIGH","score":7.2,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00601},{"id":"CVE-2026-57207","published":"2026-10-23T13:40:31.164Z","updated":"2026-10-30T18:16:11.003Z","title":"NetBox MCP Server: HTTP transport exposes all NetBox data without authentication","severity":"MEDIUM","score":5.9,"vendor":"netboxlabs","product":"netbox-mcp-server","kev":false,"epss":0.00397},{"id":"CVE-2026-114621","published":"2026-10-23T13:39:42.762Z","updated":"2026-10-29T17:48:17.842Z","title":"baserCMS: SQL injection in the admin panel and admin API","severity":"HIGH","score":8.8,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00352},{"id":"CVE-2026-114357","published":"2026-10-23T13:39:28.510Z","updated":"2026-10-28T19:48:46.412Z","title":"DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.0031},{"id":"CVE-2026-57208","published":"2026-10-23T13:37:40.983Z","updated":"2026-10-23T14:57:55.652Z","title":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind","severity":"MEDIUM","score":6.2,"vendor":"entireio","product":"cli","kev":false,"epss":0.00381},{"id":"CVE-2026-114356","published":"2026-10-23T13:37:34.059Z","updated":"2026-10-28T19:48:55.339Z","title":"DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.00119},{"id":"CVE-2026-115480","published":"2026-10-23T13:37:32.184Z","updated":"2026-10-29T17:46:42.337Z","title":"baserCMS: Public Web API mail-form submission bypasses image CAPTCHA","severity":"MEDIUM","score":5.3,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00315},{"id":"CVE-2026-115479","published":"2026-10-23T13:36:01.655Z","updated":"2026-10-30T20:03:07.037Z","title":"baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients","severity":"MEDIUM","score":5.3,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00302},{"id":"CVE-2026-114355","published":"2026-10-23T13:35:42.796Z","updated":"2026-10-28T19:49:04.451Z","title":"DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root","severity":"HIGH","score":8.6,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.01206},{"id":"CVE-2026-93640","published":"2026-10-23T13:34:41.851Z","updated":"2026-10-24T03:55:19.407Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00124},{"id":"CVE-2026-115481","published":"2026-10-23T13:34:26.038Z","updated":"2026-10-23T14:58:03.802Z","title":"baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload","severity":"HIGH","score":8.5,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00401},{"id":"CVE-2026-114354","published":"2026-10-23T13:33:36.131Z","updated":"2026-10-28T19:49:13.764Z","title":"DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root","severity":"HIGH","score":8.6,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.0013},{"id":"CVE-2026-50057","published":"2026-10-23T13:33:29.682Z","updated":"2026-10-29T10:45:48.334Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00269},{"id":"CVE-2026-114353","published":"2026-10-23T13:31:05.598Z","updated":"2026-10-28T19:49:26.784Z","title":"DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.00155},{"id":"CVE-2026-50056","published":"2026-10-23T13:30:43.654Z","updated":"2026-10-29T10:45:48.481Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00344},{"id":"CVE-2026-93639","published":"2026-10-23T13:29:25.939Z","updated":"2026-10-28T19:49:41.321Z","title":"Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00375},{"id":"CVE-2026-93638","published":"2026-10-23T13:28:03.891Z","updated":"2026-10-28T19:49:53.291Z","title":"Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter","severity":"MEDIUM","score":6.1,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00296},{"id":"CVE-2026-55826","published":"2026-10-23T13:27:45.250Z","updated":"2026-10-29T13:32:21.226Z","title":"Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin","severity":"HIGH","score":8.7,"vendor":"stape-io","product":"gtm-server-side-wordpress-plugin","kev":false,"epss":0.00337},{"id":"CVE-2026-93636","published":"2026-10-23T13:27:14.020Z","updated":"2026-10-28T19:50:14.434Z","title":"Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00344},{"id":"CVE-2026-93634","published":"2026-10-23T13:26:11.070Z","updated":"2026-10-28T19:50:45.601Z","title":"Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00271},{"id":"CVE-2026-93633","published":"2026-10-23T13:25:21.365Z","updated":"2026-10-28T19:51:07.972Z","title":"Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters","severity":"MEDIUM","score":5.4,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00234},{"id":"CVE-2026-93631","published":"2026-10-23T13:23:34.952Z","updated":"2026-10-28T19:51:18.814Z","title":"Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking","severity":"HIGH","score":7.1,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00175},{"id":"CVE-2026-93630","published":"2026-10-23T13:21:39.551Z","updated":"2026-10-28T19:51:28.013Z","title":"Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00288},{"id":"CVE-2026-55606","published":"2026-10-23T13:21:21.038Z","updated":"2026-10-29T17:43:41.478Z","title":"odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()","severity":"MEDIUM","score":6.5,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00466},{"id":"CVE-2026-53918","published":"2026-10-23T13:21:00.665Z","updated":"2026-10-30T17:42:21.816Z","title":"odhcpd DHCPv6 IA dangling first pointer use-after-free","severity":"HIGH","score":8.8,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00619},{"id":"CVE-2026-53920","published":"2026-10-23T13:20:48.045Z","updated":"2026-10-23T20:58:10.536Z","title":"odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure","severity":"HIGH","score":8.7,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00395},{"id":"CVE-2026-115754","published":"2026-10-23T13:20:43.932Z","updated":"2026-10-23T14:58:11.402Z","title":"serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body","severity":"LOW","score":2.3,"vendor":"yahoo","product":"serialize-javascript","kev":false,"epss":0.00231},{"id":"CVE-2026-53921","published":"2026-10-23T13:20:30.249Z","updated":"2026-10-29T13:28:11.455Z","title":"odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)","severity":"CRITICAL","score":9.8,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.01123},{"id":"CVE-2026-93629","published":"2026-10-23T13:19:26.405Z","updated":"2026-10-28T19:51:47.292Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268},{"id":"CVE-2026-93628","published":"2026-10-23T13:18:16.368Z","updated":"2026-10-28T20:02:01.885Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268},{"id":"CVE-2026-93627","published":"2026-10-23T13:17:00.739Z","updated":"2026-10-28T20:02:13.577Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268},{"id":"CVE-2026-50053","published":"2026-10-23T13:15:44.976Z","updated":"2026-10-28T20:02:22.353Z","title":"Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00301},{"id":"CVE-2026-10632","published":"2026-10-23T13:14:04.118Z","updated":"2026-10-28T20:02:30.433Z","title":"Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00301},{"id":"CVE-2026-115752","published":"2026-10-23T13:03:34.217Z","updated":"2026-10-29T13:25:03.492Z","title":"Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon","severity":"LOW","score":2.3,"vendor":"SignalK","product":"signalk-server","kev":false,"epss":0.00175},{"id":"CVE-2026-115751","published":"2026-10-23T13:03:33.492Z","updated":"2026-10-29T17:42:32.687Z","title":"mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname","severity":"MEDIUM","score":6.3,"vendor":"agentfront","product":"mcp-from-openapi","kev":false,"epss":0.0025},{"id":"CVE-2026-115750","published":"2026-10-23T13:03:32.783Z","updated":"2026-10-23T13:03:32.783Z","title":"mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects","severity":"MEDIUM","score":6.3,"vendor":"agentfront","product":"mcp-from-openapi","kev":false,"epss":0.00221},{"id":"CVE-2026-115749","published":"2026-10-23T13:03:32.068Z","updated":"2026-10-23T14:58:26.781Z","title":"hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import","severity":"MEDIUM","score":4.8,"vendor":"hydra-ecosystem","product":"hydra-ray-launcher","kev":false,"epss":0.0022},{"id":"CVE-2026-112848","published":"2026-10-23T13:00:20.030Z","updated":"2026-10-24T14:46:59.432Z","title":"WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"AivahThemes","product":"Hostme v2","kev":false,"epss":0.00313},{"id":"CVE-2026-112849","published":"2026-10-23T13:00:19.660Z","updated":"2026-10-23T14:58:45.182Z","title":"WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"AivahThemes","product":"Hostme v2","kev":false,"epss":0.0019},{"id":"CVE-2026-112850","published":"2026-10-23T13:00:19.609Z","updated":"2026-10-24T14:46:59.580Z","title":"WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability","severity":"HIGH","score":8.1,"vendor":"AncoraThemes","product":"Your Dress","kev":false,"epss":0.00337},{"id":"CVE-2026-112854","published":"2026-10-23T13:00:19.251Z","updated":"2026-10-24T14:46:59.714Z","title":"WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Holistic Center","kev":false,"epss":0.00313},{"id":"CVE-2026-112847","published":"2026-10-23T13:00:19.203Z","updated":"2026-10-24T14:46:59.854Z","title":"WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"ZenSoul","kev":false,"epss":0.00313},{"id":"CVE-2026-112846","published":"2026-10-23T13:00:18.841Z","updated":"2026-10-24T14:47:00.039Z","title":"WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Save Life","kev":false,"epss":0.00313},{"id":"CVE-2026-112851","published":"2026-10-23T13:00:18.778Z","updated":"2026-10-24T14:47:00.303Z","title":"WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"HotLock","kev":false,"epss":0.00313},{"id":"CVE-2026-112852","published":"2026-10-23T13:00:18.393Z","updated":"2026-10-24T14:47:00.462Z","title":"WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability","severity":"HIGH","score":8.1,"vendor":"ThemeREX Group","product":"Helion","kev":false,"epss":0.00257},{"id":"CVE-2026-112853","published":"2026-10-23T13:00:18.338Z","updated":"2026-10-23T14:59:06.317Z","title":"WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Hallelujah","kev":false,"epss":0.00408},{"id":"CVE-2026-112856","published":"2026-10-23T13:00:17.961Z","updated":"2026-10-24T14:47:00.597Z","title":"WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Vagabonds","kev":false,"epss":0.00313},{"id":"CVE-2026-112857","published":"2026-10-23T13:00:17.920Z","updated":"2026-10-23T14:59:12.653Z","title":"WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Reprizo","kev":false,"epss":0.00408},{"id":"CVE-2026-112858","published":"2026-10-23T13:00:17.505Z","updated":"2026-10-24T14:47:00.738Z","title":"WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Rhodos","kev":false,"epss":0.00313},{"id":"CVE-2026-112859","published":"2026-10-23T13:00:17.469Z","updated":"2026-10-24T14:47:00.875Z","title":"WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Little Birdies","kev":false,"epss":0.00313},{"id":"CVE-2026-112855","published":"2026-10-23T13:00:16.938Z","updated":"2026-10-24T14:47:01.013Z","title":"WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Redy","kev":false,"epss":0.00313},{"id":"CVE-2026-112863","published":"2026-10-23T13:00:16.927Z","updated":"2026-10-24T14:46:57.865Z","title":"WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Hogash","product":"KALLYAS","kev":false,"epss":0.00146},{"id":"CVE-2026-115730","published":"2026-10-23T12:55:09.891Z","updated":"2026-10-29T13:19:15.108Z","title":"i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl","severity":"LOW","score":2.3,"vendor":"i18next","product":"i18next-http-backend","kev":false,"epss":0.00318},{"id":"CVE-2026-115729","published":"2026-10-23T12:55:09.157Z","updated":"2026-10-29T17:40:19.138Z","title":"@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass","severity":"HIGH","score":8.9,"vendor":"pdfme","product":"common","kev":false,"epss":0.00443},{"id":"CVE-2026-115728","published":"2026-10-23T12:55:08.425Z","updated":"2026-10-26T19:58:39.933Z","title":"@hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing","severity":"HIGH","score":8.7,"vendor":"hapijs","product":"@hapi/content","kev":false,"epss":0.00466},{"id":"CVE-2026-99087","published":"2026-10-23T12:45:05.714Z","updated":"2026-10-23T12:45:05.714Z","title":"dm-integrity: fix NULL pointer dereference when the 'R' flag is used","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-99086","published":"2026-10-23T12:45:04.496Z","updated":"2026-10-23T12:45:04.496Z","title":"dm-integrity: validate the superblock on resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-99085","published":"2026-10-23T12:45:03.465Z","updated":"2026-10-23T12:45:03.465Z","title":"sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99084","published":"2026-10-23T12:45:02.631Z","updated":"2026-10-23T12:45:02.631Z","title":"readdir: take no inode lock on an immutable directory","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-99083","published":"2026-10-23T12:45:01.735Z","updated":"2026-10-30T12:41:38.581Z","title":"ksmbd: fix heap out-of-bounds write in krb5_authenticate()","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00445},{"id":"CVE-2026-99082","published":"2026-10-23T12:45:00.798Z","updated":"2026-10-30T12:41:37.510Z","title":"KVM: x86: Use active memslots for the per-vCPU MMIO cache","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-55888","published":"2026-10-23T12:35:23.077Z","updated":"2026-10-30T14:18:08.807Z","title":"XDG Desktop Portal: Arbitrary file access via SaveFiles \"files\" option path traversal","severity":"HIGH","score":8.8,"vendor":"flatpak","product":"xdg-desktop-portal","kev":false,"epss":0.00383},{"id":"CVE-2026-55889","published":"2026-10-23T12:35:05.502Z","updated":"2026-10-23T14:59:19.599Z","title":"XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key","severity":"HIGH","score":8.3,"vendor":"flatpak","product":"xdg-desktop-portal","kev":false,"epss":0.00345},{"id":"CVE-2026-57210","published":"2026-10-23T12:28:09.427Z","updated":"2026-10-29T02:57:12.693Z","title":"Heimdall: IP Spoofing via Unvalidated Forwarding Headers","severity":"HIGH","score":7,"vendor":"dadrus","product":"heimdall","kev":false,"epss":0.00307},{"id":"CVE-2026-57209","published":"2026-10-23T12:27:19.621Z","updated":"2026-10-29T13:16:52.579Z","title":"Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode","severity":"HIGH","score":7,"vendor":"dadrus","product":"heimdall","kev":false,"epss":0.00488},{"id":"CVE-2026-55190","published":"2026-10-23T12:24:27.295Z","updated":"2026-10-29T13:14:00.254Z","title":"Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import","severity":"MEDIUM","score":6.5,"vendor":"eventschedule","product":"eventschedule","kev":false,"epss":0.00263},{"id":"CVE-2026-99081","published":"2026-10-23T12:23:28.347Z","updated":"2026-10-30T12:41:36.421Z","title":"bnxt_en: fix DMA mapping length for padded small packets","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00518},{"id":"CVE-2026-99080","published":"2026-10-23T12:23:27.393Z","updated":"2026-10-30T12:41:35.342Z","title":"fs: Free any excess xarray nodes in clear_inode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00202},{"id":"CVE-2026-99079","published":"2026-10-23T12:23:26.458Z","updated":"2026-10-24T14:10:21.247Z","title":"net/mlx5e: Prevent stale XSK buffer release on refill retry","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455},{"id":"CVE-2026-99078","published":"2026-10-23T12:23:25.542Z","updated":"2026-10-24T14:10:20.145Z","title":"net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455},{"id":"CVE-2026-99077","published":"2026-10-23T12:23:22.773Z","updated":"2026-10-30T12:41:34.248Z","title":"ipv4: udp: Create exceptions before socket matching","severity":"HIGH","score":7.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00431},{"id":"CVE-2026-99076","published":"2026-10-23T12:23:19.727Z","updated":"2026-10-23T12:23:19.727Z","title":"ipv6: udp: Create exceptions before socket matching","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154},{"id":"CVE-2026-99075","published":"2026-10-23T12:23:18.830Z","updated":"2026-10-23T12:23:18.830Z","title":"rust_binder: reschedule node refcount update on thread exit","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-99074","published":"2026-10-23T12:23:17.866Z","updated":"2026-10-30T12:41:33.126Z","title":"ipv4: stop PMTU walk when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154},{"id":"CVE-2026-99073","published":"2026-10-23T12:23:16.935Z","updated":"2026-10-23T12:23:16.935Z","title":"ipv4: stop exception dump when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-99072","published":"2026-10-23T12:23:15.735Z","updated":"2026-10-30T12:41:31.995Z","title":"ipv4: stop route notification sizing when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-99071","published":"2026-10-23T12:23:14.297Z","updated":"2026-10-30T12:41:30.940Z","title":"ipv4: do not warn on route notification size race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-99070","published":"2026-10-23T12:23:13.342Z","updated":"2026-10-30T12:41:29.857Z","title":"ipv6: do not warn on route notification size race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99069","published":"2026-10-23T12:23:12.396Z","updated":"2026-10-23T12:23:12.396Z","title":"Input: ati_remote2 - fix type confusion in device attribute handlers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99068","published":"2026-10-23T12:23:11.461Z","updated":"2026-10-23T12:23:11.461Z","title":"ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99067","published":"2026-10-23T12:23:10.430Z","updated":"2026-10-30T12:41:28.799Z","title":"btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99066","published":"2026-10-23T12:23:09.516Z","updated":"2026-10-23T12:23:09.516Z","title":"can: dev: init_can_skb(): restore skb header initialization","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99065","published":"2026-10-23T12:23:08.458Z","updated":"2026-10-23T12:23:08.458Z","title":"cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-99064","published":"2026-10-23T12:23:05.854Z","updated":"2026-10-24T14:10:17.979Z","title":"cipso: adjust cached option offsets when removing CIPSO","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00516},{"id":"CVE-2026-99063","published":"2026-10-23T12:23:04.655Z","updated":"2026-10-30T12:41:27.735Z","title":"dm ioctl: don't let data_start run past the buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99062","published":"2026-10-23T12:23:03.360Z","updated":"2026-10-23T12:23:03.360Z","title":"vsock/virtio: account only unread bytes in read_skb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99061","published":"2026-10-23T12:22:59.770Z","updated":"2026-10-30T12:41:26.663Z","title":"wifi: brcmfmac: fix P2P device removal race in brcmf_detach()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99060","published":"2026-10-23T12:22:49.164Z","updated":"2026-10-23T12:22:49.164Z","title":"wifi: mt76: mt7603: initialize global station WCID","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99059","published":"2026-10-23T12:22:47.559Z","updated":"2026-10-30T12:41:25.597Z","title":"wireguard: noise: reject response consumption after intermediate initiation","severity":"HIGH","score":7.7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00506},{"id":"CVE-2026-99058","published":"2026-10-23T12:22:45.920Z","updated":"2026-10-30T12:41:24.511Z","title":"workqueue: Fix NULL current_pwq deref in chained work check","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191},{"id":"CVE-2026-99057","published":"2026-10-23T12:22:44.683Z","updated":"2026-10-30T12:41:23.425Z","title":"xen/netfront: don't leak the skb when xennet_fill_frags() fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99056","published":"2026-10-23T12:22:42.234Z","updated":"2026-10-30T12:41:22.353Z","title":"strparser: make sure __strp_recv isn't running before tearing down the parser","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99055","published":"2026-10-23T12:22:39.451Z","updated":"2026-10-23T12:22:39.451Z","title":"tcp: reject net_iov in zerocopy receive mapping hints","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99054","published":"2026-10-23T12:22:36.886Z","updated":"2026-10-30T12:41:21.256Z","title":"tipc: destroy topsrv workqueues before closing connections","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-99053","published":"2026-10-23T12:22:35.462Z","updated":"2026-10-30T12:41:20.179Z","title":"tipc: hold a reference to nodes found by link name","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-99052","published":"2026-10-23T12:22:34.168Z","updated":"2026-10-30T12:41:19.103Z","title":"selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99051","published":"2026-10-23T12:22:30.370Z","updated":"2026-10-24T14:10:12.469Z","title":"fsverity: RCU-delay the freeing of struct fsverity_info","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00153},{"id":"CVE-2026-99050","published":"2026-10-23T12:22:29.204Z","updated":"2026-10-24T14:10:11.370Z","title":"gpio: mpsse: fix race when arming the IRQ poll worker","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-99049","published":"2026-10-23T12:22:26.409Z","updated":"2026-10-30T12:41:18.034Z","title":"gpio: xilinx: fix runtime PM leak on request error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99048","published":"2026-10-23T12:22:13.825Z","updated":"2026-10-23T12:22:13.825Z","title":"gve: fix napi_disable deadlock when attempting to disable XSK pools","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-99047","published":"2026-10-23T12:22:12.104Z","updated":"2026-10-23T12:22:12.104Z","title":"gve: fix XSK buffer leak when rings are stopped","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-99046","published":"2026-10-23T12:22:10.460Z","updated":"2026-10-24T14:10:10.249Z","title":"gve: fix XSK buffer leak on error descriptor","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00527},{"id":"CVE-2026-99045","published":"2026-10-23T12:22:09.352Z","updated":"2026-10-30T12:41:16.971Z","title":"ibmveth: h_free logical LAN on open-fail after register","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99044","published":"2026-10-23T12:22:08.328Z","updated":"2026-10-23T12:22:08.328Z","title":"ice: fix use-after-free in dynamic port cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99043","published":"2026-10-23T12:22:07.372Z","updated":"2026-10-30T12:41:15.899Z","title":"ice: fix metadata_dst refcount handling on representor teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181},{"id":"CVE-2026-99042","published":"2026-10-23T12:22:01.804Z","updated":"2026-10-24T14:10:09.161Z","title":"io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0016},{"id":"CVE-2026-99041","published":"2026-10-23T12:22:00.403Z","updated":"2026-10-30T12:41:14.790Z","title":"ip6_gre: remove obsolete ERSPAN PMTU update","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99040","published":"2026-10-23T12:21:59.288Z","updated":"2026-10-30T12:41:13.694Z","title":"KEYS: Fix add_key() race with keyring restriction","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191},{"id":"CVE-2026-99039","published":"2026-10-23T12:21:57.421Z","updated":"2026-10-30T12:41:12.630Z","title":"memstick: core: wait for request completion before freeing card","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99038","published":"2026-10-23T12:21:56.333Z","updated":"2026-10-30T12:41:11.555Z","title":"memstick: rtsx_usb_ms: complete requests after eject instead of dropping them","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99037","published":"2026-10-23T12:21:54.317Z","updated":"2026-10-30T12:41:10.478Z","title":"dm-crypt: reject the lmk IV mode with AEAD ciphers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99036","published":"2026-10-23T12:21:49.410Z","updated":"2026-10-30T12:41:09.415Z","title":"dm: fix reading free memory in do_resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-99035","published":"2026-10-23T12:21:44.522Z","updated":"2026-10-30T12:41:08.346Z","title":"mmc: mtk-sd: Cancel request timeout work on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99034","published":"2026-10-23T12:21:41.941Z","updated":"2026-10-30T12:41:07.264Z","title":"mmc: sdhci-sprd: disable runtime PM on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99033","published":"2026-10-23T12:21:37.662Z","updated":"2026-10-30T12:41:06.206Z","title":"net/packet: guard the ll header push in packet_rcv_spkt()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99032","published":"2026-10-23T12:21:36.202Z","updated":"2026-10-30T12:41:05.122Z","title":"net/smc: protect clcsock lifetime in smc_getname","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-99031","published":"2026-10-23T12:21:31.535Z","updated":"2026-10-30T12:41:04.054Z","title":"net: bridge: avoid recursive multicast port cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99030","published":"2026-10-23T12:21:23.271Z","updated":"2026-10-24T14:10:06.982Z","title":"net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455},{"id":"CVE-2026-99029","published":"2026-10-23T12:21:21.898Z","updated":"2026-10-23T12:21:21.898Z","title":"net: sparx5: free the matchall entry on destroy","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99028","published":"2026-10-23T12:21:20.294Z","updated":"2026-10-23T12:21:20.294Z","title":"net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99027","published":"2026-10-23T12:21:14.896Z","updated":"2026-10-30T12:41:02.988Z","title":"net: team: stop reusing skb after queue override","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99026","published":"2026-10-23T12:21:13.509Z","updated":"2026-10-23T12:21:13.509Z","title":"net: team: free skb when broadcast has no txable port","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-55422","published":"2026-10-23T12:21:12.529Z","updated":"2026-10-29T02:56:16.728Z","title":"conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard","severity":"MEDIUM","score":4.6,"vendor":"conda-forge","product":"conda-forge.github.io","kev":false,"epss":0.00162},{"id":"CVE-2026-99025","published":"2026-10-23T12:21:12.410Z","updated":"2026-10-30T12:41:01.936Z","title":"openvswitch: fix soft lockup in the netlink flow dump","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99024","published":"2026-10-23T12:21:08.551Z","updated":"2026-10-30T12:41:00.882Z","title":"optee: register TEE devices only once fully initialized","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99023","published":"2026-10-23T12:21:06.818Z","updated":"2026-10-23T12:21:06.818Z","title":"power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-99022","published":"2026-10-23T12:21:03.138Z","updated":"2026-10-30T12:40:59.813Z","title":"regulator: ltc3676: don't read the write-only HRST and CLIRQ registers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99021","published":"2026-10-23T12:21:00.951Z","updated":"2026-10-23T12:21:00.951Z","title":"regulator: of: fill in supply names in of_regulator_bulk_get_all()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-99020","published":"2026-10-23T12:20:57.162Z","updated":"2026-10-23T12:20:57.162Z","title":"regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99019","published":"2026-10-23T12:20:55.832Z","updated":"2026-10-30T12:40:58.753Z","title":"scsi: ch: Do not keep references to data transfer element devices","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-99018","published":"2026-10-23T12:20:54.888Z","updated":"2026-10-24T14:10:05.883Z","title":"riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175},{"id":"CVE-2026-99017","published":"2026-10-23T12:20:53.518Z","updated":"2026-10-24T14:10:04.808Z","title":"riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-99016","published":"2026-10-23T12:20:47.859Z","updated":"2026-10-24T14:10:03.722Z","title":"riscv: futex: untag the user pointer before the atomic access","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-99015","published":"2026-10-23T12:20:41.608Z","updated":"2026-10-30T12:40:57.696Z","title":"Bluetooth: hci_sock: Serialize dead-device detachment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99014","published":"2026-10-23T12:20:39.617Z","updated":"2026-10-24T14:10:02.640Z","title":"Bluetooth: hci_sync: Fix command skb lifetime during scan setup","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-99013","published":"2026-10-23T12:20:38.612Z","updated":"2026-10-24T14:10:01.562Z","title":"Bluetooth: ISO: Reject concurrent BIS listener setup","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-99012","published":"2026-10-23T12:20:37.472Z","updated":"2026-10-30T12:40:56.601Z","title":"Bluetooth: ISO: Serialize concurrent connect calls","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-99011","published":"2026-10-23T12:20:36.460Z","updated":"2026-10-24T14:09:59.382Z","title":"Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00225},{"id":"CVE-2026-99010","published":"2026-10-23T12:20:35.485Z","updated":"2026-10-30T12:40:55.508Z","title":"Bluetooth: RFCOMM: free the skb when the DLC has no owner","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99009","published":"2026-10-23T12:20:34.301Z","updated":"2026-10-30T12:40:54.430Z","title":"Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99008","published":"2026-10-23T12:20:33.355Z","updated":"2026-10-30T12:40:53.373Z","title":"Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99007","published":"2026-10-23T12:20:32.381Z","updated":"2026-10-30T12:40:51.342Z","title":"drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-99006","published":"2026-10-23T12:20:31.415Z","updated":"2026-10-30T12:40:50.256Z","title":"drm/i915/gem: Prevent overstepping exec array boundary","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99005","published":"2026-10-23T12:20:30.462Z","updated":"2026-10-30T12:40:49.182Z","title":"drm/i915/gt: Unmask interrupts only when ACTIVE is true","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00194},{"id":"CVE-2026-99004","published":"2026-10-23T12:20:29.122Z","updated":"2026-10-23T12:20:29.122Z","title":"drm/imagination: Size page table preallocation by device address","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99003","published":"2026-10-23T12:20:24.476Z","updated":"2026-10-23T12:20:24.476Z","title":"drm/panthor: validate userspace queue count against initialized firmware slot count","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-99002","published":"2026-10-23T12:20:22.763Z","updated":"2026-10-30T12:40:48.116Z","title":"drm/vmwgfx: validate pitch coming from userspace","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-99001","published":"2026-10-23T12:20:21.753Z","updated":"2026-10-23T12:20:21.753Z","title":"drm/xe/i2c: cancel the client work on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-99000","published":"2026-10-23T12:20:20.753Z","updated":"2026-10-23T12:20:20.753Z","title":"drm/xe: Fix shrinker accounting double-subtraction on nested external pins","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98999","published":"2026-10-23T12:20:19.451Z","updated":"2026-10-24T14:09:56.167Z","title":"drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98998","published":"2026-10-23T12:20:18.352Z","updated":"2026-10-23T12:20:18.352Z","title":"drm/bridge: th1520-dw-hdmi: Fix remove() callback","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98997","published":"2026-10-23T12:20:16.267Z","updated":"2026-10-23T12:20:16.267Z","title":"drm/amdgpu/userq: only accept doorbell BOs as queue doorbell","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98996","published":"2026-10-23T12:20:15.188Z","updated":"2026-10-23T12:20:15.188Z","title":"fs: don't silently unmount busy mounts","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-98995","published":"2026-10-23T12:20:14.155Z","updated":"2026-10-24T14:09:55.095Z","title":"namespace: reset the old parent's ->overmount in mnt_change_mountpoint()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98994","published":"2026-10-23T12:20:13.244Z","updated":"2026-10-23T12:20:13.244Z","title":"statmount: read the parent of an unmounted mount under mount_lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98993","published":"2026-10-23T12:20:12.266Z","updated":"2026-10-30T12:40:47.019Z","title":"namespace: don't inherit MNT_UMOUNT in clone_mnt()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98992","published":"2026-10-23T12:20:11.256Z","updated":"2026-10-30T12:40:45.913Z","title":"namespace: don't copy an unmounted mount tree","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98991","published":"2026-10-23T12:20:10.289Z","updated":"2026-10-24T14:09:52.901Z","title":"namespace: queue a mount only once for mount notifications","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98990","published":"2026-10-23T12:20:09.349Z","updated":"2026-10-30T12:40:44.542Z","title":"namespace: check a submount for references right before unmounting it","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98989","published":"2026-10-23T12:20:08.366Z","updated":"2026-10-23T12:20:08.366Z","title":"namespace: check a recursive bind mount for mount namespace loops","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-98988","published":"2026-10-23T12:20:07.483Z","updated":"2026-10-24T14:09:51.817Z","title":"namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98987","published":"2026-10-23T12:20:06.180Z","updated":"2026-10-23T12:20:06.180Z","title":"namespace: look at the topmost mount for a mount namespace file","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98986","published":"2026-10-23T12:20:04.966Z","updated":"2026-10-23T12:20:04.966Z","title":"namespace: remove the fsnotify marks of a mount namespace in process context","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98985","published":"2026-10-23T12:20:03.622Z","updated":"2026-10-30T12:40:43.386Z","title":"namespace: check the mounts before reading their parents in pivot_root()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98984","published":"2026-10-23T12:20:02.285Z","updated":"2026-10-30T12:40:42.302Z","title":"dcache: don't put a mountpoint on a dentry that's being removed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98983","published":"2026-10-23T12:20:00.918Z","updated":"2026-10-23T12:20:00.918Z","title":"unshare: don't drop active namespace references that were never taken","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98982","published":"2026-10-23T12:19:59.784Z","updated":"2026-10-24T14:09:50.745Z","title":"namespace: don't let a pseudo dentry become the root of a mount","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98981","published":"2026-10-23T12:19:58.507Z","updated":"2026-10-30T12:40:41.226Z","title":"namespace: unhash a dentry before detaching the mounts on it","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98980","published":"2026-10-23T12:19:53.838Z","updated":"2026-10-24T14:09:48.534Z","title":"namei: don't reveal overmounted entries in refwalk","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175},{"id":"CVE-2026-98979","published":"2026-10-23T12:19:52.523Z","updated":"2026-10-30T12:40:40.137Z","title":"namespace: refuse an automount below a mount that is in no namespace","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98978","published":"2026-10-23T12:19:51.428Z","updated":"2026-10-24T14:09:47.444Z","title":"namespace: never expire a locked mount","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0017},{"id":"CVE-2026-98977","published":"2026-10-23T12:19:50.475Z","updated":"2026-10-30T12:40:39.052Z","title":"namespace: handle mount locking for automounts correctly","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98976","published":"2026-10-23T12:19:49.363Z","updated":"2026-10-24T14:09:46.343Z","title":"namespace: keep the lock on a mount that a propagated copy is moved beneath","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00137},{"id":"CVE-2026-98975","published":"2026-10-23T12:19:48.379Z","updated":"2026-10-24T14:09:45.210Z","title":"xfs: stop exchanging reflink flags when exchanging mappings","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98974","published":"2026-10-23T12:19:47.424Z","updated":"2026-10-24T14:09:44.115Z","title":"xfs: fix exchange-range-to-eof file size exchange","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98973","published":"2026-10-23T12:19:46.458Z","updated":"2026-10-23T12:19:46.458Z","title":"drm/bridge: Fix unlocked list_del in drm_bridge_add()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98972","published":"2026-10-23T12:19:45.458Z","updated":"2026-10-23T12:19:45.458Z","title":"cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98971","published":"2026-10-23T12:19:44.536Z","updated":"2026-10-30T12:40:37.940Z","title":"gpio: exar: initialize the ID before registering its cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98970","published":"2026-10-23T12:19:43.586Z","updated":"2026-10-30T12:40:36.828Z","title":"drm/vc4: Free the BO cache size list on teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98969","published":"2026-10-23T12:19:42.012Z","updated":"2026-10-30T12:40:35.763Z","title":"net/sched: em_text: reject unterminated algo before autoload","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98968","published":"2026-10-23T12:19:39.236Z","updated":"2026-10-30T12:40:34.695Z","title":"amt: send the relay's General Query directly from the receive path","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00532},{"id":"CVE-2026-98967","published":"2026-10-23T12:19:37.625Z","updated":"2026-10-30T12:40:33.620Z","title":"cxgb4/ch_ktls: disable softirqs around tid_list erases","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98966","published":"2026-10-23T12:19:36.024Z","updated":"2026-10-23T12:19:36.024Z","title":"bonding: fix the program leak when XDP is replaced","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98965","published":"2026-10-23T12:19:34.754Z","updated":"2026-10-24T14:09:41.904Z","title":"ice: Restore Ordered MMIO Writes for Tx Doorbells","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00527},{"id":"CVE-2026-98964","published":"2026-10-23T12:19:32.374Z","updated":"2026-10-30T12:40:32.519Z","title":"nvmet: use the local P2P device on metadata allocation failure","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00612},{"id":"CVE-2026-98963","published":"2026-10-23T12:19:31.392Z","updated":"2026-10-23T12:19:31.392Z","title":"btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98962","published":"2026-10-23T12:19:30.482Z","updated":"2026-10-23T12:19:30.482Z","title":"btrfs: free iov when btrfs_uring_read_extent() fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98961","published":"2026-10-23T12:19:29.616Z","updated":"2026-10-23T12:19:29.616Z","title":"btrfs: unlock inode and extent in caller when io_uring read extent fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98960","published":"2026-10-23T12:19:28.651Z","updated":"2026-10-23T12:19:28.651Z","title":"btrfs: don't stash io_uring encoded data across -EAGAIN","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98959","published":"2026-10-23T12:19:27.679Z","updated":"2026-10-24T14:09:39.735Z","title":"btrfs: fix xattr replace when multiple xattrs are packed in the same item","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00607},{"id":"CVE-2026-98958","published":"2026-10-23T12:19:26.256Z","updated":"2026-10-23T12:19:26.256Z","title":"wifi: mt76: account non-AQL frames per peer rather than per link","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98957","published":"2026-10-23T12:19:22.400Z","updated":"2026-10-23T12:19:22.400Z","title":"wifi: mt76: mt7915: disable rx napi when removing device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98956","published":"2026-10-23T12:19:20.208Z","updated":"2026-10-30T12:40:31.416Z","title":"ASoC: adau1372: allow sleepy powerdown GPIOs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98955","published":"2026-10-23T12:19:15.287Z","updated":"2026-10-30T12:40:30.324Z","title":"flow_dissector: avoid u16 truncation of skb->len when computing thoff","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98954","published":"2026-10-23T12:19:13.873Z","updated":"2026-10-23T12:19:13.873Z","title":"net: always dissect GSO packets in __virtio_net_hdr_to_skb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98953","published":"2026-10-23T12:19:13.015Z","updated":"2026-10-23T12:19:13.015Z","title":"devlink: fix devlink_rel reference leak when notify work is pending","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98952","published":"2026-10-23T12:19:12.127Z","updated":"2026-10-24T14:09:37.815Z","title":"pfcp: make sure the SEID is linear before reading it","severity":"HIGH","score":7.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00377},{"id":"CVE-2026-98951","published":"2026-10-23T12:19:10.747Z","updated":"2026-10-23T12:19:10.747Z","title":"riscv: ptrace: Zero-initialize regset buffers before copyin","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98950","published":"2026-10-23T12:19:09.890Z","updated":"2026-10-30T12:40:29.247Z","title":"flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98949","published":"2026-10-23T12:19:08.946Z","updated":"2026-10-23T12:19:08.946Z","title":"drm/imagination: Fix reference and vm_bo handling in remap()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98948","published":"2026-10-23T12:19:08.043Z","updated":"2026-10-23T12:19:08.043Z","title":"mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98947","published":"2026-10-23T12:19:06.146Z","updated":"2026-10-23T12:19:06.146Z","title":"vsock: Fix memory leak in vmci_transport_recv_dgram_cb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98946","published":"2026-10-23T12:19:05.190Z","updated":"2026-10-23T12:19:05.190Z","title":"drm/vc4: Disable the V3D interrupt across runtime suspend","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98945","published":"2026-10-23T12:19:04.191Z","updated":"2026-10-26T06:56:55.094Z","title":"HID: steam: Rearrange teardown sequence","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98944","published":"2026-10-23T12:19:02.560Z","updated":"2026-10-30T12:40:28.138Z","title":"HID: steam: Refactor registration","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-54711","published":"2026-10-23T12:16:38.258Z","updated":"2026-10-30T16:27:50.805Z","title":"PGHoard: Password written to debug log","severity":"LOW","score":2.4,"vendor":"Aiven-Open","product":"pghoard","kev":false,"epss":0.00156},{"id":"CVE-2026-63120","published":"2026-10-23T12:16:36.584Z","updated":"2026-10-23T14:59:26.366Z","title":"PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write","severity":"HIGH","score":8.4,"vendor":"Aiven-Open","product":"pghoard","kev":false,"epss":0.00401},{"id":"CVE-2026-98942","published":"2026-10-23T12:12:14.180Z","updated":"2026-10-26T06:56:52.637Z","title":"sched_ext: Build the cid tables privately and publish them with RCU","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98941","published":"2026-10-23T12:12:12.296Z","updated":"2026-10-24T14:09:34.434Z","title":"ext4: don't enable large folios on encrypted inodes","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00142},{"id":"CVE-2026-98940","published":"2026-10-23T12:12:08.487Z","updated":"2026-10-30T12:40:27.052Z","title":"ASoC: qcom: lpass-cpu: use DAI table index for playback constraints","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98939","published":"2026-10-23T12:12:06.180Z","updated":"2026-10-23T12:12:06.180Z","title":"x86/mm: Drop unnecessary PMD page copy when freeing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98938","published":"2026-10-23T12:11:59.043Z","updated":"2026-10-23T12:11:59.043Z","title":"rust: irq: pass RegistrationInner as cookie to request_irq","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98937","published":"2026-10-23T12:11:53.327Z","updated":"2026-10-26T06:56:51.396Z","title":"perf/core: Check kernel access when kernel callchains are requested","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98936","published":"2026-10-23T12:11:48.632Z","updated":"2026-10-30T12:40:25.994Z","title":"wifi: ath11k: reset ar->num_stations on hardware start","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98935","published":"2026-10-23T12:11:46.041Z","updated":"2026-10-30T12:40:24.910Z","title":"rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181},{"id":"CVE-2026-98934","published":"2026-10-23T12:11:43.459Z","updated":"2026-10-30T12:40:23.809Z","title":"ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98933","published":"2026-10-23T12:11:39.531Z","updated":"2026-10-30T12:40:22.693Z","title":"usb: hub: use shorter 120ms post resume hold for SS root hubs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98932","published":"2026-10-23T12:11:35.940Z","updated":"2026-10-24T14:09:33.367Z","title":"EDAC/altera: Fix use-after-free in error paths","severity":"HIGH","score":7.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98931","published":"2026-10-23T12:11:34.935Z","updated":"2026-10-30T12:40:20.679Z","title":"mtd: spinand: fix NULL pointer dereference with no ECC engine","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-57117","published":"2026-10-23T12:10:18.920Z","updated":"2026-10-30T16:00:13.763Z","title":"PraisonAI: Compute-bridged file tools allow shell command injection","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00581},{"id":"CVE-2026-98930","published":"2026-10-23T12:08:17.513Z","updated":"2026-10-23T12:08:17.513Z","title":"KVM: s390: Fix IRQ injection with SIGP Stop and Store Status","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-57146","published":"2026-10-23T12:08:16.479Z","updated":"2026-10-30T16:03:24.728Z","title":"PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0049},{"id":"CVE-2026-98929","published":"2026-10-23T12:08:11.551Z","updated":"2026-10-23T12:08:11.551Z","title":"macsec: initialize SecY before registering the netdevice","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-98928","published":"2026-10-23T12:08:09.412Z","updated":"2026-10-23T12:08:09.412Z","title":"KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-57144","published":"2026-10-23T12:07:55.583Z","updated":"2026-10-29T02:55:07.333Z","title":"PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00207},{"id":"CVE-2026-57142","published":"2026-10-23T12:07:46.547Z","updated":"2026-10-29T13:12:14.267Z","title":"PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml","severity":"HIGH","score":7.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0024},{"id":"CVE-2026-57121","published":"2026-10-23T12:07:27.854Z","updated":"2026-10-23T14:59:32.712Z","title":"PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API","severity":"HIGH","score":8.1,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00329},{"id":"CVE-2026-57116","published":"2026-10-23T12:06:55.544Z","updated":"2026-10-29T02:53:53.826Z","title":"PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation","severity":"CRITICAL","score":9.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00416},{"id":"CVE-2026-98927","published":"2026-10-23T12:06:01.528Z","updated":"2026-10-24T14:09:32.255Z","title":"KVM: arm64: nv: Fix life cycle of the nested_mmus array","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154},{"id":"CVE-2026-98926","published":"2026-10-23T12:05:54.511Z","updated":"2026-10-26T06:56:50.146Z","title":"drm/amd/display: Remove sink usage from DPMS","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98925","published":"2026-10-23T12:05:53.207Z","updated":"2026-10-23T12:05:53.207Z","title":"bpf, sockmap: Fix self-redirect copied_seq double-counting","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0019},{"id":"CVE-2026-57114","published":"2026-10-23T12:04:29.966Z","updated":"2026-10-29T13:09:28.257Z","title":"PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding","severity":"HIGH","score":7.2,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00264},{"id":"CVE-2026-57113","published":"2026-10-23T12:04:04.048Z","updated":"2026-10-23T14:59:39.455Z","title":"PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion","severity":"HIGH","score":8.1,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00405},{"id":"CVE-2026-98924","published":"2026-10-23T12:03:50.230Z","updated":"2026-10-23T12:05:50.501Z","title":"fs: avoid repeated scans in evict_inodes()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98923","published":"2026-10-23T12:03:28.027Z","updated":"2026-10-23T12:05:45.179Z","title":"arm64: io: Reject non-user protection in ioremap_prot()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98922","published":"2026-10-23T12:03:02.790Z","updated":"2026-10-23T12:05:38.754Z","title":"net: emac: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98921","published":"2026-10-23T12:02:38.969Z","updated":"2026-10-23T12:05:33.583Z","title":"ovl: fix UAF in ovl_do_mkdir() debug print","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98920","published":"2026-10-23T12:02:06.560Z","updated":"2026-10-23T12:05:25.919Z","title":"netfs: Fix missing alloc tagging of direct mempool allocations","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98919","published":"2026-10-23T12:01:55.092Z","updated":"2026-10-23T12:05:08.723Z","title":"drm/xe: harden adjust_idledly() against divide-by-zero and overflow","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98918","published":"2026-10-23T12:01:50.803Z","updated":"2026-10-23T12:05:05.149Z","title":"mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163},{"id":"CVE-2026-98917","published":"2026-10-23T12:01:46.420Z","updated":"2026-10-26T06:56:48.902Z","title":"parisc: Increase kernel stack size to 32kb","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-56840","published":"2026-10-23T11:58:24.568Z","updated":"2026-10-29T02:52:55.374Z","title":"PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00375},{"id":"CVE-2026-56838","published":"2026-10-23T11:58:01.475Z","updated":"2026-10-29T13:53:23.978Z","title":"PraisonAI recipe.run_stream skips dangerous-tool policy enforcement","severity":"HIGH","score":7.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00146},{"id":"CVE-2026-56837","published":"2026-10-23T11:57:48.068Z","updated":"2026-10-23T21:05:27.023Z","title":"PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing","severity":"HIGH","score":8.6,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00188},{"id":"CVE-2026-56836","published":"2026-10-23T11:57:28.192Z","updated":"2026-10-30T16:05:35.511Z","title":"PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard","severity":"HIGH","score":8.2,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00329},{"id":"CVE-2026-56835","published":"2026-10-23T11:57:11.852Z","updated":"2026-10-29T02:50:43.187Z","title":"PraisonAI Slack app_mention bypasses configured user/channel authorization","severity":"HIGH","score":8.3,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00215},{"id":"CVE-2026-56834","published":"2026-10-23T11:56:40.277Z","updated":"2026-10-29T13:05:52.903Z","title":"PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00373},{"id":"CVE-2026-56833","published":"2026-10-23T11:56:09.502Z","updated":"2026-10-23T21:05:34.632Z","title":"PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0046},{"id":"CVE-2026-56832","published":"2026-10-23T11:55:53.084Z","updated":"2026-10-30T16:01:44.271Z","title":"PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00148},{"id":"CVE-2026-98916","published":"2026-10-23T11:55:20.958Z","updated":"2026-10-26T06:56:47.686Z","title":"wifi: nl80211: check link is beaconing for color change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98915","published":"2026-10-23T11:55:16.281Z","updated":"2026-10-26T06:56:46.442Z","title":"media: video-i2c: use vb2_video_unregister_device on driver removal","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98914","published":"2026-10-23T11:55:10.630Z","updated":"2026-10-26T06:56:45.185Z","title":"drm/amdgpu: cap ATOM command table nesting depth","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98913","published":"2026-10-23T11:55:08.297Z","updated":"2026-10-26T06:56:43.960Z","title":"net: thunderx: fix PTP device ref leak in nicvf_probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98912","published":"2026-10-23T11:55:04.908Z","updated":"2026-10-26T06:56:42.752Z","title":"ALSA: seq: oss: Reject reads that cannot fit the next event","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98911","published":"2026-10-23T11:54:57.029Z","updated":"2026-10-26T06:56:41.537Z","title":"dpaa2-switch: fix the error path in dpaa2_switch_rx()","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00318},{"id":"CVE-2026-98910","published":"2026-10-23T11:54:50.520Z","updated":"2026-10-26T06:56:40.297Z","title":"drm/amdkfd: Unwind debug trap enable on copy_to_user failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98909","published":"2026-10-23T11:54:47.326Z","updated":"2026-10-26T06:56:39.086Z","title":"net: cpsw_new: unregister devlink on port registration failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98908","published":"2026-10-23T11:54:46.243Z","updated":"2026-10-26T06:56:37.786Z","title":"net: microchip: sparx5: clean up PSFP resources on flower setup failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98907","published":"2026-10-23T11:54:44.224Z","updated":"2026-10-26T06:56:36.536Z","title":"btrfs: protect sb_write_pointer() with invalidate lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98906","published":"2026-10-23T11:54:42.697Z","updated":"2026-10-26T06:56:35.317Z","title":"net: lan966x: restore RX state on reload failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98905","published":"2026-10-23T11:54:40.083Z","updated":"2026-10-26T06:56:34.069Z","title":"drm/amdkfd: Properly acquire queue buffers in CRIU restore","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98904","published":"2026-10-23T11:54:16.943Z","updated":"2026-10-26T06:56:32.858Z","title":"mailbox: imx: Use devm_pm_runtime_enable()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98903","published":"2026-10-23T11:54:15.010Z","updated":"2026-10-26T06:56:31.630Z","title":"mailbox: imx: Add a channel shutdown field","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98902","published":"2026-10-23T11:54:12.635Z","updated":"2026-10-26T06:56:30.416Z","title":"md/raid5: let stripe batch bm_seq comparison wrap-safe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98901","published":"2026-10-23T11:54:11.554Z","updated":"2026-10-26T06:56:29.179Z","title":"ksmbd: fix lease break and ack state handling","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98900","published":"2026-10-23T11:54:10.566Z","updated":"2026-10-26T06:56:27.943Z","title":"xen/gntalloc: validate grant count before allocation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98899","published":"2026-10-23T11:54:09.249Z","updated":"2026-10-26T06:56:26.708Z","title":"netfilter: ipset: mark the rcu locked areas properly","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98898","published":"2026-10-23T11:54:07.890Z","updated":"2026-10-26T06:56:25.439Z","title":"drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98897","published":"2026-10-23T11:54:05.872Z","updated":"2026-10-26T06:56:24.210Z","title":"ksmbd: don't hold ci->m_lock while waiting for a lease break ack","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192},{"id":"CVE-2026-112904","published":"2026-10-23T11:45:55.139Z","updated":"2026-10-29T02:49:35.598Z","title":"Vvveb: Path Traversal in nextRestore() and nextBackup()","severity":"HIGH","score":8.7,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00485},{"id":"CVE-2026-98896","published":"2026-10-23T11:37:58.225Z","updated":"2026-10-26T06:56:22.985Z","title":"thunderbolt: Keep the domain reference while processing hotplug","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98895","published":"2026-10-23T11:37:56.618Z","updated":"2026-10-26T06:56:21.757Z","title":"net/mlx5: HWS, Handle destroying table that has a miss table","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00152},{"id":"CVE-2026-98894","published":"2026-10-23T11:37:55.539Z","updated":"2026-10-26T06:56:20.527Z","title":"drm/amd/ras: reset CPER ring on corrupt entry size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192},{"id":"CVE-2026-98893","published":"2026-10-23T11:37:54.017Z","updated":"2026-10-26T06:56:19.302Z","title":"firmware: arm_scmi: Validate SENSOR_UPDATE payload size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00223},{"id":"CVE-2026-98892","published":"2026-10-23T11:37:52.692Z","updated":"2026-10-26T06:56:18.073Z","title":"firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98891","published":"2026-10-23T11:37:51.588Z","updated":"2026-10-26T06:56:16.835Z","title":"wifi: mac80211: validate deauth frame length before reason access","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98890","published":"2026-10-23T11:37:50.495Z","updated":"2026-10-26T06:56:15.594Z","title":"wifi: libertas: reject short monitor TX frames","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98889","published":"2026-10-23T11:37:49.469Z","updated":"2026-10-26T06:56:14.362Z","title":"wifi: iwlwifi: mvm: fix sched scan IE sizing","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98888","published":"2026-10-23T11:37:46.984Z","updated":"2026-10-26T06:56:13.106Z","title":"arm64: kprobes: Allow reentering kprobes while single-stepping","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98887","published":"2026-10-23T11:37:44.605Z","updated":"2026-10-26T06:56:11.864Z","title":"wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00213},{"id":"CVE-2026-98886","published":"2026-10-23T11:37:43.338Z","updated":"2026-10-26T06:56:10.643Z","title":"drm/gma500: return errors from Oaktrail HDMI I2C reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98885","published":"2026-10-23T11:37:41.736Z","updated":"2026-10-26T06:56:09.404Z","title":"ima: return error early if file xattr cannot be changed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98884","published":"2026-10-23T11:37:39.893Z","updated":"2026-10-26T06:56:08.177Z","title":"mmc: core: Add validation for host-provided max_segs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187},{"id":"CVE-2026-98883","published":"2026-10-23T11:37:38.372Z","updated":"2026-10-26T06:56:06.942Z","title":"serial: 8250_port: recognize UPIO_AU","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98882","published":"2026-10-23T11:37:34.601Z","updated":"2026-10-26T06:56:05.724Z","title":"media: chips-media: wave5: Add range checks for dec_output_info","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98881","published":"2026-10-23T11:37:32.327Z","updated":"2026-10-26T06:56:04.487Z","title":"net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98880","published":"2026-10-23T11:37:31.247Z","updated":"2026-10-26T06:56:03.260Z","title":"ntfs3: handle set_blocksize failures","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98879","published":"2026-10-23T11:37:28.048Z","updated":"2026-10-26T06:56:02.033Z","title":"isofs: handle set_blocksize failures","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98878","published":"2026-10-23T11:37:25.121Z","updated":"2026-10-26T06:56:00.811Z","title":"irqchip/gic-v5: Immediately exec priority drop following activate","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192},{"id":"CVE-2026-98877","published":"2026-10-23T11:37:23.678Z","updated":"2026-10-26T06:55:59.697Z","title":"irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98876","published":"2026-10-23T11:37:21.776Z","updated":"2026-10-26T06:55:58.587Z","title":"host1x: bus: Fix missing ops null check in error teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98875","published":"2026-10-23T11:37:19.955Z","updated":"2026-10-26T06:55:57.445Z","title":"drm/nouveau/gsp: add SEC2 to GA100 chip table","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98874","published":"2026-10-23T11:37:18.847Z","updated":"2026-10-26T06:55:56.228Z","title":"wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192},{"id":"CVE-2026-98873","published":"2026-10-23T11:37:14.109Z","updated":"2026-10-26T06:55:54.978Z","title":"netfilter: nf_conntrack_expect: zero at allocation time","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179},{"id":"CVE-2026-98872","published":"2026-10-23T11:37:11.214Z","updated":"2026-10-26T06:55:53.758Z","title":"freevxfs: don't BUG() on unknown typed-extent type","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00213},{"id":"CVE-2026-98871","published":"2026-10-23T11:37:09.369Z","updated":"2026-10-23T11:37:09.369Z","title":"crypto: ccp - Fix possible deadlock in SEV init failure path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98870","published":"2026-10-23T11:37:07.113Z","updated":"2026-10-24T14:09:26.805Z","title":"ksmbd: remove stale channels from all sessions on teardown","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00544},{"id":"CVE-2026-115727","published":"2026-10-23T11:36:49.751Z","updated":"2026-10-27T10:14:06.207Z","title":"AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server","severity":"CRITICAL","score":9.2,"vendor":"Fosowl","product":"AgenticSeek","kev":false,"epss":0.00699},{"id":"CVE-2026-115726","published":"2026-10-23T11:36:49.084Z","updated":"2026-10-29T13:02:55.888Z","title":"Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings","severity":"HIGH","score":8.5,"vendor":"Aider-AI","product":"aider","kev":false,"epss":0.00283},{"id":"CVE-2026-115725","published":"2026-10-23T11:36:48.394Z","updated":"2026-10-29T02:48:49.269Z","title":"Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id","severity":"LOW","score":2.3,"vendor":"chatwoot","product":"chatwoot","kev":false,"epss":0.0024},{"id":"CVE-2026-115724","published":"2026-10-23T11:36:47.719Z","updated":"2026-10-23T11:36:47.719Z","title":"VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider","severity":"LOW","score":2.1,"vendor":"VideoLAN","product":"VLC for Android","kev":false,"epss":0.00089},{"id":"CVE-2026-115723","published":"2026-10-23T11:36:47.011Z","updated":"2026-10-23T14:59:52.690Z","title":"Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion","severity":"HIGH","score":8.3,"vendor":"davenardella","product":"snap7","kev":false,"epss":0.00418},{"id":"CVE-2026-115722","published":"2026-10-23T11:36:46.355Z","updated":"2026-10-29T13:00:26.916Z","title":"RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header","severity":"MEDIUM","score":6.9,"vendor":"diegonehab","product":"rply","kev":false,"epss":0.00128},{"id":"CVE-2026-107685","published":"2026-10-23T11:00:38.975Z","updated":"2026-11-02T15:24:51.535Z","title":"WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers","severity":"CRITICAL","score":9.1,"vendor":"agentjido","product":"req_llm","kev":false,"epss":0.00273},{"id":"CVE-2026-95620","published":"2026-10-23T10:56:15.281Z","updated":"2026-11-02T15:21:58.478Z","title":"Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt","severity":"LOW","score":2.1,"vendor":"qt","product":"qt","kev":false,"epss":0.00229},{"id":"CVE-2026-94263","published":"2026-10-23T10:44:12.568Z","updated":"2026-10-23T10:52:24.979Z","title":"Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.002},{"id":"CVE-2026-111965","published":"2026-10-23T10:44:11.950Z","updated":"2026-10-23T10:52:44.545Z","title":"Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Profile Builder","kev":false,"epss":0.00262},{"id":"CVE-2026-105963","published":"2026-10-23T09:56:58.885Z","updated":"2026-10-23T13:39:29.887Z","title":"Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments","severity":"MEDIUM","score":5.1,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.00509},{"id":"CVE-2026-16762","published":"2026-10-23T08:58:40.028Z","updated":"2026-10-23T10:56:05.830Z","title":"Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt","severity":"HIGH","score":8.7,"vendor":"qt","product":"qt","kev":false,"epss":0.00516},{"id":"CVE-2026-89320","published":"2026-10-23T08:56:20.140Z","updated":"2026-11-02T13:29:45.468Z","title":"HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K(\"\") for all inputs, voiding CBC-HMAC JWE integrity","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00174},{"id":"CVE-2026-25784","published":"2026-10-23T08:54:57.880Z","updated":"2026-11-02T13:26:03.282Z","title":"bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop","severity":"CRITICAL","score":9.3,"vendor":"Hallo Welt! GmbH","product":"BlueSpice","kev":false,"epss":0.00345},{"id":"CVE-2026-89319","published":"2026-10-23T08:54:37.681Z","updated":"2026-11-02T13:22:22.590Z","title":"JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207},{"id":"CVE-2026-25716","published":"2026-10-23T08:53:47.208Z","updated":"2026-10-29T01:52:06.615Z","title":"BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users","severity":"HIGH","score":7.1,"vendor":"Hallo Welt! GmbH","product":"BlueSpice","kev":false,"epss":0.00183},{"id":"CVE-2026-89318","published":"2026-10-23T08:51:55.194Z","updated":"2026-11-02T13:18:54.247Z","title":"JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00167},{"id":"CVE-2026-89317","published":"2026-10-23T08:50:22.987Z","updated":"2026-11-02T13:17:29.417Z","title":"JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00147},{"id":"CVE-2026-89316","published":"2026-10-23T08:48:08.682Z","updated":"2026-11-02T13:16:12.850Z","title":"LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207},{"id":"CVE-2026-89315","published":"2026-10-23T08:46:30.146Z","updated":"2026-11-02T12:59:14.783Z","title":"JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00253},{"id":"CVE-2026-89314","published":"2026-10-23T08:43:38.475Z","updated":"2026-11-02T12:51:43.036Z","title":"Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00253},{"id":"CVE-2026-89313","published":"2026-10-23T08:40:55.499Z","updated":"2026-11-02T12:49:31.095Z","title":"JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00227},{"id":"CVE-2026-89312","published":"2026-10-23T08:36:53.971Z","updated":"2026-11-02T12:46:35.266Z","title":"AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00276},{"id":"CVE-2025-58403","published":"2026-10-23T08:23:44.568Z","updated":"2026-10-28T20:02:37.736Z","title":"Reflected Cross-Site Scripting (XSS) in CGM CLININET","severity":"MEDIUM","score":5.1,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.005},{"id":"CVE-2025-30054","published":"2026-10-23T08:22:59.749Z","updated":"2026-10-28T20:02:45.232Z","title":"Local Privilege Escalation in CGM CLININET","severity":"CRITICAL","score":9.3,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.001},{"id":"CVE-2025-30053","published":"2026-10-23T08:22:59.026Z","updated":"2026-10-28T20:02:52.259Z","title":"Missing Authentication in CGM CLININET","severity":"MEDIUM","score":6.9,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00352},{"id":"CVE-2025-30052","published":"2026-10-23T08:22:58.415Z","updated":"2026-10-28T20:02:59.005Z","title":"Authentication Bypass via IP Spoofing in CGM CLININET rsyncd","severity":"HIGH","score":8.8,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00342},{"id":"CVE-2025-30051","published":"2026-10-23T08:22:57.889Z","updated":"2026-10-28T20:03:07.610Z","title":"Insecure File Permissions in CGM CLININET","severity":"MEDIUM","score":6.8,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00098},{"id":"CVE-2025-30050","published":"2026-10-23T08:22:57.175Z","updated":"2026-10-28T20:03:14.171Z","title":"Remote Code Execution in CGM CLININET","severity":"CRITICAL","score":9.4,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00222},{"id":"CVE-2025-30049","published":"2026-10-23T08:22:56.414Z","updated":"2026-10-28T20:03:21.534Z","title":"Use of Unsalted MD5 Password Hashes in CGM CLININET","severity":"HIGH","score":8.2,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00209},{"id":"CVE-2025-30047","published":"2026-10-23T08:22:55.856Z","updated":"2026-10-28T20:03:29.727Z","title":"Remote Code Execution via Java Deserialization in CGM CLININET","severity":"CRITICAL","score":9.4,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00379},{"id":"CVE-2025-30046","published":"2026-10-23T08:22:55.246Z","updated":"2026-10-28T20:03:37.137Z","title":"Remote Code Execution in CGM CLININET","severity":"CRITICAL","score":9,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00263},{"id":"CVE-2025-30045","published":"2026-10-23T08:22:54.656Z","updated":"2026-10-28T20:03:44.997Z","title":"Code Injection in CGM CLININET","severity":"HIGH","score":8.6,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00199},{"id":"CVE-2025-30043","published":"2026-10-23T08:22:54.003Z","updated":"2026-10-28T20:03:51.958Z","title":"Missing Authentication in CGM CLININET","severity":"HIGH","score":7.1,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00207},{"id":"CVE-2026-115657","published":"2026-10-23T08:01:35.204Z","updated":"2026-10-23T10:56:05.977Z","title":"KNIME Analytics Platform logs credentials of configured proxy when used as an executor","severity":"MEDIUM","score":4.8,"vendor":"KNIME","product":"KNIME Analytics Platform","kev":false,"epss":0.00141},{"id":"CVE-2026-112860","published":"2026-10-23T08:00:11.265Z","updated":"2026-10-23T10:56:06.122Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00323},{"id":"CVE-2026-112862","published":"2026-10-23T08:00:11.165Z","updated":"2026-10-23T10:56:06.266Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00408},{"id":"CVE-2026-112835","published":"2026-10-23T08:00:10.892Z","updated":"2026-10-23T10:56:06.431Z","title":"WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019},{"id":"CVE-2026-112837","published":"2026-10-23T08:00:10.809Z","updated":"2026-10-23T10:56:06.582Z","title":"WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Ruben Garcia","product":"GamiPress","kev":false,"epss":0.00305},{"id":"CVE-2026-112359","published":"2026-10-23T08:00:10.686Z","updated":"2026-10-23T10:56:06.737Z","title":"WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Amauri.IO","product":"WPMobile.App","kev":false,"epss":0.00317},{"id":"CVE-2026-112838","published":"2026-10-23T08:00:10.440Z","updated":"2026-10-23T10:56:06.894Z","title":"WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019},{"id":"CVE-2026-112821","published":"2026-10-23T08:00:10.353Z","updated":"2026-10-23T10:56:07.050Z","title":"WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Knit Pay","product":"Knit Pay","kev":false,"epss":0.00207},{"id":"CVE-2026-112825","published":"2026-10-23T08:00:10.214Z","updated":"2026-10-23T10:56:07.212Z","title":"WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Magepeople inc.","product":"Car Rental Manager","kev":false,"epss":0.00274},{"id":"CVE-2026-4952","published":"2026-10-23T07:45:04.140Z","updated":"2026-10-28T20:03:58.314Z","title":"Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem","severity":"MEDIUM","score":5.1,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (AuftragsManager)","kev":false,"epss":0.00284},{"id":"CVE-2026-4951","published":"2026-10-23T07:35:40.206Z","updated":"2026-10-28T20:04:07.627Z","title":"Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem","severity":"MEDIUM","score":5.1,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (KundenManager)","kev":false,"epss":0.00362},{"id":"CVE-2026-4950","published":"2026-10-23T07:31:04.074Z","updated":"2026-10-28T20:04:15.825Z","title":"Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem","severity":"MEDIUM","score":4.8,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (KundenManager)","kev":false,"epss":0.00309},{"id":"CVE-2026-63244","published":"2026-10-23T07:24:30.089Z","updated":"2026-11-02T15:17:49.449Z","title":"Authentication Bypass Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"WizLearn Technologies Pte. Ltd.","product":"Learning Management System","kev":false,"epss":0.00656},{"id":"CVE-2026-75775","published":"2026-10-23T07:12:11.893Z","updated":"2026-11-02T09:16:14.171Z","title":"Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges…","severity":"HIGH","score":7.7,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00605},{"id":"CVE-2026-93489","published":"2026-10-23T07:07:13.744Z","updated":"2026-11-02T09:17:56.145Z","title":"Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling…","severity":"HIGH","score":8.7,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00231},{"id":"CVE-2026-75779","published":"2026-10-23T07:03:41.964Z","updated":"2026-11-02T09:17:05.591Z","title":"Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow…","severity":"HIGH","score":8.6,"vendor":"ASUS","product":"Router","kev":false,"epss":0.01205},{"id":"CVE-2026-63243","published":"2026-10-23T06:49:26.922Z","updated":"2026-11-02T15:10:37.645Z","title":"Firmware verification vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Creative Labs","product":"Creative Sound Blaster Katana V2, V2X, SE","kev":false,"epss":0.00205},{"id":"CVE-2026-55981","published":"2026-10-23T06:47:05.745Z","updated":"2026-11-02T16:39:50.254Z","title":"Firmware verification vulnerability","severity":"CRITICAL","score":9.6,"vendor":"Creative Labs","product":"Creative Sound Blaster Katana V2, V2X, SE","kev":false,"epss":0.00231},{"id":"CVE-2026-94268","published":"2026-10-23T06:00:21.413Z","updated":"2026-10-23T10:46:02.469Z","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00322},{"id":"CVE-2026-94267","published":"2026-10-23T06:00:21.241Z","updated":"2026-10-23T10:46:02.628Z","title":"Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action","severity":"CRITICAL","score":9,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00394},{"id":"CVE-2026-94264","published":"2026-10-23T06:00:21.070Z","updated":"2026-10-23T10:46:02.895Z","title":"Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00306},{"id":"CVE-2026-94262","published":"2026-10-23T06:00:20.666Z","updated":"2026-10-23T10:46:03.079Z","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00287},{"id":"CVE-2026-113501","published":"2026-10-23T06:00:20.493Z","updated":"2026-10-23T10:46:03.255Z","title":"LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal","severity":"LOW","score":3.1,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00187},{"id":"CVE-2026-113500","published":"2026-10-23T06:00:20.249Z","updated":"2026-10-23T10:46:03.416Z","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display Optimization","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00304},{"id":"CVE-2026-113499","published":"2026-10-23T06:00:20.079Z","updated":"2026-10-23T10:46:03.570Z","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS Rewriting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00304},{"id":"CVE-2026-113472","published":"2026-10-23T06:00:19.905Z","updated":"2026-10-23T10:46:03.715Z","title":"Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Depicter — Popup & Slider Builder","kev":false,"epss":0.00234},{"id":"CVE-2026-112230","published":"2026-10-23T06:00:19.740Z","updated":"2026-10-23T10:46:03.890Z","title":"Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Popup Builder","kev":false,"epss":0.00206},{"id":"CVE-2026-112219","published":"2026-10-23T06:00:19.565Z","updated":"2026-10-23T10:46:04.041Z","title":"Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Download Monitor","kev":false,"epss":0.00328},{"id":"CVE-2026-111982","published":"2026-10-23T06:00:19.393Z","updated":"2026-10-23T10:46:04.193Z","title":"Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00334},{"id":"CVE-2026-111966","published":"2026-10-23T06:00:19.223Z","updated":"2026-10-23T10:46:04.366Z","title":"Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00306},{"id":"CVE-2026-111738","published":"2026-10-23T06:00:18.798Z","updated":"2026-10-23T10:46:04.518Z","title":"Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"Speed Optimizer","kev":false,"epss":0.0028},{"id":"CVE-2026-111737","published":"2026-10-23T06:00:18.621Z","updated":"2026-10-23T10:46:04.684Z","title":"Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Speed Optimizer","kev":false,"epss":0.00185},{"id":"CVE-2026-110537","published":"2026-10-23T06:00:18.451Z","updated":"2026-10-23T10:45:23.053Z","title":"Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00244},{"id":"CVE-2026-110510","published":"2026-10-23T06:00:18.280Z","updated":"2026-10-23T10:45:37.284Z","title":"Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00112},{"id":"CVE-2026-109936","published":"2026-10-23T06:00:18.103Z","updated":"2026-10-23T10:45:50.035Z","title":"Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282},{"id":"CVE-2026-109935","published":"2026-10-23T06:00:17.935Z","updated":"2026-10-24T14:31:18.363Z","title":"Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282},{"id":"CVE-2026-109934","published":"2026-10-23T06:00:17.759Z","updated":"2026-10-23T10:46:04.839Z","title":"Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282},{"id":"CVE-2026-109933","published":"2026-10-23T06:00:17.572Z","updated":"2026-10-23T10:46:04.987Z","title":"Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00306},{"id":"CVE-2026-107858","published":"2026-10-23T05:08:46.087Z","updated":"2026-11-02T12:43:40.614Z","title":"Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server","severity":"HIGH","score":7.2,"vendor":"Google","product":"Agent Development Kit (ADK) for Java","kev":false,"epss":0.0036},{"id":"CVE-2026-109198","published":"2026-10-23T04:31:54.216Z","updated":"2026-10-23T10:56:07.857Z","title":"Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter","severity":"HIGH","score":7.2,"vendor":"cleantalk","product":"CleanTalk Anti-Spam – Complete Spam Protection","kev":false,"epss":0.00378},{"id":"CVE-2026-115497","published":"2026-10-23T04:31:53.752Z","updated":"2026-10-23T10:56:08.025Z","title":"Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter","severity":"HIGH","score":7.5,"vendor":"codepeople","product":"Music Store – WordPress eCommerce","kev":false,"epss":0.00885},{"id":"CVE-2026-55835","published":"2026-10-23T04:14:02.867Z","updated":"2026-10-23T21:05:41.736Z","title":"Lookyloo: Potential sub-system DoS due to parameter missmatch in notification","severity":"MEDIUM","score":6.9,"vendor":"Lookyloo","product":"lookyloo","kev":false,"epss":0.00394},{"id":"CVE-2026-86055","published":"2026-10-23T04:09:27.051Z","updated":"2026-10-29T12:56:48.256Z","title":"Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover","severity":"HIGH","score":8.7,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00591},{"id":"CVE-2026-86020","published":"2026-10-23T04:05:24.420Z","updated":"2026-10-23T14:59:59.159Z","title":"Part-DB: Spreadsheet Formula Injection in XLSX Part Exports","severity":"MEDIUM","score":4.6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00155},{"id":"CVE-2026-86019","published":"2026-10-23T04:04:02.426Z","updated":"2026-10-30T16:29:23.553Z","title":"Part-DB: Attachment Size Limit Bypass via API Base64 Upload","severity":"MEDIUM","score":5.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00371},{"id":"CVE-2026-86018","published":"2026-10-23T04:00:19.188Z","updated":"2026-10-29T02:47:47.732Z","title":"Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads","severity":"MEDIUM","score":5.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00405},{"id":"CVE-2026-59188","published":"2026-10-23T03:59:11.068Z","updated":"2026-10-29T12:49:30.293Z","title":"Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer","severity":"MEDIUM","score":5.4,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.0015},{"id":"CVE-2026-55600","published":"2026-10-23T03:55:48.661Z","updated":"2026-10-30T16:30:57.428Z","title":"Part-DB: Stored HTML injection in BOM validation results via unescaped Part name","severity":"MEDIUM","score":5.7,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00443},{"id":"CVE-2026-54631","published":"2026-10-23T03:53:33.833Z","updated":"2026-10-29T02:46:18.989Z","title":"Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie","severity":"MEDIUM","score":6.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00191},{"id":"CVE-2026-90458","published":"2026-10-23T03:50:48.611Z","updated":"2026-10-29T12:46:14.679Z","title":"OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.","severity":"MEDIUM","score":5.4,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00277},{"id":"CVE-2026-54630","published":"2026-10-23T03:48:59.951Z","updated":"2026-10-29T12:43:48.850Z","title":"Part-DB: Authenticated RCE via .phar attachment upload served from public/media","severity":"CRITICAL","score":9.6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00348},{"id":"CVE-2026-54615","published":"2026-10-23T03:45:02.512Z","updated":"2026-10-23T15:00:09.748Z","title":"Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)","severity":"MEDIUM","score":6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00372},{"id":"CVE-2026-89419","published":"2026-10-23T03:44:09.648Z","updated":"2026-11-02T14:57:22.596Z","title":"OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using…","severity":"MEDIUM","score":5,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00288},{"id":"CVE-2026-115638","published":"2026-10-23T03:21:17.303Z","updated":"2026-10-29T17:05:16.854Z","title":"OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.","severity":"MEDIUM","score":4.3,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00221},{"id":"CVE-2026-115547","published":"2026-10-23T03:06:45.274Z","updated":"2026-10-23T10:56:08.187Z","title":"Command Execution via Admin Console Input in Okta Access Gateway","severity":"CRITICAL","score":9.1,"vendor":"Okta","product":"Okta Access Gateway","kev":false,"epss":0.00536},{"id":"CVE-2026-115546","published":"2026-10-23T03:06:37.230Z","updated":"2026-10-23T10:56:08.332Z","title":"Authentication Source Verification Issue in Okta Access Gateway","severity":"HIGH","score":8.1,"vendor":"Okta","product":"Okta Access Gateway","kev":false,"epss":0.0042},{"id":"CVE-2026-115537","published":"2026-10-23T01:30:25.554Z","updated":"2026-10-23T21:05:49.579Z","title":"gedelumbung HospitalManagement URL Validation routing_pages.php simpan redirect","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00324},{"id":"CVE-2026-19678","published":"2026-10-23T01:23:08.631Z","updated":"2026-11-02T12:41:42.957Z","title":"Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure","severity":"HIGH","score":8.7,"vendor":"onPhase","product":"onPhase Forms","kev":false,"epss":0.00386},{"id":"CVE-2026-19677","published":"2026-10-23T01:21:08.272Z","updated":"2026-11-02T12:39:21.825Z","title":"Authentication Bypass Leading to Server-Side Command Execution","severity":"CRITICAL","score":9.3,"vendor":"onPhase","product":"onPhase Forms","kev":false,"epss":0.00533},{"id":"CVE-2026-115536","published":"2026-10-23T01:15:15.697Z","updated":"2026-10-29T12:34:42.937Z","title":"gedelumbung HospitalManagement Admin Routing routing_pages.php simpan cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00273},{"id":"CVE-2026-115486","published":"2026-10-23T00:16:34.250Z","updated":"2026-10-26T14:30:55.948Z","title":"Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00207},{"id":"CVE-2026-115485","published":"2026-10-23T00:16:30.006Z","updated":"2026-10-29T12:31:19.784Z","title":"Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio","severity":"MEDIUM","score":6.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.002},{"id":"CVE-2026-115484","published":"2026-10-23T00:16:28.943Z","updated":"2026-10-29T02:44:58.365Z","title":"Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg","severity":"HIGH","score":7.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00222},{"id":"CVE-2026-115535","published":"2026-10-23T00:15:18.401Z","updated":"2026-10-29T02:44:26.788Z","title":"gedelumbung HospitalManagement Settings sistem.php simpan cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.0021},{"id":"CVE-2026-106765","published":"2026-10-23T00:00:00.000Z","updated":"2026-11-02T19:08:43.279Z","title":"An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00503},{"id":"CVE-2026-106764","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T02:41:54.499Z","title":"An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00524},{"id":"CVE-2026-106763","published":"2026-10-23T00:00:00.000Z","updated":"2026-11-02T14:05:19.944Z","title":"An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00524},{"id":"CVE-2026-52356","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T12:11:29.441Z","title":"An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.021},{"id":"CVE-2026-50787","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-26T17:37:58.399Z","title":"e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.0049},{"id":"CVE-2025-45528","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T02:43:32.846Z","title":"An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00162},{"id":"CVE-2026-115534","published":"2026-10-22T23:45:15.462Z","updated":"2026-10-23T21:06:00.059Z","title":"gedelumbung HospitalManagement Contact Form contact.php kirim cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00342},{"id":"CVE-2026-110825","published":"2026-10-22T22:11:55.815Z","updated":"2026-10-23T10:56:08.479Z","title":"Kiloview E3 NDI Encoder Missing Authentication for Critical Function","severity":"HIGH","score":8.7,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00413},{"id":"CVE-2026-92450","published":"2026-10-22T22:09:58.517Z","updated":"2026-11-02T12:38:23.833Z","title":"Kiloview E3 NDI Encoder Use of Hard-coded Credentials","severity":"HIGH","score":8.7,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00375},{"id":"CVE-2026-110243","published":"2026-10-22T22:06:36.699Z","updated":"2026-10-23T10:56:08.635Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00512},{"id":"CVE-2026-107861","published":"2026-10-22T22:04:32.969Z","updated":"2026-10-23T10:56:08.780Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00512},{"id":"CVE-2026-110491","published":"2026-10-22T22:01:45.996Z","updated":"2026-10-23T10:56:08.939Z","title":"Kiloview E3 NDI Encoder NULL Pointer Dereference","severity":"MEDIUM","score":6.9,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00524},{"id":"CVE-2026-105265","published":"2026-10-22T21:58:34.789Z","updated":"2026-10-23T10:56:09.090Z","title":"Kiloview E3 NDI Encoder Path Traversal","severity":"MEDIUM","score":6,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00387},{"id":"CVE-2026-96616","published":"2026-10-22T21:55:57.136Z","updated":"2026-10-23T10:56:09.232Z","title":"Kiloview E3 NDI Encoder Insufficient Session Expiration","severity":"HIGH","score":8.3,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00371},{"id":"CVE-2026-111100","published":"2026-10-22T21:53:44.787Z","updated":"2026-10-23T10:56:09.381Z","title":"Kiloview E3 NDI Encoder Missing Authentication for Critical Function","severity":"MEDIUM","score":6.9,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00389},{"id":"CVE-2026-109122","published":"2026-10-22T21:50:47.777Z","updated":"2026-10-23T10:56:09.531Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00522},{"id":"CVE-2026-110063","published":"2026-10-22T21:44:42.868Z","updated":"2026-10-31T18:00:20.423Z","title":"VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"VM Inspector for Azure Virtual Machines","kev":false,"epss":0.00888},{"id":"CVE-2026-83938","published":"2026-10-22T21:44:42.272Z","updated":"2026-10-31T18:00:19.877Z","title":"Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"Azure Kubernetes Configuration Service","kev":false,"epss":0.00707},{"id":"CVE-2026-96185","published":"2026-10-22T21:44:41.837Z","updated":"2026-10-31T18:00:19.270Z","title":"Microsoft Exchange Online Remote Code Execution Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft Exchange Online","kev":false,"epss":0.0054},{"id":"CVE-2026-97785","published":"2026-10-22T21:44:41.227Z","updated":"2026-10-31T18:00:18.695Z","title":"AAD App Proxy Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"Microsoft Entra application proxy","kev":false,"epss":0.00646},{"id":"CVE-2026-108456","published":"2026-10-22T21:44:40.650Z","updated":"2026-10-31T18:00:18.195Z","title":"Azure AI Foundry Elevation of Privilege Vulnerability","severity":"HIGH","score":7.7,"vendor":"Microsoft","product":"Azure AI Foundry","kev":false,"epss":0.00701},{"id":"CVE-2026-105014","published":"2026-10-22T21:44:40.069Z","updated":"2026-10-31T18:00:17.364Z","title":"Azure Pipelines Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Microsoft","product":"Azure Pipelines","kev":false,"epss":0.00667},{"id":"CVE-2026-111594","published":"2026-10-22T21:39:47.105Z","updated":"2026-11-02T12:36:15.892Z","title":"InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information","severity":"CRITICAL","score":9.2,"vendor":"InterSystems","product":"IRIS for Health","kev":false,"epss":0.0019},{"id":"CVE-2026-114620","published":"2026-10-22T21:34:11.909Z","updated":"2026-10-30T20:14:29.752Z","title":"Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF","severity":"MEDIUM","score":5.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00385},{"id":"CVE-2026-114619","published":"2026-10-22T21:31:02.929Z","updated":"2026-10-29T02:40:27.668Z","title":"Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens","severity":"MEDIUM","score":4.6,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00162},{"id":"CVE-2026-114618","published":"2026-10-22T21:28:37.879Z","updated":"2026-10-29T12:29:17.976Z","title":"Authlib: Default JWT bearer grant accepts assertions for the wrong audience","severity":"MEDIUM","score":6.8,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00351},{"id":"CVE-2026-114617","published":"2026-10-22T21:25:31.732Z","updated":"2026-10-23T15:00:16.051Z","title":"Authlib: ID token can disable its own nonce validation via the nonce_supported claim","severity":"MEDIUM","score":4.2,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00265},{"id":"CVE-2026-115449","published":"2026-10-22T21:20:56.855Z","updated":"2026-10-23T15:00:22.267Z","title":"Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest","severity":"LOW","score":3.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00239},{"id":"CVE-2026-114616","published":"2026-10-22T21:14:03.060Z","updated":"2026-10-30T20:07:37.170Z","title":"Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)","severity":"HIGH","score":7.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00299},{"id":"CVE-2026-115221","published":"2026-10-22T21:13:30.521Z","updated":"2026-10-26T16:46:46.166Z","title":"Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00145},{"id":"CVE-2026-115424","published":"2026-10-22T21:12:27.259Z","updated":"2026-10-22T21:12:27.259Z","title":"Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","kev":false,"epss":0.00164},{"id":"CVE-2026-114615","published":"2026-10-22T21:10:02.023Z","updated":"2026-10-29T02:38:05.175Z","title":"Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys","severity":"HIGH","score":7.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00213},{"id":"CVE-2026-114614","published":"2026-10-22T21:00:14.354Z","updated":"2026-10-29T13:49:50.607Z","title":"Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts","severity":"LOW","score":2.6,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00273},{"id":"CVE-2026-114583","published":"2026-10-22T20:57:36.019Z","updated":"2026-11-02T12:32:42.085Z","title":"tar filter allows writing outside destination via empty-named symlink","severity":"MEDIUM","score":6.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00227},{"id":"CVE-2026-114625","published":"2026-10-22T20:47:56.427Z","updated":"2026-10-24T03:55:14.884Z","title":"Security Advisory 0199","severity":"CRITICAL","score":9.4,"vendor":"Arista Networks","product":"VeloCloud Orchestrator","kev":true,"epss":0.01025},{"id":"CVE-2026-115417","published":"2026-10-22T20:34:50.961Z","updated":"2026-10-29T01:52:06.755Z","title":"Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt","severity":"HIGH","score":8.2,"vendor":"AWS","product":"aws-c-mqtt","kev":false,"epss":0.0035},{"id":"CVE-2026-115419","published":"2026-10-22T20:04:04.191Z","updated":"2026-10-30T19:30:50.901Z","title":"Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server","severity":"HIGH","score":8.6,"vendor":"AWS","product":"strands-agents","kev":false,"epss":0.00426},{"id":"CVE-2026-112332","published":"2026-10-22T19:42:17.808Z","updated":"2026-10-29T02:37:09.398Z","title":"Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00627},{"id":"CVE-2026-112331","published":"2026-10-22T19:41:15.973Z","updated":"2026-10-23T13:28:32.139Z","title":"Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00679},{"id":"CVE-2026-112330","published":"2026-10-22T19:40:15.180Z","updated":"2026-10-23T21:06:22.759Z","title":"Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00679},{"id":"CVE-2026-115509","published":"2026-10-22T19:14:08.632Z","updated":"2026-10-29T12:24:50.785Z","title":"Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API","severity":"LOW","score":2.3,"vendor":"jitsucom","product":"jitsu","kev":false,"epss":0.00169},{"id":"CVE-2026-115508","published":"2026-10-22T19:14:07.893Z","updated":"2026-10-29T02:36:22.691Z","title":"Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields","severity":"HIGH","score":7.1,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00459},{"id":"CVE-2026-115507","published":"2026-10-22T19:14:07.157Z","updated":"2026-10-22T19:14:07.157Z","title":"Vikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email Header","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00197},{"id":"CVE-2026-115506","published":"2026-10-22T19:14:06.001Z","updated":"2026-10-23T21:06:43.010Z","title":"libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay","severity":"HIGH","score":8.7,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00455},{"id":"CVE-2026-115505","published":"2026-10-22T19:14:05.297Z","updated":"2026-10-29T12:22:44.734Z","title":"libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum","severity":"HIGH","score":7.2,"vendor":"sahlberg","product":"libsmb2","kev":false,"epss":0.00207},{"id":"CVE-2026-115504","published":"2026-10-22T19:14:04.552Z","updated":"2026-10-29T02:35:24.229Z","title":"CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c","severity":"HIGH","score":8.5,"vendor":"HEASARC","product":"cfitsio","kev":false,"epss":0.00133},{"id":"CVE-2026-115503","published":"2026-10-22T19:14:03.831Z","updated":"2026-10-22T19:14:03.831Z","title":"Ghidra before 12.2 Denial of Service via Compressed Extension Archive","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013},{"id":"CVE-2026-115398","published":"2026-10-22T19:14:03.058Z","updated":"2026-10-23T15:00:30.147Z","title":"Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.00178},{"id":"CVE-2026-115397","published":"2026-10-22T19:14:02.326Z","updated":"2026-10-29T12:21:16.552Z","title":"Ghidra before 12.2 Denial of Service via Extension Archive Install","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013},{"id":"CVE-2026-115396","published":"2026-10-22T19:14:01.562Z","updated":"2026-10-29T02:33:07.412Z","title":"Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013},{"id":"CVE-2026-115395","published":"2026-10-22T19:14:00.814Z","updated":"2026-10-22T19:14:00.814Z","title":"Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013},{"id":"CVE-2026-114655","published":"2026-10-22T19:14:00.708Z","updated":"2026-10-30T19:30:19.252Z","title":"KMS request injection via unsanitized key vault and provider values in libmongocrypt","severity":"MEDIUM","score":6,"vendor":"MongoDB","product":"libmongocrypt","kev":false,"epss":0.00267},{"id":"CVE-2026-115394","published":"2026-10-22T19:14:00.068Z","updated":"2026-10-23T15:00:37.926Z","title":"Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.00165},{"id":"CVE-2026-114654","published":"2026-10-22T19:13:59.597Z","updated":"2026-10-30T19:27:57.892Z","title":"BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00349},{"id":"CVE-2026-115393","published":"2026-10-22T19:13:59.314Z","updated":"2026-10-29T12:16:18.355Z","title":"Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00092},{"id":"CVE-2026-115392","published":"2026-10-22T19:13:58.512Z","updated":"2026-10-29T02:32:06.275Z","title":"Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242},{"id":"CVE-2026-114653","published":"2026-10-22T19:13:58.414Z","updated":"2026-10-30T19:27:22.054Z","title":"Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder","severity":"HIGH","score":7.1,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00214},{"id":"CVE-2026-115391","published":"2026-10-22T19:13:57.752Z","updated":"2026-10-22T19:13:57.752Z","title":"Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00172},{"id":"CVE-2026-114652","published":"2026-10-22T19:13:57.376Z","updated":"2026-10-30T19:26:33.459Z","title":"Update operator injection via single-element list rewriting in the update builder","severity":"HIGH","score":7.1,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00299},{"id":"CVE-2026-114651","published":"2026-10-22T19:13:56.276Z","updated":"2026-10-30T19:25:16.427Z","title":"Cross-document data leak via malformed BSON array parsing in reused thread buffer","severity":"MEDIUM","score":6.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00391},{"id":"CVE-2026-115390","published":"2026-10-22T19:13:55.910Z","updated":"2026-10-23T15:00:44.401Z","title":"Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242},{"id":"CVE-2026-115389","published":"2026-10-22T19:13:55.163Z","updated":"2026-10-29T12:12:04.439Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153},{"id":"CVE-2026-114650","published":"2026-10-22T19:13:55.159Z","updated":"2026-11-02T12:29:15.032Z","title":"Plaintext exposure of encrypted fields via ANSI code-page corruption of database name","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00108},{"id":"CVE-2026-115388","published":"2026-10-22T19:13:54.430Z","updated":"2026-10-29T02:31:21.887Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112},{"id":"CVE-2026-114649","published":"2026-10-22T19:13:54.140Z","updated":"2026-11-02T12:25:25.603Z","title":"Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache","severity":"HIGH","score":7.6,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.002},{"id":"CVE-2026-115387","published":"2026-10-22T19:13:53.696Z","updated":"2026-10-22T19:13:53.696Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112},{"id":"CVE-2026-114648","published":"2026-10-22T19:13:53.086Z","updated":"2026-11-02T12:23:48.614Z","title":"NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys","severity":"HIGH","score":7.2,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00321},{"id":"CVE-2026-115386","published":"2026-10-22T19:13:52.931Z","updated":"2026-10-23T15:00:52.816Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00197},{"id":"CVE-2026-115385","published":"2026-10-22T19:13:52.184Z","updated":"2026-10-26T19:38:29.749Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112},{"id":"CVE-2026-114647","published":"2026-10-22T19:13:51.972Z","updated":"2026-11-02T12:19:43.566Z","title":"NoSQL operator injection via unvalidated replacement document in findOneAndReplace","severity":"MEDIUM","score":5.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00259},{"id":"CVE-2026-115384","published":"2026-10-22T19:13:51.422Z","updated":"2026-10-29T02:30:40.462Z","title":"Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow","severity":"CRITICAL","score":9.4,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00312},{"id":"CVE-2026-114646","published":"2026-10-22T19:13:50.935Z","updated":"2026-11-02T14:37:54.708Z","title":"NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00263},{"id":"CVE-2026-115383","published":"2026-10-22T19:13:50.687Z","updated":"2026-10-22T19:13:50.687Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00184},{"id":"CVE-2026-115382","published":"2026-10-22T19:13:49.956Z","updated":"2026-10-23T15:01:00.837Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00276},{"id":"CVE-2026-114645","published":"2026-10-22T19:13:49.867Z","updated":"2026-10-29T01:52:06.895Z","title":"Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping","severity":"MEDIUM","score":5.7,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00166},{"id":"CVE-2026-115381","published":"2026-10-22T19:13:49.244Z","updated":"2026-10-26T19:38:29.893Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212},{"id":"CVE-2026-114644","published":"2026-10-22T19:13:48.844Z","updated":"2026-11-02T14:35:24.418Z","title":"Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization","severity":"HIGH","score":8.2,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00481},{"id":"CVE-2026-115380","published":"2026-10-22T19:13:48.469Z","updated":"2026-10-26T19:38:30.038Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff","severity":"MEDIUM","score":5.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00118},{"id":"CVE-2026-114643","published":"2026-10-22T19:13:47.839Z","updated":"2026-11-02T14:30:35.153Z","title":"Duplicate geometry fields via unvalidated GeoJSON extra members","severity":"MEDIUM","score":5.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00372},{"id":"CVE-2026-115379","published":"2026-10-22T19:13:47.737Z","updated":"2026-10-22T19:13:47.737Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00278},{"id":"CVE-2026-115378","published":"2026-10-22T19:13:47.035Z","updated":"2026-10-23T15:01:16.157Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull","severity":"MEDIUM","score":6.9,"vendor":"lxc","product":"incus","kev":false,"epss":0.00287},{"id":"CVE-2026-115377","published":"2026-10-22T19:13:46.305Z","updated":"2026-10-29T12:04:13.696Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream","severity":"CRITICAL","score":9.4,"vendor":"lxc","product":"incus","kev":false,"epss":0.00405},{"id":"CVE-2026-115376","published":"2026-10-22T19:13:45.489Z","updated":"2026-10-29T02:29:39.726Z","title":"Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy","severity":"HIGH","score":8.3,"vendor":"lxc","product":"incus","kev":false,"epss":0.00273},{"id":"CVE-2026-115375","published":"2026-10-22T19:13:44.760Z","updated":"2026-10-22T19:13:44.760Z","title":"Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes","severity":"CRITICAL","score":9.4,"vendor":"lxc","product":"incus","kev":false,"epss":0.00405},{"id":"CVE-2026-115374","published":"2026-10-22T19:13:43.999Z","updated":"2026-10-23T15:01:34.195Z","title":"Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs","severity":"HIGH","score":7.1,"vendor":"lxc","product":"incus","kev":false,"epss":0.00183},{"id":"CVE-2026-115373","published":"2026-10-22T19:13:43.300Z","updated":"2026-10-29T11:57:51.417Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}","severity":"HIGH","score":7,"vendor":"lxc","product":"incus","kev":false,"epss":0.00292},{"id":"CVE-2026-115372","published":"2026-10-22T19:13:42.624Z","updated":"2026-10-29T02:28:30.115Z","title":"Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options","severity":"CRITICAL","score":9,"vendor":"lxc","product":"incus","kev":false,"epss":0.00362},{"id":"CVE-2026-115371","published":"2026-10-22T19:13:41.898Z","updated":"2026-10-22T19:13:41.898Z","title":"LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints","severity":"HIGH","score":7.1,"vendor":"lxc","product":"incus","kev":false,"epss":0.00219},{"id":"CVE-2026-115370","published":"2026-10-22T19:13:41.181Z","updated":"2026-10-23T15:01:52.150Z","title":"Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh","severity":"MEDIUM","score":5.3,"vendor":"lxc","product":"incus","kev":false,"epss":0.00365},{"id":"CVE-2026-115369","published":"2026-10-22T19:13:40.448Z","updated":"2026-10-29T11:56:36.361Z","title":"OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00134},{"id":"CVE-2026-115366","published":"2026-10-22T19:13:39.752Z","updated":"2026-10-26T19:38:30.184Z","title":"OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs","severity":"LOW","score":2,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00179},{"id":"CVE-2026-115365","published":"2026-10-22T19:13:39.017Z","updated":"2026-10-22T19:13:39.017Z","title":"OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal","severity":"HIGH","score":7.5,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00304},{"id":"CVE-2026-115364","published":"2026-10-22T19:13:38.282Z","updated":"2026-10-23T15:02:16.016Z","title":"OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00315},{"id":"CVE-2026-115363","published":"2026-10-22T19:13:37.600Z","updated":"2026-10-29T11:56:00.897Z","title":"OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00125},{"id":"CVE-2026-115362","published":"2026-10-22T19:13:36.857Z","updated":"2026-10-29T02:27:07.016Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00197},{"id":"CVE-2026-115361","published":"2026-10-22T19:13:36.151Z","updated":"2026-10-22T19:13:36.151Z","title":"OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00205},{"id":"CVE-2026-115360","published":"2026-10-22T19:13:35.435Z","updated":"2026-10-23T21:07:08.070Z","title":"OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI","severity":"MEDIUM","score":5.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00248},{"id":"CVE-2026-115359","published":"2026-10-22T19:13:34.716Z","updated":"2026-10-29T11:54:37.275Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing","severity":"MEDIUM","score":6.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00187},{"id":"CVE-2026-115358","published":"2026-10-22T19:13:34.006Z","updated":"2026-10-29T02:26:32.401Z","title":"OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters","severity":"LOW","score":2,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00195},{"id":"CVE-2026-115357","published":"2026-10-22T19:13:33.290Z","updated":"2026-10-22T19:13:33.290Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.0021},{"id":"CVE-2026-115356","published":"2026-10-22T19:13:32.611Z","updated":"2026-10-23T15:02:35.215Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation","severity":"MEDIUM","score":5.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00213},{"id":"CVE-2026-115355","published":"2026-10-22T19:13:31.904Z","updated":"2026-10-29T13:48:43.278Z","title":"Mistune before 3.3.0 Path Traversal and XSS via Include Directive","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00461},{"id":"CVE-2026-114519","published":"2026-10-22T19:13:31.254Z","updated":"2026-11-02T14:29:27.792Z","title":"Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts","severity":"HIGH","score":8.6,"vendor":"Roskus","product":"Prospero Flow CRM","kev":false,"epss":0.00357},{"id":"CVE-2026-115354","published":"2026-10-22T19:13:31.132Z","updated":"2026-10-29T02:25:47.787Z","title":"Mistune before 3.3.0 Arbitrary Local File Read via Include Directive","severity":"HIGH","score":7.1,"vendor":"lepture","product":"mistune","kev":false,"epss":0.0047},{"id":"CVE-2026-115353","published":"2026-10-22T19:13:30.422Z","updated":"2026-10-22T19:13:30.422Z","title":"Mistune before 3.3.0 Path Traversal via include Directive","severity":"CRITICAL","score":9.2,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00388},{"id":"CVE-2026-115352","published":"2026-10-22T19:13:28.427Z","updated":"2026-10-23T21:07:23.519Z","title":"Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00439},{"id":"CVE-2026-115351","published":"2026-10-22T19:13:27.678Z","updated":"2026-10-29T11:53:14.490Z","title":"Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option","severity":"MEDIUM","score":5.3,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00221},{"id":"CVE-2026-115350","published":"2026-10-22T19:13:26.891Z","updated":"2026-10-29T02:24:58.381Z","title":"Mistune before 3.3.0 Stored XSS via Include Directive HTML Files","severity":"MEDIUM","score":5.3,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00188},{"id":"CVE-2026-115349","published":"2026-10-22T19:13:26.171Z","updated":"2026-10-26T19:38:30.354Z","title":"Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00344},{"id":"CVE-2026-115348","published":"2026-10-22T19:13:25.416Z","updated":"2026-10-23T21:07:57.729Z","title":"Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00438},{"id":"CVE-2026-115347","published":"2026-10-22T19:13:24.689Z","updated":"2026-10-26T19:38:30.510Z","title":"Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.0041},{"id":"CVE-2022-51026","published":"2026-10-22T19:13:18.259Z","updated":"2026-10-29T02:24:08.646Z","title":"Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login","severity":"CRITICAL","score":9.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00613},{"id":"CVE-2026-95721","published":"2026-10-22T19:07:12.330Z","updated":"2026-10-23T19:14:25.105Z","title":"Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface","severity":"LOW","score":3.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00115},{"id":"CVE-2026-95720","published":"2026-10-22T19:07:11.179Z","updated":"2026-10-23T19:14:23.808Z","title":"Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8","severity":"MEDIUM","score":4.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0015},{"id":"CVE-2026-95719","published":"2026-10-22T19:07:10.019Z","updated":"2026-10-23T19:14:22.469Z","title":"Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10","severity":"MEDIUM","score":4.9,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00336},{"id":"CVE-2026-95718","published":"2026-10-22T19:07:08.833Z","updated":"2026-10-23T19:23:10.548Z","title":"Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00377},{"id":"CVE-2026-95717","published":"2026-10-22T19:07:07.517Z","updated":"2026-10-23T19:14:19.329Z","title":"Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface","severity":"MEDIUM","score":5.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00265},{"id":"CVE-2026-95716","published":"2026-10-22T19:07:06.333Z","updated":"2026-10-23T19:14:17.946Z","title":"Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00241},{"id":"CVE-2026-95715","published":"2026-10-22T19:07:05.183Z","updated":"2026-10-23T19:14:16.580Z","title":"Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface","severity":"MEDIUM","score":6.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01587},{"id":"CVE-2026-95714","published":"2026-10-22T19:07:03.957Z","updated":"2026-10-24T03:55:24.769Z","title":"Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10","severity":"MEDIUM","score":6.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00316},{"id":"CVE-2026-95713","published":"2026-10-22T19:07:02.750Z","updated":"2026-10-23T19:14:13.819Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface","severity":"HIGH","score":7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00293},{"id":"CVE-2026-95712","published":"2026-10-22T19:07:01.347Z","updated":"2026-10-23T19:14:12.463Z","title":"Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00237},{"id":"CVE-2026-95711","published":"2026-10-22T19:07:00.061Z","updated":"2026-10-24T03:55:25.688Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00238},{"id":"CVE-2026-95710","published":"2026-10-22T19:06:58.154Z","updated":"2026-10-23T19:14:09.744Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00227},{"id":"CVE-2026-95709","published":"2026-10-22T19:06:56.950Z","updated":"2026-10-24T03:55:26.505Z","title":"Authenticated Command Injection Vulnerabilities in AOS-10","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01265},{"id":"CVE-2026-95708","published":"2026-10-22T19:06:55.736Z","updated":"2026-10-24T03:55:27.323Z","title":"Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01265},{"id":"CVE-2026-95707","published":"2026-10-22T19:06:54.542Z","updated":"2026-10-24T03:55:29.047Z","title":"Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00711},{"id":"CVE-2026-95706","published":"2026-10-22T19:06:53.378Z","updated":"2026-10-24T03:55:32.247Z","title":"Authenticated Command Injection Vulnerabilities in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01152},{"id":"CVE-2026-95705","published":"2026-10-22T19:06:52.111Z","updated":"2026-10-24T03:55:33.153Z","title":"Authenticated Command Injection Vulnerabilities in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01152},{"id":"CVE-2026-95704","published":"2026-10-22T19:06:50.866Z","updated":"2026-10-24T03:55:34.687Z","title":"Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00655},{"id":"CVE-2026-79956","published":"2026-10-22T19:06:49.538Z","updated":"2026-10-24T03:55:35.569Z","title":"Improper Sanitization leads to Command Injection in AOS-8 Web Interface","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704},{"id":"CVE-2026-79955","published":"2026-10-22T19:06:48.359Z","updated":"2026-10-23T19:13:58.937Z","title":"Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00535},{"id":"CVE-2026-79895","published":"2026-10-22T19:06:47.120Z","updated":"2026-10-23T19:13:57.176Z","title":"Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00512},{"id":"CVE-2026-79894","published":"2026-10-22T19:06:45.891Z","updated":"2026-10-23T19:13:55.728Z","title":"Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00411},{"id":"CVE-2026-79893","published":"2026-10-22T19:06:44.554Z","updated":"2026-10-23T19:13:54.411Z","title":"Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00535},{"id":"CVE-2026-79892","published":"2026-10-22T19:06:38.055Z","updated":"2026-10-24T03:55:39.968Z","title":"Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00156},{"id":"CVE-2026-79891","published":"2026-10-22T19:06:26.615Z","updated":"2026-10-24T03:55:40.806Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00552},{"id":"CVE-2026-79890","published":"2026-10-22T19:06:19.152Z","updated":"2026-10-24T03:55:51.228Z","title":"Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00961},{"id":"CVE-2026-79889","published":"2026-10-22T19:06:17.875Z","updated":"2026-10-24T03:55:53.621Z","title":"Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00625},{"id":"CVE-2026-79888","published":"2026-10-22T19:06:16.674Z","updated":"2026-10-24T03:55:54.447Z","title":"Unauthenticated Buffer Overflow allows Remote Code Execution in web interface","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00476},{"id":"CVE-2026-79887","published":"2026-10-22T19:06:15.456Z","updated":"2026-10-24T03:55:55.267Z","title":"Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00593},{"id":"CVE-2026-79886","published":"2026-10-22T19:06:14.208Z","updated":"2026-11-02T14:26:59.735Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00367},{"id":"CVE-2026-79885","published":"2026-10-22T19:06:07.454Z","updated":"2026-11-02T14:25:53.394Z","title":"Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00388},{"id":"CVE-2026-79884","published":"2026-10-22T19:06:06.236Z","updated":"2026-10-30T19:24:08.780Z","title":"Authentication Bypass leads to Sensitive Information Disclosure in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00249},{"id":"CVE-2026-79883","published":"2026-10-22T19:06:05.048Z","updated":"2026-10-30T19:23:20.891Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10","severity":"HIGH","score":8.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00221},{"id":"CVE-2026-79882","published":"2026-10-22T19:05:58.892Z","updated":"2026-10-30T19:21:58.048Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10","severity":"HIGH","score":8.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00773},{"id":"CVE-2026-79881","published":"2026-10-22T19:05:52.551Z","updated":"2026-10-30T19:20:40.960Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"HIGH","score":8.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00441},{"id":"CVE-2026-79880","published":"2026-10-22T19:05:51.352Z","updated":"2026-10-30T19:19:17.886Z","title":"Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8","severity":"HIGH","score":8.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.005},{"id":"CVE-2026-79879","published":"2026-10-22T19:05:49.285Z","updated":"2026-10-30T19:17:50.418Z","title":"Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00359},{"id":"CVE-2026-79878","published":"2026-10-22T19:05:48.100Z","updated":"2026-10-30T19:16:43.724Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00966},{"id":"CVE-2026-79877","published":"2026-10-22T19:05:46.912Z","updated":"2026-10-30T19:14:45.772Z","title":"Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00439},{"id":"CVE-2026-79876","published":"2026-10-22T19:05:45.563Z","updated":"2026-10-30T19:13:38.215Z","title":"Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00231},{"id":"CVE-2026-79875","published":"2026-10-22T19:05:43.906Z","updated":"2026-10-30T19:12:17.655Z","title":"Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00232},{"id":"CVE-2026-79874","published":"2026-10-22T19:05:37.688Z","updated":"2026-11-02T14:25:22.752Z","title":"Authentication Bypass in the API allows Administrative Access of AOS-10","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00244},{"id":"CVE-2026-79873","published":"2026-10-22T19:05:36.541Z","updated":"2026-11-02T14:23:39.293Z","title":"Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00244},{"id":"CVE-2026-79872","published":"2026-10-22T19:05:35.350Z","updated":"2026-11-02T14:22:13.172Z","title":"Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8","severity":"CRITICAL","score":9.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00556},{"id":"CVE-2026-79871","published":"2026-10-22T19:05:34.042Z","updated":"2026-11-02T12:16:31.048Z","title":"Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00313},{"id":"CVE-2026-79870","published":"2026-10-22T19:05:32.328Z","updated":"2026-11-02T12:14:29.838Z","title":"Authentication Bypass leads to Unauthorized Access in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0027},{"id":"CVE-2026-79869","published":"2026-10-22T19:05:30.299Z","updated":"2026-11-02T12:12:59.374Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00294},{"id":"CVE-2026-79868","published":"2026-10-22T19:05:28.687Z","updated":"2026-10-30T19:11:15.364Z","title":"Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00266},{"id":"CVE-2026-79867","published":"2026-10-22T19:05:26.627Z","updated":"2026-10-30T19:10:04.525Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00289},{"id":"CVE-2026-79866","published":"2026-10-22T19:05:24.966Z","updated":"2026-10-30T19:07:54.612Z","title":"Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0027},{"id":"CVE-2026-79865","published":"2026-10-22T19:05:23.329Z","updated":"2026-10-30T19:05:15.216Z","title":"Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0035},{"id":"CVE-2026-79864","published":"2026-10-22T19:05:22.080Z","updated":"2026-10-30T19:01:54.305Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01469},{"id":"CVE-2026-79863","published":"2026-10-22T19:05:20.425Z","updated":"2026-10-30T19:00:32.477Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00261},{"id":"CVE-2026-79862","published":"2026-10-22T19:05:18.613Z","updated":"2026-10-30T18:59:54.584Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00261},{"id":"CVE-2026-79861","published":"2026-10-22T19:05:17.012Z","updated":"2026-10-30T18:59:00.409Z","title":"Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01682},{"id":"CVE-2026-79860","published":"2026-10-22T19:05:10.749Z","updated":"2026-10-30T18:57:33.546Z","title":"Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00744},{"id":"CVE-2026-79859","published":"2026-10-22T19:05:09.507Z","updated":"2026-10-30T18:55:52.340Z","title":"Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00693},{"id":"CVE-2026-79858","published":"2026-10-22T19:05:08.166Z","updated":"2026-10-30T20:02:13.175Z","title":"Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00529},{"id":"CVE-2026-79857","published":"2026-10-22T19:05:06.618Z","updated":"2026-10-24T03:55:58.427Z","title":"Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01415},{"id":"CVE-2026-79856","published":"2026-10-22T19:05:05.250Z","updated":"2026-10-24T03:55:57.628Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00611},{"id":"CVE-2026-79855","published":"2026-10-22T19:05:03.382Z","updated":"2026-10-24T03:55:56.822Z","title":"Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00753},{"id":"CVE-2026-79854","published":"2026-10-22T19:05:02.138Z","updated":"2026-10-24T03:55:56.047Z","title":"Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00641},{"id":"CVE-2026-79853","published":"2026-10-22T19:05:00.903Z","updated":"2026-11-02T12:11:44.804Z","title":"Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00697},{"id":"CVE-2026-79852","published":"2026-10-22T19:04:59.570Z","updated":"2026-10-24T03:55:22.585Z","title":"Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00641},{"id":"CVE-2026-79851","published":"2026-10-22T19:04:58.382Z","updated":"2026-10-23T19:12:45.211Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00761},{"id":"CVE-2026-79850","published":"2026-10-22T19:04:57.112Z","updated":"2026-10-23T19:12:43.883Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00689},{"id":"CVE-2026-79849","published":"2026-10-22T19:04:55.951Z","updated":"2026-10-23T19:12:42.582Z","title":"Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704},{"id":"CVE-2026-79848","published":"2026-10-22T19:04:54.781Z","updated":"2026-10-23T19:12:41.206Z","title":"Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704},{"id":"CVE-2026-79847","published":"2026-10-22T19:04:53.557Z","updated":"2026-10-23T19:12:39.869Z","title":"Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00818},{"id":"CVE-2026-79846","published":"2026-10-22T19:04:47.248Z","updated":"2026-10-30T20:02:01.019Z","title":"Unauthenticated Command Injection Vulnerabilities in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01588},{"id":"CVE-2026-79844","published":"2026-10-22T19:04:44.829Z","updated":"2026-10-23T19:12:30.616Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00689},{"id":"CVE-2026-115414","published":"2026-10-22T18:34:08.488Z","updated":"2026-10-23T10:56:19.844Z","title":"OS command injection in the Terraform hook in AWS SAM CLI","severity":"HIGH","score":8.4,"vendor":"AWS","product":"aws-sam-cli","kev":false,"epss":0.00876},{"id":"CVE-2026-114613","published":"2026-10-22T18:22:40.544Z","updated":"2026-10-23T21:08:06.271Z","title":"MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure","severity":"HIGH","score":7.5,"vendor":"msgpack","product":"msgpack-python","kev":false,"epss":0.00543},{"id":"CVE-2026-115519","published":"2026-10-22T18:18:33.751Z","updated":"2026-11-02T12:09:46.844Z","title":"Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub","severity":"LOW","score":2.1,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00186},{"id":"CVE-2026-115517","published":"2026-10-22T18:05:11.649Z","updated":"2026-11-02T12:09:05.150Z","title":"Unrestricted network access between execution contexts in KNIME Business Hub","severity":"MEDIUM","score":6.4,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00431},{"id":"CVE-2026-114612","published":"2026-10-22T18:01:52.768Z","updated":"2026-10-30T18:17:34.432Z","title":"LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key","severity":"CRITICAL","score":9.9,"vendor":"BerriAI","product":"litellm","kev":false,"epss":0.00319},{"id":"CVE-2026-113876","published":"2026-10-22T18:00:15.049Z","updated":"2026-10-26T12:57:43.477Z","title":"SmileCDR HAPI FHIR unauthorized read","severity":"MEDIUM","score":5.3,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00295},{"id":"CVE-2026-113875","published":"2026-10-22T18:00:01.244Z","updated":"2026-10-26T12:57:40.749Z","title":"SmileCDR HAPI FHIR unauthorized read via subscription","severity":"LOW","score":2.3,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00271},{"id":"CVE-2026-113874","published":"2026-10-22T17:58:56.709Z","updated":"2026-10-26T12:57:44.881Z","title":"SmileCDR HAPI FHIR trusted tenant partition override","severity":"HIGH","score":8.6,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00323},{"id":"CVE-2026-113873","published":"2026-10-22T17:57:52.475Z","updated":"2026-10-26T12:57:42.150Z","title":"SmileCDR HAPI FHIR improper data decompression","severity":"HIGH","score":8.7,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00522},{"id":"CVE-2026-97635","published":"2026-10-22T17:57:24.056Z","updated":"2026-10-22T17:57:24.056Z","title":"Agent Zero Web UI XSS","severity":"HIGH","score":8.6,"vendor":"Agent Zero","product":"Agent Zero","kev":false,"epss":0.0026},{"id":"CVE-2026-77157","published":"2026-10-22T17:50:51.933Z","updated":"2026-11-02T12:08:17.642Z","title":"ast-cli: Auto-update downloads are not verified against a checksum before execution","severity":"MEDIUM","score":6.3,"vendor":"Checkmarx","product":"github.com/checkmarx/ast-cli","kev":false,"epss":0.00143},{"id":"CVE-2026-77156","published":"2026-10-22T17:44:34.313Z","updated":"2026-11-02T12:07:03.121Z","title":"ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory","severity":"MEDIUM","score":6.3,"vendor":"Checkmarx","product":"github.com/checkmarx/ast-cli","kev":false,"epss":0.00349},{"id":"CVE-2026-108357","published":"2026-10-22T17:38:16.098Z","updated":"2026-10-23T21:08:17.784Z","title":"PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service","severity":"HIGH","score":8.8,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00463},{"id":"CVE-2026-13599","published":"2026-10-22T17:36:17.225Z","updated":"2026-10-22T19:00:30.651Z","title":"ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB","severity":"MEDIUM","score":5.8,"vendor":"ABB","product":"Ability Edgenius","kev":false,"epss":0.00131},{"id":"CVE-2026-114611","published":"2026-10-22T17:33:13.611Z","updated":"2026-10-29T02:23:10.004Z","title":"OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack","severity":"CRITICAL","score":9.1,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00324},{"id":"CVE-2026-108359","published":"2026-10-22T17:32:49.724Z","updated":"2026-10-29T11:51:32.420Z","title":"PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)","severity":"HIGH","score":8.7,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.0066},{"id":"CVE-2026-93336","published":"2026-10-22T17:32:13.820Z","updated":"2026-11-02T12:06:25.813Z","title":"Missing authorization in the unit resources download route in Juju controllers","severity":"HIGH","score":7.1,"vendor":"Canonical","product":"Juju","kev":false,"epss":0.00215},{"id":"CVE-2026-108358","published":"2026-10-22T17:29:56.449Z","updated":"2026-10-23T21:08:28.517Z","title":"PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service","severity":"HIGH","score":8.8,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00625},{"id":"CVE-2026-108360","published":"2026-10-22T17:26:59.148Z","updated":"2026-10-29T11:50:16.342Z","title":"PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading","severity":"MEDIUM","score":6.4,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00339},{"id":"CVE-2026-54238","published":"2026-10-22T17:22:50.862Z","updated":"2026-10-30T15:11:34.608Z","title":"Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization","severity":"LOW","score":3.1,"vendor":"supabase","product":"realtime","kev":false,"epss":0.00206},{"id":"CVE-2026-114610","published":"2026-10-22T17:21:11.788Z","updated":"2026-10-29T02:22:14.998Z","title":"fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'","severity":"MEDIUM","score":6.5,"vendor":"py-pdf","product":"fpdf2","kev":false,"epss":0.00459},{"id":"CVE-2026-114609","published":"2026-10-22T17:18:22.802Z","updated":"2026-10-29T02:19:57.646Z","title":"fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content","severity":"MEDIUM","score":5.8,"vendor":"py-pdf","product":"fpdf2","kev":false,"epss":0.00252},{"id":"CVE-2026-54532","published":"2026-10-22T17:16:38.540Z","updated":"2026-10-30T19:47:13.018Z","title":"CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft","severity":"MEDIUM","score":6.9,"vendor":"CloudPirates-io","product":"helm-charts","kev":false,"epss":0.00187},{"id":"CVE-2026-115513","published":"2026-10-22T16:52:10.542Z","updated":"2026-10-23T13:28:36.941Z","title":"OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel","severity":"MEDIUM","score":6.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00296},{"id":"CVE-2026-115416","published":"2026-10-22T16:50:18.238Z","updated":"2026-11-02T12:04:50.864Z","title":"Incorrect authorization checks in Amazon Athena engine version 3 query processing","severity":"MEDIUM","score":6.3,"vendor":"AWS","product":"Amazon Athena","kev":false,"epss":0.00273},{"id":"CVE-2026-114608","published":"2026-10-22T16:50:02.569Z","updated":"2026-10-29T11:49:18.315Z","title":"Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME","severity":"MEDIUM","score":5.4,"vendor":"pylint-dev","product":"pylint","kev":false,"epss":0.00115},{"id":"CVE-2026-114607","published":"2026-10-22T16:47:27.480Z","updated":"2026-10-23T15:02:40.820Z","title":"better-auth: OAuth state can be used as a Magic Link to sign in as another user","severity":"CRITICAL","score":9.1,"vendor":"better-auth","product":"better-auth","kev":false,"epss":0.0042},{"id":"CVE-2026-114606","published":"2026-10-22T16:35:34.251Z","updated":"2026-10-30T19:22:29.193Z","title":"draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)","severity":"MEDIUM","score":5.6,"vendor":"jgraph","product":"drawio-desktop","kev":false,"epss":0.00356},{"id":"CVE-2026-97631","published":"2026-10-22T16:32:27.619Z","updated":"2026-10-30T19:34:40.851Z","title":"Pre-boot RCE in EDK II PXE driver","severity":"CRITICAL","score":9.5,"vendor":"TianoCore","product":"EDK2","kev":false,"epss":0.00635},{"id":"CVE-2026-115502","published":"2026-10-22T16:32:13.145Z","updated":"2026-10-23T09:31:02.963Z","title":"DataApp links without login expose job information to other user in KNIME Business Hub","severity":"MEDIUM","score":6.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00277},{"id":"CVE-2026-104068","published":"2026-10-22T16:27:11.748Z","updated":"2026-10-27T01:30:31.057Z","title":"JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore","severity":"HIGH","score":8.6,"vendor":"JetBackup","product":"JetBackup","kev":false,"epss":0.00657},{"id":"CVE-2026-114605","published":"2026-10-22T16:25:32.509Z","updated":"2026-10-29T02:19:02.339Z","title":"dnspython dns.name.from_wire_parser() excessive CPU use","severity":"HIGH","score":7.5,"vendor":"rthalley","product":"dnspython","kev":false,"epss":0.00466},{"id":"CVE-2026-75507","published":"2026-10-22T16:12:38.424Z","updated":"2026-10-23T21:08:40.217Z","title":"GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.006},{"id":"CVE-2026-75508","published":"2026-10-22T16:10:17.124Z","updated":"2026-10-29T11:47:15.190Z","title":"GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.00573},{"id":"CVE-2026-115496","published":"2026-10-22T15:56:48.222Z","updated":"2026-10-22T19:00:30.950Z","title":"Workflow names may be leaked to unauthenticated users in KNIME Business Hub","severity":"MEDIUM","score":6.9,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00401},{"id":"CVE-2026-114487","published":"2026-10-22T15:48:35.922Z","updated":"2026-10-30T19:33:39.484Z","title":"Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00198},{"id":"CVE-2026-115494","published":"2026-10-22T15:43:29.246Z","updated":"2026-10-22T19:00:31.097Z","title":"CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub","severity":"MEDIUM","score":5.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00191},{"id":"CVE-2026-114486","published":"2026-10-22T15:38:55.177Z","updated":"2026-10-30T18:53:01.286Z","title":"Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00221},{"id":"CVE-2026-114485","published":"2026-10-22T15:37:16.071Z","updated":"2026-10-30T18:51:20.872Z","title":"Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00241},{"id":"CVE-2026-114603","published":"2026-10-22T15:29:25.108Z","updated":"2026-10-29T02:17:42.817Z","title":"OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api","severity":"MEDIUM","score":5.3,"vendor":"open-telemetry","product":"opentelemetry-python","kev":false,"epss":0.00487},{"id":"CVE-2026-115454","published":"2026-10-22T15:25:45.446Z","updated":"2026-10-22T19:00:31.252Z","title":"Large tables in data apps can bring down execution services in KNIME Hub","severity":"MEDIUM","score":5.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00365},{"id":"CVE-2026-94482","published":"2026-10-22T15:22:10.155Z","updated":"2026-10-30T18:09:28.569Z","title":"Next.js: Denial of Service in App Router using Server Actions","severity":"HIGH","score":8.2,"vendor":"vercel","product":"next.js","kev":false,"epss":0.00386},{"id":"CVE-2026-115453","published":"2026-10-22T15:22:09.445Z","updated":"2026-10-30T18:49:27.205Z","title":"Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries","severity":"HIGH","score":7.1,"vendor":"MarcosCamara01","product":"Ecommerce Template","kev":false,"epss":0.00249},{"id":"CVE-2026-115450","published":"2026-10-22T15:13:37.089Z","updated":"2026-10-30T18:47:42.157Z","title":"Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier","severity":"HIGH","score":7.1,"vendor":"MarcosCamara01","product":"Ecommerce Template","kev":false,"epss":0.00235},{"id":"CVE-2026-115482","published":"2026-10-22T15:07:30.961Z","updated":"2026-10-22T19:00:31.416Z","title":"In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as…","severity":"HIGH","score":7.5,"vendor":"litespeedtech","product":"lsquic","kev":false,"epss":0.00446},{"id":"CVE-2026-114515","published":"2026-10-22T14:58:02.272Z","updated":"2026-10-23T15:03:45.075Z","title":"OCO-Server: Self-Service Portal uninstall-job authorization bypass","severity":"MEDIUM","score":6.5,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00267},{"id":"CVE-2026-61791","published":"2026-10-22T14:55:54.269Z","updated":"2026-10-29T11:46:11.262Z","title":"OCO-Server: Stored XSS through agent hostnames in command buttons","severity":"HIGH","score":7.4,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00287},{"id":"CVE-2026-16477","published":"2026-10-22T14:47:26.652Z","updated":"2026-10-22T19:00:31.571Z","title":"Insecure Deserialization of .cleanshot Files in CleanShot X","severity":"HIGH","score":8.4,"vendor":"MTW","product":"CleanShot X","kev":false,"epss":0.00287},{"id":"CVE-2026-114510","published":"2026-10-22T14:46:52.353Z","updated":"2026-10-30T19:16:29.340Z","title":"Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content","severity":"HIGH","score":7.1,"vendor":"stevereiner","product":"flexible-graphrag","kev":false,"epss":0.00365},{"id":"CVE-2026-111181","published":"2026-10-22T14:29:56.577Z","updated":"2026-10-22T19:00:31.729Z","title":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body","severity":"HIGH","score":7.5,"vendor":"body-parser","product":"body-parser","kev":false,"epss":0.00388},{"id":"CVE-2026-113872","published":"2026-10-22T14:20:18.363Z","updated":"2026-10-22T19:00:31.884Z","title":"multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown","severity":"HIGH","score":7.5,"vendor":"multer","product":"multer","kev":false,"epss":0.00442},{"id":"CVE-2026-89410","published":"2026-10-22T13:50:41.357Z","updated":"2026-10-23T10:56:09.669Z","title":"Out-of-bounds read in Z-Wave NCP SPI Handler","severity":"MEDIUM","score":5.1,"vendor":"Silicon Labs","product":"Z-Wave SDK","kev":false,"epss":0.00183},{"id":"CVE-2026-89409","published":"2026-10-22T13:50:04.309Z","updated":"2026-10-22T19:00:32.048Z","title":"Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​","severity":"MEDIUM","score":5.3,"vendor":"Silicon Labs","product":"Z-Wave SDK","kev":false,"epss":0.00269},{"id":"CVE-2026-85079","published":"2026-10-22T13:46:39.556Z","updated":"2026-10-22T19:00:32.213Z","title":"Out-of-bounds write in Zigbee Simple_Desc_req handling","severity":"HIGH","score":7.5,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00655},{"id":"CVE-2026-94502","published":"2026-10-22T13:45:30.856Z","updated":"2026-10-23T10:56:09.812Z","title":"Out-of-bounds write in Zigbee Publish Price Matrix handling","severity":"HIGH","score":7.5,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00655},{"id":"CVE-2026-115249","published":"2026-10-22T13:45:15.849Z","updated":"2026-10-29T11:41:57.646Z","title":"subhajitkhan online-clinic-management-system Appointment Booking patappointtime.php input validation","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00193},{"id":"CVE-2026-66282","published":"2026-10-22T13:44:08.429Z","updated":"2026-10-23T10:56:09.951Z","title":"Authenticated Denial-of-Service in Zigbee Publish Billing Period","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00331},{"id":"CVE-2026-66281","published":"2026-10-22T13:43:26.358Z","updated":"2026-10-23T10:56:10.091Z","title":"Authenticated Denial-of-Service in Zigbee Discover Attributes Handling","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00331},{"id":"CVE-2026-85080","published":"2026-10-22T13:42:26.160Z","updated":"2026-10-23T10:56:10.233Z","title":"Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00498},{"id":"CVE-2026-66279","published":"2026-10-22T13:41:03.391Z","updated":"2026-10-23T10:56:10.379Z","title":"Dis-connect vulnerability in Connect Stack","severity":"HIGH","score":7.2,"vendor":"Silicon Labs","product":"Connect SDK","kev":false,"epss":0.00245},{"id":"CVE-2026-111497","published":"2026-10-22T13:35:41.975Z","updated":"2026-10-30T18:31:38.139Z","title":"Out-of-Bounds Write in Google Brotli Decoder","severity":"CRITICAL","score":9.2,"vendor":"Google","product":"Brotli","kev":true,"epss":0.82641},{"id":"CVE-2026-92709","published":"2026-10-22T13:32:56.695Z","updated":"2026-10-29T02:15:30.165Z","title":"Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE","severity":"HIGH","score":8.1,"vendor":"rsyslog","product":"rsyslog","kev":false,"epss":0.00375},{"id":"CVE-2026-115248","published":"2026-10-22T13:30:10.769Z","updated":"2026-10-29T02:14:19.530Z","title":"subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.0025},{"id":"CVE-2026-113582","published":"2026-10-22T13:27:11.536Z","updated":"2026-10-30T18:46:10.568Z","title":"Apache Abdera: XML external entity expansion in Atom document parsing","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Abdera","kev":false,"epss":0.00463},{"id":"CVE-2026-115400","published":"2026-10-22T13:23:38.856Z","updated":"2026-10-29T02:13:18.485Z","title":"crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens","severity":"MEDIUM","score":6.7,"vendor":"crawlseo","product":"crawlseo","kev":false,"epss":0.00104},{"id":"CVE-2026-115411","published":"2026-10-22T13:20:01.875Z","updated":"2026-10-29T11:38:10.900Z","title":"crawlseo before 0.2.4 Server-Side Request Forgery via Crawler","severity":"MEDIUM","score":5.3,"vendor":"crawlseo","product":"crawlseo","kev":false,"epss":0.00282},{"id":"CVE-2026-115247","published":"2026-10-22T13:15:19.125Z","updated":"2026-10-23T21:15:01.427Z","title":"subhajitkhan online-clinic-management-system patientregistration.php missing encryption","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00125},{"id":"CVE-2026-115246","published":"2026-10-22T13:00:19.637Z","updated":"2026-10-29T11:27:28.126Z","title":"subhajitkhan online-clinic-management-system patdocmsg.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00199},{"id":"CVE-2026-102785","published":"2026-10-22T12:36:43.196Z","updated":"2026-10-22T15:04:40.346Z","title":"Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52","severity":"CRITICAL","score":10,"vendor":"yootheme.com","product":"YOOtheme Pro extension for Joomla","kev":false,"epss":0.00772},{"id":"CVE-2026-112832","published":"2026-10-22T11:00:11.107Z","updated":"2026-10-22T13:37:46.390Z","title":"WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability","severity":"CRITICAL","score":9.8,"vendor":"CozyThemes","product":"Rootblox","kev":false,"epss":0.0044},{"id":"CVE-2026-112842","published":"2026-10-22T11:00:10.742Z","updated":"2026-10-22T13:37:46.527Z","title":"WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Cozmoslabs","product":"Paid Member Subscriptions","kev":false,"epss":0.00207},{"id":"CVE-2026-112822","published":"2026-10-22T11:00:10.699Z","updated":"2026-10-22T13:37:46.663Z","title":"WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"AmentoTech","product":"Workreap Core","kev":false,"epss":0.00289},{"id":"CVE-2026-115334","published":"2026-10-22T10:57:50.195Z","updated":"2026-10-22T10:57:50.195Z","title":"Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint","severity":"HIGH","score":7.6,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00236},{"id":"CVE-2026-115333","published":"2026-10-22T10:57:49.499Z","updated":"2026-10-23T15:03:54.486Z","title":"Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix","severity":"HIGH","score":8.2,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00362},{"id":"CVE-2026-115332","published":"2026-10-22T10:57:48.791Z","updated":"2026-10-29T11:25:42.720Z","title":"Lotus through 0.10.2 SQL Injection via Subscription Filter Keys","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00449},{"id":"CVE-2026-115331","published":"2026-10-22T10:57:48.115Z","updated":"2026-10-29T02:11:42.284Z","title":"Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00419},{"id":"CVE-2026-115330","published":"2026-10-22T10:57:47.428Z","updated":"2026-10-22T10:57:47.428Z","title":"Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00298},{"id":"CVE-2026-115329","published":"2026-10-22T10:57:46.708Z","updated":"2026-10-23T15:04:20.467Z","title":"Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet","severity":"MEDIUM","score":6,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00257},{"id":"CVE-2026-115328","published":"2026-10-22T10:57:45.975Z","updated":"2026-10-29T13:39:16.913Z","title":"JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API","severity":"HIGH","score":8.7,"vendor":"riclolsen","product":"json-scada","kev":false,"epss":0.0029},{"id":"CVE-2026-115327","published":"2026-10-22T10:57:45.264Z","updated":"2026-10-29T02:10:37.665Z","title":"libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser","severity":"MEDIUM","score":6,"vendor":"CESNET","product":"libyang","kev":false,"epss":0.00314},{"id":"CVE-2026-115326","published":"2026-10-22T10:57:44.551Z","updated":"2026-10-22T10:57:44.551Z","title":"QloApps through 1.7.0 IDOR via OrderDetailController Refund Request","severity":"MEDIUM","score":5.3,"vendor":"Webkul","product":"QloApps","kev":false,"epss":0.00219},{"id":"CVE-2026-115325","published":"2026-10-22T10:57:43.846Z","updated":"2026-10-23T15:05:01.043Z","title":"Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup","severity":"HIGH","score":8.7,"vendor":"gravitl","product":"netmaker","kev":false,"epss":0.00362},{"id":"CVE-2026-115324","published":"2026-10-22T10:57:43.136Z","updated":"2026-10-29T11:23:41.895Z","title":"mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store","severity":"CRITICAL","score":9.2,"vendor":"mem0ai","product":"mem0","kev":false,"epss":0.00322},{"id":"CVE-2026-115323","published":"2026-10-22T10:57:42.424Z","updated":"2026-10-29T02:08:25.891Z","title":"EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API","severity":"MEDIUM","score":6.9,"vendor":"evershopcommerce","product":"evershop","kev":false,"epss":0.00242},{"id":"CVE-2026-115322","published":"2026-10-22T10:57:41.716Z","updated":"2026-10-22T10:57:41.716Z","title":"Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00281},{"id":"CVE-2026-115321","published":"2026-10-22T10:57:40.982Z","updated":"2026-10-23T15:05:29.678Z","title":"Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00284},{"id":"CVE-2026-115319","published":"2026-10-22T10:57:40.288Z","updated":"2026-10-29T11:21:21.376Z","title":"fzf 0.36.0 through 0.74.5 Denial of Service via maskActionContents","severity":"LOW","score":2,"vendor":"junegunn","product":"fzf","kev":false,"epss":0.00101},{"id":"CVE-2026-114665","published":"2026-10-22T10:57:39.553Z","updated":"2026-10-29T02:07:01.607Z","title":"Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare","severity":"HIGH","score":7.1,"vendor":"zhenorzz","product":"goploy","kev":false,"epss":0.00353},{"id":"CVE-2025-71434","published":"2026-10-22T10:57:38.815Z","updated":"2026-10-23T13:28:30.051Z","title":"Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list","severity":"HIGH","score":8.8,"vendor":"Weaver Network Co., Ltd.","product":"E-cology","kev":false,"epss":0.00318},{"id":"CVE-2024-58396","published":"2026-10-22T10:57:38.109Z","updated":"2026-10-23T21:15:23.595Z","title":"YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId","severity":"HIGH","score":8.7,"vendor":"YouDataSum","product":"CPAS Audit Management System","kev":false,"epss":0.00498},{"id":"CVE-2024-58394","published":"2026-10-22T10:57:37.409Z","updated":"2026-10-29T21:15:10.024Z","title":"Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying","severity":"MEDIUM","score":5.1,"vendor":"Retool","product":"Retool","kev":false,"epss":0.00204},{"id":"CVE-2024-58393","published":"2026-10-22T10:57:36.699Z","updated":"2026-10-29T02:05:25.721Z","title":"i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php","severity":"HIGH","score":8.8,"vendor":"i-Netsolution","product":"Readymade Unilevel Ecommerce MLM","kev":false,"epss":0.0027},{"id":"CVE-2023-54413","published":"2026-10-22T10:57:35.997Z","updated":"2026-10-22T10:57:35.997Z","title":"WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang","severity":"MEDIUM","score":5.1,"vendor":"OnTheGoSystems","product":"WPML Multilingual CMS","kev":false,"epss":0.00211},{"id":"CVE-2022-51025","published":"2026-10-22T10:57:35.298Z","updated":"2026-10-23T21:15:30.156Z","title":"Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer","severity":"HIGH","score":7.1,"vendor":"Penta Security Systems","product":"WAPPLES","kev":false,"epss":0.00461},{"id":"CVE-2022-51024","published":"2026-10-22T10:57:34.599Z","updated":"2026-10-29T11:17:48.365Z","title":"Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint","severity":"HIGH","score":8.7,"vendor":"Kareadita","product":"Kavita","kev":false,"epss":0.00613},{"id":"CVE-2022-51023","published":"2026-10-22T10:57:33.897Z","updated":"2026-10-29T02:04:37.497Z","title":"PHPOK < 5.4.081 SQL Injection via api.php sort Parameter","severity":"HIGH","score":8.8,"vendor":"PHPOK","product":"PHPOK","kev":false,"epss":0.00262},{"id":"CVE-2022-51022","published":"2026-10-22T10:57:33.205Z","updated":"2026-10-22T10:57:33.205Z","title":"YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint","severity":"HIGH","score":8.8,"vendor":"liukuo362573","product":"YiShaAdmin","kev":false,"epss":0.00794},{"id":"CVE-2022-51021","published":"2026-10-22T10:57:32.517Z","updated":"2026-10-23T21:15:37.175Z","title":"NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint","severity":"HIGH","score":8.8,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00461},{"id":"CVE-2021-48017","published":"2026-10-22T10:57:31.855Z","updated":"2026-10-29T11:16:33.337Z","title":"OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi","severity":"HIGH","score":8.7,"vendor":"OrbiTeam","product":"BSCW Server","kev":false,"epss":0.00428},{"id":"CVE-2021-48016","published":"2026-10-22T10:57:31.176Z","updated":"2026-10-29T02:06:05.908Z","title":"DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php","severity":"CRITICAL","score":9.3,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00441},{"id":"CVE-2021-48015","published":"2026-10-22T10:57:30.531Z","updated":"2026-10-22T10:57:30.531Z","title":"JeeWMS Path Traversal via showOrDownByurl.do","severity":"HIGH","score":8.7,"vendor":"erzhongxmu","product":"JeeWMS","kev":false,"epss":0.00563},{"id":"CVE-2021-48014","published":"2026-10-22T10:57:29.782Z","updated":"2026-10-23T21:15:46.961Z","title":"FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer","severity":"CRITICAL","score":9.3,"vendor":"FanRuan","product":"FineReport","kev":false,"epss":0.02031},{"id":"CVE-2021-48013","published":"2026-10-22T10:57:29.018Z","updated":"2026-10-29T11:13:18.528Z","title":"Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload","severity":"HIGH","score":8.7,"vendor":"Weaver Network Co., Ltd.","product":"E-cology","kev":false,"epss":0.00736},{"id":"CVE-2020-37284","published":"2026-10-22T10:57:28.307Z","updated":"2026-10-28T18:01:16.689Z","title":"Sickbeard build-507 Reflected XSS via testNaming pattern Parameter","severity":"MEDIUM","score":5.1,"vendor":"midgetspy","product":"Sickbeard","kev":false,"epss":0.00205},{"id":"CVE-2019-25779","published":"2026-10-22T10:57:27.435Z","updated":"2026-10-22T10:57:27.435Z","title":"WooThemes Diarise 1.5.9 Local File Disclosure via download.php","severity":"HIGH","score":8.7,"vendor":"WooThemes","product":"Diarise","kev":false,"epss":0.00447},{"id":"CVE-2019-25778","published":"2026-10-22T10:57:26.733Z","updated":"2026-10-23T21:16:06.927Z","title":"SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter","severity":"HIGH","score":8.8,"vendor":"SeaCMS","product":"SeaCMS","kev":false,"epss":0.00461},{"id":"CVE-2018-25439","published":"2026-10-22T10:57:26.044Z","updated":"2026-10-29T11:09:34.251Z","title":"MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter","severity":"HIGH","score":8.7,"vendor":"MetInfo","product":"MetInfo","kev":false,"epss":0.00469},{"id":"CVE-2018-25438","published":"2026-10-22T10:57:25.404Z","updated":"2026-10-28T18:00:29.939Z","title":"Intermesh Group-Office < 3.5.5 Path Traversal via compress.php","severity":"HIGH","score":8.7,"vendor":"Intermesh","product":"Group-Office","kev":false,"epss":0.00536},{"id":"CVE-2017-20290","published":"2026-10-22T10:57:24.711Z","updated":"2026-10-22T10:57:24.711Z","title":"Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed","severity":"MEDIUM","score":5.1,"vendor":"Discourse","product":"Discourse","kev":false,"epss":0.00265},{"id":"CVE-2017-20289","published":"2026-10-22T10:57:23.974Z","updated":"2026-10-23T21:16:32.796Z","title":"Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter","severity":"HIGH","score":7.7,"vendor":"Broadstreet","product":"Ad Widget","kev":false,"epss":0.00931},{"id":"CVE-2017-20288","published":"2026-10-22T10:57:23.289Z","updated":"2026-10-29T11:04:55.766Z","title":"QCubed 3.1.1 Reflected XSS via installer step_2.php","severity":"MEDIUM","score":5.1,"vendor":"QCubed","product":"QCubed","kev":false,"epss":0.00256},{"id":"CVE-2017-20287","published":"2026-10-22T10:57:22.589Z","updated":"2026-10-28T17:59:15.933Z","title":"Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter","severity":"HIGH","score":8.7,"vendor":"Javo Themes","product":"Javo Spot","kev":false,"epss":0.007},{"id":"CVE-2026-13411","published":"2026-10-22T10:46:05.465Z","updated":"2026-10-22T13:37:46.805Z","title":"Null condition in Playbooks import crashes the plugin","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00321},{"id":"CVE-2026-111079","published":"2026-10-22T10:18:32.797Z","updated":"2026-10-23T15:05:47.352Z","title":"Goose: goose: shell history and environment leak via terminal integration","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00301},{"id":"CVE-2026-115207","published":"2026-10-22T10:16:12.930Z","updated":"2026-11-02T18:45:28.417Z","title":"Patch: filename validation bypass in reversal fallback allows file creation outside the working directory","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00139},{"id":"CVE-2026-112313","published":"2026-10-22T10:00:12.776Z","updated":"2026-10-22T10:56:12.260Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.0019},{"id":"CVE-2026-112820","published":"2026-10-22T10:00:12.735Z","updated":"2026-10-22T10:56:12.421Z","title":"WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability","severity":"HIGH","score":8.1,"vendor":"Elated-Themes","product":"Academist Core","kev":false,"epss":0.00438},{"id":"CVE-2026-114348","published":"2026-10-22T09:38:37.301Z","updated":"2026-10-22T13:37:46.947Z","title":"webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint","severity":"MEDIUM","score":5.3,"vendor":"webpack-dev-server","product":"webpack-dev-server","kev":false,"epss":0.00305},{"id":"CVE-2026-112085","published":"2026-10-22T09:31:59.124Z","updated":"2026-10-22T13:37:47.089Z","title":"webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades","severity":"HIGH","score":8.2,"vendor":"webpack-dev-server","product":"webpack-dev-server","kev":false,"epss":0.00147},{"id":"CVE-2026-106017","published":"2026-10-22T09:18:01.956Z","updated":"2026-10-22T13:37:47.238Z","title":"Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.","severity":"MEDIUM","score":6.3,"vendor":"OpenVPN","product":"OpenVPN 3 Core Library","kev":false,"epss":0.002},{"id":"CVE-2026-21812","published":"2026-10-22T09:07:02.600Z","updated":"2026-10-22T13:37:47.397Z","title":"Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)","severity":"LOW","score":2.2,"vendor":"HCL Software","product":"AppScan Integration with Azure Boards for ASoC & A360","kev":false,"epss":0.00144},{"id":"CVE-2026-21811","published":"2026-10-22T09:06:29.465Z","updated":"2026-10-30T18:35:58.616Z","title":"Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)","severity":"LOW","score":3.8,"vendor":"HCL Software","product":"AppScan Integration with Azure Boards for ASoC & A360","kev":false,"epss":0.00183},{"id":"CVE-2026-114703","published":"2026-10-22T08:59:26.154Z","updated":"2026-10-22T10:56:12.576Z","title":"WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"hupe13","product":"Extensions for Leaflet Map","kev":false,"epss":0.0017},{"id":"CVE-2026-114702","published":"2026-10-22T08:58:42.642Z","updated":"2026-10-22T10:56:12.729Z","title":"WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"nicdark","product":"ND Shortcodes For Visual Composer","kev":false,"epss":0.0017},{"id":"CVE-2026-114701","published":"2026-10-22T08:55:52.176Z","updated":"2026-10-22T10:56:12.880Z","title":"WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"xootix","product":"Waitlist Woocommerce ( Back in stock notifier )","kev":false,"epss":0.0017},{"id":"CVE-2026-114700","published":"2026-10-22T08:54:35.279Z","updated":"2026-10-22T10:56:13.056Z","title":"WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Gloriafood","product":"Restaurant Menu – Food Ordering System – Table Reservation","kev":false,"epss":0.0017},{"id":"CVE-2026-114699","published":"2026-10-22T08:53:03.761Z","updated":"2026-10-22T10:56:13.209Z","title":"WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"yoomoney","product":"ЮKassa для WooCommerce","kev":false,"epss":0.00256},{"id":"CVE-2026-110974","published":"2026-10-22T08:52:27.149Z","updated":"2026-10-30T18:07:46.612Z","title":"Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-json","severity":"MEDIUM","score":6.3,"vendor":"vaadin","product":"android-json","kev":false,"epss":0.00329},{"id":"CVE-2026-114195","published":"2026-10-22T08:48:20.446Z","updated":"2026-10-22T10:56:13.370Z","title":"WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"ShopMagic","kev":false,"epss":0.0027},{"id":"CVE-2026-112218","published":"2026-10-22T08:47:02.409Z","updated":"2026-10-22T10:56:13.526Z","title":"WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Ahmad","product":"Majestic Support","kev":false,"epss":0.00242},{"id":"CVE-2026-114696","published":"2026-10-22T08:46:29.875Z","updated":"2026-10-29T18:51:12.133Z","title":"WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"miniOrange","product":"Page Restriction WordPress (WP)","kev":false,"epss":0.00256},{"id":"CVE-2026-111842","published":"2026-10-22T08:46:02.025Z","updated":"2026-10-22T10:56:13.877Z","title":"WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Sunshine","product":"Sunshine Photo Cart","kev":false,"epss":0.00242},{"id":"CVE-2026-115253","published":"2026-10-22T08:39:45.537Z","updated":"2026-10-23T03:55:18.131Z","title":"WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering","severity":"HIGH","score":7.3,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00129},{"id":"CVE-2026-96293","published":"2026-10-22T08:38:36.895Z","updated":"2026-10-23T08:01:38.060Z","title":"Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00062},{"id":"CVE-2026-112311","published":"2026-10-22T08:00:50.094Z","updated":"2026-10-22T10:56:14.032Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Arbitrary File Deletion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.00345},{"id":"CVE-2026-111851","published":"2026-10-22T08:00:50.041Z","updated":"2026-10-22T10:56:14.204Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability","severity":"HIGH","score":7.6,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.00275},{"id":"CVE-2026-112312","published":"2026-10-22T08:00:50.028Z","updated":"2026-10-30T14:37:49.722Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.00336},{"id":"CVE-2026-111830","published":"2026-10-22T08:00:49.652Z","updated":"2026-10-22T10:56:14.523Z","title":"WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Mailster","product":"WP Mailster","kev":false,"epss":0.00201},{"id":"CVE-2026-112241","published":"2026-10-22T08:00:49.628Z","updated":"2026-10-22T10:56:14.683Z","title":"WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Brainstorm Force","product":"SureCart","kev":false,"epss":0.0046},{"id":"CVE-2026-112242","published":"2026-10-22T08:00:49.604Z","updated":"2026-10-25T22:47:02.391Z","title":"WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00326},{"id":"CVE-2026-112845","published":"2026-10-22T07:33:45.372Z","updated":"2026-10-22T10:56:14.997Z","title":"WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Jory Hogeveen","product":"Off-Canvas Sidebars & Menus (Slidebars)","kev":false,"epss":0.0017},{"id":"CVE-2026-110893","published":"2026-10-22T07:33:26.080Z","updated":"2026-10-22T10:56:15.240Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00276},{"id":"CVE-2026-110894","published":"2026-10-22T07:32:51.134Z","updated":"2026-10-22T10:56:15.454Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00256},{"id":"CVE-2026-114698","published":"2026-10-22T07:31:39.662Z","updated":"2026-10-22T10:56:15.614Z","title":"WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00241},{"id":"CVE-2026-112327","published":"2026-10-22T07:01:09.933Z","updated":"2026-10-22T10:56:15.759Z","title":"WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.0033},{"id":"CVE-2026-112379","published":"2026-10-22T07:01:09.851Z","updated":"2026-10-22T10:56:15.899Z","title":"WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Codepeople","product":"Contact Form Email","kev":false,"epss":0.0019},{"id":"CVE-2026-93471","published":"2026-10-22T06:59:24.029Z","updated":"2026-10-30T18:07:07.385Z","title":"Unbounded SAML message decompression in esaml allows memory exhaustion","severity":"HIGH","score":8.7,"vendor":"handnot2","product":"esaml","kev":false,"epss":0.0066},{"id":"CVE-2026-86696","published":"2026-10-22T06:59:07.680Z","updated":"2026-10-30T18:05:53.388Z","title":"Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion","severity":"HIGH","score":8.2,"vendor":"handnot2","product":"esaml","kev":false,"epss":0.0066},{"id":"CVE-2026-105270","published":"2026-10-22T06:58:43.034Z","updated":"2026-10-30T18:04:50.590Z","title":"Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion","severity":"HIGH","score":8.7,"vendor":"arekinath","product":"esaml","kev":false,"epss":0.00531},{"id":"CVE-2026-114182","published":"2026-10-22T06:53:38.179Z","updated":"2026-10-22T10:56:16.049Z","title":"WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"IdeaBox Creations","product":"PowerPack Addons for Elementor","kev":false,"epss":0.00221},{"id":"CVE-2026-112843","published":"2026-10-22T06:53:13.511Z","updated":"2026-10-22T10:56:16.221Z","title":"WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.00198},{"id":"CVE-2026-112826","published":"2026-10-22T06:52:48.653Z","updated":"2026-10-22T10:56:16.397Z","title":"WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"eLightUp","product":"Falcon – WordPress Optimizations & Tweaks","kev":false,"epss":0.00276},{"id":"CVE-2026-114180","published":"2026-10-22T06:51:28.157Z","updated":"2026-10-22T10:56:16.552Z","title":"WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Wpmet","product":"Metform","kev":false,"epss":0.00247},{"id":"CVE-2026-111847","published":"2026-10-22T06:50:48.346Z","updated":"2026-10-22T10:56:16.712Z","title":"WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Kings Plugins","product":"MarketKing","kev":false,"epss":0.00193},{"id":"CVE-2026-114177","published":"2026-10-22T06:50:11.735Z","updated":"2026-10-22T10:56:16.853Z","title":"WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Xpro","product":"Xpro Elementor Addons","kev":false,"epss":0.00181},{"id":"CVE-2026-114175","published":"2026-10-22T06:48:49.336Z","updated":"2026-10-22T10:56:16.997Z","title":"WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability","severity":"MEDIUM","score":5.4,"vendor":"DigitalME","product":"eRoom","kev":false,"epss":0.00259},{"id":"CVE-2026-112867","published":"2026-10-22T06:46:23.617Z","updated":"2026-10-22T10:56:17.135Z","title":"WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"H5P","product":"H5P","kev":false,"epss":0.0017},{"id":"CVE-2026-114184","published":"2026-10-22T06:45:47.353Z","updated":"2026-10-22T10:56:17.294Z","title":"WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"Elementor Addon Elements","kev":false,"epss":0.00183},{"id":"CVE-2026-103634","published":"2026-10-22T06:42:20.454Z","updated":"2026-10-26T13:43:13.987Z","title":"Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache DataSketches","kev":false,"epss":0.00486},{"id":"CVE-2026-114460","published":"2026-10-22T06:37:07.818Z","updated":"2026-10-30T18:34:08.202Z","title":"Mod_qos: query truncation during json body merging permits security-rule bypass","severity":"MEDIUM","score":5.3,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00275},{"id":"CVE-2026-114459","published":"2026-10-22T06:37:06.357Z","updated":"2026-10-26T19:38:30.652Z","title":"Mod_qos: out-of-bounds reads in response-body substring matching","severity":"LOW","score":3.7,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00369},{"id":"CVE-2026-114458","published":"2026-10-22T06:37:04.887Z","updated":"2026-10-26T19:38:30.811Z","title":"Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow","severity":"MEDIUM","score":5.9,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.0031},{"id":"CVE-2026-114457","published":"2026-10-22T06:37:03.333Z","updated":"2026-10-26T19:38:30.961Z","title":"Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads","severity":"LOW","score":3.7,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00369},{"id":"CVE-2026-97328","published":"2026-10-22T06:00:18.825Z","updated":"2026-10-22T11:06:28.335Z","title":"WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"WebP Express","kev":false,"epss":0.00282},{"id":"CVE-2026-88849","published":"2026-10-22T06:00:18.654Z","updated":"2026-10-22T11:06:28.498Z","title":"MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment","severity":"LOW","score":2.7,"vendor":"Unknown","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.00219},{"id":"CVE-2026-78392","published":"2026-10-22T06:00:18.482Z","updated":"2026-10-22T11:06:28.662Z","title":"Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00337},{"id":"CVE-2026-111972","published":"2026-10-22T06:00:18.311Z","updated":"2026-10-22T11:06:28.821Z","title":"Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00251},{"id":"CVE-2026-111971","published":"2026-10-22T06:00:18.131Z","updated":"2026-10-22T11:06:28.988Z","title":"Photo Engine < 6.5.8 - Author+ Stored XSS via Collection Name","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00306},{"id":"CVE-2026-111958","published":"2026-10-22T06:00:17.950Z","updated":"2026-10-22T11:06:29.135Z","title":"Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00248},{"id":"CVE-2026-110011","published":"2026-10-22T06:00:17.779Z","updated":"2026-10-22T11:06:29.278Z","title":"MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export","severity":"LOW","score":2.7,"vendor":"Unknown","product":"MB Custom Post Types & Custom Taxonomies","kev":false,"epss":0.00245},{"id":"CVE-2026-110010","published":"2026-10-22T06:00:17.601Z","updated":"2026-10-22T11:06:29.431Z","title":"MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"MB Custom Post Types & Custom Taxonomies","kev":false,"epss":0.00211},{"id":"CVE-2026-109987","published":"2026-10-22T06:00:17.429Z","updated":"2026-10-22T11:06:29.603Z","title":"PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"PixelYourSite","kev":false,"epss":0.00238},{"id":"CVE-2026-109931","published":"2026-10-22T06:00:17.257Z","updated":"2026-10-22T11:06:29.759Z","title":"Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Infility Global","kev":false,"epss":0.00244},{"id":"CVE-2026-109927","published":"2026-10-22T06:00:17.082Z","updated":"2026-10-22T11:06:29.917Z","title":"CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escalation via cm_hipaa_update_user_role","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"HIPAA Forms","kev":false,"epss":0.00402},{"id":"CVE-2026-103234","published":"2026-10-22T06:00:16.908Z","updated":"2026-10-22T11:06:30.095Z","title":"WP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"WP Ultimate Review","kev":false,"epss":0.00225},{"id":"CVE-2026-100142","published":"2026-10-22T06:00:16.728Z","updated":"2026-10-22T11:06:30.260Z","title":"FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"FluentCart A New Era of eCommerce","kev":false,"epss":0.00298},{"id":"CVE-2026-114570","published":"2026-10-22T05:29:48.488Z","updated":"2026-10-22T19:10:33.995Z","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit","severity":"MEDIUM","score":4.9,"vendor":"WordPress Foundation","product":"WordPress","kev":false,"epss":0.00225},{"id":"CVE-2026-114223","published":"2026-10-22T04:27:26.780Z","updated":"2026-10-30T18:31:08.171Z","title":"NewType Infortech｜NT OneAPP - Exposure of Sensitive Information","severity":"MEDIUM","score":6.7,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00084},{"id":"CVE-2026-114222","published":"2026-10-22T04:27:06.190Z","updated":"2026-10-30T18:29:55.059Z","title":"NewType Infortech｜NT OneAPP - Authentication Bypass","severity":"MEDIUM","score":6.9,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00144},{"id":"CVE-2026-114221","published":"2026-10-22T04:26:43.979Z","updated":"2026-10-30T18:28:58.149Z","title":"NewType Infortech｜NT OneAPP - Credential Disclosure","severity":"MEDIUM","score":5.9,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00333},{"id":"CVE-2026-114220","published":"2026-10-22T04:26:20.542Z","updated":"2026-10-22T19:10:34.145Z","title":"NewType Infortech｜NT OneAPP - Improper Certificate Validation","severity":"CRITICAL","score":9.3,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00192},{"id":"CVE-2026-114219","published":"2026-10-22T04:25:41.557Z","updated":"2026-10-22T19:10:34.280Z","title":"NewType Infortech｜NT OneAPP - Hard-coded Credentials","severity":"CRITICAL","score":9.1,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.0034},{"id":"CVE-2026-110353","published":"2026-10-22T02:53:33.198Z","updated":"2026-10-22T19:10:34.428Z","title":"HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING…","severity":"HIGH","score":7.5,"vendor":"HAProxy","product":"HAProxy","kev":false,"epss":0.00738},{"id":"CVE-2026-110354","published":"2026-10-22T02:46:38.255Z","updated":"2026-10-22T19:10:34.563Z","title":"HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked…","severity":"HIGH","score":7.5,"vendor":"HAProxy","product":"HAProxy","kev":false,"epss":0.00807},{"id":"CVE-2026-114732","published":"2026-10-22T02:16:51.833Z","updated":"2026-10-29T10:57:39.353Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in…","severity":"MEDIUM","score":6.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00359},{"id":"CVE-2026-114731","published":"2026-10-22T02:12:34.577Z","updated":"2026-11-02T15:58:52.667Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (the utils/modcss…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00432},{"id":"CVE-2026-114730","published":"2026-10-22T02:09:40.059Z","updated":"2026-10-28T02:18:48.643Z","title":"Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by…","severity":"HIGH","score":7.2,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00373},{"id":"CVE-2026-114729","published":"2026-10-22T02:05:39.669Z","updated":"2026-10-26T19:39:00.590Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml inspected the SVG SMIL animation…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00376},{"id":"CVE-2026-114728","published":"2026-10-22T02:02:49.325Z","updated":"2026-10-26T16:46:46.332Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00374},{"id":"CVE-2026-114577","published":"2026-10-22T02:00:19.008Z","updated":"2026-10-28T02:17:54.687Z","title":"oretnom23 php-travel-agency-system Insertion insert.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00343},{"id":"CVE-2026-114727","published":"2026-10-22T01:59:00.789Z","updated":"2026-11-02T15:57:00.068Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as…","severity":"HIGH","score":8.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00327},{"id":"CVE-2026-114726","published":"2026-10-22T01:55:25.693Z","updated":"2026-10-28T02:17:15.141Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action.…","severity":"MEDIUM","score":5.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00397},{"id":"CVE-2026-114725","published":"2026-10-22T01:52:10.894Z","updated":"2026-10-26T19:39:17.780Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only…","severity":"MEDIUM","score":5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00329},{"id":"CVE-2026-114724","published":"2026-10-22T01:48:23.338Z","updated":"2026-10-28T19:02:03.045Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!”…","severity":"HIGH","score":7.4,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00407},{"id":"CVE-2026-114723","published":"2026-10-22T01:44:01.558Z","updated":"2026-11-02T15:19:13.206Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image…","severity":"LOW","score":3.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00333},{"id":"CVE-2026-114664","published":"2026-10-22T01:43:47.670Z","updated":"2026-10-22T01:43:47.670Z","title":"Frappe before 16.33.0 Blind SQL Injection via get_events","severity":"HIGH","score":7.1,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00199},{"id":"CVE-2026-114663","published":"2026-10-22T01:43:46.942Z","updated":"2026-10-23T15:06:28.237Z","title":"Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments","severity":"HIGH","score":8.6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00176},{"id":"CVE-2026-114662","published":"2026-10-22T01:43:46.224Z","updated":"2026-10-28T19:00:24.297Z","title":"Obot before 0.26.0 API Key Theft via CLI Login Token Request","severity":"HIGH","score":8.6,"vendor":"obot-platform","product":"obot","kev":false,"epss":0.00172},{"id":"CVE-2026-114661","published":"2026-10-22T01:43:45.515Z","updated":"2026-10-28T02:16:11.176Z","title":"OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints","severity":"CRITICAL","score":9,"vendor":"openremote","product":"openremote","kev":false,"epss":0.0035},{"id":"CVE-2026-114660","published":"2026-10-22T01:43:44.845Z","updated":"2026-10-22T01:43:44.845Z","title":"Grav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form Directives","severity":"HIGH","score":7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00211},{"id":"CVE-2026-114659","published":"2026-10-22T01:43:44.133Z","updated":"2026-10-23T15:07:07.168Z","title":"Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes","severity":"HIGH","score":7.1,"vendor":"getgrav","product":"grav-plugin-flex-objects","kev":false,"epss":0.00628},{"id":"CVE-2026-114658","published":"2026-10-22T01:43:43.437Z","updated":"2026-10-28T18:59:54.096Z","title":"Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav-plugin-login","kev":false,"epss":0.00264},{"id":"CVE-2026-114657","published":"2026-10-22T01:43:42.747Z","updated":"2026-10-28T02:15:08.666Z","title":"Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Uri","severity":"MEDIUM","score":6.9,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00217},{"id":"CVE-2026-114656","published":"2026-10-22T01:43:42.056Z","updated":"2026-10-22T01:43:42.056Z","title":"Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher","severity":"MEDIUM","score":6.9,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00154},{"id":"CVE-2026-114642","published":"2026-10-22T01:43:41.355Z","updated":"2026-10-23T15:07:43.191Z","title":"Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00193},{"id":"CVE-2026-114641","published":"2026-10-22T01:43:40.663Z","updated":"2026-10-28T18:58:55.522Z","title":"Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper","severity":"MEDIUM","score":6.3,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00256},{"id":"CVE-2026-114640","published":"2026-10-22T01:43:39.899Z","updated":"2026-10-28T02:14:25.018Z","title":"Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00192},{"id":"CVE-2026-114639","published":"2026-10-22T01:43:39.232Z","updated":"2026-10-22T01:43:39.232Z","title":"Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00295},{"id":"CVE-2026-114638","published":"2026-10-22T01:43:38.571Z","updated":"2026-10-23T15:08:01.405Z","title":"Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00219},{"id":"CVE-2026-114637","published":"2026-10-22T01:43:37.851Z","updated":"2026-10-28T18:57:09.823Z","title":"Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00284},{"id":"CVE-2026-114636","published":"2026-10-22T01:43:37.186Z","updated":"2026-10-28T02:13:42.620Z","title":"Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00243},{"id":"CVE-2026-114635","published":"2026-10-22T01:43:36.508Z","updated":"2026-10-22T01:43:36.508Z","title":"Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00188},{"id":"CVE-2026-114634","published":"2026-10-22T01:43:35.830Z","updated":"2026-10-23T15:08:11.068Z","title":"WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect","severity":"MEDIUM","score":5.3,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00248},{"id":"CVE-2026-114633","published":"2026-10-22T01:43:33.073Z","updated":"2026-10-28T18:48:57.512Z","title":"WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php","severity":"HIGH","score":7,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00442},{"id":"CVE-2026-114722","published":"2026-10-22T01:39:43.658Z","updated":"2026-10-28T02:13:07.335Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an…","severity":"MEDIUM","score":6.5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00252},{"id":"CVE-2026-114721","published":"2026-10-22T01:36:10.621Z","updated":"2026-10-26T19:39:29.151Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action…","severity":"LOW","score":3.1,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00296},{"id":"CVE-2026-114720","published":"2026-10-22T01:32:44.426Z","updated":"2026-10-26T16:46:46.479Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this…","severity":"HIGH","score":7.1,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00794},{"id":"CVE-2026-114576","published":"2026-10-22T01:30:21.675Z","updated":"2026-10-23T21:16:58.599Z","title":"Linksys RE6250 Web Management strcmp random values","severity":"MEDIUM","score":6.3,"vendor":"Linksys","product":"RE6250","kev":false,"epss":0.005},{"id":"CVE-2026-114719","published":"2026-10-22T01:28:45.516Z","updated":"2026-11-02T15:54:43.963Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin…","severity":"LOW","score":3.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00216},{"id":"CVE-2026-114718","published":"2026-10-22T01:24:46.941Z","updated":"2026-10-28T02:12:35.708Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a…","severity":"MEDIUM","score":4.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00293},{"id":"CVE-2026-84910","published":"2026-10-22T01:22:18.564Z","updated":"2026-10-22T13:47:41.423Z","title":"Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Advanced Search","kev":false,"epss":0.00189},{"id":"CVE-2026-84911","published":"2026-10-22T01:22:17.746Z","updated":"2026-10-22T13:48:23.369Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119","severity":"LOW","score":3.1,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.0019},{"id":"CVE-2026-84912","published":"2026-10-22T01:22:16.899Z","updated":"2026-10-22T13:49:28.251Z","title":"AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00188},{"id":"CVE-2026-84913","published":"2026-10-22T01:22:16.062Z","updated":"2026-10-22T13:50:08.966Z","title":"AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"AI Translate","kev":false,"epss":0.00188},{"id":"CVE-2026-84914","published":"2026-10-22T01:22:15.195Z","updated":"2026-10-22T17:08:38.215Z","title":"Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Calculate Working Days","kev":false,"epss":0.00272},{"id":"CVE-2026-84915","published":"2026-10-22T01:22:14.360Z","updated":"2026-10-22T17:09:33.536Z","title":"Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Component blocks","kev":false,"epss":0.00205},{"id":"CVE-2026-84923","published":"2026-10-22T01:22:13.548Z","updated":"2026-10-22T17:10:34.544Z","title":"Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Email Verification / SMS Verification / OTP Verification","kev":false,"epss":0.00309},{"id":"CVE-2026-84924","published":"2026-10-22T01:22:12.714Z","updated":"2026-10-22T17:11:16.517Z","title":"Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Email Verification / SMS Verification / OTP Verification","kev":false,"epss":0.0023},{"id":"CVE-2026-84916","published":"2026-10-22T01:22:11.876Z","updated":"2026-10-22T17:11:51.927Z","title":"Islandora  - Moderately critical - Access bypass - SA-CONTRIB-2026-126","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Islandora","kev":false,"epss":0.0025},{"id":"CVE-2026-84917","published":"2026-10-22T01:22:11.076Z","updated":"2026-10-22T17:14:41.654Z","title":"Jsonapi Role Access  - Critical - Access bypass - SA-CONTRIB-2026-127","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Jsonapi Role Access","kev":false,"epss":0.00246},{"id":"CVE-2026-16648","published":"2026-10-22T01:22:10.256Z","updated":"2026-10-22T17:15:23.605Z","title":"Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Mailer Plus Log","kev":false,"epss":0.00248},{"id":"CVE-2026-81163","published":"2026-10-22T01:22:09.449Z","updated":"2026-10-22T17:15:58.879Z","title":"Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Media Library Importer","kev":false,"epss":0.00266},{"id":"CVE-2026-84918","published":"2026-10-22T01:22:08.604Z","updated":"2026-10-22T17:16:33.894Z","title":"Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Monobank payment API","kev":false,"epss":0.00157},{"id":"CVE-2026-84919","published":"2026-10-22T01:22:07.765Z","updated":"2026-10-22T17:17:13.561Z","title":"PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"PhotoSwipe - Responsive JavaScript Modal Image Gallery","kev":false,"epss":0.00205},{"id":"CVE-2026-84920","published":"2026-10-22T01:22:06.941Z","updated":"2026-10-22T18:28:33.244Z","title":"Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Unpublished Node Permissions","kev":false,"epss":0.00289},{"id":"CVE-2026-84921","published":"2026-10-22T01:22:06.119Z","updated":"2026-10-22T17:17:59.733Z","title":"Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform Submissions Delete","kev":false,"epss":0.00366},{"id":"CVE-2026-87936","published":"2026-10-22T01:22:05.298Z","updated":"2026-10-22T17:18:56.762Z","title":"amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"amazee.ai Private AI Provider","kev":false,"epss":0.00273},{"id":"CVE-2026-87937","published":"2026-10-22T01:22:04.473Z","updated":"2026-10-22T17:29:54.899Z","title":"Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Central Authentication System (CAS) Server","kev":false,"epss":0.00284},{"id":"CVE-2026-87938","published":"2026-10-22T01:22:03.658Z","updated":"2026-10-30T20:00:58.622Z","title":"CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"CSP log","kev":false,"epss":0.00361},{"id":"CVE-2026-87939","published":"2026-10-22T01:22:02.857Z","updated":"2026-10-22T17:27:21.567Z","title":"Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Feed Block","kev":false,"epss":0.00198},{"id":"CVE-2026-87940","published":"2026-10-22T01:22:02.034Z","updated":"2026-10-22T17:20:25.737Z","title":"Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Key auth","kev":false,"epss":0.00232},{"id":"CVE-2026-87941","published":"2026-10-22T01:22:01.192Z","updated":"2026-10-30T16:40:44.058Z","title":"Patreon - Critical - Unsupported - SA-CONTRIB-2026-139","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Patreon","kev":false,"epss":0.00312},{"id":"CVE-2026-87942","published":"2026-10-22T01:22:00.354Z","updated":"2026-10-22T17:19:38.323Z","title":"SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"SafeDelete","kev":false,"epss":0.00205},{"id":"CVE-2026-87943","published":"2026-10-22T01:21:59.525Z","updated":"2026-10-22T16:52:53.027Z","title":"SAML SSO - Service Provider  - Critical - Improper access control - SA-CONTRIB-2026-141","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00246},{"id":"CVE-2026-87944","published":"2026-10-22T01:21:58.730Z","updated":"2026-10-22T16:51:45.791Z","title":"SAML SSO - Service Provider  - Critical - Improper certificate validation - SA-CONTRIB-2026-142","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00139},{"id":"CVE-2026-87945","published":"2026-10-22T01:21:57.909Z","updated":"2026-10-22T16:51:08.655Z","title":"SAML SSO - Service Provider  - Critical - Open redirect - SA-CONTRIB-2026-143","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00218},{"id":"CVE-2026-87946","published":"2026-10-22T01:21:57.093Z","updated":"2026-10-22T16:40:47.269Z","title":"SAML SSO - Service Provider  - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00225},{"id":"CVE-2026-87947","published":"2026-10-22T01:21:56.265Z","updated":"2026-10-22T16:38:08.451Z","title":"SAML SSO - Service Provider  - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00141},{"id":"CVE-2026-87948","published":"2026-10-22T01:21:55.442Z","updated":"2026-10-22T16:37:28.462Z","title":"SAML SSO - Service Provider  - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146","severity":"LOW","score":3.5,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.0022},{"id":"CVE-2026-87949","published":"2026-10-22T01:21:54.603Z","updated":"2026-10-22T16:36:53.769Z","title":"SAML SSO - Service Provider  - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147","severity":"LOW","score":3.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00212},{"id":"CVE-2026-87950","published":"2026-10-22T01:21:53.804Z","updated":"2026-10-22T16:25:30.715Z","title":"SAML SSO - Service Provider  - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00289},{"id":"CVE-2026-87951","published":"2026-10-22T01:21:52.996Z","updated":"2026-10-22T16:24:42.704Z","title":"SAML SSO - Service Provider  - Moderately critical - Information disclosure - SA-CONTRIB-2026-149","severity":"LOW","score":3.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00248},{"id":"CVE-2026-87952","published":"2026-10-22T01:21:52.182Z","updated":"2026-10-22T15:26:34.950Z","title":"SAML SSO - Service Provider  - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150","severity":"LOW","score":3.1,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00219},{"id":"CVE-2026-87953","published":"2026-10-22T01:21:51.367Z","updated":"2026-10-22T15:25:37.198Z","title":"SAML SSO - Service Provider  - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151","severity":"LOW","score":3.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00168},{"id":"CVE-2026-87954","published":"2026-10-22T01:21:50.527Z","updated":"2026-10-22T15:17:36.767Z","title":"Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Taxonomy Term Glossary","kev":false,"epss":0.00261},{"id":"CVE-2026-87955","published":"2026-10-22T01:21:49.695Z","updated":"2026-10-22T15:16:43.245Z","title":"Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Ultimate Table Field","kev":false,"epss":0.00245},{"id":"CVE-2026-96360","published":"2026-10-22T01:21:48.842Z","updated":"2026-10-22T15:15:45.058Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00234},{"id":"CVE-2026-96361","published":"2026-10-22T01:21:48.022Z","updated":"2026-10-22T15:15:14.432Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218},{"id":"CVE-2026-96358","published":"2026-10-22T01:21:47.174Z","updated":"2026-10-22T15:14:43.349Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218},{"id":"CVE-2026-96359","published":"2026-10-22T01:21:46.360Z","updated":"2026-10-22T15:13:39.131Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00223},{"id":"CVE-2026-96362","published":"2026-10-22T01:21:45.515Z","updated":"2026-10-22T15:12:56.999Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00203},{"id":"CVE-2026-96363","published":"2026-10-22T01:21:44.647Z","updated":"2026-10-30T20:00:58.752Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00243},{"id":"CVE-2026-96367","published":"2026-10-22T01:21:43.831Z","updated":"2026-10-22T15:11:38.157Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00259},{"id":"CVE-2026-96368","published":"2026-10-22T01:21:43.032Z","updated":"2026-10-22T15:10:58.897Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00173},{"id":"CVE-2026-96370","published":"2026-10-22T01:21:42.185Z","updated":"2026-10-22T15:10:27.325Z","title":"Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00241},{"id":"CVE-2026-96369","published":"2026-10-22T01:21:41.358Z","updated":"2026-10-22T15:03:17.155Z","title":"Webform - Less critical - Access bypass - SA-CONTRIB-2026-165","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00209},{"id":"CVE-2026-96371","published":"2026-10-22T01:21:40.524Z","updated":"2026-10-22T15:02:22.422Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00237},{"id":"CVE-2026-96372","published":"2026-10-22T01:21:39.702Z","updated":"2026-10-22T15:01:27.597Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00241},{"id":"CVE-2026-96373","published":"2026-10-22T01:21:38.873Z","updated":"2026-10-22T15:00:35.721Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168","severity":"LOW","score":3.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00231},{"id":"CVE-2026-96366","published":"2026-10-22T01:21:38.055Z","updated":"2026-10-22T14:59:46.866Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00397},{"id":"CVE-2026-96365","published":"2026-10-22T01:21:37.236Z","updated":"2026-10-22T14:58:52.996Z","title":"Webform - Less critical - Denial of service - SA-CONTRIB-2026-170","severity":"HIGH","score":7.5,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00411},{"id":"CVE-2026-96364","published":"2026-10-22T01:21:36.412Z","updated":"2026-10-22T14:56:31.787Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00287},{"id":"CVE-2026-96357","published":"2026-10-22T01:21:35.556Z","updated":"2026-10-22T14:55:52.291Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218},{"id":"CVE-2026-96398","published":"2026-10-22T01:21:34.744Z","updated":"2026-10-22T14:55:13.454Z","title":"Webform - Less critical - Access bypass - SA-CONTRIB-2026-173","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00315},{"id":"CVE-2026-96356","published":"2026-10-22T01:21:33.909Z","updated":"2026-10-22T14:44:08.817Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00407},{"id":"CVE-2026-96355","published":"2026-10-22T01:21:33.082Z","updated":"2026-10-23T03:55:16.109Z","title":"Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175","severity":"CRITICAL","score":9.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00421},{"id":"CVE-2026-96375","published":"2026-10-22T01:21:32.192Z","updated":"2026-10-22T14:44:38.627Z","title":"Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"Cloud","kev":false,"epss":0.00117},{"id":"CVE-2026-96376","published":"2026-10-22T01:21:29.328Z","updated":"2026-10-23T03:55:22.710Z","title":"Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177","severity":"MEDIUM","score":6.4,"vendor":"Drupal","product":"Cloud","kev":false,"epss":0.00579},{"id":"CVE-2026-96374","published":"2026-10-22T01:21:28.459Z","updated":"2026-10-22T14:33:58.131Z","title":"Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Project Browser","kev":false,"epss":0.00101},{"id":"CVE-2026-96378","published":"2026-10-22T01:21:27.597Z","updated":"2026-10-22T14:26:09.226Z","title":"Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Commerce Decoupled Checkout","kev":false,"epss":0.00231},{"id":"CVE-2026-96384","published":"2026-10-22T01:21:26.770Z","updated":"2026-10-22T14:20:34.357Z","title":"Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Mermaid Diagram Field","kev":false,"epss":0.00196},{"id":"CVE-2026-96379","published":"2026-10-22T01:21:25.883Z","updated":"2026-10-30T20:00:58.893Z","title":"CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181","severity":"LOW","score":3.5,"vendor":"Drupal","product":"CookieCuttr","kev":false,"epss":0.00185},{"id":"CVE-2026-96385","published":"2026-10-22T01:21:25.068Z","updated":"2026-10-22T14:47:01.364Z","title":"REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"REST & JSON API Authentication for Drupal","kev":false,"epss":0.00279},{"id":"CVE-2026-96387","published":"2026-10-22T01:21:24.261Z","updated":"2026-10-22T14:47:36.979Z","title":"Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Stop administrator login","kev":false,"epss":0.00267},{"id":"CVE-2026-96388","published":"2026-10-22T01:21:23.460Z","updated":"2026-10-22T14:15:54.732Z","title":"Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Tawk.to - Live chat application","kev":false,"epss":0.00116},{"id":"CVE-2026-96390","published":"2026-10-22T01:21:22.640Z","updated":"2026-10-22T14:48:21.663Z","title":"Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Editoria11y Accessibility Checker","kev":false,"epss":0.00209},{"id":"CVE-2026-96391","published":"2026-10-22T01:21:21.812Z","updated":"2026-10-30T20:00:59.031Z","title":"Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Webform REST","kev":false,"epss":0.00298},{"id":"CVE-2026-96392","published":"2026-10-22T01:21:20.959Z","updated":"2026-10-22T14:00:50.250Z","title":"AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187","severity":"LOW","score":3.5,"vendor":"Drupal","product":"AI CKEditor","kev":false,"epss":0.00213},{"id":"CVE-2026-96377","published":"2026-10-22T01:21:20.134Z","updated":"2026-10-22T14:53:05.122Z","title":"Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Combined image style","kev":false,"epss":0.00343},{"id":"CVE-2026-96380","published":"2026-10-22T01:21:19.292Z","updated":"2026-10-22T14:53:57.543Z","title":"CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"CSS Usage Analyzer","kev":false,"epss":0.00219},{"id":"CVE-2026-96386","published":"2026-10-22T01:21:18.471Z","updated":"2026-10-22T14:54:28.177Z","title":"Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Smart Content","kev":false,"epss":0.00219},{"id":"CVE-2026-96382","published":"2026-10-22T01:21:17.652Z","updated":"2026-10-22T13:51:32.010Z","title":"Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Diba carousel slider","kev":false,"epss":0.00173},{"id":"CVE-2026-114717","published":"2026-10-22T01:21:14.794Z","updated":"2026-10-26T19:39:43.919Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The…","severity":"MEDIUM","score":4,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00447},{"id":"CVE-2026-114716","published":"2026-10-22T01:17:45.277Z","updated":"2026-10-26T16:46:46.624Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the…","severity":"HIGH","score":8.5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00438},{"id":"CVE-2026-114715","published":"2026-10-22T01:13:35.419Z","updated":"2026-11-02T15:01:11.219Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin.…","severity":"MEDIUM","score":6.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00343},{"id":"CVE-2026-114714","published":"2026-10-22T01:08:34.579Z","updated":"2026-10-28T02:11:26.866Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00367},{"id":"CVE-2026-114575","published":"2026-10-22T01:00:21.351Z","updated":"2026-10-28T18:42:09.777Z","title":"TOTOLINK A950RG product.so UploadCustomModule command injection","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.0221},{"id":"CVE-2026-110264","published":"2026-10-22T00:33:48.179Z","updated":"2026-10-30T23:20:24.882Z","title":"Integer Overflow or Wraparound in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01349},{"id":"CVE-2026-107079","published":"2026-10-22T00:00:00.000Z","updated":"2026-11-02T18:42:08.795Z","title":"An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.00244},{"id":"CVE-2026-78846","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T19:40:10.937Z","title":"Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00446},{"id":"CVE-2026-78801","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T16:14:15.533Z","title":"An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.00308},{"id":"CVE-2026-51954","published":"2026-10-22T00:00:00.000Z","updated":"2026-11-02T19:00:35.411Z","title":"An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.00511},{"id":"CVE-2025-69723","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T19:39:56.898Z","title":"A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.0023},{"id":"CVE-2025-65200","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-29T01:56:35.051Z","title":"An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed…","severity":"CRITICAL","score":9.6,"vendor":null,"product":null,"kev":false,"epss":0.00551},{"id":"CVE-2026-114574","published":"2026-10-21T23:45:21.527Z","updated":"2026-10-28T02:10:12.997Z","title":"massCodeIO massCode Local HTTP Service index.ts information disclosure","severity":"MEDIUM","score":5.3,"vendor":"massCodeIO","product":"massCode","kev":false,"epss":0.00309},{"id":"CVE-2026-12664","published":"2026-10-21T23:35:30.436Z","updated":"2026-10-23T10:58:25.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00395},{"id":"CVE-2026-13319","published":"2026-10-21T23:35:25.440Z","updated":"2026-10-30T17:18:23.068Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00238},{"id":"CVE-2026-14288","published":"2026-10-21T23:35:20.426Z","updated":"2026-10-30T17:18:23.207Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0026},{"id":"CVE-2026-15723","published":"2026-10-21T23:35:15.434Z","updated":"2026-10-23T10:58:00.648Z","title":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00431},{"id":"CVE-2026-16255","published":"2026-10-21T23:35:10.428Z","updated":"2026-10-30T17:18:23.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00216},{"id":"CVE-2026-103515","published":"2026-10-21T23:34:45.429Z","updated":"2026-10-30T17:18:23.480Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00232},{"id":"CVE-2026-105711","published":"2026-10-21T23:34:30.427Z","updated":"2026-10-30T17:18:23.616Z","title":"Use of Cache Containing Sensitive Information in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217},{"id":"CVE-2026-105777","published":"2026-10-21T23:34:25.440Z","updated":"2026-10-30T17:18:23.749Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00277},{"id":"CVE-2026-112378","published":"2026-10-21T23:33:50.429Z","updated":"2026-10-30T17:35:25.066Z","title":"Use of Less Trusted Source in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00126},{"id":"CVE-2026-112212","published":"2026-10-21T23:33:45.429Z","updated":"2026-10-30T17:33:45.464Z","title":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019},{"id":"CVE-2026-112326","published":"2026-10-21T23:33:40.603Z","updated":"2026-10-30T17:30:54.664Z","title":"Improper Cleanup on Thrown Exception in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00182},{"id":"CVE-2026-100420","published":"2026-10-21T23:04:28.083Z","updated":"2026-10-30T17:29:22.081Z","title":"Information disclosure vulnerability in the cloud-client daemon of Deco BE63","severity":"MEDIUM","score":6.8,"vendor":"TP-Link Systems Inc.","product":"Deco BE63 V2.0","kev":false,"epss":0.00155},{"id":"CVE-2026-76531","published":"2026-10-21T22:52:20.059Z","updated":"2026-10-22T13:08:23.322Z","title":"Files or Directories Accessible to External Parties in Splunk SOAR","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00407},{"id":"CVE-2026-76530","published":"2026-10-21T22:52:19.125Z","updated":"2026-10-22T13:09:01.761Z","title":"Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00289},{"id":"CVE-2026-76529","published":"2026-10-21T22:52:18.217Z","updated":"2026-10-30T18:39:06.145Z","title":"Improper Protection of Alternate Path in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039},{"id":"CVE-2026-76528","published":"2026-10-21T22:52:17.304Z","updated":"2026-10-21T22:52:17.304Z","title":"Protection Mechanism Failure in Splunk SOAR","severity":"UNKNOWN","score":null,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00134},{"id":"CVE-2026-76527","published":"2026-10-21T22:52:16.405Z","updated":"2026-10-29T18:06:01.644Z","title":"Improper Check or Handling of Exceptional Conditions in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00431},{"id":"CVE-2026-76526","published":"2026-10-21T22:52:15.442Z","updated":"2026-10-26T15:38:20.704Z","title":"Improper Neutralization in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00358},{"id":"CVE-2026-76408","published":"2026-10-21T22:52:14.362Z","updated":"2026-10-30T18:39:14.721Z","title":"Improper Control of a Resource Through its Lifetime in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039},{"id":"CVE-2026-76407","published":"2026-10-21T22:52:13.446Z","updated":"2026-10-21T22:52:13.446Z","title":"Improper Access Control in Splunk SOAR","severity":"UNKNOWN","score":null,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00127},{"id":"CVE-2026-76406","published":"2026-10-21T22:52:12.496Z","updated":"2026-10-28T02:08:31.206Z","title":"Information Disclosure through REST API Authentication in Splunk SOAR","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00321},{"id":"CVE-2026-76308","published":"2026-10-21T22:52:11.575Z","updated":"2026-10-26T16:46:46.763Z","title":"Missing Authorization through the REST API in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00174},{"id":"CVE-2026-76307","published":"2026-10-21T22:52:10.654Z","updated":"2026-10-23T15:08:20.736Z","title":"Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00398},{"id":"CVE-2026-76306","published":"2026-10-21T22:52:09.741Z","updated":"2026-10-21T22:52:09.741Z","title":"Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00222},{"id":"CVE-2026-76305","published":"2026-10-21T22:52:06.644Z","updated":"2026-10-28T02:06:39.485Z","title":"Improper Access Control during App Downloads in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00274},{"id":"CVE-2026-76304","published":"2026-10-21T22:52:05.722Z","updated":"2026-10-26T16:46:46.904Z","title":"Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00162},{"id":"CVE-2026-76303","published":"2026-10-21T22:52:04.809Z","updated":"2026-10-23T15:08:29.705Z","title":"Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00229},{"id":"CVE-2026-76302","published":"2026-10-21T22:52:03.886Z","updated":"2026-10-22T13:11:39.459Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.004},{"id":"CVE-2026-76301","published":"2026-10-21T22:52:02.970Z","updated":"2026-10-28T02:04:50.054Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00382},{"id":"CVE-2026-76300","published":"2026-10-21T22:52:02.038Z","updated":"2026-10-26T15:39:25.984Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00351},{"id":"CVE-2026-76299","published":"2026-10-21T22:52:01.149Z","updated":"2026-10-22T13:12:14.474Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00329},{"id":"CVE-2026-76298","published":"2026-10-21T22:52:00.185Z","updated":"2026-10-23T03:55:17.239Z","title":"Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00353},{"id":"CVE-2026-76297","published":"2026-10-21T22:51:59.246Z","updated":"2026-10-28T02:03:21.137Z","title":"Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00112},{"id":"CVE-2026-76296","published":"2026-10-21T22:51:58.375Z","updated":"2026-10-26T16:46:47.044Z","title":"Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00205},{"id":"CVE-2026-76295","published":"2026-10-21T22:51:57.442Z","updated":"2026-10-22T13:37:47.972Z","title":"SPL Injection through the REST API in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0028},{"id":"CVE-2026-76294","published":"2026-10-21T22:51:56.520Z","updated":"2026-10-22T13:37:48.124Z","title":"Improper Access Control in Field Extraction Management in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00267},{"id":"CVE-2026-76293","published":"2026-10-21T22:51:55.643Z","updated":"2026-10-23T03:55:21.204Z","title":"Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0047},{"id":"CVE-2026-76292","published":"2026-10-21T22:51:54.732Z","updated":"2026-10-22T13:37:48.422Z","title":"Missing Authorization through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00336},{"id":"CVE-2026-76291","published":"2026-10-21T22:51:53.804Z","updated":"2026-10-23T10:57:45.799Z","title":"Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00391},{"id":"CVE-2026-76290","published":"2026-10-21T22:51:52.864Z","updated":"2026-10-22T13:37:48.564Z","title":"Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00497},{"id":"CVE-2026-76289","published":"2026-10-21T22:51:51.849Z","updated":"2026-10-22T13:37:48.707Z","title":"Denial of Service (DoS) through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00375},{"id":"CVE-2026-76288","published":"2026-10-21T22:51:50.487Z","updated":"2026-10-22T13:37:48.847Z","title":"Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00472},{"id":"CVE-2026-76287","published":"2026-10-21T22:51:49.096Z","updated":"2026-10-23T15:08:38.358Z","title":"Authorization Bypass in the Data Management REST API in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00213},{"id":"CVE-2026-114441","published":"2026-10-21T22:45:18.510Z","updated":"2026-10-23T21:17:17.273Z","title":"oretnom23 php-travel-agency-system update.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00419},{"id":"CVE-2026-89052","published":"2026-10-21T22:40:16.165Z","updated":"2026-10-30T17:27:59.216Z","title":"Hardcoded AES encryption key in Archer C6","severity":"MEDIUM","score":5.9,"vendor":"TP-Link Systems Inc.","product":"Archer C6 V2","kev":false,"epss":0.00238},{"id":"CVE-2026-114440","published":"2026-10-21T22:30:12.080Z","updated":"2026-10-28T18:35:23.224Z","title":"oretnom23 php-travel-agency-system delete.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00343},{"id":"CVE-2026-103090","published":"2026-10-21T22:16:59.777Z","updated":"2026-10-30T17:26:26.361Z","title":"Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)","severity":"HIGH","score":8.8,"vendor":"Google","product":"SAM","kev":false,"epss":0.00502},{"id":"CVE-2026-114439","published":"2026-10-21T22:15:08.560Z","updated":"2026-10-28T02:01:40.118Z","title":"oretnom23 php-travel-agency-system Session session.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00537},{"id":"CVE-2026-114384","published":"2026-10-21T22:00:18.707Z","updated":"2026-10-23T21:17:46.796Z","title":"itsourcecode Online Cake Ordering System transactionsave.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00319},{"id":"CVE-2026-114509","published":"2026-10-21T21:49:29.486Z","updated":"2026-10-28T18:32:28.863Z","title":"Laravel TokenGuard authentication bypass through non-string API credentials","severity":"CRITICAL","score":9.2,"vendor":"laravel","product":"framework","kev":false,"epss":0.00777},{"id":"CVE-2026-114508","published":"2026-10-21T21:45:31.465Z","updated":"2026-10-23T21:18:11.415Z","title":"Laravel relationship inclusion can trigger unauthorized data destruction","severity":"MEDIUM","score":6.5,"vendor":"laravel","product":"framework","kev":false,"epss":0.00406},{"id":"CVE-2026-114383","published":"2026-10-21T21:45:18.906Z","updated":"2026-10-28T18:28:02.178Z","title":"TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"EX200","kev":false,"epss":0.00653},{"id":"CVE-2026-112921","published":"2026-10-21T21:37:54.278Z","updated":"2026-10-30T17:25:36.728Z","title":"Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request","severity":"HIGH","score":7.3,"vendor":null,"product":"Robots-Validate","kev":false,"epss":0.00359},{"id":"CVE-2026-114382","published":"2026-10-21T21:30:10.698Z","updated":"2026-10-28T01:59:47.537Z","title":"TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"EX200","kev":false,"epss":0.00667},{"id":"CVE-2026-91403","published":"2026-10-21T21:23:28.057Z","updated":"2026-10-24T20:01:56.993Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00375},{"id":"CVE-2026-94423","published":"2026-10-21T21:22:48.593Z","updated":"2026-10-30T17:22:58.601Z","title":"Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Net-LibSSH","kev":false,"epss":0.0044},{"id":"CVE-2026-94140","published":"2026-10-21T21:22:19.577Z","updated":"2026-10-30T15:52:33.360Z","title":"Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Rex","kev":false,"epss":0.00428},{"id":"CVE-2026-114501","published":"2026-10-21T21:17:09.748Z","updated":"2026-10-30T16:10:03.645Z","title":"Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1","severity":"MEDIUM","score":6.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.0037},{"id":"CVE-2026-114381","published":"2026-10-21T21:15:17.882Z","updated":"2026-10-23T21:18:36.060Z","title":"itsourcecode Online Cake Ordering System orderdetail.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00319},{"id":"CVE-2026-96639","published":"2026-10-21T21:06:42.111Z","updated":"2026-10-29T10:51:37.735Z","title":"Pillow multi-frame loaders can reuse stale native image storage after mode transitions","severity":"CRITICAL","score":9.8,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00659},{"id":"CVE-2026-96636","published":"2026-10-21T21:05:20.850Z","updated":"2026-10-30T16:08:33.388Z","title":"Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345},{"id":"CVE-2026-29001","published":"2026-10-21T21:03:25.481Z","updated":"2026-10-28T01:58:42.698Z","title":"TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization","severity":"HIGH","score":8.6,"vendor":"tastyigniter","product":"TastyIgniter","kev":false,"epss":0.00786},{"id":"CVE-2026-96640","published":"2026-10-21T21:03:22.785Z","updated":"2026-10-28T01:57:01.680Z","title":"Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion","severity":"HIGH","score":8.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00604},{"id":"CVE-2026-96637","published":"2026-10-21T21:01:20.249Z","updated":"2026-10-23T21:18:59.858Z","title":"Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00373},{"id":"CVE-2026-114380","published":"2026-10-21T21:00:17.989Z","updated":"2026-10-28T18:26:23.192Z","title":"itsourcecode Online Cake Ordering System inserttrans.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00209},{"id":"CVE-2026-113811","published":"2026-10-21T20:58:36.873Z","updated":"2026-10-30T15:49:54.511Z","title":"Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search","severity":"HIGH","score":7.5,"vendor":null,"product":"Algorithm-UrataniTakeda","kev":false,"epss":0.00605},{"id":"CVE-2026-96778","published":"2026-10-21T20:58:24.238Z","updated":"2026-10-28T01:53:22.401Z","title":"Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer","severity":"HIGH","score":7.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00454},{"id":"CVE-2026-114406","published":"2026-10-21T20:56:26.866Z","updated":"2026-11-02T20:11:16.161Z","title":"Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.0031},{"id":"CVE-2026-96643","published":"2026-10-21T20:56:26.344Z","updated":"2026-10-23T21:19:12.901Z","title":"Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00373},{"id":"CVE-2026-96644","published":"2026-10-21T20:54:43.537Z","updated":"2026-10-28T18:22:38.027Z","title":"Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00384},{"id":"CVE-2026-96641","published":"2026-10-21T20:51:24.388Z","updated":"2026-10-28T01:50:42.160Z","title":"Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345},{"id":"CVE-2026-96642","published":"2026-10-21T20:49:56.989Z","updated":"2026-10-30T16:07:09.659Z","title":"Pillow: TarIO negative size field causes infinite CPU-spin loop","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345},{"id":"CVE-2026-82987","published":"2026-10-21T20:48:10.861Z","updated":"2026-10-30T15:46:25.624Z","title":"CVE-2026-82987","severity":"HIGH","score":7.5,"vendor":"Viewsonic","product":"vCast","kev":false,"epss":0.00584},{"id":"CVE-2026-96638","published":"2026-10-21T20:47:21.767Z","updated":"2026-10-28T18:21:53.700Z","title":"Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345},{"id":"CVE-2026-114379","published":"2026-10-21T20:45:17.247Z","updated":"2026-10-28T01:47:44.231Z","title":"EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion","severity":"MEDIUM","score":5.3,"vendor":"EKKOLearnAI","product":"ekko-studio","kev":false,"epss":0.00272},{"id":"CVE-2026-114145","published":"2026-10-21T20:35:06.548Z","updated":"2026-10-23T15:08:48.132Z","title":"GitPython validates a submodule's \".git\" path only after cloning into it (RCE)","severity":"HIGH","score":7.5,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00423},{"id":"CVE-2026-114144","published":"2026-10-21T20:32:54.019Z","updated":"2026-10-30T14:30:11.488Z","title":"toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()","severity":"HIGH","score":7.5,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.0044},{"id":"CVE-2026-114143","published":"2026-10-21T20:31:01.539Z","updated":"2026-10-28T01:45:01.590Z","title":"toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()","severity":"HIGH","score":8.7,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00473},{"id":"CVE-2026-114378","published":"2026-10-21T20:30:18.507Z","updated":"2026-10-23T21:19:18.865Z","title":"itsourcecode Online Cake Ordering System deleteproduct.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00262},{"id":"CVE-2026-114142","published":"2026-10-21T20:28:36.615Z","updated":"2026-10-28T18:19:14.202Z","title":"toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype","severity":"HIGH","score":8.8,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00511},{"id":"CVE-2026-114141","published":"2026-10-21T20:25:36.396Z","updated":"2026-10-23T21:20:03.858Z","title":"toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()","severity":"HIGH","score":8.7,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00473},{"id":"CVE-2026-114140","published":"2026-10-21T20:19:50.116Z","updated":"2026-10-30T15:01:54.170Z","title":"nbconvert: File write via path traversal in cell output filenames","severity":"HIGH","score":8.8,"vendor":"jupyter","product":"nbconvert","kev":false,"epss":0.00455},{"id":"CVE-2026-114377","published":"2026-10-21T20:15:18.610Z","updated":"2026-10-28T18:16:21.488Z","title":"leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal","severity":"MEDIUM","score":5.1,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00399},{"id":"CVE-2026-114139","published":"2026-10-21T20:14:34.419Z","updated":"2026-10-28T01:38:14.177Z","title":"Sentry-Javascript: Middleware Bypass when using Tunnel route","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.0051},{"id":"CVE-2026-114138","published":"2026-10-21T20:09:06.489Z","updated":"2026-10-28T18:11:30.554Z","title":"Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation","severity":"HIGH","score":7.5,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00595},{"id":"CVE-2026-114137","published":"2026-10-21T20:06:57.790Z","updated":"2026-10-23T15:08:55.473Z","title":"Django REST framework: TokenProxy.delete() reports success and revokes nothing","severity":"HIGH","score":7.4,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00512},{"id":"CVE-2026-114136","published":"2026-10-21T20:02:41.030Z","updated":"2026-10-30T19:24:46.203Z","title":"Django REST framework: JSONParser applies an attacker-named codec to the request stream","severity":"HIGH","score":7.5,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00503},{"id":"CVE-2026-114376","published":"2026-10-21T20:00:12.433Z","updated":"2026-10-28T01:36:51.902Z","title":"leomoon-studios wiki-go API editor.go SourceHandler path traversal","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00295},{"id":"CVE-2026-114135","published":"2026-10-21T19:58:51.544Z","updated":"2026-10-28T01:36:08.532Z","title":"Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization","severity":"HIGH","score":8.8,"vendor":"jupyter-server","product":"jupyter_server","kev":false,"epss":0.00484},{"id":"CVE-2026-114375","published":"2026-10-21T19:45:20.856Z","updated":"2026-10-23T21:20:14.859Z","title":"leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00359},{"id":"CVE-2026-85518","published":"2026-10-21T19:42:54.174Z","updated":"2026-11-01T03:49:29.699Z","title":"Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition","severity":"MEDIUM","score":6.1,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00447},{"id":"CVE-2026-112408","published":"2026-10-21T19:36:06.802Z","updated":"2026-10-30T15:40:47.396Z","title":"Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()","severity":"CRITICAL","score":9.4,"vendor":"AWS","product":"Amazon SageMaker Python SDK","kev":false,"epss":0.00743},{"id":"CVE-2026-114438","published":"2026-10-21T19:35:37.217Z","updated":"2026-10-28T01:35:08.605Z","title":"Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering","severity":"MEDIUM","score":4.2,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.0016},{"id":"CVE-2026-114374","published":"2026-10-21T19:30:14.688Z","updated":"2026-10-28T18:06:28.050Z","title":"leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00237},{"id":"CVE-2026-112381","published":"2026-10-21T19:20:38.885Z","updated":"2026-10-23T21:20:44.000Z","title":"Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.0035},{"id":"CVE-2026-111817","published":"2026-10-21T19:20:00.515Z","updated":"2026-10-23T21:21:06.850Z","title":"Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00359},{"id":"CVE-2026-111812","published":"2026-10-21T19:18:19.526Z","updated":"2026-10-23T11:06:21.577Z","title":"Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials","severity":"HIGH","score":7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00361},{"id":"CVE-2026-111811","published":"2026-10-21T19:17:32.448Z","updated":"2026-10-23T11:06:21.737Z","title":"Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication","severity":"CRITICAL","score":9.4,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00356},{"id":"CVE-2026-111809","published":"2026-10-21T19:16:16.439Z","updated":"2026-10-28T01:34:23.820Z","title":"Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00218},{"id":"CVE-2026-114362","published":"2026-10-21T19:15:12.924Z","updated":"2026-10-28T01:33:22.048Z","title":"HarnessRouter Targets Test Endpoint app.py server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":null,"product":"HarnessRouter","kev":false,"epss":0.00245},{"id":"CVE-2026-111810","published":"2026-10-21T19:14:50.479Z","updated":"2026-10-23T21:21:35.176Z","title":"Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.0036},{"id":"CVE-2026-111815","published":"2026-10-21T19:13:55.811Z","updated":"2026-10-23T11:06:21.881Z","title":"Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement","severity":"HIGH","score":7.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00235},{"id":"CVE-2026-111814","published":"2026-10-21T19:13:06.888Z","updated":"2026-10-23T11:06:22.026Z","title":"Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin","severity":"HIGH","score":7.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00235},{"id":"CVE-2026-111808","published":"2026-10-21T19:11:59.516Z","updated":"2026-10-23T21:22:09.150Z","title":"Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00412},{"id":"CVE-2026-111805","published":"2026-10-21T19:10:46.319Z","updated":"2026-10-23T21:22:42.961Z","title":"Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00412},{"id":"CVE-2026-114361","published":"2026-10-21T19:00:18.743Z","updated":"2026-10-23T15:09:14.205Z","title":"HarnessRouter Identity Mode app.py improper authorization","severity":"MEDIUM","score":6.3,"vendor":null,"product":"HarnessRouter","kev":false,"epss":0.004},{"id":"CVE-2026-114268","published":"2026-10-21T18:45:12.143Z","updated":"2026-10-28T18:01:19.275Z","title":"Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"Tenda","product":"BE3L Pro","kev":false,"epss":0.00511},{"id":"CVE-2026-114267","published":"2026-10-21T18:30:12.152Z","updated":"2026-10-28T01:32:11.560Z","title":"SourceCodester Food Order Management System Admin Endpoint authorization","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Food Order Management System","kev":false,"epss":0.00307},{"id":"CVE-2026-111816","published":"2026-10-21T18:26:32.566Z","updated":"2026-10-23T21:22:57.204Z","title":"Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out","severity":"CRITICAL","score":9.2,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00308},{"id":"CVE-2025-55702","published":"2026-10-21T18:24:21.377Z","updated":"2026-10-23T11:06:22.172Z","title":"Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request","severity":"HIGH","score":7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00325},{"id":"CVE-2026-110803","published":"2026-10-21T18:22:59.789Z","updated":"2026-10-30T17:17:47.911Z","title":"Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8","severity":"HIGH","score":8.7,"vendor":"vaadin","product":"framework","kev":false,"epss":0.00279},{"id":"CVE-2026-107588","published":"2026-10-21T18:22:47.593Z","updated":"2026-10-30T17:16:23.814Z","title":"Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts","severity":"HIGH","score":8.4,"vendor":"vaadin","product":"vaadin","kev":false,"epss":0.00524},{"id":"CVE-2025-31699","published":"2026-10-21T18:22:28.383Z","updated":"2026-10-23T11:06:22.325Z","title":"Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00348},{"id":"CVE-2026-111804","published":"2026-10-21T18:21:32.055Z","updated":"2026-10-23T21:23:16.760Z","title":"Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00298},{"id":"CVE-2026-111813","published":"2026-10-21T18:20:22.104Z","updated":"2026-10-23T11:06:22.469Z","title":"Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00489},{"id":"CVE-2026-19947","published":"2026-10-21T18:19:35.637Z","updated":"2026-10-23T21:23:27.801Z","title":"Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexer","severity":"MEDIUM","score":5.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00126},{"id":"CVE-2026-79976","published":"2026-10-21T18:19:34.519Z","updated":"2026-10-23T21:27:29.128Z","title":"NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller","severity":"HIGH","score":7.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00256},{"id":"CVE-2026-78119","published":"2026-10-21T18:19:33.366Z","updated":"2026-10-23T21:27:51.509Z","title":"Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet length","severity":"MEDIUM","score":6.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00144},{"id":"CVE-2026-78118","published":"2026-10-21T18:19:32.200Z","updated":"2026-10-23T21:28:10.701Z","title":"Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP","severity":"HIGH","score":7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00104},{"id":"CVE-2026-78117","published":"2026-10-21T18:19:31.044Z","updated":"2026-10-23T21:28:17.367Z","title":"Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air","severity":"MEDIUM","score":4.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.0016},{"id":"CVE-2026-18748","published":"2026-10-21T18:19:29.937Z","updated":"2026-10-23T21:31:20.955Z","title":"Out-of-bounds read in Bluetooth Classic A2DP codec information element handling","severity":"LOW","score":3.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00203},{"id":"CVE-2026-78116","published":"2026-10-21T18:19:28.872Z","updated":"2026-10-23T21:57:18.870Z","title":"Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path","severity":"MEDIUM","score":5.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00206},{"id":"CVE-2026-19676","published":"2026-10-21T18:19:27.767Z","updated":"2026-10-23T21:57:28.879Z","title":"PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00199},{"id":"CVE-2026-105945","published":"2026-10-21T18:18:26.687Z","updated":"2026-10-23T21:57:38.167Z","title":"Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00494},{"id":"CVE-2026-105944","published":"2026-10-21T18:17:37.844Z","updated":"2026-10-23T21:57:46.976Z","title":"Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Pulsar Manager","kev":false,"epss":0.00703},{"id":"CVE-2026-114266","published":"2026-10-21T18:15:13.700Z","updated":"2026-10-23T21:57:56.027Z","title":"ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00252},{"id":"CVE-2026-105942","published":"2026-10-21T18:14:35.996Z","updated":"2026-10-23T21:58:05.657Z","title":"Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00482},{"id":"CVE-2026-105938","published":"2026-10-21T18:13:35.337Z","updated":"2026-10-23T21:58:15.976Z","title":"Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00512},{"id":"CVE-2026-105937","published":"2026-10-21T18:12:51.420Z","updated":"2026-10-23T21:58:44.482Z","title":"Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00244},{"id":"CVE-2026-113461","published":"2026-10-21T18:11:34.774Z","updated":"2026-10-23T11:06:22.616Z","title":"mk-oracle: Local privilege escalation via insecure Oracle Home library loading","severity":"MEDIUM","score":5.2,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.0012},{"id":"CVE-2026-105936","published":"2026-10-21T18:11:20.520Z","updated":"2026-10-23T21:59:10.187Z","title":"Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504},{"id":"CVE-2026-105935","published":"2026-10-21T18:10:24.056Z","updated":"2026-10-23T21:59:37.544Z","title":"Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission","severity":"MEDIUM","score":4.9,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00398},{"id":"CVE-2026-105934","published":"2026-10-21T18:08:43.192Z","updated":"2026-10-23T22:00:04.202Z","title":"Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic","severity":"HIGH","score":7.2,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00482},{"id":"CVE-2026-105933","published":"2026-10-21T18:07:43.954Z","updated":"2026-10-23T22:00:14.676Z","title":"Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00293},{"id":"CVE-2026-105932","published":"2026-10-21T18:06:59.228Z","updated":"2026-10-23T22:04:58.691Z","title":"Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504},{"id":"CVE-2026-113870","published":"2026-10-21T18:04:30.607Z","updated":"2026-10-30T18:23:34.095Z","title":"Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing","severity":"HIGH","score":8.6,"vendor":"MongoDB","product":"Compass","kev":false,"epss":0.00238},{"id":"CVE-2026-111401","published":"2026-10-21T18:02:35.731Z","updated":"2026-10-22T10:56:17.445Z","title":"WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Tailored Media","product":"Tailored Tools","kev":false,"epss":0.00152},{"id":"CVE-2026-105931","published":"2026-10-21T18:02:31.976Z","updated":"2026-10-30T18:20:46.202Z","title":"Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504},{"id":"CVE-2026-105930","published":"2026-10-21T18:01:29.744Z","updated":"2026-10-26T14:35:21.565Z","title":"Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download","severity":"MEDIUM","score":6,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00452},{"id":"CVE-2026-112868","published":"2026-10-21T18:01:00.900Z","updated":"2026-10-22T10:56:17.592Z","title":"WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"H5P","product":"H5P","kev":false,"epss":0.00274},{"id":"CVE-2026-105927","published":"2026-10-21T18:00:31.871Z","updated":"2026-10-30T18:17:18.420Z","title":"Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00437},{"id":"CVE-2026-114265","published":"2026-10-21T18:00:15.205Z","updated":"2026-10-28T17:58:07.213Z","title":"ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00248},{"id":"CVE-2026-114176","published":"2026-10-21T18:00:12.725Z","updated":"2026-10-22T10:56:17.723Z","title":"WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"DigitalME","product":"eRoom","kev":false,"epss":0.00267},{"id":"CVE-2026-105926","published":"2026-10-21T17:59:55.207Z","updated":"2026-10-30T18:15:49.239Z","title":"Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00408},{"id":"CVE-2026-105869","published":"2026-10-21T17:58:54.385Z","updated":"2026-10-30T18:12:40.695Z","title":"Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role","severity":"CRITICAL","score":9.2,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00303},{"id":"CVE-2026-114493","published":"2026-10-21T17:54:17.584Z","updated":"2026-10-21T19:50:15.052Z","title":"LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects","severity":"CRITICAL","score":9.2,"vendor":"LocalAI","product":"LocalAI","kev":false,"epss":0.0038},{"id":"CVE-2026-114492","published":"2026-10-21T17:54:16.906Z","updated":"2026-10-23T15:09:41.469Z","title":"gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint","severity":"HIGH","score":7,"vendor":"flipped-aurora","product":"gin-vue-admin","kev":false,"epss":0.00511},{"id":"CVE-2026-114491","published":"2026-10-21T17:54:16.217Z","updated":"2026-10-28T17:31:25.430Z","title":"pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images","severity":"MEDIUM","score":6.9,"vendor":"bpampuch","product":"pdfmake","kev":false,"epss":0.00255},{"id":"CVE-2026-110744","published":"2026-10-21T17:52:40.314Z","updated":"2026-10-23T15:10:10.054Z","title":"Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide","severity":"HIGH","score":7.2,"vendor":"Red Hat","product":"Multicluster Global Hub","kev":false,"epss":0.00366},{"id":"CVE-2026-114133","published":"2026-10-21T17:52:09.381Z","updated":"2026-10-28T17:23:40.538Z","title":"Nuxt server islands render `useHeadSafe` input without sanitisation","severity":"MEDIUM","score":5.4,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.0022},{"id":"CVE-2026-114132","published":"2026-10-21T17:50:11.250Z","updated":"2026-10-23T15:10:37.684Z","title":"Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive","severity":"MEDIUM","score":6.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00424},{"id":"CVE-2026-114264","published":"2026-10-21T17:45:14.657Z","updated":"2026-10-28T01:30:59.530Z","title":"ProjectWorlds Advanced Library Management System edit_member.php sql injection","severity":"MEDIUM","score":5.1,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00211},{"id":"CVE-2026-114131","published":"2026-10-21T17:41:24.016Z","updated":"2026-10-30T17:48:52.857Z","title":"Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes","severity":"MEDIUM","score":6.5,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00363},{"id":"CVE-2026-114130","published":"2026-10-21T17:37:58.400Z","updated":"2026-10-28T01:29:47.913Z","title":"Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled","severity":"LOW","score":2.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00406},{"id":"CVE-2026-114129","published":"2026-10-21T17:34:48.034Z","updated":"2026-10-28T17:16:23.694Z","title":"stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service","severity":"MEDIUM","score":6.2,"vendor":"uhop","product":"stream-json","kev":false,"epss":0.00254},{"id":"CVE-2026-114128","published":"2026-10-21T17:32:28.466Z","updated":"2026-10-23T15:11:02.457Z","title":"Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering","severity":"MEDIUM","score":6.5,"vendor":"withastro","product":"astro","kev":false,"epss":0.00321},{"id":"CVE-2026-114263","published":"2026-10-21T17:30:08.284Z","updated":"2026-10-23T22:05:22.435Z","title":"ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00332},{"id":"CVE-2026-114127","published":"2026-10-21T17:30:03.860Z","updated":"2026-10-30T20:16:50.619Z","title":"Astro: Arbitrary CSS injection in Astro View Transitions","severity":"LOW","score":2.3,"vendor":"withastro","product":"astro","kev":false,"epss":0.00498},{"id":"CVE-2026-114126","published":"2026-10-21T17:21:29.520Z","updated":"2026-10-28T01:28:25.264Z","title":"Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files","severity":"HIGH","score":8.7,"vendor":"storybookjs","product":"storybook","kev":false,"epss":0.00529},{"id":"CVE-2026-92202","published":"2026-10-21T17:18:40.948Z","updated":"2026-10-30T18:03:45.752Z","title":"Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Luxion","product":"KeyShot","kev":false,"epss":0.00217},{"id":"CVE-2026-92183","published":"2026-10-21T17:18:13.162Z","updated":"2026-10-23T11:06:22.762Z","title":"GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"GIMP","product":"GIMP","kev":false,"epss":0.00434},{"id":"CVE-2026-92207","published":"2026-10-21T17:17:42.063Z","updated":"2026-10-30T15:36:32.104Z","title":"MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"MindsDB","product":"MindsDB","kev":false,"epss":0.00699},{"id":"CVE-2026-92206","published":"2026-10-21T17:17:33.262Z","updated":"2026-10-30T15:35:08.028Z","title":"CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"CrewAI","product":"CrewAI","kev":false,"epss":0.00455},{"id":"CVE-2026-92205","published":"2026-10-21T17:17:22.583Z","updated":"2026-10-30T15:33:17.542Z","title":"BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"BusyBox","product":"BusyBox","kev":false,"epss":0.00314},{"id":"CVE-2026-92204","published":"2026-10-21T17:17:14.805Z","updated":"2026-10-30T15:27:03.936Z","title":"Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.7,"vendor":"Airbyte","product":"Airbyte","kev":false,"epss":0.00414},{"id":"CVE-2026-92203","published":"2026-10-21T17:17:06.504Z","updated":"2026-10-30T15:25:34.464Z","title":"Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.7,"vendor":"Airbyte","product":"Airbyte","kev":false,"epss":0.00406},{"id":"CVE-2026-89035","published":"2026-10-21T17:16:40.843Z","updated":"2026-10-28T01:25:56.959Z","title":"MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass","severity":"CRITICAL","score":9.1,"vendor":"MikroTik","product":"RouterOS","kev":false,"epss":0.00274},{"id":"CVE-2026-92210","published":"2026-10-21T17:16:22.236Z","updated":"2026-10-30T15:24:58.451Z","title":"NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.2,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00327},{"id":"CVE-2026-92209","published":"2026-10-21T17:16:13.249Z","updated":"2026-10-23T11:06:22.907Z","title":"NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00243},{"id":"CVE-2026-92208","published":"2026-10-21T17:16:04.507Z","updated":"2026-10-23T11:06:23.061Z","title":"NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00618},{"id":"CVE-2026-111184","published":"2026-10-21T17:15:43.200Z","updated":"2026-10-23T11:06:23.225Z","title":"NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00142},{"id":"CVE-2026-111183","published":"2026-10-21T17:15:23.195Z","updated":"2026-10-23T11:06:23.382Z","title":"GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"GStreamer","product":"GStreamer","kev":false,"epss":0.00704},{"id":"CVE-2026-114262","published":"2026-10-21T17:15:14.707Z","updated":"2026-10-28T17:15:37.562Z","title":"file-management-system FileController.php store unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":null,"product":"file-management-system","kev":false,"epss":0.0037},{"id":"CVE-2026-114125","published":"2026-10-21T17:08:12.102Z","updated":"2026-10-28T17:13:06.610Z","title":"Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites","severity":"HIGH","score":8.6,"vendor":"storybookjs","product":"storybook","kev":false,"epss":0.00385},{"id":"CVE-2026-114124","published":"2026-10-21T17:03:26.765Z","updated":"2026-10-23T15:11:35.835Z","title":"Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry","severity":"LOW","score":3.9,"vendor":"electron","product":"electron","kev":false,"epss":0.00185},{"id":"CVE-2026-114261","published":"2026-10-21T17:00:19.191Z","updated":"2026-10-28T01:25:18.356Z","title":"MomoTommy file-management-system Files API FileController.php destroy missing authentication","severity":"MEDIUM","score":6.9,"vendor":"MomoTommy","product":"file-management-system","kev":false,"epss":0.00514},{"id":"CVE-2026-53986","published":"2026-10-21T16:59:57.188Z","updated":"2026-10-21T19:52:14.331Z","title":"Girafit Camera App 1.9.1 Hardcoded TURN Credentials Disclosure","severity":"MEDIUM","score":6.9,"vendor":"Girafit","product":"Girafit camera app","kev":false,"epss":0.00216},{"id":"CVE-2026-114123","published":"2026-10-21T16:57:47.278Z","updated":"2026-10-30T19:46:02.748Z","title":"D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet","severity":"HIGH","score":7.5,"vendor":"dynamics365ninja","product":"d365fo-mcp-server","kev":false,"epss":0.00423},{"id":"CVE-2026-114260","published":"2026-10-21T16:45:08.221Z","updated":"2026-10-23T22:05:33.996Z","title":"oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00554},{"id":"CVE-2026-114259","published":"2026-10-21T16:30:19.549Z","updated":"2026-10-28T17:10:10.875Z","title":"oretnom23 file-management-system-php admin_class.php save_files unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00301},{"id":"CVE-2026-114122","published":"2026-10-21T16:26:34.550Z","updated":"2026-10-28T01:24:21.033Z","title":"Electron: Frame subscription trusts GPU-supplied frame geometry","severity":"LOW","score":3.9,"vendor":"electron","product":"electron","kev":false,"epss":0.00186},{"id":"CVE-2026-114121","published":"2026-10-21T16:20:07.261Z","updated":"2026-10-28T17:07:09.957Z","title":"Electron: openExternal permission requests can be attributed to the wrong origin","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00219},{"id":"CVE-2026-76497","published":"2026-10-21T16:18:13.854Z","updated":"2026-10-22T13:37:51.735Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities","severity":"MEDIUM","score":6.6,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00156},{"id":"CVE-2026-76505","published":"2026-10-21T16:18:12.195Z","updated":"2026-10-22T13:37:51.885Z","title":"Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco IOS XR Software","kev":false,"epss":0.00468},{"id":"CVE-2026-76524","published":"2026-10-21T16:18:12.052Z","updated":"2026-10-22T13:37:52.029Z","title":"Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00177},{"id":"CVE-2026-76496","published":"2026-10-21T16:18:03.087Z","updated":"2026-10-22T23:04:51.142Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities","severity":"HIGH","score":7,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00159},{"id":"CVE-2026-76495","published":"2026-10-21T16:17:58.451Z","updated":"2026-10-22T23:04:50.363Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00142},{"id":"CVE-2026-76494","published":"2026-10-21T16:17:44.657Z","updated":"2026-10-22T23:04:49.560Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00205},{"id":"CVE-2026-76493","published":"2026-10-21T16:17:34.243Z","updated":"2026-10-22T13:37:52.649Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.0036},{"id":"CVE-2026-76490","published":"2026-10-21T16:17:29.557Z","updated":"2026-10-22T13:37:52.794Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities","severity":"HIGH","score":8.6,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00439},{"id":"CVE-2026-76489","published":"2026-10-21T16:17:23.396Z","updated":"2026-10-22T19:11:31.788Z","title":"Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00457},{"id":"CVE-2026-76492","published":"2026-10-21T16:17:14.565Z","updated":"2026-10-22T13:37:53.228Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.0036},{"id":"CVE-2026-76491","published":"2026-10-21T16:17:04.407Z","updated":"2026-10-22T13:37:53.379Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.0036},{"id":"CVE-2026-76481","published":"2026-10-21T16:16:58.417Z","updated":"2026-10-21T17:19:11.727Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00455},{"id":"CVE-2026-76487","published":"2026-10-21T16:16:54.579Z","updated":"2026-10-22T13:37:53.516Z","title":"Cisco Unified Communications Manager Improper Access Control Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco Unified Communications Manager","kev":false,"epss":0.00613},{"id":"CVE-2026-113800","published":"2026-10-21T16:16:45.808Z","updated":"2026-10-23T15:12:01.887Z","title":"Electron: HID and USB permission checks can be attributed to the wrong origin","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00241},{"id":"CVE-2026-76479","published":"2026-10-21T16:15:55.144Z","updated":"2026-10-22T23:04:36.581Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.0019},{"id":"CVE-2026-76478","published":"2026-10-21T16:15:47.937Z","updated":"2026-10-22T23:04:35.404Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00149},{"id":"CVE-2026-76476","published":"2026-10-21T16:15:26.245Z","updated":"2026-10-22T23:04:33.640Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00428},{"id":"CVE-2026-114258","published":"2026-10-21T16:15:18.449Z","updated":"2026-10-28T01:23:29.110Z","title":"oretnom23 file-management-system-php File Management files.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00343},{"id":"CVE-2026-76477","published":"2026-10-21T16:15:11.874Z","updated":"2026-10-22T23:04:34.580Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00463},{"id":"CVE-2026-113799","published":"2026-10-21T16:15:10.051Z","updated":"2026-10-30T15:14:24.016Z","title":"Slack Morphism verifier errors disclose valid HMACs in the logs","severity":"MEDIUM","score":5.3,"vendor":"abdolence","product":"slack-morphism-rust","kev":false,"epss":0.00431},{"id":"CVE-2026-76475","published":"2026-10-21T16:14:55.752Z","updated":"2026-10-22T13:37:54.322Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities","severity":"CRITICAL","score":9.3,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00326},{"id":"CVE-2026-76474","published":"2026-10-21T16:14:48.265Z","updated":"2026-10-22T23:04:32.719Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00474},{"id":"CVE-2026-76445","published":"2026-10-21T16:14:39.374Z","updated":"2026-10-22T19:11:11.783Z","title":"Multiple Cisco Products Snort 3 Denial of Service Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528},{"id":"CVE-2026-76473","published":"2026-10-21T16:14:31.067Z","updated":"2026-10-27T17:30:04.477Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.0049},{"id":"CVE-2026-76435","published":"2026-10-21T16:14:19.230Z","updated":"2026-10-22T13:37:54.901Z","title":"Cisco Expressway Series Information Disclosure Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00432},{"id":"CVE-2026-76466","published":"2026-10-21T16:14:19.225Z","updated":"2026-10-22T23:04:48.699Z","title":"Cisco Expressway Series Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00417},{"id":"CVE-2026-76462","published":"2026-10-21T16:14:19.168Z","updated":"2026-10-22T23:04:52.774Z","title":"Cisco Secure Client Privilege Escalation Vulnerability","severity":"MEDIUM","score":5.5,"vendor":"Cisco","product":"Cisco Secure Client","kev":false,"epss":0.00144},{"id":"CVE-2026-20356","published":"2026-10-21T16:13:06.738Z","updated":"2026-10-22T19:10:52.805Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.0044},{"id":"CVE-2026-20236","published":"2026-10-21T16:12:58.186Z","updated":"2026-10-22T19:10:43.211Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.0044},{"id":"CVE-2026-20221","published":"2026-10-21T16:12:53.435Z","updated":"2026-10-22T19:11:26.546Z","title":"Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00577},{"id":"CVE-2026-20291","published":"2026-10-21T16:12:53.383Z","updated":"2026-10-22T23:04:46.063Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00159},{"id":"CVE-2026-20197","published":"2026-10-21T16:12:40.477Z","updated":"2026-10-22T19:11:21.691Z","title":"Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00495},{"id":"CVE-2026-20218","published":"2026-10-21T16:12:38.494Z","updated":"2026-10-22T19:11:10.095Z","title":"Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.0063},{"id":"CVE-2026-113798","published":"2026-10-21T16:12:35.548Z","updated":"2026-10-28T01:22:13.623Z","title":"Electron: Pointer lock permission requests can be attributed to the wrong frame","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00244},{"id":"CVE-2026-20179","published":"2026-10-21T16:12:29.897Z","updated":"2026-10-22T19:11:03.271Z","title":"Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00495},{"id":"CVE-2026-20043","published":"2026-10-21T16:12:29.730Z","updated":"2026-10-22T23:04:45.240Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"CRITICAL","score":9,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00364},{"id":"CVE-2026-20019","published":"2026-10-21T16:12:20.285Z","updated":"2026-10-22T19:10:53.022Z","title":"Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528},{"id":"CVE-2026-20011","published":"2026-10-21T16:12:19.429Z","updated":"2026-10-22T19:11:17.797Z","title":"Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528},{"id":"CVE-2026-113797","published":"2026-10-21T16:09:00.242Z","updated":"2026-10-28T17:04:52.235Z","title":"Electron: Extension tabs.query returns tab URLs and titles without the tabs permission","severity":"LOW","score":3.1,"vendor":"electron","product":"electron","kev":false,"epss":0.00586},{"id":"CVE-2026-113796","published":"2026-10-21T16:04:42.688Z","updated":"2026-10-23T15:12:14.165Z","title":"Electron: SameSite cookie restrictions are not applied to windows opened from links","severity":"MEDIUM","score":4.2,"vendor":"electron","product":"electron","kev":false,"epss":0.00219},{"id":"CVE-2026-113795","published":"2026-10-21T16:01:22.314Z","updated":"2026-10-30T15:58:32.072Z","title":"pypdf: Possible large memory usage for streams with multiple filters","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00466},{"id":"CVE-2026-114257","published":"2026-10-21T16:00:20.862Z","updated":"2026-10-23T22:05:58.318Z","title":"oretnom23 file-management-system-php File Download download.php readfile sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00401},{"id":"CVE-2026-113794","published":"2026-10-21T15:59:26.054Z","updated":"2026-10-28T01:20:41.647Z","title":"pypdf: Possible infinite loop when hitting EOF in standard xref table","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00466},{"id":"CVE-2026-113793","published":"2026-10-21T15:57:55.600Z","updated":"2026-10-28T17:01:30.870Z","title":"pypdf: Possible infinite loop when removing tree items","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00466},{"id":"CVE-2026-113792","published":"2026-10-21T15:55:55.976Z","updated":"2026-10-23T15:12:47.568Z","title":"pypdf: Possible infinite loop in PdfWriter.find_outline_item","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00466},{"id":"CVE-2026-114256","published":"2026-10-21T15:45:07.338Z","updated":"2026-10-28T16:48:42.312Z","title":"oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00275},{"id":"CVE-2026-113791","published":"2026-10-21T15:37:50.527Z","updated":"2026-10-30T15:57:39.880Z","title":"pypdf: Possible large memory usage when parsing content streams","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00414},{"id":"CVE-2026-113790","published":"2026-10-21T15:35:52.503Z","updated":"2026-10-28T01:18:59.036Z","title":"pypdf: Possible large memory usage when parsing arrays and dictionaries","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00397},{"id":"CVE-2026-114490","published":"2026-10-21T15:34:11.363Z","updated":"2026-10-29T20:55:36.300Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00108},{"id":"CVE-2026-114489","published":"2026-10-21T15:34:06.371Z","updated":"2026-10-29T20:55:43.979Z","title":"Missing Authorization in hMailServer","severity":"HIGH","score":8.1,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00272},{"id":"CVE-2026-113789","published":"2026-10-21T15:33:45.801Z","updated":"2026-10-28T16:42:29.030Z","title":"pypdf: Possible long runtimes/large memory usage when retrieving form fields","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00414},{"id":"CVE-2026-113788","published":"2026-10-21T15:31:24.574Z","updated":"2026-10-23T15:13:02.016Z","title":"Lagoon core ssh service vulnerable to remote code execution","severity":"CRITICAL","score":9.4,"vendor":"uselagoon","product":"lagoon","kev":false,"epss":0.00389},{"id":"CVE-2026-114255","published":"2026-10-21T15:30:14.365Z","updated":"2026-10-28T01:17:10.564Z","title":"oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00275},{"id":"CVE-2026-113787","published":"2026-10-21T15:25:43.527Z","updated":"2026-10-30T17:45:30.891Z","title":"odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values","severity":"MEDIUM","score":6.1,"vendor":"GitHubNewbie0","product":"odf-kit","kev":false,"epss":0.00246},{"id":"CVE-2026-114254","published":"2026-10-21T15:15:07.790Z","updated":"2026-10-23T22:06:16.384Z","title":"oretnom23 file-management-system-php admin_class.php login sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00419},{"id":"CVE-2026-114479","published":"2026-10-21T15:12:50.851Z","updated":"2026-10-21T17:19:12.258Z","title":"Not Failing Securely ('Failing Open') in hMailServer","severity":"MEDIUM","score":5.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00321},{"id":"CVE-2026-114478","published":"2026-10-21T15:12:35.847Z","updated":"2026-10-29T20:55:51.043Z","title":"Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00261},{"id":"CVE-2026-114477","published":"2026-10-21T15:12:30.844Z","updated":"2026-10-29T20:55:57.794Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":4.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00214},{"id":"CVE-2026-114476","published":"2026-10-21T15:12:25.844Z","updated":"2026-10-29T20:56:06.397Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00274},{"id":"CVE-2026-114475","published":"2026-10-21T15:12:20.842Z","updated":"2026-10-29T20:56:12.860Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00237},{"id":"CVE-2026-114474","published":"2026-10-21T15:12:15.849Z","updated":"2026-10-29T20:56:19.809Z","title":"Use of Less Trusted Source in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00164},{"id":"CVE-2026-114473","published":"2026-10-21T15:12:05.843Z","updated":"2026-10-29T20:56:25.949Z","title":"Incorrect Authorization in hMailServer","severity":"MEDIUM","score":5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00244},{"id":"CVE-2026-114472","published":"2026-10-21T15:11:55.846Z","updated":"2026-10-29T20:56:32.293Z","title":"Insufficient Resource Pool in hMailServer","severity":"LOW","score":3.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00208},{"id":"CVE-2026-114471","published":"2026-10-21T15:11:50.847Z","updated":"2026-10-29T20:56:38.681Z","title":"Insertion of Sensitive Information into Log File in hMailServer","severity":"MEDIUM","score":4.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00097},{"id":"CVE-2026-114470","published":"2026-10-21T15:11:20.847Z","updated":"2026-10-29T20:56:45.205Z","title":"Cross-Site Request Forgery (CSRF) in hMailServer","severity":"MEDIUM","score":5.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00153},{"id":"CVE-2026-102486","published":"2026-10-21T15:04:01.274Z","updated":"2026-10-29T20:56:51.755Z","title":"Out-of-bounds Read in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00548},{"id":"CVE-2026-102485","published":"2026-10-21T15:03:51.277Z","updated":"2026-10-29T20:56:57.697Z","title":"Out-of-bounds Read in ntpsec","severity":"MEDIUM","score":5.2,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00181},{"id":"CVE-2026-102484","published":"2026-10-21T15:03:46.313Z","updated":"2026-10-29T20:57:05.091Z","title":"Heap-based Buffer Overflow in ntpsec","severity":"MEDIUM","score":6.4,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00205},{"id":"CVE-2026-102483","published":"2026-10-21T15:03:41.276Z","updated":"2026-10-29T20:57:11.825Z","title":"Reachable Assertion in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00428},{"id":"CVE-2026-114462","published":"2026-10-21T15:02:31.893Z","updated":"2026-10-30T15:22:33.408Z","title":"Arbitrary File Read via Symlink  in Velneo vServer HTTP Server","severity":"MEDIUM","score":6,"vendor":"Velneo","product":"vServer","kev":false,"epss":0.00305},{"id":"CVE-2026-114370","published":"2026-10-21T15:02:10.807Z","updated":"2026-10-21T20:40:30.686Z","title":"Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal","severity":"LOW","score":3.7,"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","kev":false,"epss":0.00323},{"id":"CVE-2026-114463","published":"2026-10-21T15:01:02.634Z","updated":"2026-10-30T15:16:36.992Z","title":"CVE-2026-114463","severity":"HIGH","score":7.5,"vendor":"Nous Research","product":"Hermes Agent","kev":false,"epss":0.00691},{"id":"CVE-2026-114253","published":"2026-10-21T15:00:17.099Z","updated":"2026-10-28T16:37:05.144Z","title":"oretnom23 file-management-system-php index.php include file inclusion","severity":"MEDIUM","score":5.3,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00326},{"id":"CVE-2023-7356","published":"2026-10-21T14:59:38.724Z","updated":"2026-10-26T06:55:41.493Z","title":"Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00285},{"id":"CVE-2026-98869","published":"2026-10-21T14:55:10.364Z","updated":"2026-10-24T14:09:25.680Z","title":"bpf: Infer zext_dst based on static register liveness analysis","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-114252","published":"2026-10-21T14:45:18.942Z","updated":"2026-10-27T22:21:05.466Z","title":"itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00285},{"id":"CVE-2026-113786","published":"2026-10-21T14:38:39.617Z","updated":"2026-10-27T22:18:57.010Z","title":"pypdf: Unvalidated JPEG image data loading","severity":"LOW","score":2.3,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00405},{"id":"CVE-2026-114251","published":"2026-10-21T14:30:21.177Z","updated":"2026-10-21T15:47:37.180Z","title":"itsourcecode Sales-and-Inventory-System cust_del.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00251},{"id":"CVE-2026-114250","published":"2026-10-21T14:15:16.287Z","updated":"2026-10-28T16:34:56.492Z","title":"itsourcecode Sales-and-Inventory-System cust_edit.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00209},{"id":"CVE-2026-113779","published":"2026-10-21T14:06:33.814Z","updated":"2026-10-21T15:47:43.969Z","title":"pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission","severity":"HIGH","score":8.8,"vendor":"pfrest","product":"pfSense-pkg-RESTAPI","kev":false,"epss":0.0041},{"id":"CVE-2026-111832","published":"2026-10-21T14:00:13.392Z","updated":"2026-10-21T17:19:12.429Z","title":"WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":10,"vendor":"WP Mailster","product":"WP Mailster","kev":false,"epss":0.00405},{"id":"CVE-2026-111834","published":"2026-10-21T14:00:13.142Z","updated":"2026-10-21T17:19:12.599Z","title":"WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Kitae Park","product":"Mang Board WP","kev":false,"epss":0.00372},{"id":"CVE-2026-111835","published":"2026-10-21T14:00:13.041Z","updated":"2026-10-21T15:47:50.932Z","title":"WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bjorntech","product":"BjornTech Swish for WooCommerce","kev":false,"epss":0.00217},{"id":"CVE-2026-111848","published":"2026-10-21T14:00:12.950Z","updated":"2026-10-21T15:47:58.712Z","title":"WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.00202},{"id":"CVE-2026-112221","published":"2026-10-21T14:00:12.692Z","updated":"2026-10-21T17:19:12.758Z","title":"WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Brainstorm Force","product":"SureCart","kev":false,"epss":0.00202},{"id":"CVE-2026-111833","published":"2026-10-21T14:00:12.587Z","updated":"2026-10-21T17:19:12.931Z","title":"WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability","severity":"HIGH","score":7.5,"vendor":"Bold Grid","product":"weForms","kev":false,"epss":0.00479},{"id":"CVE-2026-111837","published":"2026-10-21T14:00:12.511Z","updated":"2026-10-21T17:19:13.111Z","title":"WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Wasiliy Strecker","product":"Contest Gallery","kev":false,"epss":0.0018},{"id":"CVE-2026-111838","published":"2026-10-21T14:00:12.248Z","updated":"2026-10-21T17:19:13.275Z","title":"WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ThemeHunk","product":"ThemeHunk Customizer","kev":false,"epss":0.00202},{"id":"CVE-2026-111840","published":"2026-10-21T14:00:12.136Z","updated":"2026-10-21T17:19:13.467Z","title":"WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"VideoWhisper.com","product":"Paid Videochat Turnkey Site","kev":false,"epss":0.00202},{"id":"CVE-2026-111852","published":"2026-10-21T14:00:12.051Z","updated":"2026-10-21T17:19:13.637Z","title":"WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WPdreams","product":"Ajax Search Lite","kev":false,"epss":0.00338},{"id":"CVE-2024-6423","published":"2026-10-21T13:56:26.552Z","updated":"2026-10-30T15:11:58.008Z","title":"Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage","severity":"MEDIUM","score":4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00103},{"id":"CVE-2026-109619","published":"2026-10-21T13:54:43.866Z","updated":"2026-10-30T18:31:36.959Z","title":"RCE via stale global state","severity":"CRITICAL","score":9.2,"vendor":"PHP Group","product":"PHP","kev":true,"epss":0.99999},{"id":"CVE-2026-104949","published":"2026-10-21T13:54:11.681Z","updated":"2026-10-30T15:03:20.232Z","title":"WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in…","severity":"LOW","score":2.3,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00231},{"id":"CVE-2026-104948","published":"2026-10-21T13:53:54.574Z","updated":"2026-10-30T18:02:53.219Z","title":"WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster…","severity":"HIGH","score":7.1,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00216},{"id":"CVE-2026-104947","published":"2026-10-21T13:53:05.640Z","updated":"2026-10-30T18:02:09.506Z","title":"WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function…","severity":"MEDIUM","score":5.3,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00216},{"id":"CVE-2026-114437","published":"2026-10-21T13:52:25.617Z","updated":"2026-10-21T17:19:13.809Z","title":"Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-For","severity":"MEDIUM","score":6.3,"vendor":"go-chi","product":"chi","kev":false,"epss":0.00129},{"id":"CVE-2025-0326","published":"2026-10-21T13:50:42.947Z","updated":"2026-10-30T17:59:23.193Z","title":"Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access","severity":"HIGH","score":7.4,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00275},{"id":"CVE-2024-7478","published":"2026-10-21T13:49:07.839Z","updated":"2026-10-30T17:57:30.908Z","title":"Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery","severity":"MEDIUM","score":5.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00235},{"id":"CVE-2026-109618","published":"2026-10-21T13:48:34.845Z","updated":"2026-10-30T18:31:35.583Z","title":"RCE via OOM corruption","severity":"CRITICAL","score":9.2,"vendor":"PHP Group","product":"PHP","kev":true,"epss":0.99999},{"id":"CVE-2024-5563","published":"2026-10-21T13:44:40.480Z","updated":"2026-10-30T17:11:39.685Z","title":"Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00192},{"id":"CVE-2024-4989","published":"2026-10-21T13:41:06.765Z","updated":"2026-10-30T17:09:39.922Z","title":"Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks","severity":"MEDIUM","score":5.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00169},{"id":"CVE-2024-5139","published":"2026-10-21T13:36:49.246Z","updated":"2026-10-30T17:06:32.391Z","title":"Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection","severity":"MEDIUM","score":6.1,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00227},{"id":"CVE-2026-114249","published":"2026-10-21T13:30:18.922Z","updated":"2026-10-27T22:17:47.043Z","title":"dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00301},{"id":"CVE-2026-111849","published":"2026-10-21T13:00:12.562Z","updated":"2026-10-21T13:13:28.148Z","title":"WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"WpTravelly","kev":false,"epss":0.00289},{"id":"CVE-2026-114248","published":"2026-10-21T13:00:11.695Z","updated":"2026-10-21T13:13:58.285Z","title":"dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00582},{"id":"CVE-2026-97313","published":"2026-10-21T12:47:28.499Z","updated":"2026-10-21T17:19:13.974Z","title":"Specific RPZ configurations and query patterns may result in an unexpected exit","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448},{"id":"CVE-2026-96888","published":"2026-10-21T12:46:17.594Z","updated":"2026-10-21T17:19:14.117Z","title":"Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00461},{"id":"CVE-2026-94300","published":"2026-10-21T12:45:26.540Z","updated":"2026-10-22T23:04:30.599Z","title":"Concurrent GSS-TSIG messages corrupt memory","severity":"HIGH","score":8.1,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00953},{"id":"CVE-2026-114245","published":"2026-10-21T12:45:14.392Z","updated":"2026-10-21T15:48:13.141Z","title":"dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00377},{"id":"CVE-2026-19630","published":"2026-10-21T12:41:04.379Z","updated":"2026-10-21T17:19:14.434Z","title":"Amplified resource exhaustion in inbound message processing","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448},{"id":"CVE-2026-114404","published":"2026-10-21T12:39:56.258Z","updated":"2026-10-21T15:48:21.337Z","title":"PHPPresentation 1.2.0 XSS via Writer\\HTML Text Runs, Hyperlinks and Descriptions","severity":"MEDIUM","score":5.3,"vendor":"PHPOffice","product":"PHPPresentation","kev":false,"epss":0.00258},{"id":"CVE-2026-114403","published":"2026-10-21T12:39:55.570Z","updated":"2026-10-28T16:31:14.653Z","title":"PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\\Serialized::load","severity":"CRITICAL","score":9.2,"vendor":"PHPOffice","product":"PHPPresentation","kev":false,"epss":0.00703},{"id":"CVE-2026-114402","published":"2026-10-21T12:39:54.877Z","updated":"2026-10-27T22:15:40.198Z","title":"Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00432},{"id":"CVE-2026-114401","published":"2026-10-21T12:39:54.187Z","updated":"2026-10-21T19:57:13.714Z","title":"Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login","severity":"MEDIUM","score":6.9,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00441},{"id":"CVE-2026-114400","published":"2026-10-21T12:39:53.511Z","updated":"2026-10-23T18:32:44.884Z","title":"Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads","severity":"HIGH","score":8.2,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00499},{"id":"CVE-2026-114399","published":"2026-10-21T12:39:52.827Z","updated":"2026-10-21T15:48:28.516Z","title":"Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API","severity":"HIGH","score":7,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00592},{"id":"CVE-2026-114398","published":"2026-10-21T12:39:52.147Z","updated":"2026-10-28T16:27:59.714Z","title":"Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo","severity":"MEDIUM","score":5.1,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00266},{"id":"CVE-2026-114397","published":"2026-10-21T12:39:51.481Z","updated":"2026-10-27T22:13:55.965Z","title":"Trudesk through 1.2.11 Missing Authentication on Debug Routes","severity":"HIGH","score":8.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00626},{"id":"CVE-2026-114396","published":"2026-10-21T12:39:50.810Z","updated":"2026-10-21T20:04:57.728Z","title":"Trudesk through 1.2.11 MongoDB $where Injection via tickets search API","severity":"HIGH","score":7.1,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00503},{"id":"CVE-2026-114395","published":"2026-10-21T12:39:50.133Z","updated":"2026-10-21T13:24:57.765Z","title":"Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315},{"id":"CVE-2026-114394","published":"2026-10-21T12:39:49.408Z","updated":"2026-10-21T15:48:35.664Z","title":"Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315},{"id":"CVE-2026-114393","published":"2026-10-21T12:39:48.745Z","updated":"2026-10-28T16:26:00.884Z","title":"Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315},{"id":"CVE-2026-114392","published":"2026-10-21T12:39:48.070Z","updated":"2026-10-27T22:12:02.494Z","title":"Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid","severity":"MEDIUM","score":6.9,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00436},{"id":"CVE-2026-114391","published":"2026-10-21T12:39:47.378Z","updated":"2026-10-21T20:08:00.604Z","title":"ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods","severity":"HIGH","score":7.1,"vendor":"easysoft","product":"zentaopms","kev":false,"epss":0.00299},{"id":"CVE-2026-114390","published":"2026-10-21T12:39:46.695Z","updated":"2026-10-21T13:28:08.185Z","title":"Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers","severity":"MEDIUM","score":6.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00227},{"id":"CVE-2026-114389","published":"2026-10-21T12:39:45.983Z","updated":"2026-10-21T15:48:42.424Z","title":"Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade","severity":"MEDIUM","score":5.3,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00274},{"id":"CVE-2026-114388","published":"2026-10-21T12:39:45.276Z","updated":"2026-10-28T16:23:32.198Z","title":"Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController","severity":"MEDIUM","score":6.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00167},{"id":"CVE-2026-114387","published":"2026-10-21T12:39:44.579Z","updated":"2026-10-27T22:10:43.474Z","title":"Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components","severity":"HIGH","score":8.7,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00324},{"id":"CVE-2026-114386","published":"2026-10-21T12:39:43.886Z","updated":"2026-10-21T19:55:49.371Z","title":"Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code","severity":"MEDIUM","score":6.3,"vendor":"pydantic","product":"pydantic-ai-harness","kev":false,"epss":0.00346},{"id":"CVE-2026-114120","published":"2026-10-21T12:39:43.243Z","updated":"2026-10-21T13:38:20.150Z","title":"SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"SchedulePress","kev":false,"epss":0.00286},{"id":"CVE-2026-114405","published":"2026-10-21T12:27:00.706Z","updated":"2026-10-21T17:19:14.578Z","title":"Denial of Service via Malformed VATP Packet in Velneo vServer","severity":"HIGH","score":8.7,"vendor":"Velneo","product":"vServer","kev":false,"epss":0.00344},{"id":"CVE-2026-90484","published":"2026-10-21T12:19:37.796Z","updated":"2026-10-26T13:39:12.101Z","title":"Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0038},{"id":"CVE-2026-87849","published":"2026-10-21T12:18:29.706Z","updated":"2026-10-26T13:54:40.137Z","title":"Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00352},{"id":"CVE-2026-86249","published":"2026-10-21T12:17:42.903Z","updated":"2026-10-30T17:05:52.803Z","title":"Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00561},{"id":"CVE-2026-86147","published":"2026-10-21T12:16:22.369Z","updated":"2026-10-30T14:45:54.782Z","title":"Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055},{"id":"CVE-2026-86146","published":"2026-10-21T12:15:26.421Z","updated":"2026-10-30T14:40:59.777Z","title":"Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055},{"id":"CVE-2026-114243","published":"2026-10-21T12:15:12.509Z","updated":"2026-10-28T16:46:18.826Z","title":"dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00328},{"id":"CVE-2026-84748","published":"2026-10-21T12:14:28.591Z","updated":"2026-10-30T14:39:56.499Z","title":"Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00426},{"id":"CVE-2026-84747","published":"2026-10-21T12:13:28.033Z","updated":"2026-10-30T14:39:07.800Z","title":"Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0046},{"id":"CVE-2026-84727","published":"2026-10-21T12:11:48.638Z","updated":"2026-10-21T13:18:05.045Z","title":"Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00323},{"id":"CVE-2026-82953","published":"2026-10-21T12:10:07.391Z","updated":"2026-10-26T13:55:45.295Z","title":"Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0048},{"id":"CVE-2026-82942","published":"2026-10-21T12:07:15.689Z","updated":"2026-10-30T14:35:42.017Z","title":"Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00391},{"id":"CVE-2026-82425","published":"2026-10-21T12:05:07.045Z","updated":"2026-10-30T14:33:32.475Z","title":"Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00418},{"id":"CVE-2026-82231","published":"2026-10-21T12:04:19.454Z","updated":"2026-10-30T14:30:01.845Z","title":"Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00418},{"id":"CVE-2026-82230","published":"2026-10-21T12:03:04.835Z","updated":"2026-10-21T15:11:15.223Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055},{"id":"CVE-2026-82210","published":"2026-10-21T12:01:31.264Z","updated":"2026-10-30T14:25:54.253Z","title":"Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00498},{"id":"CVE-2026-114407","published":"2026-10-21T12:01:20.918Z","updated":"2026-10-23T13:28:34.869Z","title":"e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter","severity":"MEDIUM","score":5.1,"vendor":"e107inc","product":"e107","kev":false,"epss":0.00276},{"id":"CVE-2026-81755","published":"2026-10-21T11:58:26.104Z","updated":"2026-10-30T14:22:06.684Z","title":"Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00734},{"id":"CVE-2026-80463","published":"2026-10-21T11:57:30.211Z","updated":"2026-10-30T14:18:35.910Z","title":"Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057},{"id":"CVE-2026-79704","published":"2026-10-21T11:56:20.309Z","updated":"2026-10-30T17:03:38.510Z","title":"Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051},{"id":"CVE-2026-78334","published":"2026-10-21T11:54:24.478Z","updated":"2026-10-30T17:01:12.646Z","title":"Apache bRPC: Missing Authentication for Streaming RPC Frames","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00663},{"id":"CVE-2026-78066","published":"2026-10-21T11:53:42.058Z","updated":"2026-10-30T16:59:10.006Z","title":"Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051},{"id":"CVE-2026-78058","published":"2026-10-21T11:52:57.984Z","updated":"2026-10-30T16:55:00.165Z","title":"Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0081},{"id":"CVE-2026-78048","published":"2026-10-21T11:51:58.752Z","updated":"2026-10-30T16:49:25.386Z","title":"Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0063},{"id":"CVE-2026-74758","published":"2026-10-21T11:48:23.883Z","updated":"2026-10-30T16:47:23.207Z","title":"Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00649},{"id":"CVE-2026-74757","published":"2026-10-21T11:46:17.285Z","updated":"2026-10-26T13:40:04.776Z","title":"Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0063},{"id":"CVE-2026-74755","published":"2026-10-21T11:45:25.658Z","updated":"2026-10-30T17:56:42.592Z","title":"Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057},{"id":"CVE-2026-114242","published":"2026-10-21T11:45:17.649Z","updated":"2026-10-27T22:08:29.102Z","title":"dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00456},{"id":"CVE-2026-66392","published":"2026-10-21T11:43:52.622Z","updated":"2026-10-30T17:54:51.981Z","title":"Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00206},{"id":"CVE-2026-61916","published":"2026-10-21T11:42:46.023Z","updated":"2026-10-30T14:14:07.721Z","title":"Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057},{"id":"CVE-2026-61902","published":"2026-10-21T11:41:56.277Z","updated":"2026-10-30T14:10:48.052Z","title":"Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00478},{"id":"CVE-2026-58064","published":"2026-10-21T11:41:13.666Z","updated":"2026-10-30T14:05:38.961Z","title":"Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057},{"id":"CVE-2026-56388","published":"2026-10-21T11:40:41.743Z","updated":"2026-10-30T13:57:52.012Z","title":"Apache bRPC: Out-of-Bounds Write in Redis Command Parser","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00953},{"id":"CVE-2026-56387","published":"2026-10-21T11:39:11.225Z","updated":"2026-10-30T13:56:20.160Z","title":"Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00595},{"id":"CVE-2026-56386","published":"2026-10-21T11:37:47.458Z","updated":"2026-10-21T13:07:53.942Z","title":"Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00732},{"id":"CVE-2026-54427","published":"2026-10-21T11:36:40.517Z","updated":"2026-10-30T13:54:26.962Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051},{"id":"CVE-2026-54426","published":"2026-10-21T11:32:19.591Z","updated":"2026-10-30T13:46:51.555Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00462},{"id":"CVE-2026-54425","published":"2026-10-21T11:31:19.989Z","updated":"2026-10-30T13:45:53.356Z","title":"Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0065},{"id":"CVE-2026-48830","published":"2026-10-21T11:30:15.288Z","updated":"2026-10-30T13:38:36.145Z","title":"Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00556},{"id":"CVE-2026-59229","published":"2026-10-21T11:11:46.924Z","updated":"2026-10-30T13:33:53.498Z","title":"Apache IoTDB: Legacy Pipe Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.00449},{"id":"CVE-2026-59562","published":"2026-10-21T11:10:26.319Z","updated":"2026-10-30T17:53:15.072Z","title":"Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.00569},{"id":"CVE-2026-41114","published":"2026-10-21T11:07:24.947Z","updated":"2026-10-30T17:49:40.907Z","title":"Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache IoTDB JDBC driver","kev":false,"epss":0.00557},{"id":"CVE-2026-58663","published":"2026-10-21T11:03:23.887Z","updated":"2026-10-30T17:46:13.409Z","title":"Apache IoTDB: Auth Bypass in pipeTransfer() interface","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.0056},{"id":"CVE-2026-87096","published":"2026-10-21T10:14:44.298Z","updated":"2026-10-30T17:18:23.880Z","title":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI)…","severity":"LOW","score":3.3,"vendor":"Acronis","product":"Acronis Cyber Infrastructure","kev":false,"epss":0.00131},{"id":"CVE-2026-87095","published":"2026-10-21T10:14:03.375Z","updated":"2026-10-30T16:41:25.736Z","title":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI)…","severity":"CRITICAL","score":9.1,"vendor":"Acronis","product":"Acronis Cyber Infrastructure","kev":false,"epss":0.00242},{"id":"CVE-2026-105923","published":"2026-10-21T09:21:05.197Z","updated":"2026-10-29T19:10:32.263Z","title":"Null-pointer dereference in QTriangulator reachable through VectorImage","severity":"MEDIUM","score":4,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012},{"id":"CVE-2026-110369","published":"2026-10-21T09:10:25.410Z","updated":"2026-10-21T10:35:06.745Z","title":"WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"WordPress Team Members – GS Plugins","kev":false,"epss":0.00404},{"id":"CVE-2026-110370","published":"2026-10-21T09:10:25.368Z","updated":"2026-10-21T10:35:06.886Z","title":"WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Pins for Pinterest","kev":false,"epss":0.00404},{"id":"CVE-2026-110884","published":"2026-10-21T09:10:25.275Z","updated":"2026-10-21T10:35:07.177Z","title":"WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"geekontheroad","product":"Live Summary for Gravity Forms","kev":false,"epss":0.00205},{"id":"CVE-2026-70387","published":"2026-10-21T09:07:56.492Z","updated":"2026-10-29T19:09:35.392Z","title":"OnePlus OxygenOS exposed dangerous method vulnerability","severity":"HIGH","score":8.4,"vendor":"OnePlus","product":"OxygenOS","kev":false,"epss":0.00308},{"id":"CVE-2026-97206","published":"2026-10-21T08:57:41.106Z","updated":"2026-10-29T19:08:32.470Z","title":"DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00334},{"id":"CVE-2026-96405","published":"2026-10-21T08:57:26.986Z","updated":"2026-10-29T19:07:33.197Z","title":"Aggregate DNS name chained pointer decompression work leads to degradation of service.","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00254},{"id":"CVE-2026-50106","published":"2026-10-21T08:57:11.040Z","updated":"2026-10-29T19:06:43.165Z","title":"Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.","severity":"MEDIUM","score":6.5,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00207},{"id":"CVE-2026-35501","published":"2026-10-21T08:56:55.811Z","updated":"2026-10-29T19:05:26.623Z","title":"Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.","severity":"LOW","score":3.7,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00111},{"id":"CVE-2026-109125","published":"2026-10-21T08:56:35.696Z","updated":"2026-10-29T19:05:06.036Z","title":"Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00172},{"id":"CVE-2026-70386","published":"2026-10-21T08:51:24.522Z","updated":"2026-10-30T16:35:07.653Z","title":"OnePlus OxygenOS improper neutralization of special elements vulnerability","severity":"HIGH","score":8.5,"vendor":"OnePlus","product":"OxygenOS","kev":false,"epss":0.01379},{"id":"CVE-2026-85683","published":"2026-10-21T08:39:00.033Z","updated":"2026-10-21T10:14:54.800Z","title":"Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Jane Menu","kev":false,"epss":0.00359},{"id":"CVE-2026-14556","published":"2026-10-21T08:38:59.379Z","updated":"2026-10-21T10:14:54.939Z","title":"HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"HappyForms","kev":false,"epss":0.00202},{"id":"CVE-2026-107447","published":"2026-10-21T08:38:58.748Z","updated":"2026-10-21T10:14:55.080Z","title":"Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Contest Gallery","kev":false,"epss":0.00264},{"id":"CVE-2026-105256","published":"2026-10-21T08:38:58.118Z","updated":"2026-10-21T10:14:55.218Z","title":"LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"LatePoint","kev":false,"epss":0.0014},{"id":"CVE-2026-104642","published":"2026-10-21T08:38:57.475Z","updated":"2026-10-21T10:14:55.356Z","title":"Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Simple Shopping Cart","kev":false,"epss":0.00136},{"id":"CVE-2026-104641","published":"2026-10-21T08:38:56.835Z","updated":"2026-10-21T10:14:55.498Z","title":"Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Simple Shopping Cart","kev":false,"epss":0.00145},{"id":"CVE-2026-103301","published":"2026-10-21T08:38:56.211Z","updated":"2026-10-21T10:14:55.631Z","title":"Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway for Telcell","kev":false,"epss":0.00145},{"id":"CVE-2026-101138","published":"2026-10-21T08:38:55.566Z","updated":"2026-10-21T10:14:55.768Z","title":"CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"CMP – Coming Soon & Maintenance","kev":false,"epss":0.00256},{"id":"CVE-2026-114236","published":"2026-10-21T08:04:32.529Z","updated":"2026-10-30T08:22:40.441Z","title":"Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers","severity":"LOW","score":3.3,"vendor":"Red Hat","product":"Confidential Compute Attestation","kev":false,"epss":0.00104},{"id":"CVE-2026-110938","published":"2026-10-21T08:03:26.062Z","updated":"2026-10-26T17:57:34.803Z","title":"JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00415},{"id":"CVE-2026-111075","published":"2026-10-21T08:00:32.804Z","updated":"2026-10-26T17:57:34.946Z","title":"JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00372},{"id":"CVE-2026-110899","published":"2026-10-21T08:00:20.542Z","updated":"2026-10-30T20:01:11.038Z","title":"WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Kevin Stover","product":"Ninja Forms","kev":false,"epss":0.00215},{"id":"CVE-2026-107435","published":"2026-10-21T08:00:15.941Z","updated":"2026-10-21T10:35:07.464Z","title":"WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.0019},{"id":"CVE-2026-17557","published":"2026-10-21T07:59:10.543Z","updated":"2026-10-21T13:38:59.538Z","title":"Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00327},{"id":"CVE-2026-111074","published":"2026-10-21T07:57:16.912Z","updated":"2026-10-26T17:57:35.098Z","title":"JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00421},{"id":"CVE-2026-96901","published":"2026-10-21T06:00:26.262Z","updated":"2026-10-21T10:35:00.799Z","title":"Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Cart Abandonment Recovery for WooCommerce","kev":false,"epss":0.00206},{"id":"CVE-2026-92999","published":"2026-10-21T06:00:26.088Z","updated":"2026-10-21T10:35:00.944Z","title":"Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00282},{"id":"CVE-2026-92998","published":"2026-10-21T06:00:25.917Z","updated":"2026-10-21T10:35:01.086Z","title":"Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00359},{"id":"CVE-2026-92997","published":"2026-10-21T06:00:25.739Z","updated":"2026-10-21T10:35:01.264Z","title":"Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00359},{"id":"CVE-2026-88784","published":"2026-10-21T06:00:25.557Z","updated":"2026-10-21T10:35:01.419Z","title":"Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Translate WordPress with Weglot 2.0","kev":false,"epss":0.00282},{"id":"CVE-2026-87838","published":"2026-10-21T06:00:25.381Z","updated":"2026-10-21T10:35:01.578Z","title":"Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Wava Payment Plugin","kev":false,"epss":0.00275},{"id":"CVE-2026-87837","published":"2026-10-21T06:00:25.208Z","updated":"2026-10-21T10:35:01.724Z","title":"Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Wava Payment Plugin","kev":false,"epss":0.00247},{"id":"CVE-2026-86611","published":"2026-10-21T06:00:25.028Z","updated":"2026-10-21T10:35:01.870Z","title":"Download Manager (Free & Pro) - Privacy Settings Update via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Download Manager","kev":false,"epss":0.00132},{"id":"CVE-2026-85642","published":"2026-10-21T06:00:24.595Z","updated":"2026-10-21T10:35:02.018Z","title":"Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Formidable Forms","kev":false,"epss":0.00392},{"id":"CVE-2026-81813","published":"2026-10-21T06:00:24.425Z","updated":"2026-10-21T10:35:02.168Z","title":"Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Elementor Website Builder","kev":false,"epss":0.00412},{"id":"CVE-2026-81812","published":"2026-10-21T06:00:24.247Z","updated":"2026-10-21T10:35:02.313Z","title":"Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"Elementor Website Builder","kev":false,"epss":0.00278},{"id":"CVE-2026-79627","published":"2026-10-21T06:00:24.077Z","updated":"2026-10-21T10:35:02.461Z","title":"Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Advanced File Manager","kev":false,"epss":0.00266},{"id":"CVE-2026-15261","published":"2026-10-21T06:00:23.908Z","updated":"2026-10-21T10:35:02.630Z","title":"TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TI WooCommerce Wishlist","kev":false,"epss":0.00276},{"id":"CVE-2026-111957","published":"2026-10-21T06:00:23.474Z","updated":"2026-10-21T10:35:02.777Z","title":"SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SUMIT Payment Gateway for WooCommerce","kev":false,"epss":0.00247},{"id":"CVE-2026-111956","published":"2026-10-21T06:00:23.300Z","updated":"2026-10-21T10:35:02.923Z","title":"WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure","severity":"MEDIUM","score":5.9,"vendor":"Unknown","product":"WholesaleX","kev":false,"epss":0.00309},{"id":"CVE-2026-111955","published":"2026-10-21T06:00:23.127Z","updated":"2026-10-21T10:35:03.094Z","title":"WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WholesaleX","kev":false,"epss":0.00243},{"id":"CVE-2026-111949","published":"2026-10-21T06:00:22.952Z","updated":"2026-10-21T10:35:03.237Z","title":"miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"miniOrange 2FA","kev":false,"epss":0.00282},{"id":"CVE-2026-111948","published":"2026-10-21T06:00:22.778Z","updated":"2026-10-21T10:35:03.409Z","title":"Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00202},{"id":"CVE-2026-111947","published":"2026-10-21T06:00:22.606Z","updated":"2026-10-21T10:35:03.548Z","title":"Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"Pricing Table WordPress Plugin","kev":false,"epss":0.00257},{"id":"CVE-2026-111596","published":"2026-10-21T06:00:22.431Z","updated":"2026-10-21T10:35:03.694Z","title":"Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Kliken: Ads + Pixel for Meta","kev":false,"epss":0.00276},{"id":"CVE-2026-111574","published":"2026-10-21T06:00:22.249Z","updated":"2026-10-21T10:35:03.878Z","title":"Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Redirection for Contact Form 7","kev":false,"epss":0.00308},{"id":"CVE-2026-110982","published":"2026-10-21T06:00:22.070Z","updated":"2026-10-21T10:35:04.051Z","title":"AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"AI Engine","kev":false,"epss":0.0027},{"id":"CVE-2026-110651","published":"2026-10-21T06:00:21.895Z","updated":"2026-10-21T10:35:04.267Z","title":"Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Swift Performance Lite","kev":false,"epss":0.00329},{"id":"CVE-2026-110523","published":"2026-10-21T06:00:21.719Z","updated":"2026-10-21T10:35:04.416Z","title":"WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"WP User Manager","kev":false,"epss":0.0038},{"id":"CVE-2026-110514","published":"2026-10-21T06:00:21.549Z","updated":"2026-10-21T10:35:04.566Z","title":"WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"WPZOOM Portfolio Lite","kev":false,"epss":0.0032},{"id":"CVE-2026-109926","published":"2026-10-21T06:00:21.380Z","updated":"2026-10-21T10:35:04.713Z","title":"Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin Activation","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Productive Commerce","kev":false,"epss":0.00245},{"id":"CVE-2026-109147","published":"2026-10-21T06:00:21.207Z","updated":"2026-10-21T10:35:04.857Z","title":"WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"WP Booking System","kev":false,"epss":0.00243},{"id":"CVE-2026-108073","published":"2026-10-21T06:00:21.032Z","updated":"2026-10-21T10:35:05.008Z","title":"SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SureCart","kev":false,"epss":0.00333},{"id":"CVE-2026-107790","published":"2026-10-21T06:00:20.834Z","updated":"2026-10-21T10:35:05.155Z","title":"WP Job Openings < 4.1.1 - Author+ Stored XSS via Job Title","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"HireZoot","kev":false,"epss":0.00402},{"id":"CVE-2026-107789","published":"2026-10-21T06:00:20.660Z","updated":"2026-10-21T10:35:05.297Z","title":"SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SmartyParcel","kev":false,"epss":0.00312},{"id":"CVE-2026-107788","published":"2026-10-21T06:00:20.487Z","updated":"2026-10-21T10:35:05.455Z","title":"SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"SmartyParcel","kev":false,"epss":0.00245},{"id":"CVE-2026-107506","published":"2026-10-21T06:00:20.289Z","updated":"2026-10-21T10:35:05.601Z","title":"Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Simple Banner","kev":false,"epss":0.0032},{"id":"CVE-2026-107237","published":"2026-10-21T06:00:19.869Z","updated":"2026-10-21T10:35:05.744Z","title":"Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live","severity":"HIGH","score":8.2,"vendor":"Unknown","product":"Backup and Staging by WP Time Capsule","kev":false,"epss":0.00298},{"id":"CVE-2026-107128","published":"2026-10-21T06:00:19.697Z","updated":"2026-10-21T10:35:05.896Z","title":"Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization","severity":"MEDIUM","score":5,"vendor":"Unknown","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.0028},{"id":"CVE-2026-107127","published":"2026-10-21T06:00:19.527Z","updated":"2026-10-21T10:35:06.035Z","title":"Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.00166},{"id":"CVE-2026-106932","published":"2026-10-21T06:00:19.354Z","updated":"2026-10-21T10:35:06.191Z","title":"Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Moloni","kev":false,"epss":0.00289},{"id":"CVE-2026-105999","published":"2026-10-21T06:00:19.187Z","updated":"2026-10-21T10:35:06.560Z","title":"Booking Package < 1.7.31 - Unauthenticated Calendar Account Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00333},{"id":"CVE-2026-105998","published":"2026-10-21T06:00:18.969Z","updated":"2026-10-21T10:35:07.028Z","title":"Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00293},{"id":"CVE-2026-105996","published":"2026-10-21T06:00:18.712Z","updated":"2026-10-21T10:35:07.631Z","title":"Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00153},{"id":"CVE-2026-105992","published":"2026-10-21T06:00:18.543Z","updated":"2026-10-21T10:35:08.284Z","title":"Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Ettrick Escape Room Booking","kev":false,"epss":0.00293},{"id":"CVE-2026-105262","published":"2026-10-21T06:00:18.370Z","updated":"2026-10-21T10:35:08.723Z","title":"Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translation","severity":"HIGH","score":8,"vendor":"Unknown","product":"Falang multilanguage for WordPress","kev":false,"epss":0.00386},{"id":"CVE-2026-105257","published":"2026-10-21T06:00:18.196Z","updated":"2026-10-21T10:35:09.010Z","title":"LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Appointment Booking Plugin","kev":false,"epss":0.00289},{"id":"CVE-2026-103302","published":"2026-10-21T06:00:17.064Z","updated":"2026-10-21T10:35:09.154Z","title":"Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway for Idram","kev":false,"epss":0.00293},{"id":"CVE-2026-102499","published":"2026-10-21T06:00:16.646Z","updated":"2026-10-21T10:35:09.296Z","title":"Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action","severity":"HIGH","score":7.7,"vendor":"Unknown","product":"Modern Events Calendar Lite","kev":false,"epss":0.00366},{"id":"CVE-2026-100145","published":"2026-10-21T06:00:16.196Z","updated":"2026-10-21T10:35:09.435Z","title":"Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST Route","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Synchrony Financing","kev":false,"epss":0.00265},{"id":"CVE-2026-93856","published":"2026-10-21T05:36:39.501Z","updated":"2026-10-21T18:54:14.090Z","title":"In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or…","severity":"MEDIUM","score":4.3,"vendor":"OpenStack","product":"Cinder","kev":false,"epss":0.00374},{"id":"CVE-2026-71195","published":"2026-10-21T05:31:56.019Z","updated":"2026-10-27T22:03:10.886Z","title":"In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize…","severity":"CRITICAL","score":9.9,"vendor":"OpenStack","product":"Manila","kev":false,"epss":0.00484},{"id":"CVE-2026-82819","published":"2026-10-21T04:30:40.808Z","updated":"2026-10-30T16:33:26.805Z","title":"Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server","severity":"HIGH","score":7.1,"vendor":"Cerberus","product":"Cerberus FTP Server","kev":false,"epss":0.00457},{"id":"CVE-2026-114040","published":"2026-10-21T03:45:17.850Z","updated":"2026-10-21T13:39:54.530Z","title":"DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal","severity":"MEDIUM","score":5.1,"vendor":"DT42","product":"BerryNet","kev":false,"epss":0.00351},{"id":"CVE-2026-114039","published":"2026-10-21T03:30:13.534Z","updated":"2026-10-21T15:48:55.543Z","title":"projectworlds Advanced Library Management System report_search.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"projectworlds","product":"Advanced Library Management System","kev":false,"epss":0.00241},{"id":"CVE-2026-92824","published":"2026-10-21T03:18:41.962Z","updated":"2026-10-30T06:04:31.711Z","title":"Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00117},{"id":"CVE-2026-92822","published":"2026-10-21T03:18:37.973Z","updated":"2026-10-30T06:55:06.590Z","title":"Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00213},{"id":"CVE-2026-92823","published":"2026-10-21T03:18:37.968Z","updated":"2026-10-30T06:04:28.739Z","title":"Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.0016},{"id":"CVE-2026-82814","published":"2026-10-21T01:30:35.849Z","updated":"2026-10-22T19:10:34.700Z","title":"Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection","severity":"HIGH","score":8.8,"vendor":"smub","product":"Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More","kev":false,"epss":0.00733},{"id":"CVE-2026-113744","published":"2026-10-21T01:30:24.075Z","updated":"2026-10-28T16:21:28.084Z","title":"Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow","severity":"CRITICAL","score":10,"vendor":"Tenda","product":"AC19","kev":false,"epss":0.00622},{"id":"CVE-2026-113743","published":"2026-10-21T01:15:29.254Z","updated":"2026-10-27T21:59:43.196Z","title":"Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal","severity":"MEDIUM","score":5.3,"vendor":"Tenstorrent","product":"tt-metal","kev":false,"epss":0.00444},{"id":"CVE-2026-105044","published":"2026-10-21T01:02:23.730Z","updated":"2026-10-30T13:28:16.329Z","title":"OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox","severity":"HIGH","score":8.5,"vendor":"Qingteng","product":"Host Adaptive Security Platform","kev":false,"epss":0.00936},{"id":"CVE-2026-113741","published":"2026-10-21T01:00:23.541Z","updated":"2026-10-21T13:40:41.222Z","title":"itsourcecode Online Cake Ordering System 404.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00342},{"id":"CVE-2026-111943","published":"2026-10-21T00:52:18.359Z","updated":"2026-10-30T13:08:13.559Z","title":"Distrust compromised intermediate certificates in crypto/x509","severity":"MEDIUM","score":6.8,"vendor":"Go standard library","product":"crypto/x509","kev":false,"epss":0.00396},{"id":"CVE-2026-113740","published":"2026-10-21T00:45:16.139Z","updated":"2026-10-21T15:49:12.546Z","title":"itsourcecode Online Cake Ordering System deletecustomer.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00251},{"id":"CVE-2026-114198","published":"2026-10-21T00:39:47.288Z","updated":"2026-10-21T17:19:14.727Z","title":"Deserialization of untrusted data in floss","severity":"HIGH","score":8.7,"vendor":"Mandiant FLARE","product":"floss","kev":false,"epss":0.00152},{"id":"CVE-2026-114197","published":"2026-10-21T00:39:40.213Z","updated":"2026-10-21T17:19:14.878Z","title":"Deserialization of untrusted data in capa","severity":"HIGH","score":8.7,"vendor":"Mandiant FLARE","product":"capa","kev":false,"epss":0.00152},{"id":"CVE-2026-114119","published":"2026-10-21T00:37:16.230Z","updated":"2026-10-28T16:19:31.357Z","title":"Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential","severity":"CRITICAL","score":9.3,"vendor":"Best Practice Software","product":"Bp Premier","kev":false,"epss":0.00428},{"id":"CVE-2026-114118","published":"2026-10-21T00:37:15.454Z","updated":"2026-10-27T21:58:34.645Z","title":"Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00201},{"id":"CVE-2026-114117","published":"2026-10-21T00:37:14.741Z","updated":"2026-10-21T20:12:04.759Z","title":"Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches","severity":"HIGH","score":8.2,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00294},{"id":"CVE-2026-114116","published":"2026-10-21T00:37:13.988Z","updated":"2026-10-28T13:48:11.399Z","title":"Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators","severity":"MEDIUM","score":6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.0026},{"id":"CVE-2026-114115","published":"2026-10-21T00:37:13.251Z","updated":"2026-10-21T15:49:19.495Z","title":"Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00277},{"id":"CVE-2026-114114","published":"2026-10-21T00:37:12.518Z","updated":"2026-10-28T16:17:33.395Z","title":"Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters","severity":"MEDIUM","score":6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.0026},{"id":"CVE-2026-114113","published":"2026-10-21T00:37:11.824Z","updated":"2026-10-27T21:57:33.882Z","title":"Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders","severity":"HIGH","score":8.4,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00107},{"id":"CVE-2026-114112","published":"2026-10-21T00:37:11.090Z","updated":"2026-10-22T15:34:52.438Z","title":"Sharp before 0.35.4 RCE via bundled libheif AVIF decoding","severity":"HIGH","score":8.9,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00241},{"id":"CVE-2026-114111","published":"2026-10-21T00:37:10.362Z","updated":"2026-10-28T13:49:52.276Z","title":"Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability","severity":"HIGH","score":8.9,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00129},{"id":"CVE-2026-114110","published":"2026-10-21T00:37:09.626Z","updated":"2026-10-21T15:49:26.326Z","title":"Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00348},{"id":"CVE-2026-114109","published":"2026-10-21T00:37:08.897Z","updated":"2026-10-28T16:15:57.817Z","title":"uv before 0.11.15 Arbitrary File Write via Entry Point Names","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00382},{"id":"CVE-2026-114108","published":"2026-10-21T00:37:08.183Z","updated":"2026-10-27T21:56:16.706Z","title":"HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE","severity":"CRITICAL","score":9.3,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00528},{"id":"CVE-2026-114107","published":"2026-10-21T00:37:07.448Z","updated":"2026-10-22T16:04:12.586Z","title":"HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool","severity":"HIGH","score":8.7,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00576},{"id":"CVE-2026-114106","published":"2026-10-21T00:37:06.744Z","updated":"2026-10-28T13:50:32.354Z","title":"HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path","severity":"HIGH","score":8.7,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00432},{"id":"CVE-2026-114105","published":"2026-10-21T00:37:06.018Z","updated":"2026-10-21T15:49:32.206Z","title":"Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits","severity":"MEDIUM","score":6.9,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00136},{"id":"CVE-2026-114104","published":"2026-10-21T00:37:05.291Z","updated":"2026-10-28T16:14:55.229Z","title":"adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass","severity":"HIGH","score":8.2,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00331},{"id":"CVE-2026-114103","published":"2026-10-21T00:37:04.594Z","updated":"2026-10-27T21:54:59.911Z","title":"adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()","severity":"MEDIUM","score":6.9,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00404},{"id":"CVE-2026-114102","published":"2026-10-21T00:37:03.910Z","updated":"2026-10-22T15:40:24.384Z","title":"adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event","severity":"HIGH","score":8.7,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00455},{"id":"CVE-2026-114101","published":"2026-10-21T00:37:03.229Z","updated":"2026-10-28T13:51:32.918Z","title":"Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass","severity":"MEDIUM","score":6.3,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00251},{"id":"CVE-2026-114100","published":"2026-10-21T00:37:02.537Z","updated":"2026-10-21T15:49:38.588Z","title":"Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type","severity":"MEDIUM","score":6.9,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00282},{"id":"CVE-2026-114099","published":"2026-10-21T00:37:01.866Z","updated":"2026-10-28T16:12:46.044Z","title":"Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision","severity":"MEDIUM","score":6.9,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00293},{"id":"CVE-2026-114098","published":"2026-10-21T00:37:01.150Z","updated":"2026-10-27T21:54:10.359Z","title":"Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00152},{"id":"CVE-2026-114097","published":"2026-10-21T00:37:00.461Z","updated":"2026-10-22T15:51:35.497Z","title":"Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00186},{"id":"CVE-2026-114096","published":"2026-10-21T00:36:59.763Z","updated":"2026-10-28T13:46:53.993Z","title":"Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00155},{"id":"CVE-2026-114095","published":"2026-10-21T00:36:59.083Z","updated":"2026-10-21T15:49:44.928Z","title":"Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object","severity":"HIGH","score":7.1,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00311},{"id":"CVE-2026-114094","published":"2026-10-21T00:36:58.401Z","updated":"2026-10-28T15:57:01.832Z","title":"Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths","severity":"HIGH","score":8.7,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.0095},{"id":"CVE-2026-114093","published":"2026-10-21T00:36:57.681Z","updated":"2026-10-27T21:53:27.407Z","title":"Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0019},{"id":"CVE-2026-114092","published":"2026-10-21T00:36:56.982Z","updated":"2026-10-22T15:54:22.195Z","title":"Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00589},{"id":"CVE-2026-114091","published":"2026-10-21T00:36:56.273Z","updated":"2026-10-28T15:05:28.082Z","title":"Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route","severity":"MEDIUM","score":6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00339},{"id":"CVE-2026-114090","published":"2026-10-21T00:36:55.567Z","updated":"2026-10-21T15:49:51.905Z","title":"Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server","severity":"HIGH","score":7.6,"vendor":"trigger.dev","product":"cli-v3","kev":false,"epss":0.00235},{"id":"CVE-2026-114089","published":"2026-10-21T00:36:54.860Z","updated":"2026-10-28T15:52:55.169Z","title":"Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover","severity":"HIGH","score":8.7,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00201},{"id":"CVE-2026-114088","published":"2026-10-21T00:36:54.157Z","updated":"2026-10-27T21:52:33.402Z","title":"Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00404},{"id":"CVE-2026-114087","published":"2026-10-21T00:36:53.452Z","updated":"2026-10-22T15:57:06.612Z","title":"Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets","severity":"CRITICAL","score":9.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00512},{"id":"CVE-2026-114086","published":"2026-10-21T00:36:52.744Z","updated":"2026-10-28T15:22:48.613Z","title":"Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint","severity":"MEDIUM","score":6.9,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00384},{"id":"CVE-2026-114085","published":"2026-10-21T00:36:52.041Z","updated":"2026-10-21T15:49:59.313Z","title":"Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API","severity":"HIGH","score":8.8,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00186},{"id":"CVE-2026-114084","published":"2026-10-21T00:36:51.356Z","updated":"2026-10-28T15:36:39.961Z","title":"Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00395},{"id":"CVE-2026-114083","published":"2026-10-21T00:36:50.649Z","updated":"2026-10-27T21:51:39.382Z","title":"Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints","severity":"HIGH","score":8.6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00495},{"id":"CVE-2026-114082","published":"2026-10-21T00:36:49.960Z","updated":"2026-10-22T17:42:10.280Z","title":"Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00335},{"id":"CVE-2026-114081","published":"2026-10-21T00:36:49.268Z","updated":"2026-10-28T15:23:47.837Z","title":"Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00395},{"id":"CVE-2026-114080","published":"2026-10-21T00:36:48.581Z","updated":"2026-10-21T15:50:10.677Z","title":"Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URL","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00336},{"id":"CVE-2026-114079","published":"2026-10-21T00:36:47.902Z","updated":"2026-10-28T15:31:57.770Z","title":"Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00302},{"id":"CVE-2026-114078","published":"2026-10-21T00:36:47.218Z","updated":"2026-10-27T21:50:08.509Z","title":"Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00417},{"id":"CVE-2026-114077","published":"2026-10-21T00:36:46.529Z","updated":"2026-10-22T17:44:28.419Z","title":"Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4","severity":"MEDIUM","score":6.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00349},{"id":"CVE-2026-114076","published":"2026-10-21T00:36:45.853Z","updated":"2026-10-28T15:24:51.788Z","title":"Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0033},{"id":"CVE-2026-114075","published":"2026-10-21T00:36:45.162Z","updated":"2026-10-21T15:50:17.161Z","title":"Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00311},{"id":"CVE-2026-114074","published":"2026-10-21T00:36:44.452Z","updated":"2026-10-28T15:30:10.464Z","title":"Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00358},{"id":"CVE-2026-114073","published":"2026-10-21T00:36:43.726Z","updated":"2026-10-27T21:47:06.757Z","title":"Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs","severity":"MEDIUM","score":6.8,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00228},{"id":"CVE-2026-114072","published":"2026-10-21T00:36:43.024Z","updated":"2026-10-22T17:51:56.685Z","title":"Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback State","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00123},{"id":"CVE-2026-114071","published":"2026-10-21T00:36:42.336Z","updated":"2026-10-28T15:22:08.976Z","title":"Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route","severity":"LOW","score":2.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0028},{"id":"CVE-2026-114070","published":"2026-10-21T00:36:41.635Z","updated":"2026-10-21T15:50:25.029Z","title":"Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records","severity":"MEDIUM","score":5.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00298},{"id":"CVE-2026-114069","published":"2026-10-21T00:36:40.958Z","updated":"2026-10-28T15:48:44.313Z","title":"Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint","severity":"HIGH","score":8.6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00374},{"id":"CVE-2026-114068","published":"2026-10-21T00:36:40.255Z","updated":"2026-10-27T21:45:14.589Z","title":"Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00366},{"id":"CVE-2026-114067","published":"2026-10-21T00:36:39.566Z","updated":"2026-10-22T17:55:46.386Z","title":"Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route","severity":"HIGH","score":7.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00307},{"id":"CVE-2026-114066","published":"2026-10-21T00:36:38.884Z","updated":"2026-10-28T15:21:20.734Z","title":"Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00275},{"id":"CVE-2026-114065","published":"2026-10-21T00:36:38.206Z","updated":"2026-10-21T15:50:31.282Z","title":"Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholders","severity":"HIGH","score":7.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00364},{"id":"CVE-2026-114064","published":"2026-10-21T00:36:37.528Z","updated":"2026-10-28T15:26:51.249Z","title":"Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint","severity":"MEDIUM","score":5.1,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00388},{"id":"CVE-2026-114063","published":"2026-10-21T00:36:36.847Z","updated":"2026-10-27T21:43:53.677Z","title":"SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00405},{"id":"CVE-2026-114062","published":"2026-10-21T00:36:36.158Z","updated":"2026-10-22T17:58:07.497Z","title":"SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks","severity":"MEDIUM","score":6.9,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00352},{"id":"CVE-2026-114061","published":"2026-10-21T00:36:35.456Z","updated":"2026-10-28T15:19:51.281Z","title":"SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages","severity":"LOW","score":2.3,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00213},{"id":"CVE-2026-114060","published":"2026-10-21T00:36:34.741Z","updated":"2026-10-21T15:50:38.726Z","title":"SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions","severity":"LOW","score":2.1,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00202},{"id":"CVE-2026-114059","published":"2026-10-21T00:36:34.029Z","updated":"2026-10-28T15:23:18.757Z","title":"ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization","severity":"HIGH","score":7.7,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00643},{"id":"CVE-2026-114058","published":"2026-10-21T00:36:33.307Z","updated":"2026-10-27T21:43:03.477Z","title":"ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00294},{"id":"CVE-2026-114057","published":"2026-10-21T00:36:32.616Z","updated":"2026-10-22T18:00:21.022Z","title":"ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00294},{"id":"CVE-2026-114056","published":"2026-10-21T00:36:31.923Z","updated":"2026-10-28T15:17:25.140Z","title":"ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00299},{"id":"CVE-2026-114055","published":"2026-10-21T00:36:31.227Z","updated":"2026-10-26T19:49:33.622Z","title":"vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0042},{"id":"CVE-2026-114054","published":"2026-10-21T00:36:30.509Z","updated":"2026-10-28T15:16:15.124Z","title":"vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00275},{"id":"CVE-2026-114053","published":"2026-10-21T00:36:29.796Z","updated":"2026-10-27T21:41:51.602Z","title":"vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision","severity":"CRITICAL","score":9.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00462},{"id":"CVE-2026-114052","published":"2026-10-21T00:36:29.076Z","updated":"2026-10-22T18:16:55.772Z","title":"vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00479},{"id":"CVE-2026-114051","published":"2026-10-21T00:36:28.373Z","updated":"2026-10-28T15:15:55.536Z","title":"vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00375},{"id":"CVE-2026-114050","published":"2026-10-21T00:36:27.641Z","updated":"2026-10-21T15:50:53.921Z","title":"vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00203},{"id":"CVE-2026-114049","published":"2026-10-21T00:36:26.938Z","updated":"2026-10-28T15:13:24.706Z","title":"vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense","severity":"MEDIUM","score":6.3,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00265},{"id":"CVE-2026-114048","published":"2026-10-21T00:36:26.222Z","updated":"2026-10-27T21:40:17.592Z","title":"WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints","severity":"MEDIUM","score":5.1,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00165},{"id":"CVE-2026-114047","published":"2026-10-21T00:36:25.525Z","updated":"2026-10-22T18:18:48.176Z","title":"FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation","severity":"HIGH","score":7.6,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00189},{"id":"CVE-2026-114046","published":"2026-10-21T00:36:24.797Z","updated":"2026-10-28T15:42:09.948Z","title":"FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00353},{"id":"CVE-2026-114045","published":"2026-10-21T00:36:24.094Z","updated":"2026-10-21T15:51:03.137Z","title":"FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00576},{"id":"CVE-2026-114044","published":"2026-10-21T00:36:23.406Z","updated":"2026-10-28T15:12:48.361Z","title":"FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline","severity":"MEDIUM","score":6.9,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0025},{"id":"CVE-2026-114043","published":"2026-10-21T00:36:22.744Z","updated":"2026-10-27T21:39:05.944Z","title":"Vulnerability in FreeRDP","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00404},{"id":"CVE-2026-114042","published":"2026-10-21T00:36:22.092Z","updated":"2026-10-22T18:23:03.832Z","title":"FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00353},{"id":"CVE-2026-114041","published":"2026-10-21T00:36:21.187Z","updated":"2026-10-28T15:43:43.515Z","title":"FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message","severity":"MEDIUM","score":6.9,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00324},{"id":"CVE-2025-71437","published":"2026-10-21T00:36:20.284Z","updated":"2026-10-21T15:51:10.699Z","title":"Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00339},{"id":"CVE-2021-48020","published":"2026-10-21T00:36:19.625Z","updated":"2026-10-28T15:11:17.839Z","title":"Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00284},{"id":"CVE-2021-48019","published":"2026-10-21T00:36:18.960Z","updated":"2026-10-27T21:35:59.282Z","title":"Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00248},{"id":"CVE-2021-48018","published":"2026-10-21T00:36:18.265Z","updated":"2026-10-23T14:57:15.214Z","title":"Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00391},{"id":"CVE-2020-37289","published":"2026-10-21T00:36:17.573Z","updated":"2026-10-28T15:45:18.052Z","title":"Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00261},{"id":"CVE-2020-37288","published":"2026-10-21T00:36:16.926Z","updated":"2026-10-21T15:51:17.564Z","title":"Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00347},{"id":"CVE-2020-37287","published":"2026-10-21T00:36:16.257Z","updated":"2026-10-28T15:00:19.800Z","title":"Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments","severity":"HIGH","score":8.2,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00251},{"id":"CVE-2020-37286","published":"2026-10-21T00:36:15.568Z","updated":"2026-10-27T21:35:03.319Z","title":"Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00284},{"id":"CVE-2026-113738","published":"2026-10-21T00:30:24.180Z","updated":"2026-10-28T14:58:54.924Z","title":"R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal","severity":"MEDIUM","score":5.3,"vendor":"R6410418","product":"Jackrong-llm-finetuning-guide","kev":false,"epss":0.00406},{"id":"CVE-2026-114038","published":"2026-10-21T00:26:49.238Z","updated":"2026-10-26T17:57:35.460Z","title":"Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string","severity":"MEDIUM","score":5.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00116},{"id":"CVE-2026-113737","published":"2026-10-21T00:15:22.521Z","updated":"2026-10-27T21:33:31.020Z","title":"R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal","severity":"MEDIUM","score":5.1,"vendor":"R6410418","product":"Jackrong-llm-finetuning-guide","kev":false,"epss":0.00267},{"id":"CVE-2026-113736","published":"2026-10-21T00:00:32.718Z","updated":"2026-10-28T15:46:10.838Z","title":"D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password","severity":"CRITICAL","score":9.3,"vendor":"D-Link","product":"DHP-W610AV","kev":false,"epss":0.00921},{"id":"CVE-2025-71438","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:45:02.651Z","title":"An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00191},{"id":"CVE-2025-60497","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-23T15:07:33.099Z","title":"A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00243},{"id":"CVE-2025-60493","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:33:37.529Z","title":"A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00182},{"id":"CVE-2025-60492","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-23T15:07:30.908Z","title":"A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0027},{"id":"CVE-2025-60491","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T19:40:28.664Z","title":"A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00185},{"id":"CVE-2025-60490","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:30:09.812Z","title":"A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00177},{"id":"CVE-2025-60489","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:34:00.104Z","title":"A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00187},{"id":"CVE-2025-60487","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:31:08.980Z","title":"A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00178},{"id":"CVE-2025-60479","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:44:11.101Z","title":"A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00193},{"id":"CVE-2025-60478","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:45:32.854Z","title":"A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00177},{"id":"CVE-2025-60476","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T19:40:17.730Z","title":"A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00181},{"id":"CVE-2025-60469","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:46:37.891Z","title":"A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00189},{"id":"CVE-2026-113735","published":"2026-10-20T23:45:35.500Z","updated":"2026-10-21T15:51:24.629Z","title":"D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials","severity":"MEDIUM","score":6.3,"vendor":"D-Link","product":"DCS-6501LH","kev":false,"epss":0.00691},{"id":"CVE-2026-113707","published":"2026-10-20T23:30:22.622Z","updated":"2026-10-28T14:57:28.380Z","title":"a2aproject a2a-rs inmemory.rs update race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00258},{"id":"CVE-2026-113706","published":"2026-10-20T23:15:22.806Z","updated":"2026-10-27T21:32:36.017Z","title":"a2aproject a2a-rs inmemory.rs information disclosure","severity":"MEDIUM","score":5.1,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.0025},{"id":"CVE-2026-109682","published":"2026-10-20T23:12:55.091Z","updated":"2026-10-28T20:04:22.504Z","title":"Metasploit Framework HTTP Redirect Server-Side Request Forgery","severity":"MEDIUM","score":4.7,"vendor":"Rapid7","product":"Metasploit Framework","kev":false,"epss":0.00166},{"id":"CVE-2026-109681","published":"2026-10-20T23:11:51.931Z","updated":"2026-10-28T20:04:29.545Z","title":"Metasploit Framework FTP PASV Response SSRF","severity":"MEDIUM","score":4.7,"vendor":"Rapid7","product":"Metasploit Framework","kev":false,"epss":0.00201},{"id":"CVE-2026-113705","published":"2026-10-20T22:45:09.343Z","updated":"2026-10-28T15:49:45.112Z","title":"a2aproject a2a-rs error.rs information exposure","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00332},{"id":"CVE-2026-112202","published":"2026-10-20T22:37:43.477Z","updated":"2026-10-30T13:03:18.800Z","title":"Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Imager-File-GIF","kev":false,"epss":0.00425},{"id":"CVE-2026-76587","published":"2026-10-20T22:07:47.557Z","updated":"2026-10-23T11:02:28.766Z","title":"IBM Planning Analytics Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Planning Analytics","kev":false,"epss":0.00663},{"id":"CVE-2026-113726","published":"2026-10-20T22:05:24.253Z","updated":"2026-10-27T21:31:29.377Z","title":"virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00345},{"id":"CVE-2026-113776","published":"2026-10-20T22:03:18.274Z","updated":"2026-10-28T14:54:19.776Z","title":"virtualenv activation scripts run code from a path that contains a placeholder name","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00269},{"id":"CVE-2026-9825","published":"2026-10-20T22:02:54.216Z","updated":"2026-10-21T15:35:58.392Z","title":"IBM Cyber Fraud Reachable Assertion","severity":"LOW","score":3.7,"vendor":"IBM","product":"CyberFraud","kev":false,"epss":0.00244},{"id":"CVE-2026-113732","published":"2026-10-20T22:01:23.931Z","updated":"2026-10-27T13:26:51.760Z","title":"virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00236},{"id":"CVE-2026-113704","published":"2026-10-20T22:00:25.887Z","updated":"2026-10-21T15:51:31.062Z","title":"a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00512},{"id":"CVE-2026-81212","published":"2026-10-20T21:58:51.662Z","updated":"2026-10-28T15:52:11.257Z","title":"DataStage on Cloud Pak for Data Improper Authorization","severity":"CRITICAL","score":10,"vendor":"IBM","product":"DataStage on Cloud Pak for Data","kev":false,"epss":0.00267},{"id":"CVE-2026-82891","published":"2026-10-20T21:55:01.289Z","updated":"2026-10-23T11:02:18.650Z","title":"IBM Guardium Data Protection is affected by a security vulnerability","severity":"HIGH","score":8.1,"vendor":"IBM","product":"Guardium Data Protection","kev":false,"epss":0.00504},{"id":"CVE-2026-87800","published":"2026-10-20T21:53:18.569Z","updated":"2026-10-21T15:51:39.236Z","title":"IBM Cyber Fraud includes components with multiple known vulnerabilities","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"Cyber Fraud","kev":false,"epss":0.0055},{"id":"CVE-2026-92559","published":"2026-10-20T21:52:22.560Z","updated":"2026-10-23T11:01:53.715Z","title":"IBM App Connect Enterprise is vulnerable to a credential exposure","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"App Connect Enterprise","kev":false,"epss":0.0053},{"id":"CVE-2026-93441","published":"2026-10-20T21:51:16.499Z","updated":"2026-10-26T17:37:11.672Z","title":"IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service","severity":"HIGH","score":8.6,"vendor":"IBM","product":"QRadar Security Information and Event Management","kev":false,"epss":0.00327},{"id":"CVE-2026-93442","published":"2026-10-20T21:48:03.902Z","updated":"2026-10-21T15:37:13.506Z","title":"IBM QRadar SIEM Out-of-bounds Read","severity":"HIGH","score":8.2,"vendor":"IBM","product":"QRadar","kev":false,"epss":0.00415},{"id":"CVE-2026-93744","published":"2026-10-20T21:41:32.677Z","updated":"2026-10-21T15:51:48.687Z","title":"IBM i Improper Authentication","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"i","kev":false,"epss":0.00427},{"id":"CVE-2026-93888","published":"2026-10-20T21:39:48.421Z","updated":"2026-10-22T23:04:27.903Z","title":"IBM Sterling Connect:Direct for Unix Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"IBM","product":"Sterling Connect Direct for Unix","kev":false,"epss":0.00207},{"id":"CVE-2026-94402","published":"2026-10-20T21:31:46.027Z","updated":"2026-10-26T16:46:47.189Z","title":"IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation","severity":"MEDIUM","score":6.1,"vendor":"IBM","product":"@carbon/charts","kev":false,"epss":0.00248},{"id":"CVE-2026-113731","published":"2026-10-20T21:31:28.008Z","updated":"2026-10-28T15:54:09.246Z","title":"djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool","severity":"LOW","score":3.3,"vendor":"djust-org","product":"djust","kev":false,"epss":0.00187},{"id":"CVE-2026-85783","published":"2026-10-20T21:29:03.284Z","updated":"2026-10-30T13:01:33.954Z","title":"Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key","severity":"HIGH","score":7.5,"vendor":null,"product":"Crypt-Age","kev":false,"epss":0.00561},{"id":"CVE-2026-91668","published":"2026-10-20T21:26:56.583Z","updated":"2026-10-27T21:30:25.959Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00249},{"id":"CVE-2026-91665","published":"2026-10-20T21:26:56.218Z","updated":"2026-10-22T23:04:38.772Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.0047},{"id":"CVE-2026-91664","published":"2026-10-20T21:26:55.875Z","updated":"2026-10-22T18:50:20.995Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00286},{"id":"CVE-2026-91663","published":"2026-10-20T21:26:55.534Z","updated":"2026-10-23T11:06:20.934Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00341},{"id":"CVE-2026-91662","published":"2026-10-20T21:26:55.186Z","updated":"2026-10-27T21:29:26.191Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00095},{"id":"CVE-2026-91661","published":"2026-10-20T21:26:54.848Z","updated":"2026-10-27T21:28:31.781Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00318},{"id":"CVE-2026-91660","published":"2026-10-20T21:26:54.497Z","updated":"2026-10-27T21:27:29.999Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.003},{"id":"CVE-2026-91659","published":"2026-10-20T21:26:54.158Z","updated":"2026-10-27T21:26:34.530Z","title":"Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00221},{"id":"CVE-2026-91658","published":"2026-10-20T21:26:53.812Z","updated":"2026-10-23T11:06:21.093Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00341},{"id":"CVE-2026-91657","published":"2026-10-20T21:26:53.464Z","updated":"2026-10-27T21:25:34.421Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00193},{"id":"CVE-2026-91656","published":"2026-10-20T21:26:53.121Z","updated":"2026-10-27T21:24:14.318Z","title":"Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00201},{"id":"CVE-2026-91655","published":"2026-10-20T21:26:52.673Z","updated":"2026-10-27T13:16:59.398Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00206},{"id":"CVE-2026-91654","published":"2026-10-20T21:26:52.342Z","updated":"2026-10-27T13:15:27.105Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00164},{"id":"CVE-2026-91653","published":"2026-10-20T21:26:51.992Z","updated":"2026-10-27T13:13:46.389Z","title":"Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00188},{"id":"CVE-2026-91652","published":"2026-10-20T21:26:51.618Z","updated":"2026-10-27T13:12:58.721Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00249},{"id":"CVE-2026-91651","published":"2026-10-20T21:26:51.263Z","updated":"2026-10-23T11:06:20.785Z","title":"Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00309},{"id":"CVE-2026-91650","published":"2026-10-20T21:26:50.892Z","updated":"2026-10-27T13:09:55.541Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00275},{"id":"CVE-2026-91649","published":"2026-10-20T21:26:50.535Z","updated":"2026-10-27T13:08:24.664Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00174},{"id":"CVE-2026-91648","published":"2026-10-20T21:26:50.187Z","updated":"2026-10-27T13:07:37.356Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00337},{"id":"CVE-2026-91647","published":"2026-10-20T21:26:49.837Z","updated":"2026-10-23T11:06:20.471Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00329},{"id":"CVE-2026-91646","published":"2026-10-20T21:26:49.489Z","updated":"2026-10-27T13:05:50.097Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00243},{"id":"CVE-2026-91645","published":"2026-10-20T21:26:49.156Z","updated":"2026-10-27T13:04:59.835Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00337},{"id":"CVE-2026-91644","published":"2026-10-20T21:26:48.805Z","updated":"2026-10-27T13:04:11.385Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00221},{"id":"CVE-2026-91643","published":"2026-10-20T21:26:48.466Z","updated":"2026-10-27T13:03:24.866Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00261},{"id":"CVE-2026-91642","published":"2026-10-20T21:26:48.118Z","updated":"2026-10-27T13:02:24.285Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00238},{"id":"CVE-2026-91641","published":"2026-10-20T21:26:47.776Z","updated":"2026-10-27T13:01:33.011Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00235},{"id":"CVE-2026-91640","published":"2026-10-20T21:26:47.434Z","updated":"2026-10-27T13:00:46.075Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00235},{"id":"CVE-2026-91639","published":"2026-10-20T21:26:47.061Z","updated":"2026-10-27T12:59:41.564Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00393},{"id":"CVE-2026-91638","published":"2026-10-20T21:26:46.713Z","updated":"2026-10-23T11:06:21.242Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.004},{"id":"CVE-2026-91637","published":"2026-10-20T21:26:46.370Z","updated":"2026-10-23T11:06:21.419Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00349},{"id":"CVE-2026-91636","published":"2026-10-20T21:26:46.022Z","updated":"2026-10-27T12:58:41.243Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00393},{"id":"CVE-2026-91635","published":"2026-10-20T21:26:45.671Z","updated":"2026-10-23T11:06:20.630Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00336},{"id":"CVE-2026-91634","published":"2026-10-20T21:26:45.216Z","updated":"2026-10-27T12:57:46.208Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00261},{"id":"CVE-2026-91633","published":"2026-10-20T21:26:44.885Z","updated":"2026-10-26T21:07:41.768Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00138},{"id":"CVE-2026-91632","published":"2026-10-20T21:26:44.550Z","updated":"2026-10-26T21:04:46.096Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00304},{"id":"CVE-2026-91631","published":"2026-10-20T21:26:44.198Z","updated":"2026-10-26T21:03:58.317Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00303},{"id":"CVE-2026-91630","published":"2026-10-20T21:26:43.861Z","updated":"2026-10-26T21:03:07.687Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00324},{"id":"CVE-2026-91629","published":"2026-10-20T21:26:43.510Z","updated":"2026-10-26T21:02:09.285Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.001},{"id":"CVE-2026-91628","published":"2026-10-20T21:26:43.156Z","updated":"2026-10-26T21:01:16.839Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00151},{"id":"CVE-2026-91627","published":"2026-10-20T21:26:42.506Z","updated":"2026-10-26T21:00:24.982Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00144},{"id":"CVE-2026-91625","published":"2026-10-20T21:26:42.151Z","updated":"2026-10-26T20:58:59.232Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00271},{"id":"CVE-2026-91624","published":"2026-10-20T21:26:41.802Z","updated":"2026-10-21T11:05:30.333Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00249},{"id":"CVE-2026-91623","published":"2026-10-20T21:26:41.462Z","updated":"2026-10-26T20:57:46.982Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00323},{"id":"CVE-2026-91622","published":"2026-10-20T21:26:41.127Z","updated":"2026-10-26T20:56:43.593Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00224},{"id":"CVE-2026-91617","published":"2026-10-20T21:26:40.779Z","updated":"2026-10-26T20:55:29.220Z","title":"Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Middleware Common Libraries and Tools","kev":false,"epss":0.00152},{"id":"CVE-2026-91616","published":"2026-10-20T21:26:40.427Z","updated":"2026-10-26T20:51:56.635Z","title":"Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Middleware Common Libraries and Tools","kev":false,"epss":0.00217},{"id":"CVE-2026-91615","published":"2026-10-20T21:26:40.079Z","updated":"2026-10-26T20:50:59.781Z","title":"Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00199},{"id":"CVE-2026-91614","published":"2026-10-20T21:26:39.747Z","updated":"2026-10-26T20:50:01.225Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112},{"id":"CVE-2026-91613","published":"2026-10-20T21:26:39.393Z","updated":"2026-10-26T20:48:45.921Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112},{"id":"CVE-2026-91612","published":"2026-10-20T21:26:39.035Z","updated":"2026-10-26T20:47:33.983Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112},{"id":"CVE-2026-91610","published":"2026-10-20T21:26:38.688Z","updated":"2026-10-26T20:46:06.178Z","title":"Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00338},{"id":"CVE-2026-91609","published":"2026-10-20T21:26:38.338Z","updated":"2026-10-26T20:44:19.679Z","title":"Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00371},{"id":"CVE-2026-91608","published":"2026-10-20T21:26:37.992Z","updated":"2026-10-26T20:43:26.007Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00416},{"id":"CVE-2026-91607","published":"2026-10-20T21:26:37.649Z","updated":"2026-10-26T20:42:18.646Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00215},{"id":"CVE-2026-91604","published":"2026-10-20T21:26:37.304Z","updated":"2026-10-26T20:41:14.324Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00301},{"id":"CVE-2026-91600","published":"2026-10-20T21:26:36.869Z","updated":"2026-10-26T20:38:55.972Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). The supported version that is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00282},{"id":"CVE-2026-91598","published":"2026-10-20T21:26:36.541Z","updated":"2026-10-26T20:38:09.495Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Service). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00215},{"id":"CVE-2026-91597","published":"2026-10-20T21:26:36.203Z","updated":"2026-10-26T20:37:10.576Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00176},{"id":"CVE-2026-91590","published":"2026-10-20T21:26:35.869Z","updated":"2026-10-26T20:36:18.908Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00148},{"id":"CVE-2026-91588","published":"2026-10-20T21:26:35.526Z","updated":"2026-10-26T20:34:42.528Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00153},{"id":"CVE-2026-91582","published":"2026-10-20T21:26:35.189Z","updated":"2026-10-26T20:33:43.964Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00248},{"id":"CVE-2026-91579","published":"2026-10-20T21:26:34.862Z","updated":"2026-10-26T20:32:56.133Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00216},{"id":"CVE-2026-91577","published":"2026-10-20T21:26:34.527Z","updated":"2026-10-26T20:31:27.373Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00168},{"id":"CVE-2026-91576","published":"2026-10-20T21:26:34.178Z","updated":"2026-10-26T20:30:13.708Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00326},{"id":"CVE-2026-91574","published":"2026-10-20T21:26:33.830Z","updated":"2026-10-26T20:29:21.885Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00326},{"id":"CVE-2026-91573","published":"2026-10-20T21:26:33.395Z","updated":"2026-10-26T20:28:01.769Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0026},{"id":"CVE-2026-91568","published":"2026-10-20T21:26:33.039Z","updated":"2026-10-26T20:27:07.822Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00326},{"id":"CVE-2026-91565","published":"2026-10-20T21:26:32.683Z","updated":"2026-10-26T20:26:15.953Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00229},{"id":"CVE-2026-91563","published":"2026-10-20T21:26:32.325Z","updated":"2026-10-26T20:25:27.681Z","title":"Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle OLAP","kev":false,"epss":0.00316},{"id":"CVE-2026-91562","published":"2026-10-20T21:26:31.961Z","updated":"2026-10-26T20:24:35.525Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Inventory Brazil","kev":false,"epss":0.00095},{"id":"CVE-2026-91559","published":"2026-10-20T21:26:31.622Z","updated":"2026-10-26T20:23:38.046Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Manufacturing Brazil","kev":false,"epss":0.00095},{"id":"CVE-2026-91557","published":"2026-10-20T21:26:31.276Z","updated":"2026-10-26T20:22:56.821Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.0009},{"id":"CVE-2026-91555","published":"2026-10-20T21:26:30.947Z","updated":"2026-10-26T20:22:04.852Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00125},{"id":"CVE-2026-91554","published":"2026-10-20T21:26:30.617Z","updated":"2026-10-26T20:20:05.823Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version that is affected is 12.2.1.4.0. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00194},{"id":"CVE-2026-91553","published":"2026-10-20T21:26:30.250Z","updated":"2026-10-26T20:19:07.761Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator). The supported…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Product Configurator Brazil","kev":false,"epss":0.00095},{"id":"CVE-2026-91552","published":"2026-10-20T21:26:29.894Z","updated":"2026-10-26T20:17:05.199Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.00409},{"id":"CVE-2026-91550","published":"2026-10-20T21:26:29.563Z","updated":"2026-10-26T20:16:00.775Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00315},{"id":"CVE-2026-91549","published":"2026-10-20T21:26:29.210Z","updated":"2026-10-26T20:14:58.095Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00151},{"id":"CVE-2026-91547","published":"2026-10-20T21:26:28.873Z","updated":"2026-10-26T20:14:09.676Z","title":"Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00133},{"id":"CVE-2026-91546","published":"2026-10-20T21:26:28.515Z","updated":"2026-10-26T20:13:22.298Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00272},{"id":"CVE-2026-91545","published":"2026-10-20T21:26:28.181Z","updated":"2026-10-26T20:12:02.227Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00151},{"id":"CVE-2026-91542","published":"2026-10-20T21:26:27.827Z","updated":"2026-10-26T20:11:11.268Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.00409},{"id":"CVE-2026-91541","published":"2026-10-20T21:26:27.441Z","updated":"2026-10-22T18:50:24.489Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00318},{"id":"CVE-2026-91539","published":"2026-10-20T21:26:27.053Z","updated":"2026-10-26T20:09:29.407Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00135},{"id":"CVE-2026-91537","published":"2026-10-20T21:26:26.712Z","updated":"2026-10-26T20:08:27.962Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00105},{"id":"CVE-2026-91536","published":"2026-10-20T21:26:26.364Z","updated":"2026-10-26T20:07:14.407Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00197},{"id":"CVE-2026-91535","published":"2026-10-20T21:26:26.008Z","updated":"2026-10-26T20:05:10.409Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00286},{"id":"CVE-2026-91534","published":"2026-10-20T21:26:25.666Z","updated":"2026-10-26T20:04:09.354Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00237},{"id":"CVE-2026-91532","published":"2026-10-20T21:26:25.327Z","updated":"2026-10-26T20:03:08.547Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00389},{"id":"CVE-2026-91530","published":"2026-10-20T21:26:24.958Z","updated":"2026-10-26T20:02:15.022Z","title":"Vulnerability in Oracle GoldenGate (component: Admin Client Executable). Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00233},{"id":"CVE-2026-91528","published":"2026-10-20T21:26:24.496Z","updated":"2026-10-26T20:01:17.436Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0.…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00215},{"id":"CVE-2026-91527","published":"2026-10-20T21:26:24.141Z","updated":"2026-10-26T20:00:23.884Z","title":"Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle ZFS Storage Appliance Kit","kev":false,"epss":0.00389},{"id":"CVE-2026-91526","published":"2026-10-20T21:26:23.792Z","updated":"2026-10-26T19:59:27.982Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00184},{"id":"CVE-2026-91524","published":"2026-10-20T21:26:23.445Z","updated":"2026-10-26T19:58:31.478Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00262},{"id":"CVE-2026-91523","published":"2026-10-20T21:26:23.093Z","updated":"2026-10-26T19:57:36.453Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00195},{"id":"CVE-2026-91521","published":"2026-10-20T21:26:22.749Z","updated":"2026-10-26T19:56:23.146Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00286},{"id":"CVE-2026-91520","published":"2026-10-20T21:26:22.406Z","updated":"2026-10-26T19:54:38.372Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00389},{"id":"CVE-2026-91519","published":"2026-10-20T21:26:22.080Z","updated":"2026-10-26T19:53:43.173Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00337},{"id":"CVE-2026-91518","published":"2026-10-20T21:26:21.733Z","updated":"2026-10-26T19:52:32.562Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00168},{"id":"CVE-2026-91517","published":"2026-10-20T21:26:21.381Z","updated":"2026-10-26T19:51:42.557Z","title":"Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). Supported versions that are affected are…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Oracle Management Pack for Oracle GoldenGate","kev":false,"epss":0.0017},{"id":"CVE-2026-91515","published":"2026-10-20T21:26:21.033Z","updated":"2026-10-26T19:50:30.161Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00235},{"id":"CVE-2026-91514","published":"2026-10-20T21:26:20.695Z","updated":"2026-10-26T19:46:40.580Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00355},{"id":"CVE-2026-91512","published":"2026-10-20T21:26:20.340Z","updated":"2026-10-26T19:45:44.629Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0043},{"id":"CVE-2026-91511","published":"2026-10-20T21:26:19.993Z","updated":"2026-10-26T19:44:42.752Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00222},{"id":"CVE-2026-91506","published":"2026-10-20T21:26:19.642Z","updated":"2026-10-27T03:56:07.003Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00271},{"id":"CVE-2026-91505","published":"2026-10-20T21:26:19.307Z","updated":"2026-10-27T03:55:45.336Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61 and…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00132},{"id":"CVE-2026-91504","published":"2026-10-20T21:26:18.971Z","updated":"2026-10-24T03:42:12.377Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00235},{"id":"CVE-2026-91503","published":"2026-10-20T21:26:18.639Z","updated":"2026-10-24T03:41:22.332Z","title":"Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00248},{"id":"CVE-2026-91502","published":"2026-10-20T21:26:18.295Z","updated":"2026-10-24T03:40:18.829Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00288},{"id":"CVE-2026-91501","published":"2026-10-20T21:26:17.937Z","updated":"2026-10-24T03:37:00.639Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00134},{"id":"CVE-2026-91499","published":"2026-10-20T21:26:17.575Z","updated":"2026-10-24T03:35:54.429Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00389},{"id":"CVE-2026-91497","published":"2026-10-20T21:26:17.230Z","updated":"2026-10-22T18:50:25.571Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00288},{"id":"CVE-2026-91496","published":"2026-10-20T21:26:16.847Z","updated":"2026-10-24T03:34:51.343Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00301},{"id":"CVE-2026-91495","published":"2026-10-20T21:26:16.517Z","updated":"2026-10-21T10:55:17.138Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.0045},{"id":"CVE-2026-91494","published":"2026-10-20T21:26:16.179Z","updated":"2026-10-24T03:33:41.186Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00317},{"id":"CVE-2026-91493","published":"2026-10-20T21:26:15.837Z","updated":"2026-10-24T03:32:49.641Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00307},{"id":"CVE-2026-91492","published":"2026-10-20T21:26:15.480Z","updated":"2026-10-24T03:31:57.205Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00261},{"id":"CVE-2026-91491","published":"2026-10-20T21:26:15.124Z","updated":"2026-10-21T10:55:17.283Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00354},{"id":"CVE-2026-91490","published":"2026-10-20T21:26:14.684Z","updated":"2026-10-21T11:05:30.495Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00396},{"id":"CVE-2026-91489","published":"2026-10-20T21:26:14.334Z","updated":"2026-10-24T03:30:41.969Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00118},{"id":"CVE-2026-91488","published":"2026-10-20T21:26:13.973Z","updated":"2026-10-24T03:29:52.901Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00148},{"id":"CVE-2026-91487","published":"2026-10-20T21:26:13.608Z","updated":"2026-10-24T03:29:02.474Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00168},{"id":"CVE-2026-91486","published":"2026-10-20T21:26:13.274Z","updated":"2026-10-24T03:27:04.030Z","title":"Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN General Ledger Brazil","kev":false,"epss":0.00095},{"id":"CVE-2026-91485","published":"2026-10-20T21:26:12.947Z","updated":"2026-10-24T03:26:12.147Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Cash Management","kev":false,"epss":0.00105},{"id":"CVE-2026-91484","published":"2026-10-20T21:26:12.614Z","updated":"2026-10-24T03:25:05.525Z","title":"Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00108},{"id":"CVE-2026-91483","published":"2026-10-20T21:26:12.271Z","updated":"2026-10-24T03:23:59.758Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00242},{"id":"CVE-2026-91482","published":"2026-10-20T21:26:11.934Z","updated":"2026-10-24T03:22:46.293Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00326},{"id":"CVE-2026-91481","published":"2026-10-20T21:26:11.587Z","updated":"2026-10-24T03:21:41.438Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Purchasing","kev":false,"epss":0.00195},{"id":"CVE-2026-91480","published":"2026-10-20T21:26:11.247Z","updated":"2026-10-24T03:20:28.422Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00326},{"id":"CVE-2026-91479","published":"2026-10-20T21:26:10.802Z","updated":"2026-10-24T03:19:30.401Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00235},{"id":"CVE-2026-91478","published":"2026-10-20T21:26:10.459Z","updated":"2026-10-23T03:55:32.573Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00433},{"id":"CVE-2026-91477","published":"2026-10-20T21:26:10.120Z","updated":"2026-10-24T03:18:35.694Z","title":"Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27.…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle JavaFX","kev":false,"epss":0.00228},{"id":"CVE-2026-91476","published":"2026-10-20T21:26:09.775Z","updated":"2026-10-29T12:09:54.093Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00299},{"id":"CVE-2026-91475","published":"2026-10-20T21:26:09.442Z","updated":"2026-10-24T03:14:59.403Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00126},{"id":"CVE-2026-91474","published":"2026-10-20T21:26:09.109Z","updated":"2026-10-27T03:55:46.766Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00216},{"id":"CVE-2026-91473","published":"2026-10-20T21:26:08.776Z","updated":"2026-10-24T03:13:01.778Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00135},{"id":"CVE-2026-91471","published":"2026-10-20T21:26:08.427Z","updated":"2026-10-24T03:12:02.079Z","title":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise CC Common Application Objects","kev":false,"epss":0.00187},{"id":"CVE-2026-91468","published":"2026-10-20T21:26:08.091Z","updated":"2026-10-22T18:50:24.639Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00252},{"id":"CVE-2026-91467","published":"2026-10-20T21:26:07.758Z","updated":"2026-10-24T03:11:09.096Z","title":"Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Fusion Middleware Control","kev":false,"epss":0.00189},{"id":"CVE-2026-91466","published":"2026-10-20T21:26:07.414Z","updated":"2026-10-27T03:55:48.276Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supported version that…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.0024},{"id":"CVE-2026-91465","published":"2026-10-20T21:26:07.047Z","updated":"2026-10-24T03:08:48.564Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.00303},{"id":"CVE-2026-91464","published":"2026-10-20T21:26:06.710Z","updated":"2026-10-24T03:07:54.796Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00289},{"id":"CVE-2026-91463","published":"2026-10-20T21:26:06.372Z","updated":"2026-10-24T03:07:00.037Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00227},{"id":"CVE-2026-91462","published":"2026-10-20T21:26:06.021Z","updated":"2026-10-24T03:05:38.266Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00274},{"id":"CVE-2026-91461","published":"2026-10-20T21:26:05.674Z","updated":"2026-10-24T03:03:30.706Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00187},{"id":"CVE-2026-91460","published":"2026-10-20T21:26:05.325Z","updated":"2026-10-24T03:01:41.673Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00242},{"id":"CVE-2026-91459","published":"2026-10-20T21:26:04.974Z","updated":"2026-10-24T03:00:42.628Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00242},{"id":"CVE-2026-91458","published":"2026-10-20T21:26:04.623Z","updated":"2026-10-24T02:59:36.798Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00125},{"id":"CVE-2026-91457","published":"2026-10-20T21:26:04.278Z","updated":"2026-10-24T02:58:37.858Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00159},{"id":"CVE-2026-91455","published":"2026-10-20T21:26:03.925Z","updated":"2026-10-24T02:57:35.581Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00226},{"id":"CVE-2026-91453","published":"2026-10-20T21:26:03.566Z","updated":"2026-10-22T18:50:25.754Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029},{"id":"CVE-2026-91452","published":"2026-10-20T21:26:03.214Z","updated":"2026-10-22T18:50:25.927Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029},{"id":"CVE-2026-91451","published":"2026-10-20T21:26:02.855Z","updated":"2026-10-22T18:50:26.101Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029},{"id":"CVE-2026-91450","published":"2026-10-20T21:26:02.504Z","updated":"2026-10-24T02:56:36.647Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00302},{"id":"CVE-2026-91449","published":"2026-10-20T21:26:02.155Z","updated":"2026-10-24T02:55:36.174Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00244},{"id":"CVE-2026-91448","published":"2026-10-20T21:26:01.803Z","updated":"2026-10-24T02:54:40.806Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00398},{"id":"CVE-2026-91447","published":"2026-10-20T21:26:01.472Z","updated":"2026-10-24T02:53:37.107Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00377},{"id":"CVE-2026-91446","published":"2026-10-20T21:26:01.015Z","updated":"2026-10-23T20:32:48.350Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00117},{"id":"CVE-2026-91445","published":"2026-10-20T21:26:00.659Z","updated":"2026-10-23T20:31:49.451Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00244},{"id":"CVE-2026-91444","published":"2026-10-20T21:26:00.318Z","updated":"2026-10-23T20:31:00.900Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00117},{"id":"CVE-2026-91443","published":"2026-10-20T21:25:59.972Z","updated":"2026-10-23T20:30:01.302Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.0027},{"id":"CVE-2026-91442","published":"2026-10-20T21:25:59.633Z","updated":"2026-10-23T20:29:00.236Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00286},{"id":"CVE-2026-91441","published":"2026-10-20T21:25:59.285Z","updated":"2026-10-23T20:28:09.421Z","title":"Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Customer Order Management","kev":false,"epss":0.00192},{"id":"CVE-2026-91440","published":"2026-10-20T21:25:58.936Z","updated":"2026-10-23T20:27:13.311Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00255},{"id":"CVE-2026-91439","published":"2026-10-20T21:25:58.601Z","updated":"2026-10-23T20:26:15.602Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00134},{"id":"CVE-2026-91438","published":"2026-10-20T21:25:58.255Z","updated":"2026-10-23T20:25:25.959Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00278},{"id":"CVE-2026-91437","published":"2026-10-20T21:25:57.920Z","updated":"2026-10-23T20:24:36.966Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00361},{"id":"CVE-2026-91436","published":"2026-10-20T21:25:57.579Z","updated":"2026-10-23T20:21:47.444Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00112},{"id":"CVE-2026-91435","published":"2026-10-20T21:25:57.239Z","updated":"2026-10-23T20:20:35.344Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00394},{"id":"CVE-2026-91434","published":"2026-10-20T21:25:56.906Z","updated":"2026-10-23T20:19:32.248Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00117},{"id":"CVE-2026-91433","published":"2026-10-20T21:25:56.555Z","updated":"2026-10-23T20:18:37.505Z","title":"Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Siebel Apps - Field Service","kev":false,"epss":0.00431},{"id":"CVE-2026-91432","published":"2026-10-20T21:25:56.200Z","updated":"2026-10-23T20:16:59.225Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00267},{"id":"CVE-2026-91431","published":"2026-10-20T21:25:55.864Z","updated":"2026-10-23T20:16:01.367Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00109},{"id":"CVE-2026-91430","published":"2026-10-20T21:25:55.520Z","updated":"2026-10-23T20:15:10.974Z","title":"Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Financial Services","kev":false,"epss":0.00217},{"id":"CVE-2026-91429","published":"2026-10-20T21:25:55.174Z","updated":"2026-10-23T20:14:11.102Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00217},{"id":"CVE-2026-91428","published":"2026-10-20T21:25:54.815Z","updated":"2026-10-23T20:13:16.188Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00201},{"id":"CVE-2026-91427","published":"2026-10-20T21:25:54.461Z","updated":"2026-10-23T20:12:23.908Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":2.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00148},{"id":"CVE-2026-91426","published":"2026-10-20T21:25:54.102Z","updated":"2026-10-23T20:10:21.158Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00139},{"id":"CVE-2026-91424","published":"2026-10-20T21:25:53.766Z","updated":"2026-10-23T20:09:26.961Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00179},{"id":"CVE-2026-91423","published":"2026-10-20T21:25:53.427Z","updated":"2026-10-23T20:08:30.703Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00159},{"id":"CVE-2026-91422","published":"2026-10-20T21:25:53.089Z","updated":"2026-10-23T20:07:34.429Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00247},{"id":"CVE-2026-91421","published":"2026-10-20T21:25:52.749Z","updated":"2026-10-23T20:06:43.449Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00367},{"id":"CVE-2026-91420","published":"2026-10-20T21:25:52.406Z","updated":"2026-10-23T20:05:57.102Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00228},{"id":"CVE-2026-91419","published":"2026-10-20T21:25:52.063Z","updated":"2026-10-23T20:05:01.040Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00145},{"id":"CVE-2026-91418","published":"2026-10-20T21:25:51.705Z","updated":"2026-10-22T18:50:23.261Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00403},{"id":"CVE-2026-91417","published":"2026-10-20T21:25:51.341Z","updated":"2026-10-22T18:50:23.419Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00306},{"id":"CVE-2026-91415","published":"2026-10-20T21:25:50.975Z","updated":"2026-10-23T20:03:53.584Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00239},{"id":"CVE-2026-91414","published":"2026-10-20T21:25:50.624Z","updated":"2026-10-23T20:02:46.309Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00284},{"id":"CVE-2026-91413","published":"2026-10-20T21:25:50.272Z","updated":"2026-10-23T20:01:28.704Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00322},{"id":"CVE-2026-91412","published":"2026-10-20T21:25:49.927Z","updated":"2026-10-23T19:59:27.165Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00341},{"id":"CVE-2026-91411","published":"2026-10-20T21:25:49.588Z","updated":"2026-10-23T19:58:11.357Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00267},{"id":"CVE-2026-91410","published":"2026-10-20T21:25:49.138Z","updated":"2026-10-22T18:50:23.564Z","title":"Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00306},{"id":"CVE-2026-91409","published":"2026-10-20T21:25:48.786Z","updated":"2026-10-23T19:56:25.258Z","title":"Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00379},{"id":"CVE-2026-91408","published":"2026-10-20T21:25:48.444Z","updated":"2026-10-21T10:55:17.440Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00355},{"id":"CVE-2026-91407","published":"2026-10-20T21:25:48.101Z","updated":"2026-10-23T19:55:10.422Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00418},{"id":"CVE-2026-91406","published":"2026-10-20T21:25:47.776Z","updated":"2026-10-23T19:54:10.434Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00361},{"id":"CVE-2026-91405","published":"2026-10-20T21:25:47.425Z","updated":"2026-10-23T19:53:10.031Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00281},{"id":"CVE-2026-91404","published":"2026-10-20T21:25:47.050Z","updated":"2026-10-23T19:51:41.872Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00161},{"id":"CVE-2026-91402","published":"2026-10-20T21:25:46.710Z","updated":"2026-10-23T19:50:53.409Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00243},{"id":"CVE-2026-91400","published":"2026-10-20T21:25:46.374Z","updated":"2026-10-29T12:09:28.628Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00257},{"id":"CVE-2026-91399","published":"2026-10-20T21:25:46.002Z","updated":"2026-10-23T19:47:07.636Z","title":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Primavera P6 Enterprise Project Portfolio Management","kev":false,"epss":0.00194},{"id":"CVE-2026-91398","published":"2026-10-20T21:25:45.513Z","updated":"2026-10-23T02:24:25.266Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00231},{"id":"CVE-2026-91397","published":"2026-10-20T21:25:45.159Z","updated":"2026-10-23T02:22:58.079Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00095},{"id":"CVE-2026-91396","published":"2026-10-20T21:25:44.803Z","updated":"2026-10-22T18:50:24.784Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00333},{"id":"CVE-2026-91395","published":"2026-10-20T21:25:44.460Z","updated":"2026-10-22T18:50:24.928Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00253},{"id":"CVE-2026-91394","published":"2026-10-20T21:25:44.100Z","updated":"2026-10-23T02:22:02.263Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00419},{"id":"CVE-2026-91393","published":"2026-10-20T21:25:43.745Z","updated":"2026-10-21T14:20:20.718Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00119},{"id":"CVE-2026-91392","published":"2026-10-20T21:25:43.124Z","updated":"2026-10-21T14:21:09.109Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00187},{"id":"CVE-2026-91391","published":"2026-10-20T21:25:42.772Z","updated":"2026-10-21T15:06:29.933Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00258},{"id":"CVE-2026-91390","published":"2026-10-20T21:25:42.420Z","updated":"2026-10-21T15:07:18.549Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00195},{"id":"CVE-2026-91389","published":"2026-10-20T21:25:42.069Z","updated":"2026-10-21T15:08:01.708Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00195},{"id":"CVE-2026-91388","published":"2026-10-20T21:25:41.734Z","updated":"2026-10-21T14:18:56.500Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00149},{"id":"CVE-2026-91387","published":"2026-10-20T21:25:41.379Z","updated":"2026-10-21T15:24:19.145Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00221},{"id":"CVE-2026-91386","published":"2026-10-20T21:25:41.031Z","updated":"2026-10-21T15:24:57.530Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.0015},{"id":"CVE-2026-91385","published":"2026-10-20T21:25:40.697Z","updated":"2026-10-21T15:25:34.101Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00181},{"id":"CVE-2026-91384","published":"2026-10-20T21:25:40.342Z","updated":"2026-10-21T15:14:52.546Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0027},{"id":"CVE-2026-91383","published":"2026-10-20T21:25:39.990Z","updated":"2026-10-21T15:14:05.489Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00198},{"id":"CVE-2026-91382","published":"2026-10-20T21:25:39.637Z","updated":"2026-10-21T15:12:03.820Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00377},{"id":"CVE-2026-91381","published":"2026-10-20T21:25:39.285Z","updated":"2026-10-21T15:11:21.561Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00232},{"id":"CVE-2026-91380","published":"2026-10-20T21:25:38.943Z","updated":"2026-10-21T15:34:56.943Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00097},{"id":"CVE-2026-91379","published":"2026-10-20T21:25:38.600Z","updated":"2026-10-21T15:35:59.006Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools). Supported…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00122},{"id":"CVE-2026-91378","published":"2026-10-20T21:25:38.255Z","updated":"2026-10-21T15:37:56.223Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00226},{"id":"CVE-2026-91377","published":"2026-10-20T21:25:37.917Z","updated":"2026-10-21T15:39:29.125Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00303},{"id":"CVE-2026-91376","published":"2026-10-20T21:25:37.561Z","updated":"2026-10-21T15:43:28.506Z","title":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Primavera P6 Enterprise Project Portfolio Management","kev":false,"epss":0.00159},{"id":"CVE-2026-91375","published":"2026-10-20T21:25:37.216Z","updated":"2026-10-21T15:30:13.216Z","title":"Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00092},{"id":"CVE-2026-91374","published":"2026-10-20T21:25:36.857Z","updated":"2026-10-21T15:47:05.057Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00168},{"id":"CVE-2026-91373","published":"2026-10-20T21:25:36.496Z","updated":"2026-10-22T18:50:23.716Z","title":"Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00441},{"id":"CVE-2026-91372","published":"2026-10-20T21:25:36.158Z","updated":"2026-10-21T15:50:56.904Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00138},{"id":"CVE-2026-91371","published":"2026-10-20T21:25:35.810Z","updated":"2026-10-21T15:52:10.744Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00316},{"id":"CVE-2026-91370","published":"2026-10-20T21:25:35.477Z","updated":"2026-10-21T15:53:11.022Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00316},{"id":"CVE-2026-91369","published":"2026-10-20T21:25:35.058Z","updated":"2026-10-21T15:54:55.507Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.0023},{"id":"CVE-2026-91368","published":"2026-10-20T21:25:34.717Z","updated":"2026-10-21T15:56:41.241Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00119},{"id":"CVE-2026-91367","published":"2026-10-20T21:25:34.375Z","updated":"2026-10-21T15:57:51.602Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00133},{"id":"CVE-2026-91366","published":"2026-10-20T21:25:34.029Z","updated":"2026-10-21T15:58:38.980Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00147},{"id":"CVE-2026-91365","published":"2026-10-20T21:25:33.688Z","updated":"2026-10-21T15:59:58.091Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00177},{"id":"CVE-2026-91364","published":"2026-10-20T21:25:33.339Z","updated":"2026-10-21T16:01:28.702Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00183},{"id":"CVE-2026-91363","published":"2026-10-20T21:25:32.979Z","updated":"2026-10-28T17:10:46.110Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00258},{"id":"CVE-2026-91362","published":"2026-10-20T21:25:32.618Z","updated":"2026-10-28T17:07:59.316Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.0024},{"id":"CVE-2026-91361","published":"2026-10-20T21:25:32.268Z","updated":"2026-10-22T18:50:26.260Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00214},{"id":"CVE-2026-91360","published":"2026-10-20T21:25:31.920Z","updated":"2026-10-28T17:07:01.462Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.0027},{"id":"CVE-2026-91359","published":"2026-10-20T21:25:31.537Z","updated":"2026-10-28T17:06:01.826Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00316},{"id":"CVE-2026-91358","published":"2026-10-20T21:25:31.179Z","updated":"2026-10-28T17:04:50.436Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+)). Supported…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00321},{"id":"CVE-2026-91357","published":"2026-10-20T21:25:30.833Z","updated":"2026-10-28T17:03:33.112Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00284},{"id":"CVE-2026-91356","published":"2026-10-20T21:25:30.478Z","updated":"2026-10-28T17:22:00.498Z","title":"Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise HCM Global Payroll Switzerland","kev":false,"epss":0.00135},{"id":"CVE-2026-91355","published":"2026-10-20T21:25:30.116Z","updated":"2026-10-28T17:20:42.018Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00156},{"id":"CVE-2026-91354","published":"2026-10-20T21:25:29.775Z","updated":"2026-10-28T17:14:45.457Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00286},{"id":"CVE-2026-91353","published":"2026-10-20T21:25:29.420Z","updated":"2026-10-28T17:13:08.577Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00398},{"id":"CVE-2026-91352","published":"2026-10-20T21:25:29.056Z","updated":"2026-10-22T18:50:23.868Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00293},{"id":"CVE-2026-91351","published":"2026-10-20T21:25:28.711Z","updated":"2026-10-28T17:11:50.561Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00095},{"id":"CVE-2026-91350","published":"2026-10-20T21:25:28.363Z","updated":"2026-10-22T18:50:21.181Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441},{"id":"CVE-2026-91349","published":"2026-10-20T21:25:28.009Z","updated":"2026-10-22T18:44:29.206Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00324},{"id":"CVE-2026-91348","published":"2026-10-20T21:25:27.662Z","updated":"2026-10-28T18:04:02.759Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00122},{"id":"CVE-2026-91347","published":"2026-10-20T21:25:27.316Z","updated":"2026-10-28T18:04:43.060Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00315},{"id":"CVE-2026-91346","published":"2026-10-20T21:25:26.916Z","updated":"2026-10-28T18:05:28.883Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00228},{"id":"CVE-2026-91345","published":"2026-10-20T21:25:26.576Z","updated":"2026-10-22T18:50:21.356Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441},{"id":"CVE-2026-91344","published":"2026-10-20T21:25:26.223Z","updated":"2026-10-22T18:50:21.523Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441},{"id":"CVE-2026-91343","published":"2026-10-20T21:25:25.866Z","updated":"2026-10-28T17:55:45.114Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00323},{"id":"CVE-2026-91342","published":"2026-10-20T21:25:25.526Z","updated":"2026-10-28T18:03:05.551Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00265},{"id":"CVE-2026-91341","published":"2026-10-20T21:25:25.187Z","updated":"2026-10-28T18:02:25.353Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00407},{"id":"CVE-2026-91340","published":"2026-10-20T21:25:24.842Z","updated":"2026-10-28T18:01:38.540Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00389},{"id":"CVE-2026-91339","published":"2026-10-20T21:25:24.498Z","updated":"2026-10-28T18:00:29.546Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.0027},{"id":"CVE-2026-91338","published":"2026-10-20T21:25:24.143Z","updated":"2026-10-28T17:59:38.736Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00197},{"id":"CVE-2026-91337","published":"2026-10-20T21:25:23.777Z","updated":"2026-10-28T17:58:38.970Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00243},{"id":"CVE-2026-91336","published":"2026-10-20T21:25:23.439Z","updated":"2026-10-28T17:49:04.720Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00122},{"id":"CVE-2026-91335","published":"2026-10-20T21:25:22.996Z","updated":"2026-10-28T17:54:38.881Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions…","severity":"LOW","score":2.6,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0021},{"id":"CVE-2026-91334","published":"2026-10-20T21:25:22.651Z","updated":"2026-10-28T17:53:52.517Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00208},{"id":"CVE-2026-91333","published":"2026-10-20T21:25:22.316Z","updated":"2026-10-28T17:52:10.353Z","title":"Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00265},{"id":"CVE-2026-91332","published":"2026-10-20T21:25:21.977Z","updated":"2026-10-22T18:50:26.421Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029},{"id":"CVE-2026-91331","published":"2026-10-20T21:25:21.624Z","updated":"2026-10-28T17:51:14.414Z","title":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise CC Common Application Objects","kev":false,"epss":0.00244},{"id":"CVE-2026-91330","published":"2026-10-20T21:25:21.273Z","updated":"2026-10-28T17:31:33.210Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00103},{"id":"CVE-2026-91329","published":"2026-10-20T21:25:20.928Z","updated":"2026-10-28T17:32:21.435Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118},{"id":"CVE-2026-91328","published":"2026-10-20T21:25:20.585Z","updated":"2026-10-28T17:33:17.876Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118},{"id":"CVE-2026-91327","published":"2026-10-20T21:25:20.225Z","updated":"2026-10-28T17:29:32.286Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00199},{"id":"CVE-2026-91326","published":"2026-10-20T21:25:19.891Z","updated":"2026-10-28T17:23:58.648Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00212},{"id":"CVE-2026-91325","published":"2026-10-20T21:25:19.457Z","updated":"2026-10-28T18:12:51.406Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00398},{"id":"CVE-2026-91324","published":"2026-10-20T21:25:19.113Z","updated":"2026-10-28T18:13:36.454Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00118},{"id":"CVE-2026-91323","published":"2026-10-20T21:25:18.765Z","updated":"2026-10-27T03:56:04.150Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00496},{"id":"CVE-2026-91322","published":"2026-10-20T21:25:18.423Z","updated":"2026-10-28T18:14:31.542Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00137},{"id":"CVE-2026-91321","published":"2026-10-20T21:25:18.083Z","updated":"2026-10-28T18:15:15.967Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00301},{"id":"CVE-2026-91320","published":"2026-10-20T21:25:17.759Z","updated":"2026-10-28T18:12:04.142Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.7,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00114},{"id":"CVE-2026-91319","published":"2026-10-20T21:25:17.416Z","updated":"2026-10-28T18:11:13.635Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00266},{"id":"CVE-2026-91318","published":"2026-10-20T21:25:16.965Z","updated":"2026-10-28T18:10:08.407Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00334},{"id":"CVE-2026-91317","published":"2026-10-20T21:25:16.618Z","updated":"2026-10-28T18:08:30.582Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00294},{"id":"CVE-2026-91316","published":"2026-10-20T21:25:16.268Z","updated":"2026-10-28T18:07:48.024Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.0043},{"id":"CVE-2026-91315","published":"2026-10-20T21:25:15.911Z","updated":"2026-10-28T18:06:49.046Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0015},{"id":"CVE-2026-91314","published":"2026-10-20T21:25:15.571Z","updated":"2026-10-28T19:33:36.087Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118},{"id":"CVE-2026-91313","published":"2026-10-20T21:25:15.238Z","updated":"2026-10-28T19:32:54.837Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00348},{"id":"CVE-2026-91312","published":"2026-10-20T21:25:14.892Z","updated":"2026-10-28T19:32:18.152Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00133},{"id":"CVE-2026-91311","published":"2026-10-20T21:25:14.564Z","updated":"2026-10-28T19:31:44.729Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00135},{"id":"CVE-2026-91310","published":"2026-10-20T21:25:14.233Z","updated":"2026-10-28T19:30:52.169Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00286},{"id":"CVE-2026-91309","published":"2026-10-20T21:25:13.892Z","updated":"2026-10-28T19:29:49.116Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00318},{"id":"CVE-2026-91308","published":"2026-10-20T21:25:13.565Z","updated":"2026-10-28T19:29:01.183Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00303},{"id":"CVE-2026-91307","published":"2026-10-20T21:25:13.218Z","updated":"2026-10-28T19:27:46.270Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00303},{"id":"CVE-2026-91306","published":"2026-10-20T21:25:12.889Z","updated":"2026-10-28T19:26:54.988Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00105},{"id":"CVE-2026-91305","published":"2026-10-20T21:25:12.544Z","updated":"2026-10-22T23:04:42.833Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0042},{"id":"CVE-2026-91304","published":"2026-10-20T21:25:12.218Z","updated":"2026-10-28T19:25:57.777Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118},{"id":"CVE-2026-91303","published":"2026-10-20T21:25:11.878Z","updated":"2026-10-29T13:21:08.862Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00266},{"id":"CVE-2026-91302","published":"2026-10-20T21:25:11.552Z","updated":"2026-10-28T19:45:02.537Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00139},{"id":"CVE-2026-91301","published":"2026-10-20T21:25:11.218Z","updated":"2026-10-28T19:43:41.535Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00101},{"id":"CVE-2026-91300","published":"2026-10-20T21:25:10.877Z","updated":"2026-10-28T19:42:59.052Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00112},{"id":"CVE-2026-91299","published":"2026-10-20T21:25:10.532Z","updated":"2026-10-23T11:01:38.716Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00461},{"id":"CVE-2026-91298","published":"2026-10-20T21:25:10.197Z","updated":"2026-10-28T19:42:17.719Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00195},{"id":"CVE-2026-91297","published":"2026-10-20T21:25:09.834Z","updated":"2026-10-28T19:41:17.440Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00226},{"id":"CVE-2026-91296","published":"2026-10-20T21:25:09.487Z","updated":"2026-10-28T19:40:32.926Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00362},{"id":"CVE-2026-91295","published":"2026-10-20T21:25:09.143Z","updated":"2026-10-28T19:39:27.822Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389},{"id":"CVE-2026-91294","published":"2026-10-20T21:25:08.795Z","updated":"2026-10-28T19:36:53.926Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00262},{"id":"CVE-2026-91293","published":"2026-10-20T21:25:08.444Z","updated":"2026-10-28T19:35:26.968Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00242},{"id":"CVE-2026-91292","published":"2026-10-20T21:25:08.112Z","updated":"2026-10-28T20:04:07.153Z","title":"Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is affected is 9.2.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Localizations","kev":false,"epss":0.00319},{"id":"CVE-2026-91291","published":"2026-10-20T21:25:07.776Z","updated":"2026-10-28T20:02:25.067Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00102},{"id":"CVE-2026-91290","published":"2026-10-20T21:25:07.434Z","updated":"2026-10-28T20:01:38.425Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00145},{"id":"CVE-2026-91289","published":"2026-10-20T21:25:07.075Z","updated":"2026-10-28T20:00:45.590Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0018},{"id":"CVE-2026-91288","published":"2026-10-20T21:25:06.733Z","updated":"2026-10-28T19:59:51.158Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00243},{"id":"CVE-2026-91287","published":"2026-10-20T21:25:06.404Z","updated":"2026-10-28T19:58:49.987Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00225},{"id":"CVE-2026-91286","published":"2026-10-20T21:25:06.069Z","updated":"2026-10-28T19:57:43.406Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00195},{"id":"CVE-2026-91285","published":"2026-10-20T21:25:05.723Z","updated":"2026-10-28T19:56:52.290Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00326},{"id":"CVE-2026-91284","published":"2026-10-20T21:25:05.379Z","updated":"2026-10-28T19:55:45.933Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00289},{"id":"CVE-2026-91283","published":"2026-10-20T21:25:05.017Z","updated":"2026-10-28T19:55:04.591Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00213},{"id":"CVE-2026-91282","published":"2026-10-20T21:25:04.685Z","updated":"2026-10-28T20:16:27.290Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301},{"id":"CVE-2026-91281","published":"2026-10-20T21:25:04.333Z","updated":"2026-10-28T20:15:35.896Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00226},{"id":"CVE-2026-91280","published":"2026-10-20T21:25:03.887Z","updated":"2026-10-28T20:14:38.603Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00226},{"id":"CVE-2026-91279","published":"2026-10-20T21:25:03.513Z","updated":"2026-10-28T20:13:57.803Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00172},{"id":"CVE-2026-91278","published":"2026-10-20T21:25:03.175Z","updated":"2026-10-28T20:13:11.034Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00133},{"id":"CVE-2026-91277","published":"2026-10-20T21:25:02.837Z","updated":"2026-10-28T20:11:52.356Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00316},{"id":"CVE-2026-91276","published":"2026-10-20T21:25:02.492Z","updated":"2026-10-28T20:10:24.395Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00215},{"id":"CVE-2026-91275","published":"2026-10-20T21:25:02.078Z","updated":"2026-10-28T20:08:40.453Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00246},{"id":"CVE-2026-91274","published":"2026-10-20T21:25:01.725Z","updated":"2026-10-28T20:07:44.079Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00257},{"id":"CVE-2026-91273","published":"2026-10-20T21:25:01.367Z","updated":"2026-10-28T20:06:34.991Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00377},{"id":"CVE-2026-91272","published":"2026-10-20T21:25:00.972Z","updated":"2026-10-28T20:29:38.610Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301},{"id":"CVE-2026-91271","published":"2026-10-20T21:25:00.594Z","updated":"2026-10-28T20:28:22.615Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00248},{"id":"CVE-2026-91270","published":"2026-10-20T21:25:00.253Z","updated":"2026-10-28T20:27:15.013Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389},{"id":"CVE-2026-91269","published":"2026-10-20T21:24:59.898Z","updated":"2026-10-28T20:26:12.423Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00326},{"id":"CVE-2026-91268","published":"2026-10-20T21:24:59.556Z","updated":"2026-10-28T20:24:48.370Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00286},{"id":"CVE-2026-91267","published":"2026-10-20T21:24:59.218Z","updated":"2026-10-28T20:22:13.909Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00287},{"id":"CVE-2026-91266","published":"2026-10-20T21:24:58.846Z","updated":"2026-10-28T20:21:03.977Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00133},{"id":"CVE-2026-91265","published":"2026-10-20T21:24:58.493Z","updated":"2026-10-22T23:04:41.920Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0042},{"id":"CVE-2026-91264","published":"2026-10-20T21:24:58.142Z","updated":"2026-10-28T20:19:32.709Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Manufacturing","kev":false,"epss":0.00232},{"id":"CVE-2026-91263","published":"2026-10-20T21:24:57.775Z","updated":"2026-10-28T20:18:29.170Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). Supported versions that are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00149},{"id":"CVE-2026-91262","published":"2026-10-20T21:24:57.433Z","updated":"2026-10-28T20:17:37.675Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00226},{"id":"CVE-2026-91261","published":"2026-10-20T21:24:57.080Z","updated":"2026-10-28T20:38:53.386Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.0023},{"id":"CVE-2026-91260","published":"2026-10-20T21:24:56.727Z","updated":"2026-10-28T20:38:13.820Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00316},{"id":"CVE-2026-91259","published":"2026-10-20T21:24:56.380Z","updated":"2026-10-28T20:37:22.895Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00389},{"id":"CVE-2026-91257","published":"2026-10-20T21:24:56.023Z","updated":"2026-10-28T20:36:29.887Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00355},{"id":"CVE-2026-91256","published":"2026-10-20T21:24:55.683Z","updated":"2026-10-28T20:35:31.026Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00365},{"id":"CVE-2026-91255","published":"2026-10-20T21:24:55.349Z","updated":"2026-10-22T18:50:21.685Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00441},{"id":"CVE-2026-91254","published":"2026-10-20T21:24:54.921Z","updated":"2026-10-22T18:50:21.848Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00441},{"id":"CVE-2026-91253","published":"2026-10-20T21:24:54.586Z","updated":"2026-10-28T20:34:44.144Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135},{"id":"CVE-2026-91252","published":"2026-10-20T21:24:54.240Z","updated":"2026-10-28T20:33:46.565Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00408},{"id":"CVE-2026-91251","published":"2026-10-20T21:24:53.905Z","updated":"2026-10-28T20:32:41.368Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91250","published":"2026-10-20T21:24:53.556Z","updated":"2026-10-28T20:31:53.540Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91249","published":"2026-10-20T21:24:53.206Z","updated":"2026-10-28T20:31:04.330Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily exploitable…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00137},{"id":"CVE-2026-91248","published":"2026-10-20T21:24:52.863Z","updated":"2026-10-29T17:44:41.120Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00316},{"id":"CVE-2026-91247","published":"2026-10-20T21:24:52.512Z","updated":"2026-10-29T01:52:01.597Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00256},{"id":"CVE-2026-91246","published":"2026-10-20T21:24:52.168Z","updated":"2026-10-29T17:52:39.940Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00128},{"id":"CVE-2026-91245","published":"2026-10-20T21:24:51.825Z","updated":"2026-10-29T17:54:46.339Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00343},{"id":"CVE-2026-91244","published":"2026-10-20T21:24:51.378Z","updated":"2026-10-29T17:58:40.102Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00112},{"id":"CVE-2026-91243","published":"2026-10-20T21:24:51.000Z","updated":"2026-10-28T20:44:17.570Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00326},{"id":"CVE-2026-91242","published":"2026-10-20T21:24:50.644Z","updated":"2026-10-28T20:43:33.393Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0014},{"id":"CVE-2026-91241","published":"2026-10-20T21:24:50.301Z","updated":"2026-10-28T20:42:14.100Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00317},{"id":"CVE-2026-91240","published":"2026-10-20T21:24:49.963Z","updated":"2026-10-28T20:41:30.199Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.0031},{"id":"CVE-2026-91239","published":"2026-10-20T21:24:49.629Z","updated":"2026-10-28T20:40:37.395Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00402},{"id":"CVE-2026-91238","published":"2026-10-20T21:24:49.282Z","updated":"2026-10-29T01:52:01.738Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00364},{"id":"CVE-2026-91237","published":"2026-10-20T21:24:48.950Z","updated":"2026-10-29T17:59:41.867Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00396},{"id":"CVE-2026-91236","published":"2026-10-20T21:24:48.628Z","updated":"2026-10-21T10:55:17.746Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473},{"id":"CVE-2026-91235","published":"2026-10-20T21:24:48.266Z","updated":"2026-10-21T10:55:17.888Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473},{"id":"CVE-2026-91234","published":"2026-10-20T21:24:47.930Z","updated":"2026-10-21T10:55:18.038Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473},{"id":"CVE-2026-91233","published":"2026-10-20T21:24:47.587Z","updated":"2026-10-21T10:55:18.187Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473},{"id":"CVE-2026-91232","published":"2026-10-20T21:24:47.236Z","updated":"2026-10-29T18:00:46.512Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91231","published":"2026-10-20T21:24:46.890Z","updated":"2026-10-29T18:01:48.263Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00483},{"id":"CVE-2026-91230","published":"2026-10-20T21:24:46.552Z","updated":"2026-10-29T18:03:03.382Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00338},{"id":"CVE-2026-91229","published":"2026-10-20T21:24:46.203Z","updated":"2026-10-29T18:05:33.346Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00301},{"id":"CVE-2026-91228","published":"2026-10-20T21:24:45.858Z","updated":"2026-10-29T18:06:28.748Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00287},{"id":"CVE-2026-91227","published":"2026-10-20T21:24:45.530Z","updated":"2026-10-29T18:07:55.851Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00235},{"id":"CVE-2026-91226","published":"2026-10-20T21:24:45.193Z","updated":"2026-10-29T18:09:18.623Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00301},{"id":"CVE-2026-91225","published":"2026-10-20T21:24:44.844Z","updated":"2026-10-29T18:10:39.054Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00416},{"id":"CVE-2026-91224","published":"2026-10-20T21:24:44.156Z","updated":"2026-10-29T18:11:38.204Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00286},{"id":"CVE-2026-91223","published":"2026-10-20T21:24:43.627Z","updated":"2026-10-29T18:13:33.316Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91222","published":"2026-10-20T21:24:43.291Z","updated":"2026-10-29T18:14:49.730Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91221","published":"2026-10-20T21:24:42.928Z","updated":"2026-10-29T18:15:38.762Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00483},{"id":"CVE-2026-91220","published":"2026-10-20T21:24:42.589Z","updated":"2026-10-21T10:55:18.337Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.0045},{"id":"CVE-2026-91219","published":"2026-10-20T21:24:42.250Z","updated":"2026-10-29T16:53:41.666Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00307},{"id":"CVE-2026-91218","published":"2026-10-20T21:24:41.914Z","updated":"2026-10-29T16:55:23.261Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00337},{"id":"CVE-2026-91217","published":"2026-10-20T21:24:41.565Z","updated":"2026-10-29T17:43:47.458Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00396},{"id":"CVE-2026-91216","published":"2026-10-20T21:24:41.210Z","updated":"2026-10-29T17:42:58.368Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00508},{"id":"CVE-2026-91215","published":"2026-10-20T21:24:40.869Z","updated":"2026-10-29T16:57:51.502Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91214","published":"2026-10-20T21:24:40.530Z","updated":"2026-10-21T10:55:18.473Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473},{"id":"CVE-2026-91213","published":"2026-10-20T21:24:40.196Z","updated":"2026-10-29T16:56:35.071Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00389},{"id":"CVE-2026-91212","published":"2026-10-20T21:24:39.857Z","updated":"2026-10-28T16:43:14.225Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00307},{"id":"CVE-2026-91211","published":"2026-10-20T21:24:39.503Z","updated":"2026-10-28T17:01:14.462Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00379},{"id":"CVE-2026-91210","published":"2026-10-20T21:24:39.164Z","updated":"2026-10-28T16:59:25.638Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00196},{"id":"CVE-2026-91209","published":"2026-10-20T21:24:38.805Z","updated":"2026-10-28T16:49:50.179Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00095},{"id":"CVE-2026-91208","published":"2026-10-20T21:24:38.470Z","updated":"2026-10-28T16:47:49.692Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":5.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00126},{"id":"CVE-2026-87423","published":"2026-10-20T21:24:38.119Z","updated":"2026-10-21T14:17:25.101Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00101},{"id":"CVE-2026-87422","published":"2026-10-20T21:24:37.777Z","updated":"2026-10-21T14:07:10.126Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00113},{"id":"CVE-2026-87421","published":"2026-10-20T21:24:37.448Z","updated":"2026-10-21T14:15:36.421Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00284},{"id":"CVE-2026-87420","published":"2026-10-20T21:24:37.125Z","updated":"2026-10-21T14:12:07.234Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00389},{"id":"CVE-2026-87419","published":"2026-10-20T21:24:36.772Z","updated":"2026-10-21T14:10:37.330Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00389},{"id":"CVE-2026-87418","published":"2026-10-20T21:24:36.432Z","updated":"2026-10-21T14:09:45.524Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00103},{"id":"CVE-2026-87417","published":"2026-10-20T21:24:36.115Z","updated":"2026-10-21T14:08:52.904Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00398},{"id":"CVE-2026-87416","published":"2026-10-20T21:24:35.764Z","updated":"2026-10-21T14:07:55.254Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00263},{"id":"CVE-2026-87415","published":"2026-10-20T21:24:35.432Z","updated":"2026-10-21T14:02:35.621Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0028},{"id":"CVE-2026-87414","published":"2026-10-20T21:24:34.964Z","updated":"2026-10-21T14:06:14.769Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00112},{"id":"CVE-2026-87413","published":"2026-10-20T21:24:34.620Z","updated":"2026-10-21T14:05:37.382Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135},{"id":"CVE-2026-87412","published":"2026-10-20T21:24:34.283Z","updated":"2026-10-21T14:04:57.363Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00309},{"id":"CVE-2026-87411","published":"2026-10-20T21:24:33.946Z","updated":"2026-10-21T14:04:15.765Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135},{"id":"CVE-2026-87410","published":"2026-10-20T21:24:33.612Z","updated":"2026-10-21T14:03:20.512Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00334},{"id":"CVE-2026-87409","published":"2026-10-20T21:24:33.272Z","updated":"2026-10-21T13:47:03.671Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00376},{"id":"CVE-2026-87408","published":"2026-10-20T21:24:32.932Z","updated":"2026-10-27T03:55:35.078Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00166},{"id":"CVE-2026-87407","published":"2026-10-20T21:24:32.587Z","updated":"2026-10-21T13:55:45.042Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00334},{"id":"CVE-2026-87404","published":"2026-10-20T21:24:32.247Z","updated":"2026-10-21T14:01:34.046Z","title":"Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are affected are 12.2.3-12.2.15. Difficult…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Pasta","kev":false,"epss":0.00301},{"id":"CVE-2026-87403","published":"2026-10-20T21:24:31.907Z","updated":"2026-10-21T14:00:57.159Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00133},{"id":"CVE-2026-87402","published":"2026-10-20T21:24:31.542Z","updated":"2026-10-21T13:59:38.334Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00131},{"id":"CVE-2026-87401","published":"2026-10-20T21:24:31.197Z","updated":"2026-10-21T13:57:52.117Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00149},{"id":"CVE-2026-87400","published":"2026-10-20T21:24:30.860Z","updated":"2026-10-21T13:56:50.332Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00227},{"id":"CVE-2026-87399","published":"2026-10-20T21:24:30.526Z","updated":"2026-10-28T16:44:27.342Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00229},{"id":"CVE-2026-87398","published":"2026-10-20T21:24:30.182Z","updated":"2026-10-22T18:50:22.009Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0049},{"id":"CVE-2026-87397","published":"2026-10-20T21:24:29.820Z","updated":"2026-10-28T14:53:09.369Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00362},{"id":"CVE-2026-87396","published":"2026-10-20T21:24:29.474Z","updated":"2026-10-28T14:51:50.142Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00334},{"id":"CVE-2026-87395","published":"2026-10-20T21:24:29.117Z","updated":"2026-10-22T18:50:22.185Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441},{"id":"CVE-2026-87394","published":"2026-10-20T21:24:28.775Z","updated":"2026-10-28T14:51:23.510Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00403},{"id":"CVE-2026-87393","published":"2026-10-20T21:24:28.429Z","updated":"2026-10-28T14:49:54.493Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00309},{"id":"CVE-2026-87392","published":"2026-10-20T21:24:28.085Z","updated":"2026-10-28T14:48:58.996Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00279},{"id":"CVE-2026-87391","published":"2026-10-20T21:24:27.743Z","updated":"2026-10-28T14:42:53.376Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00148},{"id":"CVE-2026-87390","published":"2026-10-20T21:24:27.421Z","updated":"2026-10-28T14:42:33.601Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00259},{"id":"CVE-2026-87389","published":"2026-10-20T21:24:27.086Z","updated":"2026-10-28T14:39:24.769Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.00245},{"id":"CVE-2026-87388","published":"2026-10-20T21:24:26.743Z","updated":"2026-10-28T14:47:39.637Z","title":"Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Configurator","kev":false,"epss":0.0023},{"id":"CVE-2026-87387","published":"2026-10-20T21:24:26.395Z","updated":"2026-10-28T14:38:51.799Z","title":"Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Homebuilder","kev":false,"epss":0.00313},{"id":"CVE-2026-87386","published":"2026-10-20T21:24:26.050Z","updated":"2026-10-28T14:38:29.856Z","title":"Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne General Ledger","kev":false,"epss":0.00314},{"id":"CVE-2026-87385","published":"2026-10-20T21:24:25.711Z","updated":"2026-10-28T14:36:17.343Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.0022},{"id":"CVE-2026-87384","published":"2026-10-20T21:24:25.364Z","updated":"2026-10-28T14:35:33.889Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.003},{"id":"CVE-2026-87383","published":"2026-10-20T21:24:25.004Z","updated":"2026-10-28T14:32:00.213Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00157},{"id":"CVE-2026-87382","published":"2026-10-20T21:24:24.583Z","updated":"2026-10-28T14:31:18.864Z","title":"Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). The supported version that…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Operational Sourcing","kev":false,"epss":0.00355},{"id":"CVE-2026-87381","published":"2026-10-20T21:24:24.238Z","updated":"2026-10-28T14:30:28.912Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0024},{"id":"CVE-2026-113730","published":"2026-10-20T21:24:24.093Z","updated":"2026-10-21T15:51:56.220Z","title":"OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies","severity":"MEDIUM","score":5.6,"vendor":"orphan-oss","product":"ognl","kev":false,"epss":0.00394},{"id":"CVE-2026-87380","published":"2026-10-20T21:24:23.886Z","updated":"2026-10-28T14:27:33.715Z","title":"Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Sales Order Entry","kev":false,"epss":0.00355},{"id":"CVE-2026-87379","published":"2026-10-20T21:24:23.524Z","updated":"2026-10-28T14:24:52.241Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00282},{"id":"CVE-2026-87378","published":"2026-10-20T21:24:23.188Z","updated":"2026-10-28T14:23:17.935Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00355},{"id":"CVE-2026-87377","published":"2026-10-20T21:24:22.840Z","updated":"2026-10-28T14:46:18.331Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00261},{"id":"CVE-2026-87376","published":"2026-10-20T21:24:22.515Z","updated":"2026-10-28T14:22:13.556Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00292},{"id":"CVE-2026-87375","published":"2026-10-20T21:24:22.178Z","updated":"2026-10-28T14:20:05.433Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00355},{"id":"CVE-2026-87374","published":"2026-10-20T21:24:21.812Z","updated":"2026-10-28T14:19:02.196Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00292},{"id":"CVE-2026-87373","published":"2026-10-20T21:24:21.454Z","updated":"2026-10-29T12:10:59.477Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00257},{"id":"CVE-2026-87372","published":"2026-10-20T21:24:21.114Z","updated":"2026-10-28T14:16:34.427Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00145},{"id":"CVE-2026-87371","published":"2026-10-20T21:24:20.745Z","updated":"2026-10-28T14:14:58.420Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00192},{"id":"CVE-2026-87370","published":"2026-10-20T21:24:20.373Z","updated":"2026-10-28T14:11:46.542Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00214},{"id":"CVE-2026-87369","published":"2026-10-20T21:24:20.036Z","updated":"2026-10-22T18:50:22.340Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00441},{"id":"CVE-2026-87367","published":"2026-10-20T21:24:19.687Z","updated":"2026-10-28T14:10:24.355Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00252},{"id":"CVE-2026-87366","published":"2026-10-20T21:24:19.364Z","updated":"2026-10-28T14:08:59.678Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00381},{"id":"CVE-2026-87365","published":"2026-10-20T21:24:19.037Z","updated":"2026-10-28T14:07:15.286Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00393},{"id":"CVE-2026-87364","published":"2026-10-20T21:24:18.689Z","updated":"2026-10-28T14:45:19.283Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00389},{"id":"CVE-2026-87363","published":"2026-10-20T21:24:18.359Z","updated":"2026-10-28T14:06:14.944Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00345},{"id":"CVE-2026-87362","published":"2026-10-20T21:24:18.014Z","updated":"2026-10-28T14:05:21.321Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00355},{"id":"CVE-2026-87361","published":"2026-10-20T21:24:17.682Z","updated":"2026-10-28T14:02:04.394Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00265},{"id":"CVE-2026-87360","published":"2026-10-20T21:24:17.339Z","updated":"2026-10-28T13:53:36.103Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00281},{"id":"CVE-2026-87359","published":"2026-10-20T21:24:16.877Z","updated":"2026-10-28T13:50:14.208Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00447},{"id":"CVE-2026-87358","published":"2026-10-20T21:24:16.530Z","updated":"2026-10-28T13:48:21.114Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00302},{"id":"CVE-2026-87357","published":"2026-10-20T21:24:16.201Z","updated":"2026-10-28T13:46:35.503Z","title":"Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Order Capture","kev":false,"epss":0.00465},{"id":"CVE-2026-87356","published":"2026-10-20T21:24:15.868Z","updated":"2026-10-31T03:56:47.412Z","title":"Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Applications Platform Engineering","kev":false,"epss":0.00151},{"id":"CVE-2026-87355","published":"2026-10-20T21:24:15.534Z","updated":"2026-10-28T13:38:38.959Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00178},{"id":"CVE-2026-87354","published":"2026-10-20T21:24:15.201Z","updated":"2026-10-28T13:38:09.724Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.0 and…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00282},{"id":"CVE-2026-87353","published":"2026-10-20T21:24:14.853Z","updated":"2026-10-28T13:36:59.161Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00127},{"id":"CVE-2026-87352","published":"2026-10-20T21:24:14.519Z","updated":"2026-10-29T12:10:40.961Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00133},{"id":"CVE-2026-87351","published":"2026-10-20T21:24:14.194Z","updated":"2026-10-23T11:06:20.125Z","title":"Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00433},{"id":"CVE-2026-87350","published":"2026-10-20T21:24:13.863Z","updated":"2026-10-28T13:32:35.702Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00109},{"id":"CVE-2026-87349","published":"2026-10-20T21:24:13.537Z","updated":"2026-10-27T03:55:49.719Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00163},{"id":"CVE-2026-87348","published":"2026-10-20T21:24:13.205Z","updated":"2026-10-28T13:31:33.195Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00157},{"id":"CVE-2026-87347","published":"2026-10-20T21:24:12.754Z","updated":"2026-10-28T13:29:07.655Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00376},{"id":"CVE-2026-87346","published":"2026-10-20T21:24:12.382Z","updated":"2026-10-30T20:01:33.671Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00327},{"id":"CVE-2026-87345","published":"2026-10-20T21:24:12.030Z","updated":"2026-10-28T13:25:20.308Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00231},{"id":"CVE-2026-87344","published":"2026-10-20T21:24:11.680Z","updated":"2026-10-28T13:20:18.326Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00261},{"id":"CVE-2026-87343","published":"2026-10-20T21:24:11.310Z","updated":"2026-10-28T13:04:12.120Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00213},{"id":"CVE-2026-87342","published":"2026-10-20T21:24:10.925Z","updated":"2026-10-28T13:23:49.078Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0027},{"id":"CVE-2026-87340","published":"2026-10-20T21:24:10.560Z","updated":"2026-10-28T13:03:39.932Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00237},{"id":"CVE-2026-87339","published":"2026-10-20T21:24:10.204Z","updated":"2026-10-28T13:03:21.771Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00228},{"id":"CVE-2026-87338","published":"2026-10-20T21:24:09.840Z","updated":"2026-10-28T12:59:15.924Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.0024},{"id":"CVE-2026-87337","published":"2026-10-20T21:24:09.487Z","updated":"2026-10-28T12:56:05.752Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00439},{"id":"CVE-2026-87336","published":"2026-10-20T21:24:09.142Z","updated":"2026-10-28T12:51:40.487Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0027},{"id":"CVE-2026-87335","published":"2026-10-20T21:24:08.767Z","updated":"2026-10-28T12:44:57.497Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00355},{"id":"CVE-2026-87334","published":"2026-10-20T21:24:08.411Z","updated":"2026-10-28T12:41:46.958Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00145},{"id":"CVE-2026-87333","published":"2026-10-20T21:24:07.960Z","updated":"2026-10-28T12:38:50.791Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00111},{"id":"CVE-2026-87332","published":"2026-10-20T21:24:07.616Z","updated":"2026-10-28T12:35:57.987Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are…","severity":"LOW","score":3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118},{"id":"CVE-2026-87331","published":"2026-10-20T21:24:07.248Z","updated":"2026-10-28T12:34:06.713Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"LOW","score":3.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00142},{"id":"CVE-2026-87330","published":"2026-10-20T21:24:06.883Z","updated":"2026-10-28T13:22:28.133Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00143},{"id":"CVE-2026-87329","published":"2026-10-20T21:24:06.521Z","updated":"2026-10-28T12:33:32.189Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00121},{"id":"CVE-2026-87328","published":"2026-10-20T21:24:06.164Z","updated":"2026-10-28T12:31:32.162Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00318},{"id":"CVE-2026-87327","published":"2026-10-20T21:24:05.799Z","updated":"2026-10-28T12:29:52.721Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00176},{"id":"CVE-2026-87326","published":"2026-10-20T21:24:05.416Z","updated":"2026-10-28T12:28:42.021Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00318},{"id":"CVE-2026-87325","published":"2026-10-20T21:24:05.053Z","updated":"2026-10-28T12:24:17.813Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00245},{"id":"CVE-2026-87324","published":"2026-10-20T21:24:04.693Z","updated":"2026-10-28T12:21:04.210Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00245},{"id":"CVE-2026-87323","published":"2026-10-20T21:24:04.335Z","updated":"2026-10-28T12:13:35.530Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00133},{"id":"CVE-2026-87322","published":"2026-10-20T21:24:03.866Z","updated":"2026-10-28T12:10:00.343Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00228},{"id":"CVE-2026-87321","published":"2026-10-20T21:24:03.493Z","updated":"2026-10-28T12:05:26.115Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00121},{"id":"CVE-2026-87320","published":"2026-10-20T21:24:03.125Z","updated":"2026-10-28T11:59:26.608Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00105},{"id":"CVE-2026-87319","published":"2026-10-20T21:24:02.773Z","updated":"2026-10-28T13:21:36.036Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0012},{"id":"CVE-2026-87318","published":"2026-10-20T21:24:02.417Z","updated":"2026-10-28T11:56:34.764Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00107},{"id":"CVE-2026-87317","published":"2026-10-20T21:24:02.061Z","updated":"2026-10-28T11:47:34.008Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00254},{"id":"CVE-2026-87316","published":"2026-10-20T21:24:01.701Z","updated":"2026-10-28T11:51:03.487Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00135},{"id":"CVE-2026-87315","published":"2026-10-20T21:24:01.305Z","updated":"2026-10-28T11:42:07.347Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00323},{"id":"CVE-2026-87314","published":"2026-10-20T21:24:00.927Z","updated":"2026-10-28T11:25:18.235Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301},{"id":"CVE-2026-87313","published":"2026-10-20T21:24:00.580Z","updated":"2026-10-28T11:24:16.439Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389},{"id":"CVE-2026-111879","published":"2026-10-20T21:24:00.036Z","updated":"2026-10-30T12:55:30.033Z","title":"DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock","severity":"MEDIUM","score":6.5,"vendor":null,"product":"DBI","kev":false,"epss":0.00327},{"id":"CVE-2026-87312","published":"2026-10-20T21:23:59.938Z","updated":"2026-10-28T11:17:33.155Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301},{"id":"CVE-2026-87311","published":"2026-10-20T21:23:59.582Z","updated":"2026-10-28T11:15:50.601Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00103},{"id":"CVE-2026-87310","published":"2026-10-20T21:23:59.172Z","updated":"2026-10-28T11:12:13.760Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389},{"id":"CVE-2026-87309","published":"2026-10-20T21:23:58.805Z","updated":"2026-10-28T11:07:30.071Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00352},{"id":"CVE-2026-87308","published":"2026-10-20T21:23:58.437Z","updated":"2026-10-27T19:53:33.272Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00149},{"id":"CVE-2026-87307","published":"2026-10-20T21:23:58.048Z","updated":"2026-10-27T19:52:28.583Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0038},{"id":"CVE-2026-87306","published":"2026-10-20T21:23:57.673Z","updated":"2026-10-27T19:48:39.883Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00365},{"id":"CVE-2026-87305","published":"2026-10-20T21:23:57.302Z","updated":"2026-10-27T19:28:08.876Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00348},{"id":"CVE-2026-87304","published":"2026-10-20T21:23:56.690Z","updated":"2026-10-27T19:27:12.634Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00377},{"id":"CVE-2026-87303","published":"2026-10-20T21:23:56.329Z","updated":"2026-10-27T19:26:12.447Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00116},{"id":"CVE-2026-87302","published":"2026-10-20T21:23:55.953Z","updated":"2026-10-30T03:55:57.176Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00416},{"id":"CVE-2026-87301","published":"2026-10-20T21:23:55.503Z","updated":"2026-10-27T19:40:00.000Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00147},{"id":"CVE-2026-87300","published":"2026-10-20T21:23:55.147Z","updated":"2026-10-27T19:20:48.768Z","title":"Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Weblogic Server Proxy Plug-in","kev":false,"epss":0.00301},{"id":"CVE-2026-87299","published":"2026-10-20T21:23:54.772Z","updated":"2026-10-27T19:13:35.254Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00226},{"id":"CVE-2026-87298","published":"2026-10-20T21:23:54.413Z","updated":"2026-10-27T19:13:01.023Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00326},{"id":"CVE-2026-87297","published":"2026-10-20T21:23:54.054Z","updated":"2026-10-27T19:07:19.403Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00149},{"id":"CVE-2026-87296","published":"2026-10-20T21:23:53.680Z","updated":"2026-10-27T19:05:04.838Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00377},{"id":"CVE-2026-87295","published":"2026-10-20T21:23:53.332Z","updated":"2026-10-27T19:02:36.067Z","title":"Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (India)","kev":false,"epss":0.00133},{"id":"CVE-2026-87294","published":"2026-10-20T21:23:52.938Z","updated":"2026-10-27T19:00:47.038Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00262},{"id":"CVE-2026-87293","published":"2026-10-20T21:23:52.573Z","updated":"2026-10-27T18:58:28.592Z","title":"Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00214},{"id":"CVE-2026-87292","published":"2026-10-20T21:23:52.207Z","updated":"2026-10-27T18:54:01.116Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00239},{"id":"CVE-2026-87291","published":"2026-10-20T21:23:51.823Z","updated":"2026-10-27T18:52:59.378Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00308},{"id":"CVE-2026-87290","published":"2026-10-20T21:23:51.453Z","updated":"2026-10-27T19:37:24.361Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327},{"id":"CVE-2026-87263","published":"2026-10-20T21:23:51.094Z","updated":"2026-10-27T18:52:04.767Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00389},{"id":"CVE-2026-87255","published":"2026-10-20T21:23:50.728Z","updated":"2026-10-27T18:50:10.598Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00308},{"id":"CVE-2026-87251","published":"2026-10-20T21:23:50.337Z","updated":"2026-10-21T10:55:18.624Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00463},{"id":"CVE-2026-83427","published":"2026-10-20T21:23:49.947Z","updated":"2026-10-27T03:55:51.143Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0035},{"id":"CVE-2026-83426","published":"2026-10-20T21:23:49.588Z","updated":"2026-10-27T18:48:41.699Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.0031},{"id":"CVE-2026-83409","published":"2026-10-20T21:23:49.222Z","updated":"2026-10-27T18:47:17.150Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00348},{"id":"CVE-2026-83407","published":"2026-10-20T21:23:48.882Z","updated":"2026-10-27T18:45:50.318Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00344},{"id":"CVE-2026-83406","published":"2026-10-20T21:23:48.521Z","updated":"2026-10-27T18:44:48.979Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00149},{"id":"CVE-2026-83404","published":"2026-10-20T21:23:48.172Z","updated":"2026-10-27T18:43:16.741Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00388},{"id":"CVE-2026-83403","published":"2026-10-20T21:23:47.817Z","updated":"2026-10-27T18:41:26.488Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00389},{"id":"CVE-2026-83402","published":"2026-10-20T21:23:47.458Z","updated":"2026-10-27T18:39:36.064Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.004},{"id":"CVE-2026-83401","published":"2026-10-20T21:23:47.010Z","updated":"2026-10-27T18:37:17.612Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00226},{"id":"CVE-2026-83400","published":"2026-10-20T21:23:46.645Z","updated":"2026-10-22T18:50:24.014Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00396},{"id":"CVE-2026-83399","published":"2026-10-20T21:23:46.187Z","updated":"2026-10-21T10:55:18.762Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00496},{"id":"CVE-2026-83398","published":"2026-10-20T21:23:45.825Z","updated":"2026-10-27T14:18:34.451Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00321},{"id":"CVE-2026-83397","published":"2026-10-20T21:23:45.465Z","updated":"2026-10-21T10:55:18.905Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.0045},{"id":"CVE-2026-83396","published":"2026-10-20T21:23:45.085Z","updated":"2026-10-21T10:55:19.044Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.0045},{"id":"CVE-2026-83395","published":"2026-10-20T21:23:44.691Z","updated":"2026-10-22T18:50:25.076Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327},{"id":"CVE-2026-83394","published":"2026-10-20T21:23:44.347Z","updated":"2026-10-27T14:13:26.364Z","title":"Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Demand Planning","kev":false,"epss":0.00314},{"id":"CVE-2026-83393","published":"2026-10-20T21:23:43.955Z","updated":"2026-10-29T10:45:48.626Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00301},{"id":"CVE-2026-83392","published":"2026-10-20T21:23:43.597Z","updated":"2026-10-27T14:11:45.641Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.0023},{"id":"CVE-2026-83391","published":"2026-10-20T21:23:43.234Z","updated":"2026-10-27T14:10:58.430Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00213},{"id":"CVE-2026-83390","published":"2026-10-20T21:23:42.850Z","updated":"2026-10-27T14:09:45.470Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00252},{"id":"CVE-2026-83389","published":"2026-10-20T21:23:42.487Z","updated":"2026-10-27T14:07:02.817Z","title":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (UK)","kev":false,"epss":0.00213},{"id":"CVE-2026-83388","published":"2026-10-20T21:23:42.027Z","updated":"2026-10-27T14:06:18.012Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":2.2,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00247},{"id":"CVE-2026-83387","published":"2026-10-20T21:23:41.652Z","updated":"2026-10-27T14:01:47.624Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327},{"id":"CVE-2026-83386","published":"2026-10-20T21:23:41.291Z","updated":"2026-10-27T14:01:24.148Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355},{"id":"CVE-2026-83385","published":"2026-10-20T21:23:40.925Z","updated":"2026-10-27T14:07:47.201Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355},{"id":"CVE-2026-83384","published":"2026-10-20T21:23:40.563Z","updated":"2026-10-27T13:58:38.238Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355},{"id":"CVE-2026-83383","published":"2026-10-20T21:23:39.793Z","updated":"2026-10-27T13:50:29.470Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355},{"id":"CVE-2026-83382","published":"2026-10-20T21:23:39.430Z","updated":"2026-10-27T13:42:23.287Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00282},{"id":"CVE-2026-83381","published":"2026-10-20T21:23:39.066Z","updated":"2026-10-27T13:41:03.875Z","title":"Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00226},{"id":"CVE-2026-83380","published":"2026-10-20T21:23:38.688Z","updated":"2026-10-27T13:39:42.444Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00325},{"id":"CVE-2026-83379","published":"2026-10-20T21:23:38.320Z","updated":"2026-10-27T03:56:00.393Z","title":"Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Weblogic Server Proxy Plug-in","kev":false,"epss":0.00301},{"id":"CVE-2026-83378","published":"2026-10-20T21:23:37.939Z","updated":"2026-10-27T13:38:09.949Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00214},{"id":"CVE-2026-83377","published":"2026-10-20T21:23:37.581Z","updated":"2026-10-27T13:36:44.060Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00213},{"id":"CVE-2026-83376","published":"2026-10-20T21:23:37.211Z","updated":"2026-10-27T13:24:58.718Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00252},{"id":"CVE-2026-83375","published":"2026-10-20T21:23:36.843Z","updated":"2026-10-27T13:22:05.291Z","title":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version that is…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise HCM Human Resources","kev":false,"epss":0.00246},{"id":"CVE-2026-83374","published":"2026-10-20T21:23:36.480Z","updated":"2026-10-27T13:20:58.910Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00289},{"id":"CVE-2026-83373","published":"2026-10-20T21:23:36.109Z","updated":"2026-10-27T13:19:16.941Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00209},{"id":"CVE-2026-83372","published":"2026-10-20T21:23:35.724Z","updated":"2026-10-27T13:17:25.726Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00219},{"id":"CVE-2026-83371","published":"2026-10-20T21:23:35.360Z","updated":"2026-10-27T13:14:22.025Z","title":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (UK)","kev":false,"epss":0.00213},{"id":"CVE-2026-83370","published":"2026-10-20T21:23:35.001Z","updated":"2026-10-27T13:08:55.396Z","title":"Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Sourcing","kev":false,"epss":0.00345},{"id":"CVE-2026-83367","published":"2026-10-20T21:23:34.649Z","updated":"2026-10-27T13:06:39.197Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00318},{"id":"CVE-2026-83366","published":"2026-10-20T21:23:34.299Z","updated":"2026-10-27T13:32:44.801Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00243},{"id":"CVE-2026-83363","published":"2026-10-20T21:23:33.830Z","updated":"2026-10-29T10:45:48.779Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.00389},{"id":"CVE-2026-83361","published":"2026-10-20T21:23:33.465Z","updated":"2026-10-29T10:45:48.916Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.00326},{"id":"CVE-2026-83360","published":"2026-10-20T21:23:33.085Z","updated":"2026-10-27T13:04:25.778Z","title":"Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (Republic of Korea)","kev":false,"epss":0.00355},{"id":"CVE-2026-83359","published":"2026-10-20T21:23:32.728Z","updated":"2026-10-27T12:58:07.575Z","title":"Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (India)","kev":false,"epss":0.00355},{"id":"CVE-2026-83358","published":"2026-10-20T21:23:32.371Z","updated":"2026-10-27T12:38:45.331Z","title":"Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (Norway)","kev":false,"epss":0.00355},{"id":"CVE-2026-83139","published":"2026-10-20T21:23:31.997Z","updated":"2026-10-27T12:34:34.935Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355},{"id":"CVE-2026-73964","published":"2026-10-20T21:23:31.642Z","updated":"2026-10-27T12:32:45.155Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00302},{"id":"CVE-2026-70869","published":"2026-10-20T21:23:31.275Z","updated":"2026-10-27T12:32:09.518Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00199},{"id":"CVE-2026-70860","published":"2026-10-20T21:23:30.775Z","updated":"2026-10-27T12:23:45.426Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.00241},{"id":"CVE-2026-60968","published":"2026-10-20T21:23:30.403Z","updated":"2026-10-27T12:22:27.477Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00158},{"id":"CVE-2026-60964","published":"2026-10-20T21:23:30.032Z","updated":"2026-10-27T12:21:19.963Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and…","severity":"LOW","score":1.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00133},{"id":"CVE-2026-60887","published":"2026-10-20T21:23:29.643Z","updated":"2026-10-27T12:20:27.226Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00122},{"id":"CVE-2026-60885","published":"2026-10-20T21:23:29.288Z","updated":"2026-10-27T03:55:52.227Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00339},{"id":"CVE-2026-60882","published":"2026-10-20T21:23:28.887Z","updated":"2026-10-27T13:30:01.939Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00254},{"id":"CVE-2026-60881","published":"2026-10-20T21:23:28.541Z","updated":"2026-10-30T20:01:24.567Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00465},{"id":"CVE-2026-60878","published":"2026-10-20T21:23:28.165Z","updated":"2026-10-27T12:18:22.370Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00178},{"id":"CVE-2026-60876","published":"2026-10-20T21:23:27.797Z","updated":"2026-10-27T12:17:25.667Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version that is affected is…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00194},{"id":"CVE-2026-60874","published":"2026-10-20T21:23:27.445Z","updated":"2026-10-29T13:21:45.832Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61 and…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00232},{"id":"CVE-2026-60869","published":"2026-10-20T21:23:27.012Z","updated":"2026-10-27T12:13:41.170Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions that are affected…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00263},{"id":"CVE-2026-60839","published":"2026-10-20T21:23:26.668Z","updated":"2026-10-27T12:12:33.710Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00268},{"id":"CVE-2026-60819","published":"2026-10-20T21:23:26.288Z","updated":"2026-10-27T12:11:52.868Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0025},{"id":"CVE-2026-60814","published":"2026-10-20T21:23:25.824Z","updated":"2026-10-27T12:11:00.177Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00108},{"id":"CVE-2026-60809","published":"2026-10-20T21:23:25.459Z","updated":"2026-10-27T12:08:54.618Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00187},{"id":"CVE-2026-60746","published":"2026-10-20T21:23:25.058Z","updated":"2026-10-27T12:07:25.117Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00242},{"id":"CVE-2026-60745","published":"2026-10-20T21:23:24.699Z","updated":"2026-10-27T13:28:43.080Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00175},{"id":"CVE-2026-60743","published":"2026-10-20T21:23:24.231Z","updated":"2026-10-27T12:06:39.028Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00285},{"id":"CVE-2026-60662","published":"2026-10-20T21:23:23.882Z","updated":"2026-10-27T12:05:36.512Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00151},{"id":"CVE-2026-60500","published":"2026-10-20T21:23:23.514Z","updated":"2026-10-27T12:04:40.491Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00323},{"id":"CVE-2026-60453","published":"2026-10-20T21:23:23.137Z","updated":"2026-10-27T12:03:38.502Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00133},{"id":"CVE-2026-60432","published":"2026-10-20T21:23:22.761Z","updated":"2026-10-21T10:55:19.187Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4.…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0045},{"id":"CVE-2026-47025","published":"2026-10-20T21:23:22.416Z","updated":"2026-10-27T12:01:30.935Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00447},{"id":"CVE-2026-101857","published":"2026-10-20T21:23:22.059Z","updated":"2026-10-27T11:59:56.939Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355},{"id":"CVE-2026-101856","published":"2026-10-20T21:23:21.719Z","updated":"2026-10-27T11:59:07.465Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355},{"id":"CVE-2026-101855","published":"2026-10-20T21:23:21.369Z","updated":"2026-10-27T11:58:02.904Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00355},{"id":"CVE-2026-101854","published":"2026-10-20T21:23:21.003Z","updated":"2026-10-29T10:45:49.052Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389},{"id":"CVE-2026-101853","published":"2026-10-20T21:23:20.636Z","updated":"2026-10-29T10:45:49.202Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389},{"id":"CVE-2026-101852","published":"2026-10-20T21:23:20.151Z","updated":"2026-10-29T10:45:49.358Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389},{"id":"CVE-2026-101851","published":"2026-10-20T21:23:19.775Z","updated":"2026-10-27T11:52:51.538Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.0023},{"id":"CVE-2026-101850","published":"2026-10-20T21:23:19.416Z","updated":"2026-10-27T11:51:59.444Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.00238},{"id":"CVE-2026-101849","published":"2026-10-20T21:23:19.059Z","updated":"2026-10-27T11:50:06.504Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.00268},{"id":"CVE-2026-101847","published":"2026-10-20T21:23:18.686Z","updated":"2026-10-27T11:48:03.707Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00345},{"id":"CVE-2026-101846","published":"2026-10-20T21:23:18.301Z","updated":"2026-10-27T11:46:08.520Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"LOW","score":3.5,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00179},{"id":"CVE-2026-101845","published":"2026-10-20T21:23:17.924Z","updated":"2026-10-27T11:39:44.675Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00176},{"id":"CVE-2026-101844","published":"2026-10-20T21:23:17.562Z","updated":"2026-10-27T11:37:40.084Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0023},{"id":"CVE-2026-101843","published":"2026-10-20T21:23:17.215Z","updated":"2026-10-27T11:57:11.232Z","title":"Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"Production Scheduling","kev":false,"epss":0.0011},{"id":"CVE-2026-101842","published":"2026-10-20T21:23:16.814Z","updated":"2026-10-29T10:45:49.493Z","title":"Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions that are affected…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Strategic Network Optimization","kev":false,"epss":0.00363},{"id":"CVE-2026-101841","published":"2026-10-20T21:23:16.450Z","updated":"2026-10-29T10:45:49.627Z","title":"Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Global Order Promising","kev":false,"epss":0.00261},{"id":"CVE-2026-101840","published":"2026-10-20T21:23:16.092Z","updated":"2026-10-27T11:32:48.168Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.0043},{"id":"CVE-2026-101837","published":"2026-10-20T21:23:15.741Z","updated":"2026-10-27T11:28:51.859Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.0022},{"id":"CVE-2026-101836","published":"2026-10-20T21:23:15.381Z","updated":"2026-10-27T11:27:33.125Z","title":"Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupplier Portal","kev":false,"epss":0.00326},{"id":"CVE-2026-101835","published":"2026-10-20T21:23:15.004Z","updated":"2026-10-27T11:22:08.704Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00377},{"id":"CVE-2026-101834","published":"2026-10-20T21:23:14.616Z","updated":"2026-10-29T10:45:49.766Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00348},{"id":"CVE-2026-101833","published":"2026-10-20T21:23:14.208Z","updated":"2026-10-27T11:21:23.720Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00297},{"id":"CVE-2026-101832","published":"2026-10-20T21:23:13.800Z","updated":"2026-10-27T11:21:02.320Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00326},{"id":"CVE-2026-101831","published":"2026-10-20T21:23:13.415Z","updated":"2026-10-29T10:45:49.909Z","title":"Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Quality","kev":false,"epss":0.00326},{"id":"CVE-2026-108518","published":"2026-10-20T21:23:13.373Z","updated":"2026-10-30T12:48:49.541Z","title":"DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element","severity":"LOW","score":2.9,"vendor":null,"product":"DBI","kev":false,"epss":0.00254},{"id":"CVE-2026-101830","published":"2026-10-20T21:23:12.878Z","updated":"2026-10-22T17:17:48.998Z","title":"Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Project Contracts","kev":false,"epss":0.00326},{"id":"CVE-2026-101829","published":"2026-10-20T21:23:12.179Z","updated":"2026-10-22T15:13:39.691Z","title":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Application Server","kev":false,"epss":0.00301},{"id":"CVE-2026-101828","published":"2026-10-20T21:23:11.771Z","updated":"2026-10-22T17:17:58.853Z","title":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Mobile Application Server","kev":false,"epss":0.00326},{"id":"CVE-2026-101827","published":"2026-10-20T21:23:11.292Z","updated":"2026-10-22T15:13:47.704Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00269},{"id":"CVE-2026-101826","published":"2026-10-20T21:23:10.881Z","updated":"2026-10-22T15:13:54.345Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00301},{"id":"CVE-2026-101825","published":"2026-10-20T21:23:10.260Z","updated":"2026-10-22T15:14:06.482Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00301},{"id":"CVE-2026-101824","published":"2026-10-20T21:23:09.851Z","updated":"2026-10-27T03:55:33.726Z","title":"Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Document Management and Collaboration","kev":false,"epss":0.00288},{"id":"CVE-2026-101823","published":"2026-10-20T21:23:09.365Z","updated":"2026-10-22T15:14:21.193Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00301},{"id":"CVE-2026-101822","published":"2026-10-20T21:23:08.864Z","updated":"2026-10-22T17:18:10.679Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00256},{"id":"CVE-2026-101821","published":"2026-10-20T21:23:08.504Z","updated":"2026-10-22T17:18:18.976Z","title":"Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement). Supported versions that are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Compensation Workbench","kev":false,"epss":0.00195},{"id":"CVE-2026-101820","published":"2026-10-20T21:23:08.148Z","updated":"2026-10-22T15:14:28.250Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00301},{"id":"CVE-2026-101819","published":"2026-10-20T21:23:07.798Z","updated":"2026-10-22T17:18:28.282Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00326},{"id":"CVE-2026-101818","published":"2026-10-20T21:23:07.434Z","updated":"2026-10-22T17:18:35.774Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00229},{"id":"CVE-2026-101816","published":"2026-10-20T21:23:07.042Z","updated":"2026-10-22T15:14:36.257Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.0043},{"id":"CVE-2026-101815","published":"2026-10-20T21:23:06.687Z","updated":"2026-10-22T17:18:45.274Z","title":"Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Assets","kev":false,"epss":0.00278},{"id":"CVE-2026-101814","published":"2026-10-20T21:23:06.340Z","updated":"2026-10-22T15:14:45.069Z","title":"Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Engineering","kev":false,"epss":0.00299},{"id":"CVE-2026-101813","published":"2026-10-20T21:23:05.977Z","updated":"2026-10-24T03:55:38.732Z","title":"Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Engineering","kev":false,"epss":0.00433},{"id":"CVE-2026-101812","published":"2026-10-20T21:23:05.636Z","updated":"2026-10-22T15:15:01.013Z","title":"Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Complex Maintenance, Repair and Overhaul","kev":false,"epss":0.00261},{"id":"CVE-2026-101810","published":"2026-10-20T21:23:05.273Z","updated":"2026-10-22T18:50:22.496Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00486},{"id":"CVE-2026-101809","published":"2026-10-20T21:23:04.910Z","updated":"2026-10-24T03:55:17.626Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00538},{"id":"CVE-2026-101808","published":"2026-10-20T21:23:04.544Z","updated":"2026-10-21T11:05:31.055Z","title":"Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Product Workbench","kev":false,"epss":0.00404},{"id":"CVE-2026-101807","published":"2026-10-20T21:23:04.196Z","updated":"2026-10-22T17:18:54.295Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00208},{"id":"CVE-2026-101806","published":"2026-10-20T21:23:03.826Z","updated":"2026-10-22T15:15:21.180Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00268},{"id":"CVE-2026-101805","published":"2026-10-20T21:23:03.453Z","updated":"2026-10-22T17:19:07.413Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00256},{"id":"CVE-2026-101804","published":"2026-10-20T21:23:03.092Z","updated":"2026-10-22T17:19:16.317Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00113},{"id":"CVE-2026-101803","published":"2026-10-20T21:23:02.659Z","updated":"2026-10-22T17:19:23.593Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039},{"id":"CVE-2026-101802","published":"2026-10-20T21:23:02.262Z","updated":"2026-10-22T17:19:31.594Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101801","published":"2026-10-20T21:23:01.773Z","updated":"2026-10-22T17:19:46.241Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039},{"id":"CVE-2026-101800","published":"2026-10-20T21:23:01.405Z","updated":"2026-10-22T15:15:28.267Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00261},{"id":"CVE-2026-101799","published":"2026-10-20T21:23:00.988Z","updated":"2026-10-22T17:19:57.300Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00217},{"id":"CVE-2026-101798","published":"2026-10-20T21:23:00.365Z","updated":"2026-10-22T17:20:09.293Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039},{"id":"CVE-2026-101797","published":"2026-10-20T21:22:59.986Z","updated":"2026-10-22T15:15:35.119Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00287},{"id":"CVE-2026-101796","published":"2026-10-20T21:22:59.412Z","updated":"2026-10-22T15:15:44.436Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00286},{"id":"CVE-2026-101795","published":"2026-10-20T21:22:59.028Z","updated":"2026-10-22T15:15:53.159Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0015},{"id":"CVE-2026-101794","published":"2026-10-20T21:22:58.666Z","updated":"2026-10-22T17:20:19.505Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101793","published":"2026-10-20T21:22:58.177Z","updated":"2026-10-22T17:20:31.406Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00133},{"id":"CVE-2026-101792","published":"2026-10-20T21:22:57.827Z","updated":"2026-10-22T17:20:40.504Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.0017},{"id":"CVE-2026-101791","published":"2026-10-20T21:22:57.468Z","updated":"2026-10-22T15:16:15.794Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00326},{"id":"CVE-2026-101790","published":"2026-10-20T21:22:57.061Z","updated":"2026-10-22T17:20:47.459Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00126},{"id":"CVE-2026-101789","published":"2026-10-20T21:22:56.698Z","updated":"2026-10-22T17:20:58.327Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101788","published":"2026-10-20T21:22:56.337Z","updated":"2026-10-22T17:21:07.832Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00325},{"id":"CVE-2026-101787","published":"2026-10-20T21:22:55.854Z","updated":"2026-10-22T17:21:17.289Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039},{"id":"CVE-2026-101786","published":"2026-10-20T21:22:55.513Z","updated":"2026-10-22T15:16:25.206Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0043},{"id":"CVE-2026-101785","published":"2026-10-20T21:22:55.150Z","updated":"2026-10-22T17:21:24.407Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336},{"id":"CVE-2026-101784","published":"2026-10-20T21:22:54.791Z","updated":"2026-10-22T17:21:33.596Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039},{"id":"CVE-2026-101783","published":"2026-10-20T21:22:54.422Z","updated":"2026-10-22T15:16:32.156Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00301},{"id":"CVE-2026-101782","published":"2026-10-20T21:22:54.052Z","updated":"2026-10-22T17:21:41.839Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00326},{"id":"CVE-2026-101781","published":"2026-10-20T21:22:53.686Z","updated":"2026-10-22T15:16:42.399Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00392},{"id":"CVE-2026-101780","published":"2026-10-20T21:22:53.326Z","updated":"2026-10-22T17:21:53.136Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00355},{"id":"CVE-2026-101779","published":"2026-10-20T21:22:52.949Z","updated":"2026-10-22T17:22:01.942Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server:…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00277},{"id":"CVE-2026-101778","published":"2026-10-20T21:22:52.574Z","updated":"2026-10-22T17:22:12.821Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00355},{"id":"CVE-2026-101777","published":"2026-10-20T21:22:52.213Z","updated":"2026-10-22T17:22:21.578Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00369},{"id":"CVE-2026-101776","published":"2026-10-20T21:22:51.848Z","updated":"2026-10-22T17:30:42.919Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00299},{"id":"CVE-2026-101775","published":"2026-10-20T21:22:51.486Z","updated":"2026-10-22T17:30:50.908Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00332},{"id":"CVE-2026-101774","published":"2026-10-20T21:22:51.119Z","updated":"2026-10-22T17:30:58.049Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00289},{"id":"CVE-2026-101773","published":"2026-10-20T21:22:50.749Z","updated":"2026-10-22T17:31:06.857Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00297},{"id":"CVE-2026-101772","published":"2026-10-20T21:22:50.400Z","updated":"2026-10-22T15:16:53.753Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00408},{"id":"CVE-2026-101771","published":"2026-10-20T21:22:50.033Z","updated":"2026-10-22T15:17:06.142Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00408},{"id":"CVE-2026-101770","published":"2026-10-20T21:22:49.665Z","updated":"2026-10-22T15:17:13.932Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00437},{"id":"CVE-2026-101769","published":"2026-10-20T21:22:49.311Z","updated":"2026-10-22T17:31:13.813Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 26.7.0-26.7.1. Difficult to…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.00283},{"id":"CVE-2026-101768","published":"2026-10-20T21:22:48.928Z","updated":"2026-10-22T15:17:21.502Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00427},{"id":"CVE-2026-101767","published":"2026-10-20T21:22:48.577Z","updated":"2026-10-21T10:55:19.327Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00614},{"id":"CVE-2026-101766","published":"2026-10-20T21:22:48.209Z","updated":"2026-10-22T17:31:20.788Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00346},{"id":"CVE-2026-101765","published":"2026-10-20T21:22:47.845Z","updated":"2026-10-21T11:05:31.208Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.0042},{"id":"CVE-2026-101764","published":"2026-10-20T21:22:47.475Z","updated":"2026-10-22T17:31:27.350Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00158},{"id":"CVE-2026-101763","published":"2026-10-20T21:22:47.110Z","updated":"2026-10-21T11:05:29.614Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00501},{"id":"CVE-2026-101762","published":"2026-10-20T21:22:46.728Z","updated":"2026-10-22T17:31:34.103Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00314},{"id":"CVE-2026-101761","published":"2026-10-20T21:22:46.363Z","updated":"2026-10-22T17:31:40.682Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00335},{"id":"CVE-2026-101760","published":"2026-10-20T21:22:45.688Z","updated":"2026-10-22T17:31:47.655Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00379},{"id":"CVE-2026-101759","published":"2026-10-20T21:22:45.304Z","updated":"2026-10-22T15:17:28.740Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.0042},{"id":"CVE-2026-101758","published":"2026-10-20T21:22:44.928Z","updated":"2026-10-22T15:17:40.160Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00357},{"id":"CVE-2026-101757","published":"2026-10-20T21:22:44.576Z","updated":"2026-10-22T15:17:47.266Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.0016},{"id":"CVE-2026-101756","published":"2026-10-20T21:22:44.211Z","updated":"2026-10-22T17:31:54.096Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00443},{"id":"CVE-2026-101755","published":"2026-10-20T21:22:43.367Z","updated":"2026-10-22T17:32:00.832Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00314},{"id":"CVE-2026-101754","published":"2026-10-20T21:22:43.006Z","updated":"2026-10-22T17:32:09.043Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101753","published":"2026-10-20T21:22:42.653Z","updated":"2026-10-22T17:32:15.490Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101752","published":"2026-10-20T21:22:42.273Z","updated":"2026-10-22T17:32:21.830Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353},{"id":"CVE-2026-101751","published":"2026-10-20T21:22:41.908Z","updated":"2026-10-22T17:32:28.274Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00444},{"id":"CVE-2026-101750","published":"2026-10-20T21:22:41.558Z","updated":"2026-10-22T17:32:34.742Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00444},{"id":"CVE-2026-101749","published":"2026-10-20T21:22:41.187Z","updated":"2026-10-22T17:32:40.966Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00443},{"id":"CVE-2026-101748","published":"2026-10-20T21:22:40.820Z","updated":"2026-10-22T17:32:47.633Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395},{"id":"CVE-2026-101747","published":"2026-10-20T21:22:40.446Z","updated":"2026-10-22T17:32:53.977Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395},{"id":"CVE-2026-101746","published":"2026-10-20T21:22:40.087Z","updated":"2026-10-22T15:17:54.072Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00234},{"id":"CVE-2026-101745","published":"2026-10-20T21:22:39.707Z","updated":"2026-10-22T15:18:01.180Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00333},{"id":"CVE-2026-101744","published":"2026-10-20T21:22:39.251Z","updated":"2026-10-22T15:18:10.050Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.003},{"id":"CVE-2026-101743","published":"2026-10-20T21:22:38.863Z","updated":"2026-10-22T17:33:00.746Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394},{"id":"CVE-2026-101742","published":"2026-10-20T21:22:38.500Z","updated":"2026-10-22T15:18:16.346Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00433},{"id":"CVE-2026-101741","published":"2026-10-20T21:22:38.152Z","updated":"2026-10-22T17:33:08.624Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00191},{"id":"CVE-2026-101740","published":"2026-10-20T21:22:37.771Z","updated":"2026-10-22T17:33:14.756Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.0012},{"id":"CVE-2026-101739","published":"2026-10-20T21:22:37.396Z","updated":"2026-10-22T15:18:22.667Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00129},{"id":"CVE-2026-101738","published":"2026-10-20T21:22:36.947Z","updated":"2026-10-22T17:33:21.118Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00223},{"id":"CVE-2026-101737","published":"2026-10-20T21:22:36.614Z","updated":"2026-10-22T17:33:26.985Z","title":"Vulnerability in Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00456},{"id":"CVE-2026-101736","published":"2026-10-20T21:22:36.248Z","updated":"2026-10-24T03:55:16.006Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00345},{"id":"CVE-2026-101735","published":"2026-10-20T21:22:35.896Z","updated":"2026-10-22T17:45:01.949Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00296},{"id":"CVE-2026-101734","published":"2026-10-20T21:22:35.438Z","updated":"2026-10-22T17:45:11.283Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00301},{"id":"CVE-2026-101733","published":"2026-10-20T21:22:35.057Z","updated":"2026-10-22T17:45:18.279Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00412},{"id":"CVE-2026-101732","published":"2026-10-20T21:22:34.705Z","updated":"2026-10-22T17:45:24.494Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00464},{"id":"CVE-2026-101731","published":"2026-10-20T21:22:34.344Z","updated":"2026-10-22T17:45:31.641Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00464},{"id":"CVE-2026-101730","published":"2026-10-20T21:22:33.965Z","updated":"2026-10-22T17:45:38.448Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454},{"id":"CVE-2026-101729","published":"2026-10-20T21:22:33.606Z","updated":"2026-10-22T17:45:46.189Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434},{"id":"CVE-2026-101728","published":"2026-10-20T21:22:33.243Z","updated":"2026-10-22T17:45:54.535Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041},{"id":"CVE-2026-101727","published":"2026-10-20T21:22:32.865Z","updated":"2026-10-22T17:46:05.280Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454},{"id":"CVE-2026-101726","published":"2026-10-20T21:22:32.500Z","updated":"2026-10-22T17:46:13.161Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041},{"id":"CVE-2026-101725","published":"2026-10-20T21:22:32.126Z","updated":"2026-10-22T17:46:21.029Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041},{"id":"CVE-2026-101724","published":"2026-10-20T21:22:31.763Z","updated":"2026-10-22T17:46:27.551Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454},{"id":"CVE-2026-101723","published":"2026-10-20T21:22:31.400Z","updated":"2026-10-22T15:18:35.449Z","title":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Agile PLM MCAD Connector","kev":false,"epss":0.00125},{"id":"CVE-2026-101722","published":"2026-10-20T21:22:31.043Z","updated":"2026-10-22T17:46:33.803Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00301},{"id":"CVE-2026-101721","published":"2026-10-20T21:22:30.675Z","updated":"2026-10-22T17:46:40.260Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454},{"id":"CVE-2026-101720","published":"2026-10-20T21:22:30.309Z","updated":"2026-10-22T18:50:26.578Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00327},{"id":"CVE-2026-101719","published":"2026-10-20T21:22:29.948Z","updated":"2026-10-22T15:18:51.629Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00348},{"id":"CVE-2026-101718","published":"2026-10-20T21:22:29.600Z","updated":"2026-10-22T17:46:46.798Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00286},{"id":"CVE-2026-101717","published":"2026-10-20T21:22:29.230Z","updated":"2026-10-22T17:46:53.376Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00125},{"id":"CVE-2026-101716","published":"2026-10-20T21:22:28.884Z","updated":"2026-10-22T15:18:58.598Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00348},{"id":"CVE-2026-101715","published":"2026-10-20T21:22:28.532Z","updated":"2026-10-22T17:46:59.735Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00298},{"id":"CVE-2026-101714","published":"2026-10-20T21:22:28.154Z","updated":"2026-10-22T17:47:07.820Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00267},{"id":"CVE-2026-101713","published":"2026-10-20T21:22:27.794Z","updated":"2026-10-22T17:47:14.199Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00231},{"id":"CVE-2026-101712","published":"2026-10-20T21:22:27.430Z","updated":"2026-10-22T15:19:07.188Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00359},{"id":"CVE-2026-101711","published":"2026-10-20T21:22:27.045Z","updated":"2026-10-22T15:19:13.739Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Difficult…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00397},{"id":"CVE-2026-101710","published":"2026-10-20T21:22:26.696Z","updated":"2026-10-22T15:19:20.314Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00311},{"id":"CVE-2026-101709","published":"2026-10-20T21:22:26.334Z","updated":"2026-10-22T17:47:20.924Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00231},{"id":"CVE-2026-101708","published":"2026-10-20T21:22:25.846Z","updated":"2026-10-22T15:19:27.046Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00359},{"id":"CVE-2026-101707","published":"2026-10-20T21:22:25.498Z","updated":"2026-10-22T15:19:33.600Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0036},{"id":"CVE-2026-101706","published":"2026-10-20T21:22:25.131Z","updated":"2026-10-22T17:47:27.003Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00379},{"id":"CVE-2026-101705","published":"2026-10-20T21:22:24.755Z","updated":"2026-10-22T15:19:40.074Z","title":"Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Common Applications","kev":false,"epss":0.00344},{"id":"CVE-2026-101704","published":"2026-10-20T21:22:24.411Z","updated":"2026-10-27T03:55:42.385Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0019},{"id":"CVE-2026-101703","published":"2026-10-20T21:22:24.073Z","updated":"2026-10-22T15:19:53.384Z","title":"Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Pasta","kev":false,"epss":0.00335},{"id":"CVE-2026-101701","published":"2026-10-20T21:22:23.733Z","updated":"2026-10-22T17:47:33.013Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.00182},{"id":"CVE-2026-101700","published":"2026-10-20T21:22:23.388Z","updated":"2026-10-27T03:55:43.426Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00415},{"id":"CVE-2026-101699","published":"2026-10-20T21:22:22.998Z","updated":"2026-10-22T15:20:09.129Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00359},{"id":"CVE-2026-101698","published":"2026-10-20T21:22:22.621Z","updated":"2026-10-22T15:20:15.899Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00335},{"id":"CVE-2026-101697","published":"2026-10-20T21:22:22.251Z","updated":"2026-10-22T17:47:39.151Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00267},{"id":"CVE-2026-101696","published":"2026-10-20T21:22:21.894Z","updated":"2026-10-22T15:20:21.950Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00324},{"id":"CVE-2026-101695","published":"2026-10-20T21:22:21.535Z","updated":"2026-10-22T18:16:42.324Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00335},{"id":"CVE-2026-101694","published":"2026-10-20T21:22:21.145Z","updated":"2026-10-22T15:20:28.198Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00514},{"id":"CVE-2026-101692","published":"2026-10-20T21:22:20.760Z","updated":"2026-10-24T03:55:41.588Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00464},{"id":"CVE-2026-101690","published":"2026-10-20T21:22:20.409Z","updated":"2026-10-22T15:20:40.580Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00373},{"id":"CVE-2026-101689","published":"2026-10-20T21:22:20.052Z","updated":"2026-10-22T17:47:46.333Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00379},{"id":"CVE-2026-101688","published":"2026-10-20T21:22:19.697Z","updated":"2026-10-22T15:20:47.255Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00438},{"id":"CVE-2026-101687","published":"2026-10-20T21:22:19.340Z","updated":"2026-10-21T21:05:30.155Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00359},{"id":"CVE-2026-101686","published":"2026-10-20T21:22:18.952Z","updated":"2026-10-24T03:55:37.967Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00464},{"id":"CVE-2026-101685","published":"2026-10-20T21:22:18.598Z","updated":"2026-10-24T03:55:37.191Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00464},{"id":"CVE-2026-101684","published":"2026-10-20T21:22:18.238Z","updated":"2026-10-27T03:55:40.181Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00416},{"id":"CVE-2026-101683","published":"2026-10-20T21:22:17.862Z","updated":"2026-10-21T21:06:09.966Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00139},{"id":"CVE-2026-101682","published":"2026-10-20T21:22:17.500Z","updated":"2026-10-31T03:56:46.568Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00178},{"id":"CVE-2026-101681","published":"2026-10-20T21:22:17.124Z","updated":"2026-10-21T21:06:27.411Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00139},{"id":"CVE-2026-101680","published":"2026-10-20T21:22:16.761Z","updated":"2026-10-21T21:06:36.623Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00335},{"id":"CVE-2026-101679","published":"2026-10-20T21:22:16.417Z","updated":"2026-10-22T18:50:22.640Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00474},{"id":"CVE-2026-101678","published":"2026-10-20T21:22:16.065Z","updated":"2026-10-21T21:06:55.050Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00333},{"id":"CVE-2026-101677","published":"2026-10-20T21:22:15.711Z","updated":"2026-10-21T21:07:05.111Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00295},{"id":"CVE-2026-101676","published":"2026-10-20T21:22:15.254Z","updated":"2026-10-21T21:07:13.485Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.00171},{"id":"CVE-2026-101675","published":"2026-10-20T21:22:14.912Z","updated":"2026-10-21T21:07:22.700Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0019},{"id":"CVE-2026-101674","published":"2026-10-20T21:22:14.547Z","updated":"2026-10-21T21:07:31.825Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0019},{"id":"CVE-2026-101673","published":"2026-10-20T21:22:14.180Z","updated":"2026-10-21T21:07:40.526Z","title":"Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle US Federal Human Resources","kev":false,"epss":0.00363},{"id":"CVE-2026-101672","published":"2026-10-20T21:22:13.792Z","updated":"2026-10-27T03:55:54.378Z","title":"Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Call Center Technology","kev":false,"epss":0.00415},{"id":"CVE-2026-101671","published":"2026-10-20T21:22:13.441Z","updated":"2026-10-21T21:07:58.735Z","title":"Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Email Center","kev":false,"epss":0.00267},{"id":"CVE-2026-101670","published":"2026-10-20T21:22:13.062Z","updated":"2026-10-21T21:08:08.574Z","title":"Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Email Center","kev":false,"epss":0.00379},{"id":"CVE-2026-101669","published":"2026-10-20T21:22:12.697Z","updated":"2026-10-21T21:08:17.228Z","title":"Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Public Sector Human Resources","kev":false,"epss":0.00311},{"id":"CVE-2026-101668","published":"2026-10-20T21:22:12.330Z","updated":"2026-10-21T21:08:26.392Z","title":"Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Customer Care","kev":false,"epss":0.00267},{"id":"CVE-2026-101667","published":"2026-10-20T21:22:11.971Z","updated":"2026-10-21T18:31:44.165Z","title":"Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Trade Management","kev":false,"epss":0.00231},{"id":"CVE-2026-101666","published":"2026-10-20T21:22:11.522Z","updated":"2026-10-21T18:31:53.794Z","title":"Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Trade Management","kev":false,"epss":0.00231},{"id":"CVE-2026-101665","published":"2026-10-20T21:22:11.158Z","updated":"2026-10-27T03:55:56.580Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00389},{"id":"CVE-2026-101664","published":"2026-10-20T21:22:10.800Z","updated":"2026-10-24T03:55:44.025Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101662","published":"2026-10-20T21:22:10.440Z","updated":"2026-10-21T18:32:16.605Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00309},{"id":"CVE-2026-101661","published":"2026-10-20T21:22:10.072Z","updated":"2026-10-21T18:32:26.617Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036},{"id":"CVE-2026-101660","published":"2026-10-20T21:22:09.711Z","updated":"2026-10-21T21:08:35.006Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00438},{"id":"CVE-2026-101658","published":"2026-10-20T21:22:09.378Z","updated":"2026-10-21T18:32:36.597Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036},{"id":"CVE-2026-101656","published":"2026-10-20T21:22:09.041Z","updated":"2026-10-24T03:55:46.766Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101655","published":"2026-10-20T21:22:08.685Z","updated":"2026-10-24T03:55:43.221Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101654","published":"2026-10-20T21:22:08.305Z","updated":"2026-10-24T03:55:45.969Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101653","published":"2026-10-20T21:22:07.941Z","updated":"2026-10-24T03:55:44.826Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101651","published":"2026-10-20T21:22:07.581Z","updated":"2026-10-21T18:33:19.035Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00379},{"id":"CVE-2026-101650","published":"2026-10-20T21:22:07.227Z","updated":"2026-10-21T18:33:28.420Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00377},{"id":"CVE-2026-101649","published":"2026-10-20T21:22:06.775Z","updated":"2026-10-21T18:33:34.743Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00377},{"id":"CVE-2026-101648","published":"2026-10-20T21:22:06.411Z","updated":"2026-10-27T03:55:38.008Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00322},{"id":"CVE-2026-101647","published":"2026-10-20T21:22:06.031Z","updated":"2026-10-21T18:33:52.892Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00359},{"id":"CVE-2026-101646","published":"2026-10-20T21:22:05.669Z","updated":"2026-10-21T18:34:02.217Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00514},{"id":"CVE-2026-101645","published":"2026-10-20T21:22:05.287Z","updated":"2026-10-21T18:34:13.245Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00359},{"id":"CVE-2026-101644","published":"2026-10-20T21:22:04.926Z","updated":"2026-10-21T18:34:23.502Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0037},{"id":"CVE-2026-101643","published":"2026-10-20T21:22:04.580Z","updated":"2026-10-21T18:34:32.398Z","title":"Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Sales Online","kev":false,"epss":0.00309},{"id":"CVE-2026-101642","published":"2026-10-20T21:22:04.217Z","updated":"2026-10-21T18:34:41.747Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00405},{"id":"CVE-2026-101641","published":"2026-10-20T21:22:03.846Z","updated":"2026-10-21T18:34:51.893Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00345},{"id":"CVE-2026-101640","published":"2026-10-20T21:22:03.498Z","updated":"2026-10-21T21:08:43.179Z","title":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Marketing","kev":false,"epss":0.00373},{"id":"CVE-2026-101639","published":"2026-10-20T21:22:03.120Z","updated":"2026-10-21T18:35:00.887Z","title":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Marketing","kev":false,"epss":0.00231},{"id":"CVE-2026-101638","published":"2026-10-20T21:22:02.754Z","updated":"2026-10-21T18:35:13.371Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00166},{"id":"CVE-2026-101637","published":"2026-10-20T21:22:02.395Z","updated":"2026-10-21T18:35:19.920Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395},{"id":"CVE-2026-101636","published":"2026-10-20T21:22:02.042Z","updated":"2026-10-21T18:35:29.635Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036},{"id":"CVE-2026-101635","published":"2026-10-20T21:22:01.698Z","updated":"2026-10-24T03:55:42.408Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433},{"id":"CVE-2026-101634","published":"2026-10-20T21:22:01.321Z","updated":"2026-10-21T21:08:52.390Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00561},{"id":"CVE-2026-101633","published":"2026-10-20T21:22:00.960Z","updated":"2026-10-21T18:35:44.794Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00301},{"id":"CVE-2026-101632","published":"2026-10-20T21:22:00.511Z","updated":"2026-10-21T18:35:52.275Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00313},{"id":"CVE-2026-101631","published":"2026-10-20T21:22:00.141Z","updated":"2026-10-21T18:36:03.049Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00324},{"id":"CVE-2026-101630","published":"2026-10-20T21:21:59.786Z","updated":"2026-10-21T18:36:11.448Z","title":"Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Advanced Outbound Telephony","kev":false,"epss":0.00231},{"id":"CVE-2026-101629","published":"2026-10-20T21:21:59.423Z","updated":"2026-10-21T18:36:18.980Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00453},{"id":"CVE-2026-101628","published":"2026-10-20T21:21:59.063Z","updated":"2026-10-21T18:36:30.877Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). The supported version that is affected is 9.7.3. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.00409},{"id":"CVE-2026-101627","published":"2026-10-20T21:21:58.696Z","updated":"2026-10-21T18:36:37.529Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00308},{"id":"CVE-2026-101626","published":"2026-10-20T21:21:58.322Z","updated":"2026-10-21T18:36:46.984Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Difficult to…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00345},{"id":"CVE-2026-101625","published":"2026-10-20T21:21:57.967Z","updated":"2026-10-21T18:36:55.655Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00303},{"id":"CVE-2026-101624","published":"2026-10-20T21:21:57.598Z","updated":"2026-10-21T18:37:03.333Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00364},{"id":"CVE-2026-101623","published":"2026-10-20T21:21:57.216Z","updated":"2026-10-21T18:37:11.954Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434},{"id":"CVE-2026-101622","published":"2026-10-20T21:21:56.824Z","updated":"2026-10-21T18:37:18.391Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434},{"id":"CVE-2026-101621","published":"2026-10-20T21:21:56.450Z","updated":"2026-10-21T18:37:27.608Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434},{"id":"CVE-2026-101620","published":"2026-10-20T21:21:56.075Z","updated":"2026-10-21T18:37:33.559Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00468},{"id":"CVE-2026-101619","published":"2026-10-20T21:21:55.703Z","updated":"2026-10-21T18:37:42.358Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434},{"id":"CVE-2026-101618","published":"2026-10-20T21:21:55.329Z","updated":"2026-10-21T18:37:49.152Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00364},{"id":"CVE-2026-101617","published":"2026-10-20T21:21:54.961Z","updated":"2026-10-20T21:21:54.961Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0031},{"id":"CVE-2026-101616","published":"2026-10-20T21:21:54.588Z","updated":"2026-10-20T21:21:54.588Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394},{"id":"CVE-2026-101615","published":"2026-10-20T21:21:54.194Z","updated":"2026-10-20T21:21:54.194Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00145},{"id":"CVE-2026-101614","published":"2026-10-20T21:21:53.830Z","updated":"2026-10-20T21:21:53.830Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422},{"id":"CVE-2026-101613","published":"2026-10-20T21:21:53.447Z","updated":"2026-10-20T21:21:53.447Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422},{"id":"CVE-2026-101612","published":"2026-10-20T21:21:53.070Z","updated":"2026-10-20T21:21:53.070Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00113},{"id":"CVE-2026-101611","published":"2026-10-20T21:21:52.710Z","updated":"2026-10-20T21:21:52.710Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336},{"id":"CVE-2026-101610","published":"2026-10-20T21:21:52.353Z","updated":"2026-10-20T21:21:52.353Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422},{"id":"CVE-2026-101609","published":"2026-10-20T21:21:51.993Z","updated":"2026-10-20T21:21:51.993Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336},{"id":"CVE-2026-101608","published":"2026-10-20T21:21:51.626Z","updated":"2026-10-20T21:21:51.626Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394},{"id":"CVE-2026-101607","published":"2026-10-20T21:21:51.244Z","updated":"2026-10-20T21:21:51.244Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0031},{"id":"CVE-2026-101606","published":"2026-10-20T21:21:50.885Z","updated":"2026-10-20T21:21:50.885Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00269},{"id":"CVE-2026-101605","published":"2026-10-20T21:21:50.516Z","updated":"2026-10-20T21:21:50.516Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00316},{"id":"CVE-2026-101604","published":"2026-10-20T21:21:50.141Z","updated":"2026-10-20T21:21:50.141Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00398},{"id":"CVE-2026-101603","published":"2026-10-20T21:21:49.757Z","updated":"2026-10-20T21:21:49.757Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00345},{"id":"CVE-2026-101602","published":"2026-10-20T21:21:49.395Z","updated":"2026-10-20T21:21:49.395Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00359},{"id":"CVE-2026-101601","published":"2026-10-20T21:21:49.029Z","updated":"2026-10-20T21:21:49.029Z","title":"Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 21.3-21.23. Easily exploitable vulnerability…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00145},{"id":"CVE-2026-101600","published":"2026-10-20T21:21:48.687Z","updated":"2026-10-20T21:21:48.687Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00091},{"id":"CVE-2026-101599","published":"2026-10-20T21:21:48.305Z","updated":"2026-10-20T21:21:48.305Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Difficult to…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00118},{"id":"CVE-2026-101598","published":"2026-10-20T21:21:47.819Z","updated":"2026-10-20T21:21:47.819Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00152},{"id":"CVE-2026-101597","published":"2026-10-20T21:21:47.448Z","updated":"2026-10-20T21:21:47.448Z","title":"Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle ZFS Storage Appliance Kit","kev":false,"epss":0.0024},{"id":"CVE-2026-101596","published":"2026-10-20T21:21:47.023Z","updated":"2026-10-20T21:21:47.023Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00447},{"id":"CVE-2026-101595","published":"2026-10-20T21:21:46.674Z","updated":"2026-10-20T21:21:46.674Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain Relationship Mgmt). The…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00213},{"id":"CVE-2026-101594","published":"2026-10-20T21:21:46.312Z","updated":"2026-10-20T21:21:46.312Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00447},{"id":"CVE-2026-101593","published":"2026-10-20T21:21:45.940Z","updated":"2026-10-29T01:52:01.890Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0039},{"id":"CVE-2026-101592","published":"2026-10-20T21:21:45.580Z","updated":"2026-10-20T21:21:45.580Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00213},{"id":"CVE-2026-101591","published":"2026-10-20T21:21:45.208Z","updated":"2026-10-20T21:21:45.208Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00282},{"id":"CVE-2026-101590","published":"2026-10-20T21:21:44.842Z","updated":"2026-10-22T23:04:40.358Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0042},{"id":"CVE-2026-101589","published":"2026-10-20T21:21:44.471Z","updated":"2026-10-20T21:21:44.471Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00316},{"id":"CVE-2026-101588","published":"2026-10-20T21:21:43.977Z","updated":"2026-10-20T21:21:43.977Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316},{"id":"CVE-2026-101587","published":"2026-10-20T21:21:43.609Z","updated":"2026-10-22T18:50:24.185Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00429},{"id":"CVE-2026-101586","published":"2026-10-20T21:21:43.237Z","updated":"2026-10-20T21:21:43.237Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0024},{"id":"CVE-2026-101585","published":"2026-10-20T21:21:42.868Z","updated":"2026-10-20T21:21:42.868Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3.2.21. Easily…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00205},{"id":"CVE-2026-101584","published":"2026-10-20T21:21:42.483Z","updated":"2026-10-29T01:46:08.121Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affected are 4.0.0-4.5.5…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00271},{"id":"CVE-2026-101583","published":"2026-10-20T21:21:41.695Z","updated":"2026-10-29T01:52:02.060Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00227},{"id":"CVE-2026-101582","published":"2026-10-20T21:21:41.337Z","updated":"2026-10-20T21:21:41.337Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affected are 4.0.0-4.5.5.…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316},{"id":"CVE-2026-101581","published":"2026-10-20T21:21:40.964Z","updated":"2026-10-22T18:50:25.246Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00354},{"id":"CVE-2026-101580","published":"2026-10-20T21:21:40.596Z","updated":"2026-10-20T21:21:40.596Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316},{"id":"CVE-2026-101579","published":"2026-10-20T21:21:40.232Z","updated":"2026-10-20T21:21:40.232Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are 3.0.0-3.2.21.…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00269},{"id":"CVE-2026-101578","published":"2026-10-20T21:21:39.867Z","updated":"2026-10-20T21:21:39.867Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316},{"id":"CVE-2026-101577","published":"2026-10-20T21:21:39.523Z","updated":"2026-10-20T21:21:39.523Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00217},{"id":"CVE-2026-101576","published":"2026-10-20T21:21:39.180Z","updated":"2026-10-20T21:21:39.180Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00208},{"id":"CVE-2026-101575","published":"2026-10-20T21:21:38.789Z","updated":"2026-10-29T01:52:02.230Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00194},{"id":"CVE-2026-101574","published":"2026-10-20T21:21:38.419Z","updated":"2026-10-20T21:21:38.419Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00193},{"id":"CVE-2026-101573","published":"2026-10-20T21:21:38.050Z","updated":"2026-10-20T21:21:38.050Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00257},{"id":"CVE-2026-101572","published":"2026-10-20T21:21:37.685Z","updated":"2026-10-22T18:50:22.783Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0049},{"id":"CVE-2026-101571","published":"2026-10-20T21:21:37.323Z","updated":"2026-10-20T21:21:37.323Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00118},{"id":"CVE-2026-101570","published":"2026-10-20T21:21:36.913Z","updated":"2026-10-29T01:52:02.373Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.5.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00307},{"id":"CVE-2026-101569","published":"2026-10-20T21:21:36.553Z","updated":"2026-10-22T18:50:25.408Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0037},{"id":"CVE-2026-101568","published":"2026-10-20T21:21:36.178Z","updated":"2026-10-20T21:21:36.178Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0-3.2.21,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0024},{"id":"CVE-2026-101567","published":"2026-10-20T21:21:35.802Z","updated":"2026-10-29T10:45:50.048Z","title":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Cost Management","kev":false,"epss":0.00464},{"id":"CVE-2026-101566","published":"2026-10-20T21:21:35.439Z","updated":"2026-10-20T21:21:35.439Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00118},{"id":"CVE-2026-101565","published":"2026-10-20T21:21:35.064Z","updated":"2026-10-20T21:21:35.064Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). The supported version that is affected is 9.3.6. Easily exploitable…","severity":"MEDIUM","score":6.2,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00163},{"id":"CVE-2026-101564","published":"2026-10-20T21:21:34.696Z","updated":"2026-10-20T21:21:34.696Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Difficult to exploit…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00257},{"id":"CVE-2026-101562","published":"2026-10-20T21:21:34.341Z","updated":"2026-10-20T21:21:34.341Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00303},{"id":"CVE-2026-101560","published":"2026-10-20T21:21:33.955Z","updated":"2026-10-20T21:21:33.955Z","title":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). The supported version that is affected is 11.4.0.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Commerce Platform","kev":false,"epss":0.00296},{"id":"CVE-2026-101559","published":"2026-10-20T21:21:33.584Z","updated":"2026-10-20T21:21:33.584Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00355},{"id":"CVE-2026-101558","published":"2026-10-20T21:21:33.212Z","updated":"2026-10-20T21:21:33.212Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00238},{"id":"CVE-2026-101557","published":"2026-10-20T21:21:32.858Z","updated":"2026-10-29T10:45:50.194Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00464},{"id":"CVE-2026-101556","published":"2026-10-20T21:21:32.488Z","updated":"2026-10-20T21:21:32.488Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00289},{"id":"CVE-2026-101555","published":"2026-10-20T21:21:32.128Z","updated":"2026-10-20T21:21:32.128Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00289},{"id":"CVE-2026-101554","published":"2026-10-20T21:21:31.665Z","updated":"2026-10-20T21:21:31.665Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00289},{"id":"CVE-2026-101553","published":"2026-10-20T21:21:31.288Z","updated":"2026-10-20T21:21:31.288Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00238},{"id":"CVE-2026-101552","published":"2026-10-20T21:21:30.905Z","updated":"2026-10-20T21:21:30.905Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.0037},{"id":"CVE-2026-101551","published":"2026-10-20T21:21:30.543Z","updated":"2026-10-20T21:21:30.543Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00398},{"id":"CVE-2026-101549","published":"2026-10-20T21:21:30.190Z","updated":"2026-10-20T21:21:30.190Z","title":"Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Testing Suite","kev":false,"epss":0.00156},{"id":"CVE-2026-101548","published":"2026-10-20T21:21:29.818Z","updated":"2026-10-20T21:21:29.818Z","title":"Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Difficult to exploit…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Application Testing Suite","kev":false,"epss":0.00126},{"id":"CVE-2026-101547","published":"2026-10-20T21:21:29.448Z","updated":"2026-10-20T21:21:29.448Z","title":"Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Demand Planning","kev":false,"epss":0.00238},{"id":"CVE-2026-101546","published":"2026-10-20T21:21:29.092Z","updated":"2026-10-20T21:21:29.092Z","title":"Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Materials Requirement Planning","kev":false,"epss":0.0037},{"id":"CVE-2026-101545","published":"2026-10-20T21:21:28.723Z","updated":"2026-10-20T21:21:28.723Z","title":"Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Inventory Management","kev":false,"epss":0.00101},{"id":"CVE-2026-101544","published":"2026-10-20T21:21:28.373Z","updated":"2026-10-20T21:21:28.373Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00101},{"id":"CVE-2026-101543","published":"2026-10-20T21:21:27.996Z","updated":"2026-10-20T21:21:27.996Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00289},{"id":"CVE-2026-101542","published":"2026-10-20T21:21:27.631Z","updated":"2026-10-20T21:21:27.631Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00352},{"id":"CVE-2026-101541","published":"2026-10-20T21:21:27.266Z","updated":"2026-10-20T21:21:27.266Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00371},{"id":"CVE-2026-101540","published":"2026-10-20T21:21:26.904Z","updated":"2026-10-20T21:21:26.904Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00371},{"id":"CVE-2026-101539","published":"2026-10-20T21:21:26.531Z","updated":"2026-10-20T21:21:26.531Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00371},{"id":"CVE-2026-101538","published":"2026-10-20T21:21:26.181Z","updated":"2026-10-20T21:21:26.181Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355},{"id":"CVE-2026-101537","published":"2026-10-20T21:21:25.830Z","updated":"2026-10-21T11:05:29.753Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0042},{"id":"CVE-2026-101536","published":"2026-10-20T21:21:25.455Z","updated":"2026-10-20T21:21:25.455Z","title":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Cost Management","kev":false,"epss":0.0037},{"id":"CVE-2026-101535","published":"2026-10-20T21:21:25.079Z","updated":"2026-10-20T21:21:25.079Z","title":"Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Sales Foundation","kev":false,"epss":0.0037},{"id":"CVE-2026-101534","published":"2026-10-20T21:21:24.704Z","updated":"2026-10-20T21:21:24.704Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.0023},{"id":"CVE-2026-101533","published":"2026-10-20T21:21:24.345Z","updated":"2026-10-20T21:21:24.345Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00301},{"id":"CVE-2026-101532","published":"2026-10-20T21:21:23.451Z","updated":"2026-10-20T21:21:23.451Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00499},{"id":"CVE-2026-101531","published":"2026-10-20T21:21:23.096Z","updated":"2026-10-20T21:21:23.096Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00398},{"id":"CVE-2026-101529","published":"2026-10-20T21:21:22.741Z","updated":"2026-10-20T21:21:22.741Z","title":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","kev":false,"epss":0.00479},{"id":"CVE-2026-101528","published":"2026-10-20T21:21:22.382Z","updated":"2026-10-20T21:21:22.382Z","title":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","kev":false,"epss":0.00479},{"id":"CVE-2026-101527","published":"2026-10-20T21:21:22.015Z","updated":"2026-10-20T21:21:22.015Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00151},{"id":"CVE-2026-101526","published":"2026-10-20T21:21:21.665Z","updated":"2026-10-20T21:21:21.665Z","title":"Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Siebel","kev":false,"epss":0.00479},{"id":"CVE-2026-101525","published":"2026-10-20T21:21:21.294Z","updated":"2026-10-20T21:21:21.294Z","title":"Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Siebel","kev":false,"epss":0.00479},{"id":"CVE-2026-101524","published":"2026-10-20T21:21:20.930Z","updated":"2026-10-29T01:52:02.514Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported versions that are…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00194},{"id":"CVE-2026-101522","published":"2026-10-20T21:21:20.575Z","updated":"2026-10-20T21:21:20.575Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00152},{"id":"CVE-2026-101521","published":"2026-10-20T21:21:20.206Z","updated":"2026-10-22T23:04:37.962Z","title":"Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle APEX","kev":false,"epss":0.00576},{"id":"CVE-2026-101520","published":"2026-10-20T21:21:19.814Z","updated":"2026-10-22T18:50:22.927Z","title":"Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer). Supported…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Global Lifecycle Management NextGen OUI Framework","kev":false,"epss":0.00512},{"id":"CVE-2026-101519","published":"2026-10-20T21:21:19.442Z","updated":"2026-10-20T21:21:19.442Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00499},{"id":"CVE-2026-101518","published":"2026-10-20T21:21:19.072Z","updated":"2026-10-20T21:21:19.072Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.0048},{"id":"CVE-2026-101517","published":"2026-10-20T21:21:18.699Z","updated":"2026-10-20T21:21:18.699Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00152},{"id":"CVE-2026-101516","published":"2026-10-20T21:21:18.319Z","updated":"2026-10-20T21:21:18.319Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00281},{"id":"CVE-2026-101515","published":"2026-10-20T21:21:17.925Z","updated":"2026-10-20T21:21:17.925Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00332},{"id":"CVE-2026-101513","published":"2026-10-20T21:21:17.571Z","updated":"2026-10-20T21:21:17.571Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.0017},{"id":"CVE-2026-101512","published":"2026-10-20T21:21:17.221Z","updated":"2026-10-20T21:21:17.221Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00371},{"id":"CVE-2026-101511","published":"2026-10-20T21:21:16.670Z","updated":"2026-10-20T21:21:16.670Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00295},{"id":"CVE-2026-101510","published":"2026-10-20T21:21:16.286Z","updated":"2026-10-20T21:21:16.286Z","title":"Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"Oracle Net Services","kev":false,"epss":0.00151},{"id":"CVE-2026-101508","published":"2026-10-20T21:21:15.934Z","updated":"2026-10-22T18:50:23.096Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00513},{"id":"CVE-2026-101507","published":"2026-10-20T21:21:15.567Z","updated":"2026-10-20T21:21:15.567Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00371},{"id":"CVE-2026-101506","published":"2026-10-20T21:21:15.215Z","updated":"2026-10-20T21:21:15.215Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00371},{"id":"CVE-2026-101505","published":"2026-10-20T21:21:14.841Z","updated":"2026-10-20T21:21:14.841Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00353},{"id":"CVE-2026-101504","published":"2026-10-20T21:21:14.496Z","updated":"2026-10-20T21:21:14.496Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00284},{"id":"CVE-2026-101503","published":"2026-10-20T21:21:14.136Z","updated":"2026-10-20T21:21:14.136Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00479},{"id":"CVE-2026-101502","published":"2026-10-20T21:21:13.766Z","updated":"2026-10-29T01:52:02.679Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00108},{"id":"CVE-2026-101501","published":"2026-10-20T21:21:13.412Z","updated":"2026-10-20T21:21:13.412Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00411},{"id":"CVE-2026-101500","published":"2026-10-20T21:21:13.040Z","updated":"2026-10-23T11:06:20.281Z","title":"Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Global Lifecycle Management OPatchAuto","kev":false,"epss":0.00183},{"id":"CVE-2026-101499","published":"2026-10-20T21:21:12.682Z","updated":"2026-10-21T11:05:30.030Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.00538},{"id":"CVE-2026-101498","published":"2026-10-20T21:21:12.319Z","updated":"2026-10-20T21:21:12.319Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00404},{"id":"CVE-2026-101497","published":"2026-10-20T21:21:11.963Z","updated":"2026-10-29T01:52:02.829Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.0037},{"id":"CVE-2026-101495","published":"2026-10-20T21:21:11.596Z","updated":"2026-10-20T21:21:11.596Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00428},{"id":"CVE-2026-101494","published":"2026-10-20T21:21:11.235Z","updated":"2026-10-20T21:21:11.235Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00371},{"id":"CVE-2026-101493","published":"2026-10-20T21:21:10.805Z","updated":"2026-10-20T21:21:10.805Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00251},{"id":"CVE-2026-101492","published":"2026-10-20T21:21:10.467Z","updated":"2026-10-20T21:21:10.467Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00207},{"id":"CVE-2026-101491","published":"2026-10-20T21:21:10.110Z","updated":"2026-10-20T21:21:10.110Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00272},{"id":"CVE-2026-101490","published":"2026-10-20T21:21:09.760Z","updated":"2026-10-20T21:21:09.760Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00245},{"id":"CVE-2026-101489","published":"2026-10-20T21:21:09.406Z","updated":"2026-10-20T21:21:09.406Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00272},{"id":"CVE-2026-101488","published":"2026-10-20T21:21:09.041Z","updated":"2026-10-29T01:45:51.039Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00361},{"id":"CVE-2026-101487","published":"2026-10-20T21:21:08.670Z","updated":"2026-10-20T21:21:08.670Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00208},{"id":"CVE-2026-101486","published":"2026-10-20T21:21:08.322Z","updated":"2026-10-20T21:21:08.322Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00208},{"id":"CVE-2026-101485","published":"2026-10-20T21:21:07.965Z","updated":"2026-10-20T21:21:07.965Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00152},{"id":"CVE-2026-101484","published":"2026-10-20T21:21:07.600Z","updated":"2026-10-22T23:04:39.560Z","title":"Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00537},{"id":"CVE-2026-101483","published":"2026-10-20T21:21:07.237Z","updated":"2026-10-20T21:21:07.237Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00141},{"id":"CVE-2026-101482","published":"2026-10-20T21:21:06.887Z","updated":"2026-10-23T11:06:19.802Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00171},{"id":"CVE-2026-101481","published":"2026-10-20T21:21:06.523Z","updated":"2026-10-23T11:06:19.962Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00171},{"id":"CVE-2026-101480","published":"2026-10-20T21:21:06.164Z","updated":"2026-10-20T21:21:06.164Z","title":"Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.0033},{"id":"CVE-2026-101479","published":"2026-10-20T21:21:05.807Z","updated":"2026-10-20T21:21:05.807Z","title":"Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.0046},{"id":"CVE-2026-101478","published":"2026-10-20T21:21:05.428Z","updated":"2026-10-20T21:21:05.428Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00162},{"id":"CVE-2026-101477","published":"2026-10-20T21:21:05.055Z","updated":"2026-10-20T21:21:05.055Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00162},{"id":"CVE-2026-101476","published":"2026-10-20T21:21:04.668Z","updated":"2026-10-20T21:21:04.668Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.0028},{"id":"CVE-2026-101475","published":"2026-10-20T21:21:04.306Z","updated":"2026-10-20T21:21:04.306Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00371},{"id":"CVE-2026-101474","published":"2026-10-20T21:21:03.932Z","updated":"2026-10-29T01:52:02.969Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00307},{"id":"CVE-2026-101473","published":"2026-10-20T21:21:03.567Z","updated":"2026-10-20T21:21:03.567Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00376},{"id":"CVE-2026-101472","published":"2026-10-20T21:21:03.177Z","updated":"2026-10-20T21:21:03.177Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00145},{"id":"CVE-2026-101471","published":"2026-10-20T21:21:02.799Z","updated":"2026-10-29T01:52:03.233Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00145},{"id":"CVE-2026-101470","published":"2026-10-20T21:21:02.403Z","updated":"2026-10-20T21:21:02.403Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00156},{"id":"CVE-2026-101469","published":"2026-10-20T21:21:02.023Z","updated":"2026-10-21T18:01:05.098Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00349},{"id":"CVE-2026-101468","published":"2026-10-20T21:21:01.663Z","updated":"2026-10-21T18:09:35.227Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00443},{"id":"CVE-2026-101467","published":"2026-10-20T21:21:01.286Z","updated":"2026-10-21T17:34:09.616Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00336},{"id":"CVE-2026-101466","published":"2026-10-20T21:21:00.924Z","updated":"2026-10-21T18:34:11.662Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00479},{"id":"CVE-2026-101465","published":"2026-10-20T21:21:00.570Z","updated":"2026-10-21T18:36:37.900Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00128},{"id":"CVE-2026-101464","published":"2026-10-20T21:21:00.212Z","updated":"2026-10-21T18:40:51.690Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00158},{"id":"CVE-2026-101463","published":"2026-10-20T21:20:59.750Z","updated":"2026-10-21T17:40:12.244Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.0042},{"id":"CVE-2026-101462","published":"2026-10-20T21:20:59.384Z","updated":"2026-10-21T18:04:37.417Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00158},{"id":"CVE-2026-101461","published":"2026-10-20T21:20:59.017Z","updated":"2026-10-21T17:52:54.052Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00443},{"id":"CVE-2026-101460","published":"2026-10-20T21:20:58.662Z","updated":"2026-10-21T17:50:27.377Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.0042},{"id":"CVE-2026-101459","published":"2026-10-20T21:20:58.309Z","updated":"2026-10-29T01:52:03.549Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00391},{"id":"CVE-2026-101458","published":"2026-10-20T21:20:57.959Z","updated":"2026-10-20T21:20:57.959Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00339},{"id":"CVE-2026-101457","published":"2026-10-20T21:20:57.594Z","updated":"2026-10-20T21:20:57.594Z","title":"Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel Apps - Life Sciences","kev":false,"epss":0.00459},{"id":"CVE-2026-101456","published":"2026-10-20T21:20:57.232Z","updated":"2026-10-20T21:20:57.232Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00156},{"id":"CVE-2026-101455","published":"2026-10-20T21:20:56.773Z","updated":"2026-10-20T21:20:56.773Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.0013},{"id":"CVE-2026-101454","published":"2026-10-20T21:20:56.423Z","updated":"2026-10-20T21:20:56.423Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00145},{"id":"CVE-2026-101453","published":"2026-10-20T21:20:55.933Z","updated":"2026-10-20T21:20:55.933Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00158},{"id":"CVE-2026-101452","published":"2026-10-20T21:20:55.591Z","updated":"2026-10-20T21:20:55.591Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). Supported versions that are affected are 26.3-26.8. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00151},{"id":"CVE-2026-101451","published":"2026-10-20T21:20:55.232Z","updated":"2026-10-20T21:20:55.232Z","title":"Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Siebel Life Sciences","kev":false,"epss":0.00324},{"id":"CVE-2026-101450","published":"2026-10-20T21:20:54.874Z","updated":"2026-10-20T21:20:54.874Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00299},{"id":"CVE-2026-101449","published":"2026-10-20T21:20:54.474Z","updated":"2026-10-20T21:20:54.474Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are…","severity":"LOW","score":2.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00189},{"id":"CVE-2026-101448","published":"2026-10-20T21:20:54.134Z","updated":"2026-10-20T21:20:54.134Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00316},{"id":"CVE-2026-101447","published":"2026-10-20T21:20:53.799Z","updated":"2026-10-20T21:20:53.799Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.12-26.9. Difficult…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00285},{"id":"CVE-2026-101446","published":"2026-10-20T21:20:53.472Z","updated":"2026-10-20T21:20:53.472Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00447},{"id":"CVE-2026-101445","published":"2026-10-20T21:20:53.128Z","updated":"2026-10-20T21:20:53.128Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00116},{"id":"CVE-2026-101444","published":"2026-10-20T21:20:52.790Z","updated":"2026-10-20T21:20:52.790Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00152},{"id":"CVE-2026-101443","published":"2026-10-20T21:20:52.449Z","updated":"2026-10-20T21:20:52.449Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00355},{"id":"CVE-2026-101442","published":"2026-10-20T21:20:52.112Z","updated":"2026-10-20T21:20:52.112Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.0023},{"id":"CVE-2026-101441","published":"2026-10-20T21:20:51.766Z","updated":"2026-10-20T21:20:51.766Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00213},{"id":"CVE-2026-101440","published":"2026-10-20T21:20:51.421Z","updated":"2026-10-20T21:20:51.421Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00208},{"id":"CVE-2026-101439","published":"2026-10-20T21:20:51.097Z","updated":"2026-10-20T21:20:51.097Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00318},{"id":"CVE-2026-101438","published":"2026-10-20T21:20:50.764Z","updated":"2026-10-20T21:20:50.764Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00183},{"id":"CVE-2026-101437","published":"2026-10-20T21:20:50.417Z","updated":"2026-10-20T21:20:50.417Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00247},{"id":"CVE-2026-101436","published":"2026-10-20T21:20:50.069Z","updated":"2026-10-20T21:20:50.069Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00126},{"id":"CVE-2026-101435","published":"2026-10-20T21:20:49.709Z","updated":"2026-10-20T21:20:49.709Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00136},{"id":"CVE-2026-101434","published":"2026-10-20T21:20:49.260Z","updated":"2026-10-20T21:20:49.260Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00264},{"id":"CVE-2026-101433","published":"2026-10-20T21:20:48.921Z","updated":"2026-10-20T21:20:48.921Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00306},{"id":"CVE-2026-101432","published":"2026-10-20T21:20:48.584Z","updated":"2026-10-29T01:52:03.840Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00144},{"id":"CVE-2026-101431","published":"2026-10-20T21:20:48.237Z","updated":"2026-10-30T20:01:16.298Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00321},{"id":"CVE-2026-101430","published":"2026-10-20T21:20:47.902Z","updated":"2026-10-20T21:20:47.902Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":6.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00174},{"id":"CVE-2026-101429","published":"2026-10-20T21:20:47.573Z","updated":"2026-10-27T03:55:53.299Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00138},{"id":"CVE-2026-101428","published":"2026-10-20T21:20:47.219Z","updated":"2026-10-27T03:55:58.952Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00311},{"id":"CVE-2026-101427","published":"2026-10-20T21:20:46.835Z","updated":"2026-10-20T21:20:46.835Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00343},{"id":"CVE-2026-101426","published":"2026-10-20T21:20:46.490Z","updated":"2026-10-20T21:20:46.490Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00116},{"id":"CVE-2026-101425","published":"2026-10-20T21:20:46.148Z","updated":"2026-10-20T21:20:46.148Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00113},{"id":"CVE-2026-101424","published":"2026-10-20T21:20:45.800Z","updated":"2026-10-20T21:20:45.800Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00304},{"id":"CVE-2026-101423","published":"2026-10-20T21:20:45.463Z","updated":"2026-10-20T21:20:45.463Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0026},{"id":"CVE-2026-101422","published":"2026-10-20T21:20:45.109Z","updated":"2026-10-20T21:20:45.109Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00404},{"id":"CVE-2026-101421","published":"2026-10-20T21:20:44.757Z","updated":"2026-10-20T21:20:44.757Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00396},{"id":"CVE-2026-101420","published":"2026-10-20T21:20:44.411Z","updated":"2026-10-23T03:55:31.791Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00375},{"id":"CVE-2026-101419","published":"2026-10-20T21:20:44.012Z","updated":"2026-10-20T21:20:44.012Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00355},{"id":"CVE-2026-101418","published":"2026-10-20T21:20:43.665Z","updated":"2026-10-20T21:20:43.665Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00355},{"id":"CVE-2026-101417","published":"2026-10-20T21:20:43.287Z","updated":"2026-10-20T21:20:43.287Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00258},{"id":"CVE-2026-101416","published":"2026-10-20T21:20:42.932Z","updated":"2026-10-23T03:55:36.492Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00313},{"id":"CVE-2026-101415","published":"2026-10-20T21:20:42.568Z","updated":"2026-10-29T01:52:04.213Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00282},{"id":"CVE-2026-101414","published":"2026-10-20T21:20:42.207Z","updated":"2026-10-20T21:20:42.207Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00124},{"id":"CVE-2026-101413","published":"2026-10-20T21:20:41.857Z","updated":"2026-10-20T21:20:41.857Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00314},{"id":"CVE-2026-101412","published":"2026-10-20T21:20:41.527Z","updated":"2026-10-29T01:52:04.550Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00128},{"id":"CVE-2026-101411","published":"2026-10-20T21:20:41.167Z","updated":"2026-10-23T03:55:34.951Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00407},{"id":"CVE-2026-101410","published":"2026-10-20T21:20:40.696Z","updated":"2026-10-30T20:01:08.716Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00335},{"id":"CVE-2026-101409","published":"2026-10-20T21:20:40.327Z","updated":"2026-10-20T21:20:40.327Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00398},{"id":"CVE-2026-101408","published":"2026-10-20T21:20:39.962Z","updated":"2026-10-20T21:20:39.962Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00238},{"id":"CVE-2026-101407","published":"2026-10-20T21:20:39.582Z","updated":"2026-10-29T01:52:04.844Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported versions that are affected…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00407},{"id":"CVE-2026-101406","published":"2026-10-20T21:20:38.968Z","updated":"2026-10-20T21:20:38.968Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00258},{"id":"CVE-2026-101405","published":"2026-10-20T21:20:38.631Z","updated":"2026-10-20T21:20:38.631Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.0022},{"id":"CVE-2026-101404","published":"2026-10-20T21:20:38.260Z","updated":"2026-10-23T02:20:41.848Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00133},{"id":"CVE-2026-101403","published":"2026-10-20T21:20:37.920Z","updated":"2026-10-23T02:19:21.910Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00253},{"id":"CVE-2026-101402","published":"2026-10-20T21:20:37.572Z","updated":"2026-10-23T02:18:10.767Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00342},{"id":"CVE-2026-101401","published":"2026-10-20T21:20:37.244Z","updated":"2026-10-23T02:16:32.267Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00153},{"id":"CVE-2026-101400","published":"2026-10-20T21:20:36.876Z","updated":"2026-10-23T02:17:28.730Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00153},{"id":"CVE-2026-101399","published":"2026-10-20T21:20:36.540Z","updated":"2026-10-22T18:50:24.342Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00429},{"id":"CVE-2026-101398","published":"2026-10-20T21:20:36.203Z","updated":"2026-10-23T02:14:01.302Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.0033},{"id":"CVE-2026-101397","published":"2026-10-20T21:20:35.857Z","updated":"2026-10-23T02:12:47.313Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.2,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00275},{"id":"CVE-2026-101396","published":"2026-10-20T21:20:35.513Z","updated":"2026-10-21T13:54:49.520Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00121},{"id":"CVE-2026-101395","published":"2026-10-20T21:20:35.184Z","updated":"2026-10-21T13:53:49.263Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00251},{"id":"CVE-2026-101394","published":"2026-10-20T21:20:34.838Z","updated":"2026-10-22T18:50:26.733Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00314},{"id":"CVE-2026-101393","published":"2026-10-20T21:20:34.501Z","updated":"2026-10-21T13:52:05.010Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00149},{"id":"CVE-2026-101392","published":"2026-10-20T21:20:34.141Z","updated":"2026-10-21T13:51:08.596Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00172},{"id":"CVE-2026-101391","published":"2026-10-20T21:20:33.794Z","updated":"2026-10-21T13:49:36.383Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00251},{"id":"CVE-2026-101390","published":"2026-10-20T21:20:33.449Z","updated":"2026-10-23T03:55:34.159Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00407},{"id":"CVE-2026-101389","published":"2026-10-20T21:20:33.087Z","updated":"2026-10-21T13:48:03.046Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00399},{"id":"CVE-2026-101388","published":"2026-10-20T21:20:32.746Z","updated":"2026-10-27T11:16:45.211Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0036},{"id":"CVE-2026-101387","published":"2026-10-20T21:20:32.412Z","updated":"2026-10-27T11:14:47.325Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00297},{"id":"CVE-2026-101386","published":"2026-10-20T21:20:32.049Z","updated":"2026-10-27T11:13:45.734Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018},{"id":"CVE-2026-101385","published":"2026-10-20T21:20:31.715Z","updated":"2026-10-27T11:12:48.167Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00309},{"id":"CVE-2026-101384","published":"2026-10-20T21:20:31.356Z","updated":"2026-10-27T11:54:01.146Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00282},{"id":"CVE-2026-101383","published":"2026-10-20T21:20:30.993Z","updated":"2026-10-27T11:11:59.793Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00226},{"id":"CVE-2026-101382","published":"2026-10-20T21:20:30.652Z","updated":"2026-10-27T11:10:06.559Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018},{"id":"CVE-2026-101381","published":"2026-10-20T21:20:30.206Z","updated":"2026-10-27T11:08:19.568Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0022},{"id":"CVE-2026-101380","published":"2026-10-20T21:20:29.851Z","updated":"2026-10-21T18:37:55.173Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00217},{"id":"CVE-2026-101379","published":"2026-10-20T21:20:29.477Z","updated":"2026-10-21T21:09:01.400Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00333},{"id":"CVE-2026-101378","published":"2026-10-20T21:20:29.140Z","updated":"2026-10-21T18:38:04.676Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00271},{"id":"CVE-2026-101377","published":"2026-10-20T21:20:28.816Z","updated":"2026-10-21T18:38:11.949Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00389},{"id":"CVE-2026-101376","published":"2026-10-20T21:20:28.482Z","updated":"2026-10-21T18:38:18.997Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00307},{"id":"CVE-2026-101375","published":"2026-10-20T21:20:28.109Z","updated":"2026-10-21T18:38:27.317Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00277},{"id":"CVE-2026-101374","published":"2026-10-20T21:20:27.759Z","updated":"2026-10-21T18:38:32.721Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00296},{"id":"CVE-2026-101373","published":"2026-10-20T21:20:27.422Z","updated":"2026-10-21T18:38:41.856Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"LOW","score":2.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00265},{"id":"CVE-2026-101372","published":"2026-10-20T21:20:27.001Z","updated":"2026-10-20T21:20:27.001Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00258},{"id":"CVE-2026-101371","published":"2026-10-20T21:20:26.650Z","updated":"2026-10-20T21:20:26.650Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00186},{"id":"CVE-2026-101370","published":"2026-10-20T21:20:26.284Z","updated":"2026-10-20T21:20:26.284Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00228},{"id":"CVE-2026-101369","published":"2026-10-20T21:20:25.947Z","updated":"2026-10-20T21:20:25.947Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00238},{"id":"CVE-2026-101368","published":"2026-10-20T21:20:25.617Z","updated":"2026-10-20T21:20:25.617Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00238},{"id":"CVE-2026-101367","published":"2026-10-20T21:20:25.272Z","updated":"2026-10-20T21:20:25.272Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0024},{"id":"CVE-2026-101366","published":"2026-10-20T21:20:24.932Z","updated":"2026-10-20T21:20:24.932Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00282},{"id":"CVE-2026-101365","published":"2026-10-20T21:20:24.580Z","updated":"2026-10-29T01:52:05.123Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00291},{"id":"CVE-2026-101364","published":"2026-10-20T21:20:24.238Z","updated":"2026-10-30T18:39:24.564Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00195},{"id":"CVE-2026-101363","published":"2026-10-20T21:20:23.887Z","updated":"2026-10-30T18:39:32.938Z","title":"Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00299},{"id":"CVE-2026-101362","published":"2026-10-20T21:20:23.558Z","updated":"2026-10-30T18:39:40.939Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00216},{"id":"CVE-2026-101361","published":"2026-10-20T21:20:23.215Z","updated":"2026-10-30T18:39:50.501Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018},{"id":"CVE-2026-101360","published":"2026-10-20T21:20:22.858Z","updated":"2026-10-30T18:39:59.176Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0022},{"id":"CVE-2026-101359","published":"2026-10-20T21:20:07.446Z","updated":"2026-10-22T18:50:26.890Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00313},{"id":"CVE-2026-113729","published":"2026-10-20T21:17:55.865Z","updated":"2026-10-27T11:07:28.251Z","title":"Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization","severity":"HIGH","score":7.5,"vendor":"moov-io","product":"signedxml","kev":false,"epss":0.00459},{"id":"CVE-2026-113728","published":"2026-10-20T21:12:38.182Z","updated":"2026-10-27T13:28:01.863Z","title":"Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpoint","severity":"HIGH","score":7.5,"vendor":"bulwarkmail","product":"webmail","kev":false,"epss":0.00507},{"id":"CVE-2026-113727","published":"2026-10-20T21:08:37.372Z","updated":"2026-10-23T02:10:59.280Z","title":"OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs","severity":"HIGH","score":7.4,"vendor":"openchoreo","product":"openchoreo","kev":false,"epss":0.00465},{"id":"CVE-2026-113812","published":"2026-10-20T21:07:44.114Z","updated":"2026-10-30T12:43:04.865Z","title":"Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Mozilla-CA","kev":false,"epss":0.00339},{"id":"CVE-2026-113274","published":"2026-10-20T21:02:54.162Z","updated":"2026-10-21T03:56:30.822Z","title":"Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00434},{"id":"CVE-2026-113039","published":"2026-10-20T21:02:53.953Z","updated":"2026-10-21T03:56:31.905Z","title":"Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113125","published":"2026-10-20T21:02:53.762Z","updated":"2026-10-21T03:57:32.610Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113013","published":"2026-10-20T21:02:53.564Z","updated":"2026-10-21T03:57:33.744Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113088","published":"2026-10-20T21:02:53.354Z","updated":"2026-10-21T03:57:34.773Z","title":"Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113083","published":"2026-10-20T21:02:53.158Z","updated":"2026-10-21T03:57:35.664Z","title":"Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00412},{"id":"CVE-2026-113286","published":"2026-10-20T21:02:52.962Z","updated":"2026-10-21T03:57:36.463Z","title":"Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113227","published":"2026-10-20T21:02:52.772Z","updated":"2026-10-21T03:56:33.055Z","title":"Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113122","published":"2026-10-20T21:02:52.549Z","updated":"2026-10-21T15:17:37.519Z","title":"Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-112996","published":"2026-10-20T21:02:52.354Z","updated":"2026-10-21T03:57:37.680Z","title":"Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113294","published":"2026-10-20T21:02:52.181Z","updated":"2026-10-21T03:58:27.904Z","title":"Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113130","published":"2026-10-20T21:02:51.975Z","updated":"2026-10-20T22:49:58.164Z","title":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113074","published":"2026-10-20T21:02:51.781Z","updated":"2026-10-20T22:49:58.311Z","title":"Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113067","published":"2026-10-20T21:02:51.580Z","updated":"2026-10-20T22:49:58.444Z","title":"Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113046","published":"2026-10-20T21:02:51.387Z","updated":"2026-10-21T03:58:29.045Z","title":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113182","published":"2026-10-20T21:02:51.188Z","updated":"2026-10-21T03:57:39.284Z","title":"Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113331","published":"2026-10-20T21:02:50.974Z","updated":"2026-10-22T23:04:43.619Z","title":"Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113237","published":"2026-10-20T21:02:50.786Z","updated":"2026-10-21T15:37:58.582Z","title":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113314","published":"2026-10-20T21:02:50.599Z","updated":"2026-10-20T22:49:58.989Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-112994","published":"2026-10-20T21:02:50.344Z","updated":"2026-10-23T12:50:59.676Z","title":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00514},{"id":"CVE-2026-113063","published":"2026-10-20T21:02:50.162Z","updated":"2026-10-21T03:58:30.151Z","title":"Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113254","published":"2026-10-20T21:02:49.956Z","updated":"2026-10-20T22:49:59.421Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00434},{"id":"CVE-2026-113169","published":"2026-10-20T21:02:49.754Z","updated":"2026-10-22T23:03:58.192Z","title":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113132","published":"2026-10-20T21:02:49.552Z","updated":"2026-10-20T22:49:59.554Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113287","published":"2026-10-20T21:02:49.366Z","updated":"2026-10-20T22:49:59.693Z","title":"Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113121","published":"2026-10-20T21:02:49.169Z","updated":"2026-10-20T22:49:59.827Z","title":"Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00412},{"id":"CVE-2026-113066","published":"2026-10-20T21:02:48.798Z","updated":"2026-10-21T15:37:58.720Z","title":"Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113107","published":"2026-10-20T21:02:48.627Z","updated":"2026-10-20T22:49:59.966Z","title":"Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113085","published":"2026-10-20T21:02:48.434Z","updated":"2026-10-20T22:50:00.191Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378},{"id":"CVE-2026-113288","published":"2026-10-20T21:02:48.244Z","updated":"2026-10-20T22:50:00.349Z","title":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113248","published":"2026-10-20T21:02:48.062Z","updated":"2026-10-20T22:50:00.502Z","title":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113061","published":"2026-10-20T21:02:47.870Z","updated":"2026-10-20T22:50:00.640Z","title":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113313","published":"2026-10-20T21:02:47.686Z","updated":"2026-10-21T03:57:38.495Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113038","published":"2026-10-20T21:02:47.504Z","updated":"2026-10-21T15:17:37.660Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113268","published":"2026-10-20T21:02:47.299Z","updated":"2026-10-21T03:57:40.103Z","title":"Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00434},{"id":"CVE-2026-113036","published":"2026-10-20T21:02:47.109Z","updated":"2026-10-21T03:57:41.244Z","title":"Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378},{"id":"CVE-2026-113269","published":"2026-10-20T21:02:46.910Z","updated":"2026-10-21T03:57:42.425Z","title":"Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00549},{"id":"CVE-2026-113260","published":"2026-10-20T21:02:46.692Z","updated":"2026-10-21T03:57:43.517Z","title":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113173","published":"2026-10-20T21:02:46.499Z","updated":"2026-10-21T03:58:31.286Z","title":"Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113047","published":"2026-10-20T21:02:46.295Z","updated":"2026-10-21T15:17:37.812Z","title":"Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113116","published":"2026-10-20T21:02:46.081Z","updated":"2026-10-22T23:04:11.502Z","title":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113156","published":"2026-10-20T21:02:45.885Z","updated":"2026-10-21T03:56:34.193Z","title":"Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113292","published":"2026-10-20T21:02:45.689Z","updated":"2026-10-21T03:58:32.464Z","title":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113145","published":"2026-10-20T21:02:45.500Z","updated":"2026-10-21T03:57:44.622Z","title":"Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113021","published":"2026-10-20T21:02:45.301Z","updated":"2026-10-21T03:56:35.263Z","title":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00572},{"id":"CVE-2026-112998","published":"2026-10-20T21:02:45.112Z","updated":"2026-10-21T03:57:46.022Z","title":"Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113017","published":"2026-10-20T21:02:44.920Z","updated":"2026-10-21T03:56:36.043Z","title":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113184","published":"2026-10-20T21:02:44.733Z","updated":"2026-10-21T03:57:47.165Z","title":"Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113140","published":"2026-10-20T21:02:44.549Z","updated":"2026-10-21T03:56:36.816Z","title":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113180","published":"2026-10-20T21:02:44.361Z","updated":"2026-10-21T03:57:48.424Z","title":"Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113186","published":"2026-10-20T21:02:44.158Z","updated":"2026-10-22T23:03:58.941Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-113080","published":"2026-10-20T21:02:43.965Z","updated":"2026-10-21T03:56:37.608Z","title":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00539},{"id":"CVE-2026-113025","published":"2026-10-20T21:02:43.771Z","updated":"2026-10-21T03:56:38.386Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113024","published":"2026-10-20T21:02:43.582Z","updated":"2026-10-21T03:56:39.139Z","title":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113299","published":"2026-10-20T21:02:43.376Z","updated":"2026-10-21T03:57:49.210Z","title":"Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113245","published":"2026-10-20T21:02:43.194Z","updated":"2026-10-21T03:57:49.976Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113306","published":"2026-10-20T21:02:42.996Z","updated":"2026-10-21T03:58:33.597Z","title":"Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00452},{"id":"CVE-2026-113296","published":"2026-10-20T21:02:42.805Z","updated":"2026-10-21T15:17:37.963Z","title":"Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113029","published":"2026-10-20T21:02:42.621Z","updated":"2026-10-21T03:58:26.805Z","title":"Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00389},{"id":"CVE-2026-113152","published":"2026-10-20T21:02:42.435Z","updated":"2026-10-20T23:00:13.121Z","title":"Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113226","published":"2026-10-20T21:02:42.241Z","updated":"2026-10-20T23:00:13.270Z","title":"Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113330","published":"2026-10-20T21:02:41.782Z","updated":"2026-10-20T23:00:13.415Z","title":"Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113023","published":"2026-10-20T21:02:41.565Z","updated":"2026-10-22T23:04:21.886Z","title":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113247","published":"2026-10-20T21:02:41.382Z","updated":"2026-10-20T23:00:13.561Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113048","published":"2026-10-20T21:02:41.192Z","updated":"2026-10-20T23:00:13.703Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113244","published":"2026-10-20T21:02:40.991Z","updated":"2026-10-21T03:58:34.423Z","title":"Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113241","published":"2026-10-20T21:02:40.811Z","updated":"2026-10-20T23:00:13.982Z","title":"Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00426},{"id":"CVE-2026-113291","published":"2026-10-20T21:02:40.615Z","updated":"2026-10-20T23:00:14.117Z","title":"Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113223","published":"2026-10-20T21:02:40.432Z","updated":"2026-10-21T15:17:38.111Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113167","published":"2026-10-20T21:02:40.239Z","updated":"2026-10-20T23:00:14.251Z","title":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113213","published":"2026-10-20T21:02:40.056Z","updated":"2026-10-20T23:00:14.508Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113300","published":"2026-10-20T21:02:39.876Z","updated":"2026-10-22T23:04:18.259Z","title":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113004","published":"2026-10-20T21:02:39.684Z","updated":"2026-10-20T23:00:14.649Z","title":"Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113214","published":"2026-10-20T21:02:39.492Z","updated":"2026-10-21T03:58:35.221Z","title":"Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113027","published":"2026-10-20T21:02:39.280Z","updated":"2026-10-20T23:00:14.935Z","title":"Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113201","published":"2026-10-20T21:02:39.089Z","updated":"2026-10-21T15:17:38.257Z","title":"Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321},{"id":"CVE-2026-113056","published":"2026-10-20T21:02:38.906Z","updated":"2026-10-22T23:03:59.737Z","title":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113103","published":"2026-10-20T21:02:38.702Z","updated":"2026-10-20T23:00:15.096Z","title":"Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00528},{"id":"CVE-2026-113256","published":"2026-10-20T21:02:38.530Z","updated":"2026-10-20T23:00:15.248Z","title":"Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113229","published":"2026-10-20T21:02:38.340Z","updated":"2026-10-20T23:00:15.396Z","title":"Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113168","published":"2026-10-20T21:02:38.134Z","updated":"2026-10-20T23:00:15.546Z","title":"Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113091","published":"2026-10-20T21:02:37.937Z","updated":"2026-10-20T23:00:15.687Z","title":"Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113015","published":"2026-10-20T21:02:37.744Z","updated":"2026-10-20T23:00:15.822Z","title":"Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113114","published":"2026-10-20T21:02:37.556Z","updated":"2026-10-20T23:00:15.957Z","title":"Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113323","published":"2026-10-20T21:02:37.357Z","updated":"2026-10-20T23:00:16.094Z","title":"Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113312","published":"2026-10-20T21:02:37.150Z","updated":"2026-10-21T03:57:50.757Z","title":"Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113053","published":"2026-10-20T21:02:36.953Z","updated":"2026-10-21T03:56:39.924Z","title":"Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113215","published":"2026-10-20T21:02:36.764Z","updated":"2026-10-21T03:56:40.685Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113251","published":"2026-10-20T21:02:36.583Z","updated":"2026-10-21T03:56:41.495Z","title":"Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113086","published":"2026-10-20T21:02:36.384Z","updated":"2026-10-21T03:58:35.995Z","title":"Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113133","published":"2026-10-20T21:02:36.205Z","updated":"2026-10-21T03:57:51.557Z","title":"Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113052","published":"2026-10-20T21:02:36.008Z","updated":"2026-10-21T03:57:52.351Z","title":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113340","published":"2026-10-20T21:02:35.821Z","updated":"2026-10-21T15:17:38.405Z","title":"Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113089","published":"2026-10-20T21:02:35.645Z","updated":"2026-10-22T23:04:22.657Z","title":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113235","published":"2026-10-20T21:02:35.441Z","updated":"2026-10-22T23:04:24.582Z","title":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113157","published":"2026-10-20T21:02:35.238Z","updated":"2026-10-21T13:36:05.566Z","title":"Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113143","published":"2026-10-20T21:02:35.049Z","updated":"2026-10-29T14:12:02.020Z","title":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00339},{"id":"CVE-2026-113200","published":"2026-10-20T21:02:34.865Z","updated":"2026-10-21T03:56:42.723Z","title":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113111","published":"2026-10-20T21:02:34.665Z","updated":"2026-10-21T03:56:43.842Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113008","published":"2026-10-20T21:02:34.463Z","updated":"2026-10-21T03:57:53.259Z","title":"Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113050","published":"2026-10-20T21:02:34.267Z","updated":"2026-10-21T15:37:58.856Z","title":"Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302},{"id":"CVE-2026-113096","published":"2026-10-20T21:02:34.064Z","updated":"2026-10-20T23:00:17.675Z","title":"Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113062","published":"2026-10-20T21:02:33.887Z","updated":"2026-10-21T03:58:36.806Z","title":"Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113297","published":"2026-10-20T21:02:33.701Z","updated":"2026-10-21T13:36:44.103Z","title":"Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328},{"id":"CVE-2026-113258","published":"2026-10-20T21:02:33.496Z","updated":"2026-10-20T23:00:17.963Z","title":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113170","published":"2026-10-20T21:02:33.288Z","updated":"2026-10-20T23:00:18.134Z","title":"Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113203","published":"2026-10-20T21:02:33.085Z","updated":"2026-10-20T23:00:18.267Z","title":"Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113197","published":"2026-10-20T21:02:32.897Z","updated":"2026-10-20T23:00:18.414Z","title":"Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113199","published":"2026-10-20T21:02:32.712Z","updated":"2026-10-21T15:37:58.995Z","title":"Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321},{"id":"CVE-2026-113002","published":"2026-10-20T21:02:32.523Z","updated":"2026-10-21T15:17:38.552Z","title":"Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113065","published":"2026-10-20T21:02:32.326Z","updated":"2026-10-20T23:10:24.991Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113233","published":"2026-10-20T21:02:32.117Z","updated":"2026-10-21T03:58:23.307Z","title":"Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113159","published":"2026-10-20T21:02:31.925Z","updated":"2026-10-21T13:36:44.248Z","title":"Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328},{"id":"CVE-2026-113342","published":"2026-10-20T21:02:31.718Z","updated":"2026-10-22T23:04:00.680Z","title":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-113344","published":"2026-10-20T21:02:31.527Z","updated":"2026-10-20T23:10:25.280Z","title":"Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113221","published":"2026-10-20T21:02:31.343Z","updated":"2026-10-20T23:10:25.426Z","title":"Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113100","published":"2026-10-20T21:02:31.138Z","updated":"2026-10-20T23:10:25.563Z","title":"Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113030","published":"2026-10-20T21:02:30.938Z","updated":"2026-10-30T12:35:01.575Z","title":"Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038},{"id":"CVE-2026-113138","published":"2026-10-20T21:02:30.735Z","updated":"2026-10-22T23:04:01.554Z","title":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113153","published":"2026-10-20T21:02:30.563Z","updated":"2026-10-20T23:10:25.693Z","title":"Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113037","published":"2026-10-20T21:02:30.382Z","updated":"2026-10-20T23:10:25.838Z","title":"Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00471},{"id":"CVE-2026-112997","published":"2026-10-20T21:02:30.186Z","updated":"2026-10-20T23:10:25.980Z","title":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113120","published":"2026-10-20T21:02:29.990Z","updated":"2026-10-21T03:58:37.595Z","title":"Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113028","published":"2026-10-20T21:02:29.768Z","updated":"2026-10-20T23:10:26.269Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113151","published":"2026-10-20T21:02:29.585Z","updated":"2026-10-21T15:37:59.141Z","title":"Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113177","published":"2026-10-20T21:02:29.384Z","updated":"2026-10-20T23:10:26.406Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113304","published":"2026-10-20T21:02:29.180Z","updated":"2026-10-21T15:17:38.702Z","title":"Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309},{"id":"CVE-2026-113267","published":"2026-10-20T21:02:28.964Z","updated":"2026-10-21T03:57:54.043Z","title":"Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113087","published":"2026-10-20T21:02:28.767Z","updated":"2026-10-21T03:56:44.941Z","title":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038},{"id":"CVE-2026-113270","published":"2026-10-20T21:02:28.581Z","updated":"2026-10-22T23:04:12.563Z","title":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-113216","published":"2026-10-20T21:02:28.383Z","updated":"2026-10-21T03:56:46.146Z","title":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113099","published":"2026-10-20T21:02:28.210Z","updated":"2026-10-21T03:58:38.404Z","title":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113228","published":"2026-10-20T21:02:27.998Z","updated":"2026-10-21T03:56:47.242Z","title":"Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00337},{"id":"CVE-2026-113259","published":"2026-10-20T21:02:27.804Z","updated":"2026-10-21T03:56:48.396Z","title":"Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388},{"id":"CVE-2026-113075","published":"2026-10-20T21:02:27.596Z","updated":"2026-10-21T03:56:49.525Z","title":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113187","published":"2026-10-20T21:02:27.390Z","updated":"2026-10-21T03:56:50.328Z","title":"Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113007","published":"2026-10-20T21:02:27.209Z","updated":"2026-10-22T23:04:02.621Z","title":"Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113110","published":"2026-10-20T21:02:27.012Z","updated":"2026-10-21T03:57:54.819Z","title":"Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113178","published":"2026-10-20T21:02:26.825Z","updated":"2026-10-21T15:17:38.847Z","title":"Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321},{"id":"CVE-2026-113165","published":"2026-10-20T21:02:26.637Z","updated":"2026-10-21T03:56:51.102Z","title":"Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113282","published":"2026-10-20T21:02:26.444Z","updated":"2026-10-20T23:10:28.036Z","title":"Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113077","published":"2026-10-20T21:02:26.248Z","updated":"2026-10-21T15:17:39.003Z","title":"Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309},{"id":"CVE-2026-113158","published":"2026-10-20T21:02:26.049Z","updated":"2026-10-20T23:10:28.191Z","title":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113090","published":"2026-10-20T21:02:25.846Z","updated":"2026-10-20T23:10:28.361Z","title":"Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113230","published":"2026-10-20T21:02:25.659Z","updated":"2026-10-21T03:58:39.198Z","title":"Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00528},{"id":"CVE-2026-113124","published":"2026-10-20T21:02:25.494Z","updated":"2026-10-20T23:10:28.668Z","title":"Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113326","published":"2026-10-20T21:02:25.306Z","updated":"2026-10-21T15:17:39.148Z","title":"Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113243","published":"2026-10-20T21:02:25.124Z","updated":"2026-10-20T23:10:28.820Z","title":"Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00453},{"id":"CVE-2026-113064","published":"2026-10-20T21:02:24.934Z","updated":"2026-10-20T23:10:28.969Z","title":"Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113001","published":"2026-10-20T21:02:24.733Z","updated":"2026-10-20T23:10:29.117Z","title":"Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113106","published":"2026-10-20T21:02:24.544Z","updated":"2026-10-20T23:10:29.265Z","title":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113136","published":"2026-10-20T21:02:24.345Z","updated":"2026-10-21T03:57:56.003Z","title":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113277","published":"2026-10-20T21:02:24.146Z","updated":"2026-10-21T15:37:59.284Z","title":"Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316},{"id":"CVE-2026-113123","published":"2026-10-20T21:02:23.960Z","updated":"2026-10-21T03:56:51.857Z","title":"Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113054","published":"2026-10-20T21:02:23.762Z","updated":"2026-10-21T15:37:59.432Z","title":"Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113144","published":"2026-10-20T21:02:23.561Z","updated":"2026-10-21T15:37:59.578Z","title":"Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309},{"id":"CVE-2026-113204","published":"2026-10-20T21:02:23.357Z","updated":"2026-10-21T03:56:52.636Z","title":"Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00481},{"id":"CVE-2026-113032","published":"2026-10-20T21:02:23.179Z","updated":"2026-10-21T03:57:57.164Z","title":"Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427},{"id":"CVE-2026-113049","published":"2026-10-20T21:02:22.990Z","updated":"2026-10-21T03:57:58.264Z","title":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113128","published":"2026-10-20T21:02:22.803Z","updated":"2026-10-30T12:30:55.252Z","title":"Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00343},{"id":"CVE-2026-113139","published":"2026-10-20T21:02:22.612Z","updated":"2026-10-21T19:36:34.593Z","title":"Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309},{"id":"CVE-2026-113081","published":"2026-10-20T21:02:22.421Z","updated":"2026-10-21T03:56:53.405Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038},{"id":"CVE-2026-113031","published":"2026-10-20T21:02:22.222Z","updated":"2026-10-21T03:57:59.446Z","title":"Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113126","published":"2026-10-20T21:02:22.031Z","updated":"2026-10-22T23:04:05.739Z","title":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113041","published":"2026-10-20T21:02:21.800Z","updated":"2026-10-21T03:56:54.172Z","title":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113246","published":"2026-10-20T21:02:21.614Z","updated":"2026-10-21T15:17:39.445Z","title":"Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113016","published":"2026-10-20T21:02:21.423Z","updated":"2026-10-21T03:58:39.976Z","title":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113202","published":"2026-10-20T21:02:21.176Z","updated":"2026-10-21T03:56:54.943Z","title":"Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113043","published":"2026-10-20T21:02:20.980Z","updated":"2026-10-21T03:56:55.728Z","title":"Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00548},{"id":"CVE-2026-113329","published":"2026-10-20T21:02:20.782Z","updated":"2026-10-21T15:17:39.593Z","title":"Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00335},{"id":"CVE-2026-113265","published":"2026-10-20T21:02:20.567Z","updated":"2026-10-21T03:58:00.642Z","title":"Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113073","published":"2026-10-20T21:02:20.360Z","updated":"2026-10-21T03:56:56.876Z","title":"Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00471},{"id":"CVE-2026-113010","published":"2026-10-20T21:02:20.166Z","updated":"2026-10-21T19:11:54.311Z","title":"Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00287},{"id":"CVE-2026-113148","published":"2026-10-20T21:02:19.987Z","updated":"2026-10-21T03:58:01.997Z","title":"Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00468},{"id":"CVE-2026-113224","published":"2026-10-20T21:02:19.796Z","updated":"2026-10-21T15:17:39.745Z","title":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00293},{"id":"CVE-2026-113308","published":"2026-10-20T21:02:19.598Z","updated":"2026-10-21T03:56:57.983Z","title":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113084","published":"2026-10-20T21:02:19.389Z","updated":"2026-10-22T23:04:25.861Z","title":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113325","published":"2026-10-20T21:02:19.211Z","updated":"2026-10-21T15:17:39.900Z","title":"Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113076","published":"2026-10-20T21:02:19.020Z","updated":"2026-10-21T03:56:59.185Z","title":"Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113255","published":"2026-10-20T21:02:18.835Z","updated":"2026-10-21T03:57:00.392Z","title":"Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00401},{"id":"CVE-2026-113335","published":"2026-10-20T21:02:18.620Z","updated":"2026-10-21T03:58:04.004Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113328","published":"2026-10-20T21:02:18.430Z","updated":"2026-10-22T23:04:26.919Z","title":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113195","published":"2026-10-20T21:02:18.253Z","updated":"2026-10-21T03:58:41.084Z","title":"Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113218","published":"2026-10-20T21:02:18.053Z","updated":"2026-10-21T03:57:01.537Z","title":"Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113276","published":"2026-10-20T21:02:17.867Z","updated":"2026-10-20T23:10:32.438Z","title":"Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00416},{"id":"CVE-2026-113042","published":"2026-10-20T21:02:17.681Z","updated":"2026-10-20T23:10:32.580Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113171","published":"2026-10-20T21:02:17.503Z","updated":"2026-10-22T23:04:06.753Z","title":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113185","published":"2026-10-20T21:02:17.293Z","updated":"2026-10-20T23:10:32.727Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113206","published":"2026-10-20T21:02:17.080Z","updated":"2026-10-20T23:10:32.886Z","title":"Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113149","published":"2026-10-20T21:02:16.896Z","updated":"2026-10-20T23:10:33.034Z","title":"Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113262","published":"2026-10-20T21:02:16.722Z","updated":"2026-10-20T23:10:33.182Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113332","published":"2026-10-20T21:02:16.541Z","updated":"2026-10-20T23:10:33.335Z","title":"Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113172","published":"2026-10-20T21:02:16.348Z","updated":"2026-10-20T23:20:39.816Z","title":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113261","published":"2026-10-20T21:02:16.116Z","updated":"2026-10-22T23:04:13.405Z","title":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-112995","published":"2026-10-20T21:02:15.935Z","updated":"2026-10-23T12:50:39.242Z","title":"Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406},{"id":"CVE-2026-112992","published":"2026-10-20T21:02:15.743Z","updated":"2026-10-22T23:04:07.540Z","title":"Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113190","published":"2026-10-20T21:02:15.565Z","updated":"2026-10-20T23:20:40.310Z","title":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388},{"id":"CVE-2026-113278","published":"2026-10-20T21:02:15.359Z","updated":"2026-10-20T23:20:40.485Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113071","published":"2026-10-20T21:02:15.031Z","updated":"2026-10-20T23:20:40.642Z","title":"Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427},{"id":"CVE-2026-113009","published":"2026-10-20T21:02:14.816Z","updated":"2026-10-22T23:04:58.120Z","title":"Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406},{"id":"CVE-2026-113307","published":"2026-10-20T21:02:14.630Z","updated":"2026-10-20T23:20:40.978Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113045","published":"2026-10-20T21:02:14.417Z","updated":"2026-10-21T15:17:40.044Z","title":"Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113115","published":"2026-10-20T21:02:14.208Z","updated":"2026-10-20T23:20:41.154Z","title":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113060","published":"2026-10-20T21:02:14.011Z","updated":"2026-10-21T03:58:42.222Z","title":"Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113189","published":"2026-10-20T21:02:13.836Z","updated":"2026-10-22T23:04:14.404Z","title":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-113194","published":"2026-10-20T21:02:13.639Z","updated":"2026-10-20T23:20:41.490Z","title":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113238","published":"2026-10-20T21:02:13.459Z","updated":"2026-10-20T23:20:41.656Z","title":"Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00433},{"id":"CVE-2026-113208","published":"2026-10-20T21:02:13.254Z","updated":"2026-10-20T23:20:41.839Z","title":"Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113137","published":"2026-10-20T21:02:13.064Z","updated":"2026-10-21T15:17:40.206Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00313},{"id":"CVE-2026-113059","published":"2026-10-20T21:02:12.885Z","updated":"2026-10-20T23:20:41.987Z","title":"Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00373},{"id":"CVE-2026-113321","published":"2026-10-20T21:02:12.695Z","updated":"2026-10-21T03:57:03.567Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113112","published":"2026-10-20T21:02:12.370Z","updated":"2026-10-21T03:57:04.863Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113272","published":"2026-10-20T21:02:12.186Z","updated":"2026-10-21T03:58:05.116Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113249","published":"2026-10-20T21:02:11.998Z","updated":"2026-10-21T03:58:43.300Z","title":"Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00453},{"id":"CVE-2026-112999","published":"2026-10-20T21:02:11.809Z","updated":"2026-10-21T03:57:05.744Z","title":"Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113327","published":"2026-10-20T21:02:11.596Z","updated":"2026-10-21T03:57:06.577Z","title":"Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113232","published":"2026-10-20T21:02:11.420Z","updated":"2026-10-21T03:58:05.902Z","title":"Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113118","published":"2026-10-20T21:02:11.226Z","updated":"2026-10-22T23:03:55.812Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00373},{"id":"CVE-2026-113162","published":"2026-10-20T21:02:11.048Z","updated":"2026-10-21T03:58:44.412Z","title":"Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113205","published":"2026-10-20T21:02:10.866Z","updated":"2026-10-21T03:57:07.345Z","title":"Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113207","published":"2026-10-20T21:02:10.665Z","updated":"2026-10-20T23:20:43.987Z","title":"Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113146","published":"2026-10-20T21:02:10.476Z","updated":"2026-10-22T23:04:58.960Z","title":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406},{"id":"CVE-2026-113289","published":"2026-10-20T21:02:10.275Z","updated":"2026-10-21T03:58:45.684Z","title":"Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113183","published":"2026-10-20T21:02:10.082Z","updated":"2026-10-20T23:20:44.490Z","title":"Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113290","published":"2026-10-20T21:02:09.892Z","updated":"2026-10-20T23:20:44.652Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113155","published":"2026-10-20T21:02:09.705Z","updated":"2026-10-20T23:20:44.815Z","title":"Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113003","published":"2026-10-20T21:02:09.511Z","updated":"2026-10-20T23:20:44.985Z","title":"Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113196","published":"2026-10-20T21:02:09.286Z","updated":"2026-10-30T12:25:16.770Z","title":"Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00354},{"id":"CVE-2026-113051","published":"2026-10-20T21:02:09.094Z","updated":"2026-10-21T15:17:40.366Z","title":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302},{"id":"CVE-2026-113166","published":"2026-10-20T21:02:08.899Z","updated":"2026-10-20T23:20:45.185Z","title":"Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113209","published":"2026-10-20T21:02:08.701Z","updated":"2026-10-21T15:17:40.523Z","title":"Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00314},{"id":"CVE-2026-113005","published":"2026-10-20T21:02:08.514Z","updated":"2026-10-20T23:20:45.375Z","title":"Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113219","published":"2026-10-20T21:02:08.318Z","updated":"2026-10-20T23:20:45.563Z","title":"Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113057","published":"2026-10-20T21:02:08.122Z","updated":"2026-10-30T13:36:50.500Z","title":"Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00296},{"id":"CVE-2026-113319","published":"2026-10-20T21:02:07.936Z","updated":"2026-10-21T03:57:08.136Z","title":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113343","published":"2026-10-20T21:02:07.742Z","updated":"2026-10-21T03:58:07.495Z","title":"Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113108","published":"2026-10-20T21:02:07.548Z","updated":"2026-10-21T03:57:08.902Z","title":"Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113014","published":"2026-10-20T21:02:07.359Z","updated":"2026-10-22T23:04:15.174Z","title":"Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113283","published":"2026-10-20T21:02:07.161Z","updated":"2026-10-22T23:04:08.357Z","title":"Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00475},{"id":"CVE-2026-113275","published":"2026-10-20T21:02:06.948Z","updated":"2026-10-21T03:57:09.902Z","title":"Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113220","published":"2026-10-20T21:02:06.748Z","updated":"2026-10-21T03:58:08.278Z","title":"Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406},{"id":"CVE-2026-113105","published":"2026-10-20T21:02:06.565Z","updated":"2026-10-21T03:57:10.660Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113264","published":"2026-10-20T21:02:06.378Z","updated":"2026-10-30T20:00:59.286Z","title":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00401},{"id":"CVE-2026-113129","published":"2026-10-20T21:02:06.185Z","updated":"2026-10-21T13:36:44.409Z","title":"Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00291},{"id":"CVE-2026-113127","published":"2026-10-20T21:02:05.972Z","updated":"2026-10-21T03:58:09.045Z","title":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00528},{"id":"CVE-2026-113337","published":"2026-10-20T21:02:05.793Z","updated":"2026-10-21T03:58:09.806Z","title":"Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113147","published":"2026-10-20T21:02:05.596Z","updated":"2026-10-22T23:03:57.400Z","title":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00514},{"id":"CVE-2026-113333","published":"2026-10-20T21:02:05.416Z","updated":"2026-10-21T15:17:40.660Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113131","published":"2026-10-20T21:02:05.237Z","updated":"2026-10-20T23:20:47.993Z","title":"Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113239","published":"2026-10-20T21:02:05.041Z","updated":"2026-10-21T03:58:25.683Z","title":"Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00455},{"id":"CVE-2026-113164","published":"2026-10-20T21:02:04.846Z","updated":"2026-10-20T23:20:48.334Z","title":"Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113302","published":"2026-10-20T21:02:04.657Z","updated":"2026-10-20T23:20:48.467Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113026","published":"2026-10-20T21:02:04.453Z","updated":"2026-10-21T15:17:40.797Z","title":"Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113033","published":"2026-10-20T21:02:04.257Z","updated":"2026-10-20T23:20:48.604Z","title":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113078","published":"2026-10-20T21:02:04.069Z","updated":"2026-10-22T23:04:28.922Z","title":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113311","published":"2026-10-20T21:02:03.869Z","updated":"2026-10-20T23:20:48.757Z","title":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113150","published":"2026-10-20T21:02:03.675Z","updated":"2026-10-20T23:20:48.900Z","title":"Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113176","published":"2026-10-20T21:02:03.494Z","updated":"2026-10-20T23:20:49.057Z","title":"Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113070","published":"2026-10-20T21:02:03.287Z","updated":"2026-10-21T15:37:59.867Z","title":"Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302},{"id":"CVE-2026-113257","published":"2026-10-20T21:02:03.092Z","updated":"2026-10-20T23:20:49.215Z","title":"Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113198","published":"2026-10-20T21:02:02.901Z","updated":"2026-10-20T23:20:49.357Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113011","published":"2026-10-20T21:02:02.703Z","updated":"2026-10-20T23:30:59.866Z","title":"Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113211","published":"2026-10-20T21:02:02.505Z","updated":"2026-10-22T23:04:09.143Z","title":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00451},{"id":"CVE-2026-113035","published":"2026-10-20T21:02:02.309Z","updated":"2026-10-21T15:17:40.940Z","title":"Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309},{"id":"CVE-2026-113281","published":"2026-10-20T21:02:02.102Z","updated":"2026-10-20T23:31:00.007Z","title":"Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113142","published":"2026-10-20T21:02:01.926Z","updated":"2026-10-21T19:32:06.442Z","title":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00382},{"id":"CVE-2026-113102","published":"2026-10-20T21:02:01.722Z","updated":"2026-10-21T15:38:00.038Z","title":"Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113240","published":"2026-10-20T21:02:01.533Z","updated":"2026-10-20T23:31:00.192Z","title":"Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113094","published":"2026-10-20T21:02:01.335Z","updated":"2026-10-20T23:31:00.343Z","title":"Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113034","published":"2026-10-20T21:02:01.151Z","updated":"2026-10-20T23:31:00.501Z","title":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113301","published":"2026-10-20T21:02:00.958Z","updated":"2026-10-20T23:31:00.664Z","title":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113018","published":"2026-10-20T21:02:00.774Z","updated":"2026-10-22T23:04:46.862Z","title":"Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113263","published":"2026-10-20T21:02:00.571Z","updated":"2026-10-22T23:04:15.938Z","title":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00465},{"id":"CVE-2026-113006","published":"2026-10-20T21:02:00.354Z","updated":"2026-10-21T03:58:24.089Z","title":"Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113069","published":"2026-10-20T21:02:00.177Z","updated":"2026-10-20T23:31:01.109Z","title":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113113","published":"2026-10-20T21:01:59.969Z","updated":"2026-10-21T03:57:11.427Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113109","published":"2026-10-20T21:01:59.783Z","updated":"2026-10-21T03:58:10.663Z","title":"Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113250","published":"2026-10-20T21:01:59.587Z","updated":"2026-10-21T03:57:12.597Z","title":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427},{"id":"CVE-2026-113191","published":"2026-10-20T21:01:59.405Z","updated":"2026-10-21T03:57:13.724Z","title":"Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388},{"id":"CVE-2026-113079","published":"2026-10-20T21:01:59.211Z","updated":"2026-10-21T03:57:14.904Z","title":"Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113022","published":"2026-10-20T21:01:59.021Z","updated":"2026-10-23T12:51:16.340Z","title":"Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113174","published":"2026-10-20T21:01:58.844Z","updated":"2026-10-21T03:57:16.123Z","title":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113231","published":"2026-10-20T21:01:58.671Z","updated":"2026-10-21T03:58:48.947Z","title":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038},{"id":"CVE-2026-113320","published":"2026-10-20T21:01:58.479Z","updated":"2026-10-21T03:58:12.604Z","title":"Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00453},{"id":"CVE-2026-113068","published":"2026-10-20T21:01:58.278Z","updated":"2026-10-21T03:57:17.243Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113055","published":"2026-10-20T21:01:58.084Z","updated":"2026-10-21T03:58:54.582Z","title":"Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00483},{"id":"CVE-2026-112993","published":"2026-10-20T21:01:57.891Z","updated":"2026-10-20T23:31:03.354Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113179","published":"2026-10-20T21:01:57.705Z","updated":"2026-10-20T23:31:03.537Z","title":"Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113000","published":"2026-10-20T21:01:57.498Z","updated":"2026-10-20T23:31:03.700Z","title":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113212","published":"2026-10-20T21:01:57.293Z","updated":"2026-10-20T21:01:57.293Z","title":"Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. (Chromium security severity:…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00324},{"id":"CVE-2026-113160","published":"2026-10-20T21:01:57.087Z","updated":"2026-10-20T23:31:03.852Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113095","published":"2026-10-20T21:01:56.907Z","updated":"2026-10-21T03:58:24.884Z","title":"Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113019","published":"2026-10-20T21:01:56.701Z","updated":"2026-10-22T23:04:47.642Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113181","published":"2026-10-20T21:01:56.500Z","updated":"2026-10-20T23:31:04.327Z","title":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113336","published":"2026-10-20T21:01:56.282Z","updated":"2026-10-22T23:04:09.918Z","title":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113154","published":"2026-10-20T21:01:56.088Z","updated":"2026-10-20T23:31:04.481Z","title":"Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113161","published":"2026-10-20T21:01:55.893Z","updated":"2026-10-20T23:31:04.635Z","title":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056},{"id":"CVE-2026-113040","published":"2026-10-20T21:01:55.715Z","updated":"2026-10-21T03:58:49.703Z","title":"Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113217","published":"2026-10-20T21:01:55.525Z","updated":"2026-10-20T23:31:04.931Z","title":"Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00468},{"id":"CVE-2026-113295","published":"2026-10-20T21:01:55.337Z","updated":"2026-10-21T15:38:00.224Z","title":"Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113309","published":"2026-10-20T21:01:55.144Z","updated":"2026-10-21T15:38:00.381Z","title":"Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113192","published":"2026-10-20T21:01:54.950Z","updated":"2026-10-20T23:31:05.072Z","title":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113175","published":"2026-10-20T21:01:54.743Z","updated":"2026-10-21T03:58:50.640Z","title":"Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404},{"id":"CVE-2026-113012","published":"2026-10-20T21:01:54.568Z","updated":"2026-10-21T03:58:51.448Z","title":"Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113093","published":"2026-10-20T21:01:54.371Z","updated":"2026-10-20T23:31:05.526Z","title":"Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113338","published":"2026-10-20T21:01:54.161Z","updated":"2026-10-20T23:31:05.665Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113310","published":"2026-10-20T21:01:53.944Z","updated":"2026-10-21T15:38:00.551Z","title":"Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113318","published":"2026-10-20T21:01:53.743Z","updated":"2026-10-20T23:31:05.801Z","title":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113222","published":"2026-10-20T21:01:53.554Z","updated":"2026-10-22T23:04:16.722Z","title":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00466},{"id":"CVE-2026-113020","published":"2026-10-20T21:01:53.367Z","updated":"2026-10-21T00:51:44.191Z","title":"Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113334","published":"2026-10-20T21:01:53.163Z","updated":"2026-10-21T03:58:52.234Z","title":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113324","published":"2026-10-20T21:01:52.959Z","updated":"2026-10-21T03:57:18.436Z","title":"Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113285","published":"2026-10-20T21:01:52.767Z","updated":"2026-10-21T03:58:13.726Z","title":"Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113210","published":"2026-10-20T21:01:52.562Z","updated":"2026-10-21T03:57:19.502Z","title":"Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113225","published":"2026-10-20T21:01:52.375Z","updated":"2026-10-21T15:17:41.237Z","title":"Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113293","published":"2026-10-20T21:01:52.172Z","updated":"2026-10-21T03:57:20.255Z","title":"Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113273","published":"2026-10-20T21:01:51.982Z","updated":"2026-10-21T03:58:14.922Z","title":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113266","published":"2026-10-20T21:01:51.788Z","updated":"2026-10-21T03:58:16.084Z","title":"Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00401},{"id":"CVE-2026-113135","published":"2026-10-20T21:01:51.600Z","updated":"2026-10-21T03:58:17.168Z","title":"Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037},{"id":"CVE-2026-113044","published":"2026-10-20T21:01:51.412Z","updated":"2026-10-21T03:57:21.022Z","title":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113305","published":"2026-10-20T21:01:51.217Z","updated":"2026-10-21T03:57:21.825Z","title":"Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113252","published":"2026-10-20T21:01:51.022Z","updated":"2026-10-22T23:04:29.719Z","title":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495},{"id":"CVE-2026-113234","published":"2026-10-20T21:01:50.822Z","updated":"2026-10-21T03:58:18.286Z","title":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113316","published":"2026-10-20T21:01:50.611Z","updated":"2026-10-21T03:58:53.009Z","title":"Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113141","published":"2026-10-20T21:01:50.430Z","updated":"2026-10-22T23:03:54.715Z","title":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406},{"id":"CVE-2026-113284","published":"2026-10-20T21:01:50.240Z","updated":"2026-10-21T03:58:19.405Z","title":"Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113236","published":"2026-10-20T21:01:50.042Z","updated":"2026-10-21T03:57:23.385Z","title":"Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113315","published":"2026-10-20T21:01:49.849Z","updated":"2026-10-21T03:58:20.169Z","title":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113298","published":"2026-10-20T21:01:49.649Z","updated":"2026-10-21T03:57:24.175Z","title":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113253","published":"2026-10-20T21:01:49.462Z","updated":"2026-10-21T03:57:24.945Z","title":"Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388},{"id":"CVE-2026-113163","published":"2026-10-20T21:01:49.263Z","updated":"2026-10-21T03:57:25.762Z","title":"Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00528},{"id":"CVE-2026-113322","published":"2026-10-20T21:01:49.077Z","updated":"2026-10-21T15:17:41.382Z","title":"Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341},{"id":"CVE-2026-113104","published":"2026-10-20T21:01:48.877Z","updated":"2026-10-21T03:58:20.963Z","title":"Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113188","published":"2026-10-20T21:01:48.690Z","updated":"2026-10-21T03:58:21.746Z","title":"Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425},{"id":"CVE-2026-113117","published":"2026-10-20T21:01:48.500Z","updated":"2026-10-21T03:58:53.804Z","title":"Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113193","published":"2026-10-20T21:01:48.309Z","updated":"2026-10-21T15:17:41.516Z","title":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321},{"id":"CVE-2026-113317","published":"2026-10-20T21:01:48.113Z","updated":"2026-10-20T23:41:10.456Z","title":"Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113339","published":"2026-10-20T21:01:47.919Z","updated":"2026-10-21T03:57:26.857Z","title":"Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113134","published":"2026-10-20T21:01:47.732Z","updated":"2026-10-20T23:41:10.727Z","title":"Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113092","published":"2026-10-20T21:01:47.525Z","updated":"2026-10-20T23:41:10.867Z","title":"Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00424},{"id":"CVE-2026-113119","published":"2026-10-20T21:01:47.338Z","updated":"2026-10-20T23:41:10.999Z","title":"Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113082","published":"2026-10-20T21:01:47.131Z","updated":"2026-10-21T15:17:41.659Z","title":"Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00301},{"id":"CVE-2026-113058","published":"2026-10-20T21:01:46.885Z","updated":"2026-10-21T03:57:28.019Z","title":"Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00528},{"id":"CVE-2026-113242","published":"2026-10-20T21:01:46.690Z","updated":"2026-10-20T23:41:11.270Z","title":"Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443},{"id":"CVE-2026-113098","published":"2026-10-20T21:01:46.497Z","updated":"2026-10-21T15:17:41.800Z","title":"Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033},{"id":"CVE-2026-113097","published":"2026-10-20T21:01:46.280Z","updated":"2026-10-21T03:57:29.116Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417},{"id":"CVE-2026-113101","published":"2026-10-20T21:01:46.074Z","updated":"2026-10-21T03:57:30.282Z","title":"Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00448},{"id":"CVE-2026-113303","published":"2026-10-20T21:01:45.739Z","updated":"2026-10-20T23:41:11.675Z","title":"Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00672},{"id":"CVE-2026-113271","published":"2026-10-20T21:01:45.544Z","updated":"2026-10-21T03:57:31.401Z","title":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051},{"id":"CVE-2026-113280","published":"2026-10-20T21:01:45.282Z","updated":"2026-10-20T23:41:11.937Z","title":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051},{"id":"CVE-2026-113072","published":"2026-10-20T21:01:45.076Z","updated":"2026-10-22T23:04:10.678Z","title":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00559},{"id":"CVE-2026-113279","published":"2026-10-20T21:01:44.528Z","updated":"2026-10-20T23:41:12.075Z","title":"Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051},{"id":"CVE-2026-113341","published":"2026-10-20T21:01:44.083Z","updated":"2026-10-21T15:17:41.936Z","title":"Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038},{"id":"CVE-2026-112712","published":"2026-10-20T20:43:48.681Z","updated":"2026-10-30T17:17:28.727Z","title":"@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch","severity":"CRITICAL","score":9.1,"vendor":"@fastify/middie","product":"@fastify/middie","kev":false,"epss":0.00314},{"id":"CVE-2026-112407","published":"2026-10-20T20:34:40.192Z","updated":"2026-10-28T20:04:37.868Z","title":"Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications","severity":"HIGH","score":8.7,"vendor":"AWS","product":"CICD-toolchain-for-serverless-applications","kev":false,"epss":0.00455},{"id":"CVE-2016-20104","published":"2026-10-20T20:31:29.589Z","updated":"2026-10-23T15:15:18.506Z","title":"EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php","severity":"HIGH","score":8.7,"vendor":"EyeLock","product":"nano NXT","kev":false,"epss":0.00613},{"id":"CVE-2016-20103","published":"2026-10-20T20:31:28.909Z","updated":"2026-10-28T15:57:22.592Z","title":"Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php","severity":"HIGH","score":8.7,"vendor":"Cherry Team","product":"Cherry Plugin","kev":false,"epss":0.00613},{"id":"CVE-2016-20102","published":"2026-10-20T20:31:28.188Z","updated":"2026-10-21T15:52:04.853Z","title":"JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter","severity":"MEDIUM","score":5.1,"vendor":"JavaMelody","product":"JavaMelody","kev":false,"epss":0.00264},{"id":"CVE-2016-20101","published":"2026-10-20T20:31:27.518Z","updated":"2026-10-27T11:05:45.289Z","title":"Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php","severity":"CRITICAL","score":9.2,"vendor":"Pedro Marcelo","product":"Issuu Panel","kev":false,"epss":0.00398},{"id":"CVE-2016-20100","published":"2026-10-20T20:31:26.870Z","updated":"2026-10-23T02:10:01.423Z","title":"Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview","severity":"HIGH","score":8.7,"vendor":"Ian Howatson","product":"Memphis Documents Library","kev":false,"epss":0.00528},{"id":"CVE-2015-20128","published":"2026-10-20T20:31:26.220Z","updated":"2026-10-23T15:21:40.984Z","title":"FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx","severity":"HIGH","score":8.8,"vendor":"FooSun","product":"DotNetCMS","kev":false,"epss":0.00339},{"id":"CVE-2015-20125","published":"2026-10-20T20:31:25.603Z","updated":"2026-10-28T16:36:16.046Z","title":"Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose PDF Exporter","kev":false,"epss":0.00412},{"id":"CVE-2015-20124","published":"2026-10-20T20:31:24.966Z","updated":"2026-10-21T15:52:13.050Z","title":"Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose Importer & Exporter","kev":false,"epss":0.00498},{"id":"CVE-2015-20123","published":"2026-10-20T20:31:24.275Z","updated":"2026-10-27T11:04:49.594Z","title":"Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose Doc Exporter","kev":false,"epss":0.00412},{"id":"CVE-2014-125134","published":"2026-10-20T20:31:23.591Z","updated":"2026-10-23T02:07:38.560Z","title":"ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php","severity":"HIGH","score":8.7,"vendor":"ChurcHope","product":"ChurcHope","kev":false,"epss":0.00817},{"id":"CVE-2014-125133","published":"2026-10-20T20:31:22.824Z","updated":"2026-10-23T15:33:12.495Z","title":"NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php","severity":"HIGH","score":8.7,"vendor":"imithemes","product":"NativeChurch","kev":false,"epss":0.01122},{"id":"CVE-2014-125132","published":"2026-10-20T20:31:22.166Z","updated":"2026-10-28T16:37:45.902Z","title":"Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php","severity":"MEDIUM","score":5.1,"vendor":"Jason Newman","product":"Blogroll Fun","kev":false,"epss":0.00211},{"id":"CVE-2014-125131","published":"2026-10-20T20:31:21.514Z","updated":"2026-10-21T15:52:20.155Z","title":"DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php","severity":"MEDIUM","score":5.1,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00264},{"id":"CVE-2012-20005","published":"2026-10-20T20:31:20.810Z","updated":"2026-10-27T11:03:35.133Z","title":"SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter","severity":"MEDIUM","score":5.1,"vendor":"Łukasz Więcek","product":"SocialFit","kev":false,"epss":0.00211},{"id":"CVE-2012-20004","published":"2026-10-20T20:31:19.801Z","updated":"2026-10-23T02:04:53.688Z","title":"K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter","severity":"MEDIUM","score":5.1,"vendor":"Carles Reverter","product":"K-news","kev":false,"epss":0.00269},{"id":"CVE-2012-20003","published":"2026-10-20T20:31:19.033Z","updated":"2026-10-23T15:25:44.876Z","title":"Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php","severity":"MEDIUM","score":5.1,"vendor":"Web Updates KMU","product":"Custom Tables","kev":false,"epss":0.00269},{"id":"CVE-2012-20002","published":"2026-10-20T20:31:18.351Z","updated":"2026-10-28T16:39:23.445Z","title":"TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php","severity":"HIGH","score":8.7,"vendor":"James Charlesworth","product":"TinyMCE Thumbnail Gallery","kev":false,"epss":0.00528},{"id":"CVE-2026-107929","published":"2026-10-20T20:29:28.177Z","updated":"2026-10-30T16:31:15.917Z","title":"local interface connection reuse mixup","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00667},{"id":"CVE-2026-111758","published":"2026-10-20T20:28:40.677Z","updated":"2026-10-28T16:40:33.483Z","title":"markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)","severity":"HIGH","score":7.5,"vendor":"markdown-it","product":"markdown-it","kev":false,"epss":0.0055},{"id":"CVE-2026-107928","published":"2026-10-20T20:28:17.712Z","updated":"2026-10-30T16:26:32.201Z","title":"info leak uploading over WebSockets with GnuTLS","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00705},{"id":"CVE-2026-105960","published":"2026-10-20T20:28:12.533Z","updated":"2026-10-30T17:17:53.241Z","title":"HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00114},{"id":"CVE-2026-94266","published":"2026-10-20T20:27:21.585Z","updated":"2026-10-30T16:22:24.369Z","title":"password leak in CURLINFO_EFFECTIVE_URL","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00556},{"id":"CVE-2026-110322","published":"2026-10-20T20:26:21.735Z","updated":"2026-10-30T17:18:13.773Z","title":"HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00114},{"id":"CVE-2026-94265","published":"2026-10-20T20:26:18.061Z","updated":"2026-10-30T16:19:18.095Z","title":"Authorization: Negotiate sent to foreign origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00776},{"id":"CVE-2026-35499","published":"2026-10-20T20:25:27.054Z","updated":"2026-10-23T22:06:35.416Z","title":"An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01286},{"id":"CVE-2026-40627","published":"2026-10-20T20:25:26.756Z","updated":"2026-10-28T20:04:44.232Z","title":"An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01043},{"id":"CVE-2026-28763","published":"2026-10-20T20:25:26.455Z","updated":"2026-10-28T20:04:52.480Z","title":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-41223","published":"2026-10-20T20:25:26.040Z","updated":"2026-10-28T20:05:00.158Z","title":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-33568","published":"2026-10-20T20:25:25.757Z","updated":"2026-10-28T20:05:11.122Z","title":"A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01043},{"id":"CVE-2026-41222","published":"2026-10-20T20:25:25.460Z","updated":"2026-10-28T20:05:18.605Z","title":"A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-40615","published":"2026-10-20T20:25:25.027Z","updated":"2026-10-28T20:05:25.451Z","title":"A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-42020","published":"2026-10-20T20:25:24.274Z","updated":"2026-10-28T20:05:31.826Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-42019","published":"2026-10-20T20:25:24.175Z","updated":"2026-10-28T20:05:38.454Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737},{"id":"CVE-2026-42024","published":"2026-10-20T20:25:23.785Z","updated":"2026-10-23T22:07:17.261Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-42023","published":"2026-10-20T20:25:23.697Z","updated":"2026-10-23T22:07:29.374Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-42022","published":"2026-10-20T20:25:23.607Z","updated":"2026-10-23T22:08:24.455Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00477},{"id":"CVE-2026-42021","published":"2026-10-20T20:25:23.513Z","updated":"2026-10-23T22:08:30.747Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00477},{"id":"CVE-2026-42026","published":"2026-10-20T20:25:23.155Z","updated":"2026-10-23T22:08:36.350Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-42025","published":"2026-10-20T20:25:23.021Z","updated":"2026-10-23T22:08:53.066Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-9660","published":"2026-10-20T20:25:22.710Z","updated":"2026-10-23T22:09:11.950Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-9659","published":"2026-10-20T20:25:22.621Z","updated":"2026-10-28T20:05:44.804Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00791},{"id":"CVE-2026-9814","published":"2026-10-20T20:25:22.289Z","updated":"2026-10-23T22:09:29.905Z","title":"An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01602},{"id":"CVE-2026-9817","published":"2026-10-20T20:25:21.909Z","updated":"2026-10-23T22:09:52.079Z","title":"A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-9827","published":"2026-10-20T20:25:21.595Z","updated":"2026-10-23T22:10:10.289Z","title":"A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00633},{"id":"CVE-2026-9869","published":"2026-10-20T20:25:21.253Z","updated":"2026-10-23T22:10:27.062Z","title":"A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512},{"id":"CVE-2026-10131","published":"2026-10-20T20:25:20.907Z","updated":"2026-10-23T22:10:33.050Z","title":"An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01386},{"id":"CVE-2026-10132","published":"2026-10-20T20:25:20.562Z","updated":"2026-10-23T22:10:51.046Z","title":"A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598},{"id":"CVE-2026-10133","published":"2026-10-20T20:25:20.171Z","updated":"2026-10-23T22:11:11.863Z","title":"A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598},{"id":"CVE-2026-10135","published":"2026-10-20T20:25:19.714Z","updated":"2026-10-23T22:11:31.759Z","title":"A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01386},{"id":"CVE-2026-10136","published":"2026-10-20T20:25:19.291Z","updated":"2026-10-23T22:11:53.227Z","title":"A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598},{"id":"CVE-2026-10137","published":"2026-10-20T20:25:18.911Z","updated":"2026-10-23T22:12:04.172Z","title":"A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598},{"id":"CVE-2026-10138","published":"2026-10-20T20:25:18.467Z","updated":"2026-10-23T22:12:22.873Z","title":"A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01448},{"id":"CVE-2026-10139","published":"2026-10-20T20:25:17.914Z","updated":"2026-10-23T22:12:35.055Z","title":"A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00624},{"id":"CVE-2026-10141","published":"2026-10-20T20:25:17.317Z","updated":"2026-10-23T22:13:44.100Z","title":"A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00281},{"id":"CVE-2026-92391","published":"2026-10-20T20:24:10.745Z","updated":"2026-10-30T16:16:14.958Z","title":"curl_mime_free stack overflow by recursion","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01166},{"id":"CVE-2026-103672","published":"2026-10-20T20:23:18.471Z","updated":"2026-10-30T16:13:32.415Z","title":"HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index","severity":"MEDIUM","score":6.9,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00126},{"id":"CVE-2026-92390","published":"2026-10-20T20:23:08.900Z","updated":"2026-10-30T16:10:17.142Z","title":"-J no-clobber guarantee bypassed with 103 early hints","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00589},{"id":"CVE-2026-92389","published":"2026-10-20T20:21:45.378Z","updated":"2026-10-30T12:19:17.432Z","title":"TFTP direction confusion","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00721},{"id":"CVE-2026-92388","published":"2026-10-20T20:20:41.220Z","updated":"2026-10-30T12:13:00.038Z","title":"FTP wildcard write callback mixup","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00699},{"id":"CVE-2026-92387","published":"2026-10-20T20:19:14.672Z","updated":"2026-10-29T19:02:50.636Z","title":"never-ending loop via server response omission","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01045},{"id":"CVE-2026-101103","published":"2026-10-20T20:19:10.646Z","updated":"2026-10-29T19:01:16.074Z","title":"HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00122},{"id":"CVE-2026-92386","published":"2026-10-20T20:17:37.356Z","updated":"2026-10-29T19:00:33.876Z","title":"server-set cookie aborts cookie jar load","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828},{"id":"CVE-2026-87866","published":"2026-10-20T20:16:30.866Z","updated":"2026-10-29T18:59:00.981Z","title":"wolfSSL public-key pinning bypass","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.0051},{"id":"CVE-2026-109576","published":"2026-10-20T20:16:18.220Z","updated":"2026-10-29T18:50:02.535Z","title":"HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00122},{"id":"CVE-2026-87865","published":"2026-10-20T20:15:13.165Z","updated":"2026-10-30T12:08:50.301Z","title":"knownhost callback mismatches key as missing","severity":"HIGH","score":7.4,"vendor":"curl","product":"curl","kev":false,"epss":0.00604},{"id":"CVE-2026-87863","published":"2026-10-20T20:13:22.379Z","updated":"2026-10-30T12:04:02.535Z","title":"HSTS response erases persisted entries","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828},{"id":"CVE-2026-87864","published":"2026-10-20T20:13:13.359Z","updated":"2026-10-30T12:00:45.483Z","title":"IMAP APPEND plus CRLF conversion command injection","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828},{"id":"CVE-2026-87862","published":"2026-10-20T20:10:37.039Z","updated":"2026-10-30T11:57:49.186Z","title":"HSTS cache import drops longer-lived child","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00995},{"id":"CVE-2026-87861","published":"2026-10-20T20:09:28.592Z","updated":"2026-10-30T11:55:20.837Z","title":"cross-origin reuse of a Negotiate connection","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676},{"id":"CVE-2026-86415","published":"2026-10-20T20:08:29.941Z","updated":"2026-10-30T11:51:14.723Z","title":"auto client cert connection reuse mixup","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00419},{"id":"CVE-2026-86414","published":"2026-10-20T20:07:22.464Z","updated":"2026-10-30T11:47:08.351Z","title":"leaking host credentials to HTTP proxy","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676},{"id":"CVE-2026-86413","published":"2026-10-20T20:06:11.699Z","updated":"2026-10-30T11:44:06.616Z","title":"Negotiate credentials sent to redirected origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00731},{"id":"CVE-2026-112380","published":"2026-10-20T20:05:28.394Z","updated":"2026-10-29T18:48:02.141Z","title":"Missing authorization in the WhatsApp channel in Kiro Crew","severity":"CRITICAL","score":9,"vendor":"Amazon","product":"Kiro Crew","kev":false,"epss":0.00407},{"id":"CVE-2026-86412","published":"2026-10-20T20:03:28.200Z","updated":"2026-10-29T18:46:02.464Z","title":"server-set cookie erases cookie jar","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828},{"id":"CVE-2026-86411","published":"2026-10-20T20:02:03.431Z","updated":"2026-10-29T18:42:03.095Z","title":"FTP connection reuse inherits client-certificate","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00433},{"id":"CVE-2026-86410","published":"2026-10-20T19:59:26.502Z","updated":"2026-10-29T18:36:17.740Z","title":"redirect to SFTP or SCP bypasses host verification","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00766},{"id":"CVE-2026-86409","published":"2026-10-20T19:57:01.794Z","updated":"2026-10-29T18:33:49.983Z","title":"stale SigV4 headers sent unintended","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01096},{"id":"CVE-2026-113725","published":"2026-10-20T19:56:52.195Z","updated":"2026-10-21T15:52:26.038Z","title":"virtualenv bash activate runs commands from an environment name with a backslash before $","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00263},{"id":"CVE-2026-113724","published":"2026-10-20T19:53:29.357Z","updated":"2026-10-27T11:02:51.974Z","title":"virtualenv: Deletion recovery can change a symlink target's mode","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00203},{"id":"CVE-2026-113723","published":"2026-10-20T19:51:06.340Z","updated":"2026-10-27T13:31:27.357Z","title":"virtualenv: Bash prompt values can change meaning under older compatibility modes","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242},{"id":"CVE-2026-107692","published":"2026-10-20T19:49:57.295Z","updated":"2026-10-20T20:22:22.419Z","title":"War Thunder Account Impersonation","severity":"MEDIUM","score":4.8,"vendor":"Gaijin Entertainment","product":"War Thunder","kev":false,"epss":0.00135},{"id":"CVE-2026-113722","published":"2026-10-20T19:48:29.183Z","updated":"2026-10-23T02:03:26.987Z","title":"virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00285},{"id":"CVE-2026-113721","published":"2026-10-20T19:46:28.770Z","updated":"2026-10-28T16:41:59.056Z","title":"virtualenv: Generated files can follow existing destination links","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00144},{"id":"CVE-2026-113720","published":"2026-10-20T19:43:32.451Z","updated":"2026-10-21T15:52:33.658Z","title":"virtualenv: Seeded files retain permissions from an older cache","severity":"MEDIUM","score":4.4,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00134},{"id":"CVE-2026-113715","published":"2026-10-20T19:42:55.011Z","updated":"2026-10-23T02:01:48.925Z","title":"virtualenv: Venv configuration readback can reinterpret path boundaries","severity":"LOW","score":2,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242},{"id":"CVE-2026-113719","published":"2026-10-20T19:42:07.523Z","updated":"2026-10-27T11:01:51.649Z","title":"virtualenv: Seed replacement does not contain metadata deletion paths","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00203},{"id":"CVE-2026-113718","published":"2026-10-20T19:39:52.633Z","updated":"2026-10-27T13:33:36.583Z","title":"virtualenv: Xonsh activation literals depend on the script decoding codec","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242},{"id":"CVE-2026-113717","published":"2026-10-20T19:22:11.265Z","updated":"2026-10-20T19:32:57.649Z","title":"virtualenv: Pip seeding with download omits wheel digest verification","severity":"LOW","score":2.3,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00293},{"id":"CVE-2026-113716","published":"2026-10-20T19:18:09.392Z","updated":"2026-10-21T15:52:40.004Z","title":"virtualenv: Builtin creation follows linked environment directories","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00144},{"id":"CVE-2026-113869","published":"2026-10-20T19:14:55.862Z","updated":"2026-10-27T18:30:32.292Z","title":"Use-after-free in S/MIME decryption during a security device password prompt","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.0033},{"id":"CVE-2026-113868","published":"2026-10-20T19:14:55.520Z","updated":"2026-10-20T19:46:39.812Z","title":"Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication","severity":"MEDIUM","score":5.3,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00425},{"id":"CVE-2026-113867","published":"2026-10-20T19:14:55.002Z","updated":"2026-10-29T18:28:43.359Z","title":"Stanza injection in XMPP chat","severity":"CRITICAL","score":9.1,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00399},{"id":"CVE-2026-113866","published":"2026-10-20T19:14:54.646Z","updated":"2026-10-20T19:46:38.284Z","title":"Account password sent unencrypted during Exchange account setup","severity":"MEDIUM","score":5.9,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00365},{"id":"CVE-2026-113712","published":"2026-10-20T19:14:02.289Z","updated":"2026-10-23T02:00:37.868Z","title":"Cachet has Stored XSS in Incident Component","severity":"MEDIUM","score":4.8,"vendor":"cachethq","product":"cachet","kev":false,"epss":0.0046},{"id":"CVE-2026-113714","published":"2026-10-20T19:09:45.096Z","updated":"2026-10-27T10:59:22.031Z","title":"virtualenv: Downloaded wheel selection and caching precede verification","severity":"LOW","score":2.3,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00249},{"id":"CVE-2026-113713","published":"2026-10-20T19:06:25.880Z","updated":"2026-10-27T13:37:48.952Z","title":"virtualenv: Temporary app-data can leave dangling seed package links","severity":"MEDIUM","score":4.4,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00204},{"id":"CVE-2026-111088","published":"2026-10-20T18:45:33.737Z","updated":"2026-10-29T18:23:52.543Z","title":"Stored XSS in the VPN logs monitor","severity":"MEDIUM","score":6.5,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00219},{"id":"CVE-2026-113810","published":"2026-10-20T18:31:35.708Z","updated":"2026-10-20T18:47:12.554Z","title":"Stored XSS on SNS Enrollment Portal","severity":"HIGH","score":7,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00099},{"id":"CVE-2026-111767","published":"2026-10-20T18:28:45.650Z","updated":"2026-10-20T19:02:40.151Z","title":"MCP TypeScript SDK: Experimental tasks were not tied to the session that created them","severity":"HIGH","score":8.6,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00345},{"id":"CVE-2026-100134","published":"2026-10-20T18:18:37.073Z","updated":"2026-10-21T15:52:47.020Z","title":"Acrobat for Edge | Out-of-bounds Write (CWE-787)","severity":"HIGH","score":8.8,"vendor":"Adobe","product":"Acrobat for Edge","kev":false,"epss":0.00793},{"id":"CVE-2026-100132","published":"2026-10-20T18:18:35.986Z","updated":"2026-10-29T15:11:07.345Z","title":"Acrobat for Edge | Out-of-bounds Read (CWE-125)","severity":"MEDIUM","score":4.3,"vendor":"Adobe","product":"Acrobat for Edge","kev":false,"epss":0.00437},{"id":"CVE-2026-113808","published":"2026-10-20T18:15:43.059Z","updated":"2026-10-20T18:47:45.044Z","title":"Stored XSS on SNS Enrollment Portal","severity":"HIGH","score":7.1,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00214},{"id":"CVE-2026-113643","published":"2026-10-20T18:15:12.276Z","updated":"2026-10-20T18:45:14.681Z","title":"EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"EspoCRM","kev":false,"epss":0.00379},{"id":"CVE-2026-97406","published":"2026-10-20T18:11:08.475Z","updated":"2026-10-29T17:58:37.254Z","title":"Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting","severity":"CRITICAL","score":9.1,"vendor":"Xerj","product":"Console API","kev":false,"epss":0.00531},{"id":"CVE-2026-113709","published":"2026-10-20T18:08:36.565Z","updated":"2026-10-21T15:52:55.778Z","title":"Argo CD: A Kustomize Helm config home can run commands in the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.0053},{"id":"CVE-2026-113708","published":"2026-10-20T18:03:17.219Z","updated":"2026-10-20T18:43:40.767Z","title":"Argo CD: A Kustomize remote ref can run commands in the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.00666},{"id":"CVE-2026-113672","published":"2026-10-20T18:00:54.522Z","updated":"2026-10-28T14:08:45.208Z","title":"Argo CD: A Jsonnet import can read files from the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.00837},{"id":"CVE-2026-113802","published":"2026-10-20T17:59:55.407Z","updated":"2026-10-21T15:53:04.180Z","title":"Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler","severity":"CRITICAL","score":9.3,"vendor":"Wavlink","product":"WL-WN530BE1-A","kev":false,"epss":0.03472},{"id":"CVE-2026-111756","published":"2026-10-20T17:58:21.005Z","updated":"2026-10-23T01:59:26.728Z","title":"follow-redirects array-form headers bypass cross-origin credential stripping","severity":"HIGH","score":8.2,"vendor":"follow-redirects","product":"follow-redirects","kev":false,"epss":0.00471},{"id":"CVE-2026-105772","published":"2026-10-20T17:50:13.132Z","updated":"2026-10-20T18:08:00.481Z","title":"Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId","severity":"CRITICAL","score":9.1,"vendor":"Google","product":"ADK TypeScript (@google/adk)","kev":false,"epss":0.00513},{"id":"CVE-2026-113711","published":"2026-10-20T17:49:31.040Z","updated":"2026-10-20T19:04:07.167Z","title":"ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export","severity":"HIGH","score":7.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00561},{"id":"CVE-2026-112861","published":"2026-10-20T17:47:26.055Z","updated":"2026-10-21T10:35:07.995Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.3,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00278},{"id":"CVE-2026-113710","published":"2026-10-20T17:46:09.582Z","updated":"2026-10-21T15:53:11.228Z","title":"ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing","severity":"MEDIUM","score":5.9,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.0033},{"id":"CVE-2026-113671","published":"2026-10-20T17:43:53.227Z","updated":"2026-10-20T18:21:05.814Z","title":"ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00329},{"id":"CVE-2026-113669","published":"2026-10-20T17:35:40.136Z","updated":"2026-10-23T01:58:19.763Z","title":"ApostropheCMS: Cross-domain session token in URL confers session takeover","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00416},{"id":"CVE-2026-113667","published":"2026-10-20T17:33:28.418Z","updated":"2026-10-21T15:53:18.916Z","title":"ApostropheCMS: CAPTCHA response token not URL-encoded","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00366},{"id":"CVE-2026-113668","published":"2026-10-20T17:32:07.486Z","updated":"2026-10-20T19:04:47.799Z","title":"ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00322},{"id":"CVE-2026-113507","published":"2026-10-20T17:30:15.196Z","updated":"2026-10-23T01:57:09.895Z","title":"aaPanel common.py GetClientIp access control","severity":"MEDIUM","score":6.9,"vendor":null,"product":"aaPanel","kev":false,"epss":0.00472},{"id":"CVE-2026-113666","published":"2026-10-20T17:25:44.574Z","updated":"2026-10-20T17:43:12.999Z","title":"ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service","severity":"HIGH","score":7.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00444},{"id":"CVE-2026-113665","published":"2026-10-20T17:19:56.123Z","updated":"2026-10-28T13:57:53.391Z","title":"ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints","severity":"LOW","score":3.7,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00349},{"id":"CVE-2026-113506","published":"2026-10-20T17:15:12.655Z","updated":"2026-10-20T19:05:49.453Z","title":"aaPanel File Manager common.py ExecShell os command injection","severity":"CRITICAL","score":9.4,"vendor":null,"product":"aaPanel","kev":false,"epss":0.02077},{"id":"CVE-2026-113664","published":"2026-10-20T17:15:01.932Z","updated":"2026-10-23T01:56:12.528Z","title":"ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00485},{"id":"CVE-2026-113662","published":"2026-10-20T17:13:07.765Z","updated":"2026-10-20T19:05:20.680Z","title":"ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.003},{"id":"CVE-2026-113661","published":"2026-10-20T17:11:20.577Z","updated":"2026-10-21T15:53:24.980Z","title":"ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00263},{"id":"CVE-2026-113660","published":"2026-10-20T17:04:06.548Z","updated":"2026-10-20T17:43:51.404Z","title":"ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00363},{"id":"CVE-2026-113659","published":"2026-10-20T17:00:59.007Z","updated":"2026-10-28T13:59:49.929Z","title":"ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users","severity":"MEDIUM","score":6.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00345},{"id":"CVE-2026-113658","published":"2026-10-20T16:56:01.862Z","updated":"2026-10-23T01:55:01.966Z","title":"ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory","severity":"HIGH","score":7.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00615},{"id":"CVE-2026-92539","published":"2026-10-20T16:55:17.875Z","updated":"2026-10-20T18:08:00.621Z","title":"Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise","severity":"MEDIUM","score":6.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00338},{"id":"CVE-2026-113657","published":"2026-10-20T16:54:12.995Z","updated":"2026-10-20T17:08:06.854Z","title":"ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)","severity":"LOW","score":3.7,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00313},{"id":"CVE-2026-113656","published":"2026-10-20T16:49:36.239Z","updated":"2026-10-21T15:53:31.741Z","title":"ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00462},{"id":"CVE-2026-113649","published":"2026-10-20T16:40:16.363Z","updated":"2026-10-23T01:53:33.434Z","title":"ApostropheCMS: Import API bypasses publication roles for protected content","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00298},{"id":"CVE-2026-113655","published":"2026-10-20T16:38:27.002Z","updated":"2026-10-20T17:19:00.773Z","title":"ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00323},{"id":"CVE-2026-113654","published":"2026-10-20T16:35:55.161Z","updated":"2026-10-28T14:01:09.403Z","title":"ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00432},{"id":"CVE-2026-113653","published":"2026-10-20T16:30:48.998Z","updated":"2026-10-20T17:00:29.913Z","title":"ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)","severity":"MEDIUM","score":6.9,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00387},{"id":"CVE-2026-113652","published":"2026-10-20T16:26:21.986Z","updated":"2026-10-21T15:53:38.704Z","title":"ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)","severity":"MEDIUM","score":5.6,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00277},{"id":"CVE-2026-28330","published":"2026-10-20T16:23:19.940Z","updated":"2026-10-23T16:04:14.841Z","title":"SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability","severity":"MEDIUM","score":4.6,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00282},{"id":"CVE-2026-28329","published":"2026-10-20T16:22:48.111Z","updated":"2026-10-23T16:00:53.960Z","title":"SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)","severity":"MEDIUM","score":6.4,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00292},{"id":"CVE-2026-113651","published":"2026-10-20T16:22:30.842Z","updated":"2026-10-20T17:20:31.152Z","title":"ApostropheCMS: Path traversal in uploadfs","severity":"LOW","score":3.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00328},{"id":"CVE-2026-113650","published":"2026-10-20T16:19:12.100Z","updated":"2026-10-28T14:02:38.500Z","title":"ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.0048},{"id":"CVE-2026-28328","published":"2026-10-20T16:17:18.712Z","updated":"2026-10-23T15:58:55.705Z","title":"SolarWinds Observability Self-Hosted broken authorization schema","severity":"HIGH","score":8.8,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00496},{"id":"CVE-2026-113505","published":"2026-10-20T16:15:14.151Z","updated":"2026-10-21T15:53:45.957Z","title":"aaPanel Download Endpoint v2.py send_file path traversal","severity":"MEDIUM","score":5.3,"vendor":null,"product":"aaPanel","kev":false,"epss":0.00483},{"id":"CVE-2026-28331","published":"2026-10-20T16:11:48.581Z","updated":"2026-10-20T16:59:30.352Z","title":"SolarWinds Patch Manager Sensitive Information Exposure Vulnerability","severity":"MEDIUM","score":4.4,"vendor":"SolarWinds","product":"Patch Manager","kev":false,"epss":0.00193},{"id":"CVE-2026-113648","published":"2026-10-20T16:07:49.138Z","updated":"2026-10-23T01:52:13.055Z","title":"ApostropheCMS: Missing Authentication in `cleanExport` Route","severity":"LOW","score":3.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00328},{"id":"CVE-2026-112958","published":"2026-10-20T16:03:53.041Z","updated":"2026-10-20T16:59:06.566Z","title":"ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00304},{"id":"CVE-2026-112957","published":"2026-10-20T16:02:17.803Z","updated":"2026-10-21T15:53:52.415Z","title":"ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00307},{"id":"CVE-2026-112956","published":"2026-10-20T15:57:27.287Z","updated":"2026-10-20T16:15:02.976Z","title":"ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00339},{"id":"CVE-2026-113703","published":"2026-10-20T15:56:49.963Z","updated":"2026-10-23T13:28:34.182Z","title":"SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing","severity":"CRITICAL","score":9.1,"vendor":"giuseppe99barchetta","product":"SuggestArr","kev":false,"epss":0.00474},{"id":"CVE-2026-112955","published":"2026-10-20T15:53:04.154Z","updated":"2026-10-26T19:38:31.127Z","title":"ApostropheCMS: Import archives can exhaust server storage and deny service","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00525},{"id":"CVE-2026-112954","published":"2026-10-20T15:51:01.621Z","updated":"2026-10-23T01:50:55.523Z","title":"ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00444},{"id":"CVE-2026-112953","published":"2026-10-20T15:47:25.640Z","updated":"2026-10-20T16:22:21.269Z","title":"ApostropheCMS: Exposure of Sensitive Information via predictable export filenames","severity":"MEDIUM","score":6,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00557},{"id":"CVE-2026-112952","published":"2026-10-20T15:44:33.564Z","updated":"2026-10-21T15:53:58.636Z","title":"ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00334},{"id":"CVE-2026-107755","published":"2026-10-20T15:41:22.248Z","updated":"2026-10-20T18:09:53.132Z","title":"Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs","severity":"MEDIUM","score":6,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00594},{"id":"CVE-2026-90800","published":"2026-10-20T15:40:47.497Z","updated":"2026-10-20T18:10:09.013Z","title":"Apache CouchDB: Auth bypass in prefixed _users and _replicator databases","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00633},{"id":"CVE-2026-113683","published":"2026-10-20T15:40:43.190Z","updated":"2026-10-23T01:48:46.789Z","title":"VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename","severity":"MEDIUM","score":5.1,"vendor":"jcrodriguez-dis","product":"moodle-mod_vpl","kev":false,"epss":0.00358},{"id":"CVE-2026-113682","published":"2026-10-20T15:40:42.500Z","updated":"2026-10-23T13:51:42.196Z","title":"Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password","severity":"CRITICAL","score":9.1,"vendor":"networknt","product":"light-4j","kev":false,"epss":0.00562},{"id":"CVE-2026-113681","published":"2026-10-20T15:40:41.797Z","updated":"2026-10-22T09:49:36.614Z","title":"OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read","severity":"MEDIUM","score":6.8,"vendor":"AcademySoftwareFoundation","product":"OpenImageIO","kev":false,"epss":0.00165},{"id":"CVE-2026-113680","published":"2026-10-20T15:40:41.101Z","updated":"2026-10-21T15:54:08.462Z","title":"HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS","severity":"MEDIUM","score":6.8,"vendor":"harfbuzz","product":"harfbuzz","kev":false,"epss":0.00168},{"id":"CVE-2026-113679","published":"2026-10-20T15:40:40.379Z","updated":"2026-10-20T16:21:50.578Z","title":"HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string","severity":"HIGH","score":7.3,"vendor":"harfbuzz","product":"harfbuzz","kev":false,"epss":0.00169},{"id":"CVE-2026-113678","published":"2026-10-20T15:40:39.663Z","updated":"2026-10-23T01:47:53.132Z","title":"Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron","severity":"CRITICAL","score":9.4,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00632},{"id":"CVE-2026-113677","published":"2026-10-20T15:40:38.974Z","updated":"2026-10-20T18:10:52.493Z","title":"Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API","severity":"MEDIUM","score":5.3,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.0045},{"id":"CVE-2026-113676","published":"2026-10-20T15:40:38.273Z","updated":"2026-10-20T16:20:58.011Z","title":"Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get API","severity":"MEDIUM","score":5.3,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00389},{"id":"CVE-2026-113613","published":"2026-10-20T15:40:37.585Z","updated":"2026-10-21T15:54:14.661Z","title":"FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin","severity":"CRITICAL","score":9.2,"vendor":"FlexGet","product":"FlexGet","kev":false,"epss":0.00918},{"id":"CVE-2026-113612","published":"2026-10-20T15:40:36.888Z","updated":"2026-10-20T16:25:31.674Z","title":"SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpoint","severity":"MEDIUM","score":5.3,"vendor":"CodeWithCJ","product":"SparkyFitness","kev":false,"epss":0.00389},{"id":"CVE-2026-113611","published":"2026-10-20T15:40:36.179Z","updated":"2026-10-23T01:46:58.619Z","title":"Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions","severity":"MEDIUM","score":6.9,"vendor":"outline","product":"outline","kev":false,"epss":0.00535},{"id":"CVE-2026-113610","published":"2026-10-20T15:40:35.476Z","updated":"2026-10-20T18:19:50.195Z","title":"Xen Orchestra before 6.9.0 Authorization Bypass via user.set API","severity":"MEDIUM","score":5.3,"vendor":"vatesfr","product":"xen-orchestra","kev":false,"epss":0.00426},{"id":"CVE-2026-113609","published":"2026-10-20T15:40:34.772Z","updated":"2026-10-20T16:20:16.264Z","title":"Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts","severity":"MEDIUM","score":4.8,"vendor":"Bandisoft","product":"Bandizip","kev":false,"epss":0.0018},{"id":"CVE-2026-113608","published":"2026-10-20T15:40:34.083Z","updated":"2026-10-21T15:54:21.518Z","title":"Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var","severity":"MEDIUM","score":6,"vendor":"jleyva","product":"moodle-block_configurablereports","kev":false,"epss":0.00391},{"id":"CVE-2026-113607","published":"2026-10-20T15:40:33.391Z","updated":"2026-10-20T16:28:22.834Z","title":"Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data","severity":"HIGH","score":7.1,"vendor":"jleyva","product":"moodle-block_configurablereports","kev":false,"epss":0.00424},{"id":"CVE-2026-113606","published":"2026-10-20T15:40:32.691Z","updated":"2026-10-23T01:46:06.996Z","title":"Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders","severity":"HIGH","score":7.1,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00364},{"id":"CVE-2026-113605","published":"2026-10-20T15:40:32.050Z","updated":"2026-10-20T18:06:57.644Z","title":"Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database","severity":"HIGH","score":8.6,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00661},{"id":"CVE-2026-113604","published":"2026-10-20T15:40:31.409Z","updated":"2026-10-20T16:19:49.190Z","title":"Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.00163},{"id":"CVE-2026-113603","published":"2026-10-20T15:40:30.742Z","updated":"2026-10-21T15:54:28.895Z","title":"x402 @x402/extensions 2.3.1 through 2.28.0 SIWX Payment Bypass via PaymentPayload.resource","severity":"MEDIUM","score":6.9,"vendor":"x402-foundation","product":"@x402/extensions","kev":false,"epss":0.00356},{"id":"CVE-2026-113602","published":"2026-10-20T15:40:29.753Z","updated":"2026-10-20T16:30:53.742Z","title":"json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character","severity":"MEDIUM","score":6.9,"vendor":"json-smart","product":"json-smart","kev":false,"epss":0.00449},{"id":"CVE-2026-113601","published":"2026-10-20T15:40:28.941Z","updated":"2026-10-23T01:44:39.769Z","title":"Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity","severity":"MEDIUM","score":5.3,"vendor":"usememos","product":"memos","kev":false,"epss":0.00306},{"id":"CVE-2026-113600","published":"2026-10-20T15:40:28.303Z","updated":"2026-10-23T13:53:31.012Z","title":"Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy","severity":"MEDIUM","score":5.3,"vendor":"fatfreecrm","product":"fat_free_crm","kev":false,"epss":0.0034},{"id":"CVE-2026-113599","published":"2026-10-20T15:40:27.636Z","updated":"2026-10-20T16:19:21.574Z","title":"Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation","severity":"MEDIUM","score":5.3,"vendor":"modoboa","product":"modoboa","kev":false,"epss":0.0034},{"id":"CVE-2026-113598","published":"2026-10-20T15:40:26.960Z","updated":"2026-10-21T15:54:34.976Z","title":"Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete","severity":"MEDIUM","score":5.3,"vendor":"modoboa","product":"modoboa","kev":false,"epss":0.00301},{"id":"CVE-2026-113597","published":"2026-10-20T15:40:26.082Z","updated":"2026-10-20T16:40:26.591Z","title":"Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures","severity":"MEDIUM","score":5.3,"vendor":"blinkospace","product":"blinko","kev":false,"epss":0.00272},{"id":"CVE-2026-113596","published":"2026-10-20T15:40:25.087Z","updated":"2026-10-23T01:43:56.739Z","title":"Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds","severity":"LOW","score":2.3,"vendor":"webstudio-is","product":"webstudio","kev":false,"epss":0.00351},{"id":"CVE-2026-113595","published":"2026-10-20T15:40:24.447Z","updated":"2026-10-23T13:55:55.388Z","title":"Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route","severity":"MEDIUM","score":5.3,"vendor":"Sharkord","product":"sharkord","kev":false,"epss":0.00317},{"id":"CVE-2026-113594","published":"2026-10-20T15:40:23.782Z","updated":"2026-10-20T16:17:58.243Z","title":"Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route","severity":"MEDIUM","score":5.3,"vendor":"Sharkord","product":"sharkord","kev":false,"epss":0.0034},{"id":"CVE-2026-113359","published":"2026-10-20T15:40:23.156Z","updated":"2026-10-21T15:54:41.612Z","title":"Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint","severity":"MEDIUM","score":5.3,"vendor":"Baserow","product":"Baserow","kev":false,"epss":0.00339},{"id":"CVE-2025-71436","published":"2026-10-20T15:40:22.461Z","updated":"2026-10-20T16:41:49.461Z","title":"Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag","severity":"HIGH","score":7.1,"vendor":"librdf","product":"Raptor RDF Syntax Library","kev":false,"epss":0.00496},{"id":"CVE-2026-90799","published":"2026-10-20T15:40:16.600Z","updated":"2026-10-20T18:10:08.069Z","title":"Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values","severity":"LOW","score":1.3,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00644},{"id":"CVE-2026-90798","published":"2026-10-20T15:39:52.048Z","updated":"2026-10-20T18:10:07.139Z","title":"Apache CouchDB: Replicator follows redirects indefinitely","severity":"LOW","score":0.6,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00596},{"id":"CVE-2026-90797","published":"2026-10-20T15:39:23.376Z","updated":"2026-10-20T18:10:06.210Z","title":"Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00669},{"id":"CVE-2026-86471","published":"2026-10-20T15:38:09.681Z","updated":"2026-10-21T03:56:24.122Z","title":"Apache CouchDB: Admin credentials leading to code execution as operating system user","severity":"CRITICAL","score":9.3,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00606},{"id":"CVE-2026-112951","published":"2026-10-20T15:33:09.945Z","updated":"2026-10-20T16:43:32.126Z","title":"ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00304},{"id":"CVE-2026-93003","published":"2026-10-20T15:24:53.662Z","updated":"2026-10-20T17:06:47.687Z","title":"NetX Duo Web HTTP server interprets request body content as HTTP header fields","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00329},{"id":"CVE-2026-112950","published":"2026-10-20T15:21:32.396Z","updated":"2026-10-28T14:04:58.744Z","title":"Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix","severity":"MEDIUM","score":5.9,"vendor":"vitest-dev","product":"vitest","kev":false,"epss":0.00542},{"id":"CVE-2026-95107","published":"2026-10-20T15:20:15.011Z","updated":"2026-10-20T17:05:35.811Z","title":"Module object allocation size overflow corrupts the manager object pool","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00154},{"id":"CVE-2026-94202","published":"2026-10-20T15:19:43.014Z","updated":"2026-10-20T17:04:52.595Z","title":"Module block-pool create validates two of the four parameter words it reads","severity":"MEDIUM","score":4.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00154},{"id":"CVE-2026-95108","published":"2026-10-20T15:19:16.940Z","updated":"2026-10-20T17:06:10.079Z","title":"Deleting a user-mode module thread leaks its privileged kernel stack","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00171},{"id":"CVE-2026-112949","published":"2026-10-20T15:19:03.799Z","updated":"2026-10-23T01:42:51.858Z","title":"Vitest: Code injection via unauthenticated manual mock registration","severity":"MEDIUM","score":4.7,"vendor":"vitest-dev","product":"vitest","kev":false,"epss":0.00336},{"id":"CVE-2026-94024","published":"2026-10-20T15:18:28.242Z","updated":"2026-10-20T17:01:07.513Z","title":"Module Manager object lookup validates one byte of a module's search name","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00141},{"id":"CVE-2026-94023","published":"2026-10-20T15:18:09.957Z","updated":"2026-10-20T17:03:48.170Z","title":"Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00129},{"id":"CVE-2026-95109","published":"2026-10-20T15:17:20.023Z","updated":"2026-10-20T17:07:15.973Z","title":"Cortex-A7 module data validation checks only the first address of a caller-supplied range","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00147},{"id":"CVE-2026-94192","published":"2026-10-20T15:15:06.222Z","updated":"2026-10-20T17:04:24.537Z","title":"Module object deallocation can free a live ThreadX kernel object","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00147},{"id":"CVE-2026-112948","published":"2026-10-20T15:15:01.927Z","updated":"2026-10-20T16:16:59.623Z","title":"Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file","severity":"MEDIUM","score":6.5,"vendor":"vitest-dev","product":"vitest","kev":false,"epss":0.004},{"id":"CVE-2026-112823","published":"2026-10-20T15:14:13.192Z","updated":"2026-10-21T10:35:08.137Z","title":"WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP User Manager","product":"WP User Manager","kev":false,"epss":0.00235},{"id":"CVE-2026-112824","published":"2026-10-20T15:13:47.804Z","updated":"2026-10-20T16:16:17.587Z","title":"WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Bus Ticket Booking with Seat Reservation","kev":false,"epss":0.00272},{"id":"CVE-2026-92843","published":"2026-10-20T15:12:55.919Z","updated":"2026-10-20T17:08:35.381Z","title":"Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00297},{"id":"CVE-2026-111843","published":"2026-10-20T15:12:05.376Z","updated":"2026-10-21T10:35:08.438Z","title":"WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"CozyThemes","product":"Rootblox","kev":false,"epss":0.00204},{"id":"CVE-2026-112829","published":"2026-10-20T15:11:43.228Z","updated":"2026-10-21T10:35:08.582Z","title":"WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00289},{"id":"CVE-2026-112840","published":"2026-10-20T15:10:54.998Z","updated":"2026-10-21T10:35:08.866Z","title":"WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"SureCart","kev":false,"epss":0.00204},{"id":"CVE-2026-111765","published":"2026-10-20T15:10:51.321Z","updated":"2026-10-22T21:32:18.921Z","title":"A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix","severity":"HIGH","score":7.5,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00803},{"id":"CVE-2026-112947","published":"2026-10-20T15:10:51.025Z","updated":"2026-10-21T15:54:49.530Z","title":"Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`","severity":"MEDIUM","score":6.3,"vendor":"vitejs","product":"vite","kev":false,"epss":0.00502},{"id":"CVE-2026-112836","published":"2026-10-20T15:10:13.770Z","updated":"2026-10-20T16:44:17.508Z","title":"WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.00177},{"id":"CVE-2026-92853","published":"2026-10-20T15:10:08.102Z","updated":"2026-10-20T17:02:19.980Z","title":"Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00297},{"id":"CVE-2026-94018","published":"2026-10-20T15:10:08.098Z","updated":"2026-10-20T17:03:21.440Z","title":"NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00395},{"id":"CVE-2026-109700","published":"2026-10-20T15:06:51.007Z","updated":"2026-10-20T17:21:58.344Z","title":"WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"eLightUp","product":"Meta Box – WordPress Custom Fields Framework","kev":false,"epss":0.00315},{"id":"CVE-2026-111764","published":"2026-10-20T15:05:26.905Z","updated":"2026-10-20T16:15:50.172Z","title":"A2A Java SDK has a fail-open default task authorization","severity":"HIGH","score":7.5,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00604},{"id":"CVE-2026-93475","published":"2026-10-20T15:04:30.044Z","updated":"2026-10-20T17:02:52.372Z","title":"Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - NetX Duo","kev":false,"epss":0.00246},{"id":"CVE-2026-112946","published":"2026-10-20T15:03:55.196Z","updated":"2026-10-20T16:46:18.810Z","title":"Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine","severity":"MEDIUM","score":6.3,"vendor":"vitejs","product":"vite","kev":false,"epss":0.00852},{"id":"CVE-2026-111763","published":"2026-10-20T15:03:28.034Z","updated":"2026-10-21T15:54:55.582Z","title":"A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect","severity":"MEDIUM","score":5.7,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00141},{"id":"CVE-2026-91057","published":"2026-10-20T15:01:30.043Z","updated":"2026-10-20T17:01:50.314Z","title":"Out-of-bounds read when a multi-line text view string ends with a carriage return","severity":"MEDIUM","score":4.6,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159},{"id":"CVE-2026-112945","published":"2026-10-20T15:00:58.170Z","updated":"2026-10-28T14:11:03.638Z","title":"Vite: Cross origin script execution through Vite custom middleware","severity":"LOW","score":2.1,"vendor":"vitejs","product":"vite","kev":false,"epss":0.00672},{"id":"CVE-2026-92454","published":"2026-10-20T14:58:36.821Z","updated":"2026-10-20T15:21:42.800Z","title":"JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00151},{"id":"CVE-2026-112944","published":"2026-10-20T14:57:38.728Z","updated":"2026-10-20T15:23:12.248Z","title":"launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors","severity":"MEDIUM","score":6.3,"vendor":"vitejs","product":"launch-editor","kev":false,"epss":0.00705},{"id":"CVE-2026-111762","published":"2026-10-20T14:56:57.632Z","updated":"2026-10-28T14:12:15.553Z","title":"A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure","severity":"MEDIUM","score":5.7,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00174},{"id":"CVE-2026-111761","published":"2026-10-20T14:54:46.950Z","updated":"2026-10-22T21:30:39.670Z","title":"A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery","severity":"MEDIUM","score":5.8,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00586},{"id":"CVE-2026-91059","published":"2026-10-20T14:54:37.119Z","updated":"2026-10-20T15:24:14.860Z","title":"JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159},{"id":"CVE-2026-112834","published":"2026-10-20T14:53:47.737Z","updated":"2026-10-21T10:28:09.573Z","title":"WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Castos","product":"Seriously Simple Podcasting","kev":false,"epss":0.0027},{"id":"CVE-2026-91189","published":"2026-10-20T14:53:44.860Z","updated":"2026-10-20T15:25:24.066Z","title":"GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme","severity":"HIGH","score":7.1,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00135},{"id":"CVE-2026-112943","published":"2026-10-20T14:53:41.777Z","updated":"2026-10-20T15:13:40.862Z","title":"launch-editor: escapeCmdArgs() omits % escaping on Windows","severity":"MEDIUM","score":6.3,"vendor":"vitejs","product":"launch-editor","kev":false,"epss":0.00414},{"id":"CVE-2026-112833","published":"2026-10-20T14:53:14.184Z","updated":"2026-10-20T15:14:09.857Z","title":"WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Castos","product":"Seriously Simple Podcasting","kev":false,"epss":0.0017},{"id":"CVE-2026-92446","published":"2026-10-20T14:52:45.765Z","updated":"2026-10-20T15:26:36.082Z","title":"GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159},{"id":"CVE-2026-92449","published":"2026-10-20T14:51:24.582Z","updated":"2026-10-20T15:27:55.848Z","title":"Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159},{"id":"CVE-2026-112942","published":"2026-10-20T14:48:06.676Z","updated":"2026-10-21T15:55:05.963Z","title":"launch-editor: `fs.existsSync()` existence check can be bypassed on Windows","severity":"HIGH","score":7.5,"vendor":"vitejs","product":"launch-editor","kev":false,"epss":0.01344},{"id":"CVE-2026-91186","published":"2026-10-20T14:47:52.216Z","updated":"2026-10-20T15:28:59.237Z","title":"PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - GUIX","kev":false,"epss":0.00159},{"id":"CVE-2026-113466","published":"2026-10-20T14:45:12.542Z","updated":"2026-10-20T15:31:34.898Z","title":"MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key","severity":"MEDIUM","score":6.9,"vendor":null,"product":"MinIO","kev":false,"epss":0.00377},{"id":"CVE-2026-112941","published":"2026-10-20T14:43:18.060Z","updated":"2026-10-28T14:14:54.297Z","title":"filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock","severity":"LOW","score":3.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00131},{"id":"CVE-2026-112940","published":"2026-10-20T14:41:49.555Z","updated":"2026-10-22T21:29:27.209Z","title":"filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files","severity":"HIGH","score":7.1,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.0019},{"id":"CVE-2026-92162","published":"2026-10-20T14:39:50.538Z","updated":"2026-10-20T15:32:18.640Z","title":"Flatpak vulnerable to path traversal via unvalidated \"arch\" parameter in DeployAppstream","severity":"HIGH","score":7.2,"vendor":"flatpak","product":"flatpak","kev":false,"epss":0.00233},{"id":"CVE-2026-112939","published":"2026-10-20T14:38:52.373Z","updated":"2026-10-20T15:14:56.836Z","title":"filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker","severity":"MEDIUM","score":4.7,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.0014},{"id":"CVE-2026-112937","published":"2026-10-20T14:36:28.129Z","updated":"2026-10-21T15:55:14.113Z","title":"filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name","severity":"MEDIUM","score":6.1,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00162},{"id":"CVE-2026-95111","published":"2026-10-20T14:35:40.629Z","updated":"2026-10-20T15:34:45.488Z","title":"Module queue front-send validates a word count as a byte count","severity":"MEDIUM","score":4.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00141},{"id":"CVE-2026-112936","published":"2026-10-20T14:34:47.210Z","updated":"2026-10-20T16:47:39.872Z","title":"filelock: ReadWriteLock follows a symlink at the lock path into SQLite","severity":"MEDIUM","score":6.1,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00232},{"id":"CVE-2026-112935","published":"2026-10-20T14:32:25.740Z","updated":"2026-10-28T14:17:06.745Z","title":"filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders","severity":"MEDIUM","score":4.7,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00132},{"id":"CVE-2026-96402","published":"2026-10-20T14:31:34.182Z","updated":"2026-10-20T15:36:16.427Z","title":"USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count","severity":"MEDIUM","score":5.2,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - USBX","kev":false,"epss":0.00184},{"id":"CVE-2026-112934","published":"2026-10-20T14:30:43.736Z","updated":"2026-10-22T21:28:27.242Z","title":"filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record","severity":"MEDIUM","score":6.1,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00233},{"id":"CVE-2026-113411","published":"2026-10-20T14:30:19.695Z","updated":"2026-10-22T21:27:16.027Z","title":"Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme","severity":"MEDIUM","score":5.3,"vendor":"Nerimity","product":"Desktop","kev":false,"epss":0.00287},{"id":"CVE-2026-112915","published":"2026-10-20T14:28:41.520Z","updated":"2026-10-20T15:25:38.592Z","title":"filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout","severity":"MEDIUM","score":5.5,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00218},{"id":"CVE-2026-112914","published":"2026-10-20T14:26:18.813Z","updated":"2026-10-21T15:55:21.992Z","title":"filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory","severity":"MEDIUM","score":5.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00161},{"id":"CVE-2026-112912","published":"2026-10-20T14:23:18.993Z","updated":"2026-10-20T15:37:56.208Z","title":"filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker","severity":"LOW","score":2.5,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00213},{"id":"CVE-2026-112911","published":"2026-10-20T14:21:24.480Z","updated":"2026-10-28T15:09:43.507Z","title":"filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion","severity":"MEDIUM","score":6.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00148},{"id":"CVE-2026-112909","published":"2026-10-20T14:16:02.317Z","updated":"2026-10-22T21:25:25.906Z","title":"filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path","severity":"MEDIUM","score":6.1,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.0022},{"id":"CVE-2026-113397","published":"2026-10-20T14:15:12.272Z","updated":"2026-10-20T15:26:34.813Z","title":"DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.01013},{"id":"CVE-2026-112906","published":"2026-10-20T14:09:51.934Z","updated":"2026-10-20T15:27:25.903Z","title":"filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse","severity":"MEDIUM","score":4.7,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00168},{"id":"CVE-2026-97400","published":"2026-10-20T14:08:17.229Z","updated":"2026-10-20T15:39:43.964Z","title":"jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00164},{"id":"CVE-2026-113396","published":"2026-10-20T14:00:20.722Z","updated":"2026-10-20T16:06:08.119Z","title":"DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.01566},{"id":"CVE-2026-103119","published":"2026-10-20T13:54:13.558Z","updated":"2026-10-20T18:09:52.183Z","title":"Apache Tomcat: AJP response mix-up","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00586},{"id":"CVE-2026-101356","published":"2026-10-20T13:46:50.842Z","updated":"2026-10-20T18:17:42.030Z","title":"Apache Tomcat: HTTP/2 request/response mix-up after error during async processing","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00499},{"id":"CVE-2026-101296","published":"2026-10-20T13:45:39.959Z","updated":"2026-10-21T06:31:55.233Z","title":"Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00627},{"id":"CVE-2026-113395","published":"2026-10-20T13:45:18.065Z","updated":"2026-10-20T15:50:25.375Z","title":"DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.00397},{"id":"CVE-2026-93446","published":"2026-10-20T13:44:35.673Z","updated":"2026-10-29T17:57:06.247Z","title":"Apache Tomcat: Possible TLS 1.3 connection failures","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00592},{"id":"CVE-2026-88041","published":"2026-10-20T13:43:28.681Z","updated":"2026-10-29T17:54:59.322Z","title":"Apache Tomcat: HTTP/2 trailer header cross-contamination","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00514},{"id":"CVE-2026-80353","published":"2026-10-20T13:42:05.844Z","updated":"2026-10-29T17:50:58.393Z","title":"Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.00392},{"id":"CVE-2026-74049","published":"2026-10-20T13:37:43.471Z","updated":"2026-10-29T17:47:31.001Z","title":"Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)","severity":"MEDIUM","score":6.1,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.0037},{"id":"CVE-2026-74048","published":"2026-10-20T13:36:36.859Z","updated":"2026-10-29T17:45:04.109Z","title":"Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Tomcat","kev":false,"epss":0.0045},{"id":"CVE-2026-113394","published":"2026-10-20T13:30:14.054Z","updated":"2026-10-22T21:24:18.507Z","title":"DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.00377},{"id":"CVE-2026-96406","published":"2026-10-20T13:17:37.426Z","updated":"2026-10-20T15:28:49.518Z","title":"VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound","severity":"MEDIUM","score":4.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX -  USBX","kev":false,"epss":0.0017},{"id":"CVE-2026-113393","published":"2026-10-20T13:15:17.265Z","updated":"2026-10-20T13:40:05.782Z","title":"DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.0033},{"id":"CVE-2026-96582","published":"2026-10-20T13:13:39.177Z","updated":"2026-10-20T15:29:25.262Z","title":"Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser","severity":"MEDIUM","score":4.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - USBX","kev":false,"epss":0.0017},{"id":"CVE-2026-91041","published":"2026-10-20T13:10:14.903Z","updated":"2026-10-20T15:30:22.550Z","title":"FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image","severity":"HIGH","score":7.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX - FileX","kev":false,"epss":0.00164},{"id":"CVE-2026-113392","published":"2026-10-20T13:00:16.852Z","updated":"2026-10-20T16:06:14.838Z","title":"DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal","severity":"MEDIUM","score":5.3,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.00397},{"id":"CVE-2026-105941","published":"2026-10-20T12:59:00.134Z","updated":"2026-10-20T22:34:19.300Z","title":"Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"streams for Apache Kafka 3","kev":false,"epss":0.00249},{"id":"CVE-2026-113401","published":"2026-10-20T12:58:16.245Z","updated":"2026-10-20T19:14:54.271Z","title":"Denial-of-service in the PDF Viewer component","severity":"MEDIUM","score":6.5,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00348},{"id":"CVE-2026-113400","published":"2026-10-20T12:58:15.589Z","updated":"2026-10-20T19:14:53.886Z","title":"Uninitialized memory in the Audio/Video: cubeb component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00257},{"id":"CVE-2026-113399","published":"2026-10-20T12:58:14.968Z","updated":"2026-10-29T17:44:03.368Z","title":"Incorrect boundary conditions in the SVG component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00489},{"id":"CVE-2026-113470","published":"2026-10-20T12:58:14.250Z","updated":"2026-10-21T19:20:41.189Z","title":"Cryptographic issue in the Security Block-lists, Allow-lists, and other State component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0046},{"id":"CVE-2026-113391","published":"2026-10-20T12:45:19.982Z","updated":"2026-10-20T15:52:14.652Z","title":"DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection","severity":"CRITICAL","score":9.4,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.02063},{"id":"CVE-2026-113620","published":"2026-10-20T12:34:08.238Z","updated":"2026-10-20T15:33:16.426Z","title":"Eclipse ioFog operator WebSocket accepts an unverified JWT","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00286},{"id":"CVE-2026-113390","published":"2026-10-20T12:30:17.628Z","updated":"2026-10-22T21:23:26.169Z","title":"DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection","severity":"CRITICAL","score":9.4,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.01863},{"id":"CVE-2026-113619","published":"2026-10-20T12:23:27.962Z","updated":"2026-10-20T15:35:01.372Z","title":"Eclipse ioFog renders request templates before authentication","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00403},{"id":"CVE-2026-34485","published":"2026-10-20T12:13:17.792Z","updated":"2026-10-29T17:40:16.968Z","title":"A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)","severity":"HIGH","score":7.8,"vendor":"Nokia","product":"Nokia 1830 Global Express (GX)","kev":false,"epss":0.00153},{"id":"CVE-2026-34484","published":"2026-10-20T12:10:44.965Z","updated":"2026-10-29T17:37:38.761Z","title":"A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)","severity":"MEDIUM","score":6.7,"vendor":"Nokia","product":"Nokia 1830 Global Express (GX)","kev":false,"epss":0.00148},{"id":"CVE-2026-113389","published":"2026-10-20T12:00:14.778Z","updated":"2026-10-20T13:41:08.841Z","title":"DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection","severity":"CRITICAL","score":9.4,"vendor":"DrayTek","product":"Vigor2960","kev":false,"epss":0.0188},{"id":"CVE-2026-113388","published":"2026-10-20T11:45:15.583Z","updated":"2026-10-20T16:06:22.411Z","title":"opensource-socialnetwork Cache Settings dynamic.php input code injection","severity":"MEDIUM","score":4.8,"vendor":null,"product":"opensource-socialnetwork","kev":false,"epss":0.00233},{"id":"CVE-2026-113583","published":"2026-10-20T11:35:29.543Z","updated":"2026-10-23T13:28:33.480Z","title":"Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js","severity":"MEDIUM","score":5.3,"vendor":"cypht-org","product":"cypht","kev":false,"epss":0.00389},{"id":"CVE-2026-105949","published":"2026-10-20T11:30:29.296Z","updated":"2026-10-23T10:31:59.027Z","title":"Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints","severity":"HIGH","score":8.8,"vendor":null,"product":"Cruise Control for Apache Kafka","kev":false,"epss":0.00328},{"id":"CVE-2026-105312","published":"2026-10-20T11:30:20.850Z","updated":"2026-10-20T22:33:57.620Z","title":"Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation","severity":"CRITICAL","score":9.9,"vendor":"Red Hat","product":"StreamsHub Console for Apache Kafka®","kev":false,"epss":0.00336},{"id":"CVE-2026-105311","published":"2026-10-20T11:30:09.568Z","updated":"2026-10-21T20:44:12.089Z","title":"Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy","severity":"HIGH","score":7.7,"vendor":"Red Hat","product":"StreamsHub Console for Apache Kafka®","kev":false,"epss":0.00296},{"id":"CVE-2026-18205","published":"2026-10-20T11:24:49.050Z","updated":"2026-10-20T15:34:08.899Z","title":"XSS in Ticimax Informatics' Ticimax E-Commerce Platform","severity":"MEDIUM","score":6.1,"vendor":"Ticimax Informatics Technologies Inc.","product":"Ticimax E-Commerce Platform","kev":false,"epss":0.00209},{"id":"CVE-2026-113385","published":"2026-10-20T11:15:14.699Z","updated":"2026-10-20T13:24:51.599Z","title":"LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components","severity":"MEDIUM","score":4.8,"vendor":"LeeDrOiD Labs","product":"Shortcutter 2 App","kev":false,"epss":0.00134},{"id":"CVE-2026-113496","published":"2026-10-20T11:09:12.095Z","updated":"2026-10-30T07:07:23.817Z","title":"Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments","severity":"MEDIUM","score":5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00143},{"id":"CVE-2026-113495","published":"2026-10-20T11:09:07.286Z","updated":"2026-10-30T07:07:22.986Z","title":"Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments","severity":"MEDIUM","score":5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00156},{"id":"CVE-2026-14933","published":"2026-10-20T11:08:43.830Z","updated":"2026-10-20T15:28:15.051Z","title":"Unblu Spark Cross-Site Scripting in Embedded Co-Browsing","severity":"HIGH","score":8.6,"vendor":"Unblu inc.","product":"Unblu Spark","kev":false,"epss":0.0056},{"id":"CVE-2026-9589","published":"2026-10-20T11:01:14.409Z","updated":"2026-10-20T15:36:00.992Z","title":"Unblu Spark Authorization Bypass in Configuration Cascade Operations","severity":"CRITICAL","score":9.3,"vendor":"Unblu inc.","product":"Unblu Spark","kev":false,"epss":0.00359},{"id":"CVE-2026-113384","published":"2026-10-20T11:00:12.874Z","updated":"2026-10-22T21:20:39.735Z","title":"Optimal IdM OptimalCloud social redirect","severity":"MEDIUM","score":5.3,"vendor":"Optimal IdM","product":"OptimalCloud","kev":false,"epss":0.00312},{"id":"CVE-2026-113383","published":"2026-10-20T10:45:12.816Z","updated":"2026-10-20T13:42:01.165Z","title":"Optimal IdM OptimalCloud Login cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Optimal IdM","product":"OptimalCloud","kev":false,"epss":0.0033},{"id":"CVE-2026-113358","published":"2026-10-20T10:41:42.303Z","updated":"2026-10-20T14:31:08.984Z","title":"LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes","severity":"HIGH","score":8.7,"vendor":"lavalite","product":"cms","kev":false,"epss":0.00441},{"id":"CVE-2026-113357","published":"2026-10-20T10:41:41.607Z","updated":"2026-10-20T13:42:52.211Z","title":"@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker","severity":"MEDIUM","score":5.1,"vendor":"tester-army","product":"@e2e-dev/github","kev":false,"epss":0.00217},{"id":"CVE-2026-113356","published":"2026-10-20T10:41:40.897Z","updated":"2026-10-20T16:06:40.238Z","title":"DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition","severity":"HIGH","score":7.7,"vendor":"DokuWiki","product":"DokuWiki","kev":false,"epss":0.00543},{"id":"CVE-2026-113355","published":"2026-10-20T10:41:40.212Z","updated":"2026-10-20T13:25:35.524Z","title":"Chatwoot before 4.14.0 Stored XSS via Help Center Video Embed Links","severity":"MEDIUM","score":4.8,"vendor":"chatwoot","product":"chatwoot","kev":false,"epss":0.00229},{"id":"CVE-2026-113354","published":"2026-10-20T10:41:39.517Z","updated":"2026-10-22T21:19:59.100Z","title":"Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content","severity":"HIGH","score":7.1,"vendor":"Finsys","product":"dockhand","kev":false,"epss":0.00375},{"id":"CVE-2026-113353","published":"2026-10-20T10:41:38.826Z","updated":"2026-10-20T14:32:51.446Z","title":"LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers","severity":"MEDIUM","score":5.3,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00285},{"id":"CVE-2026-113352","published":"2026-10-20T10:41:38.136Z","updated":"2026-10-20T13:43:42.347Z","title":"uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers","severity":"HIGH","score":7.7,"vendor":"uTox","product":"uTox","kev":false,"epss":0.00586},{"id":"CVE-2026-113351","published":"2026-10-20T10:41:37.468Z","updated":"2026-10-20T16:06:48.218Z","title":"libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset","severity":"HIGH","score":8.2,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00474},{"id":"CVE-2026-113350","published":"2026-10-20T10:41:36.780Z","updated":"2026-10-20T13:26:16.586Z","title":"react-admin before 5.15.5 Stored XSS via UrlField and FileField","severity":"MEDIUM","score":5.1,"vendor":"marmelab","product":"react-admin","kev":false,"epss":0.00214},{"id":"CVE-2026-113349","published":"2026-10-20T10:41:36.105Z","updated":"2026-10-22T21:19:07.705Z","title":"OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00261},{"id":"CVE-2026-112787","published":"2026-10-20T10:41:35.393Z","updated":"2026-10-20T15:34:19.374Z","title":"OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00287},{"id":"CVE-2026-112786","published":"2026-10-20T10:41:34.689Z","updated":"2026-10-20T13:44:48.249Z","title":"OpenCATS before 0.10.0 Missing Authorization via Import Revert Action","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00274},{"id":"CVE-2026-112785","published":"2026-10-20T10:41:33.992Z","updated":"2026-10-20T16:06:56.326Z","title":"OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00267},{"id":"CVE-2026-112784","published":"2026-10-20T10:41:33.303Z","updated":"2026-10-20T13:27:10.134Z","title":"OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00245},{"id":"CVE-2026-112783","published":"2026-10-20T10:41:32.643Z","updated":"2026-10-22T21:18:06.358Z","title":"OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints","severity":"MEDIUM","score":5.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00255},{"id":"CVE-2026-108089","published":"2026-10-20T10:25:54.169Z","updated":"2026-10-20T18:09:56.937Z","title":"Apache Cocoon: Unauthenticated access to diagnostic interfaces","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Cocoon","kev":false,"epss":0.0049},{"id":"CVE-2026-108088","published":"2026-10-20T10:25:33.049Z","updated":"2026-10-29T17:33:40.096Z","title":"Apache Cocoon: Cross-user cache poisoning","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Cocoon","kev":false,"epss":0.0046},{"id":"CVE-2026-108087","published":"2026-10-20T10:25:12.654Z","updated":"2026-10-29T18:21:55.393Z","title":"Apache Cocoon: SQL Injection","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Cocoon","kev":false,"epss":0.00428},{"id":"CVE-2026-108086","published":"2026-10-20T10:24:53.426Z","updated":"2026-10-29T18:19:05.421Z","title":"Apache Cocoon: XEE could lead to SSRF and information disclosure","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Cocoon","kev":false,"epss":0.00416},{"id":"CVE-2026-113382","published":"2026-10-20T10:15:19.899Z","updated":"2026-10-20T16:07:05.630Z","title":"arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"arizu-id","product":"fast-tunnel","kev":false,"epss":0.00262},{"id":"CVE-2026-107597","published":"2026-10-20T10:06:37.127Z","updated":"2026-10-20T15:36:50.392Z","title":"jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme","severity":"MEDIUM","score":5.1,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00359},{"id":"CVE-2026-108062","published":"2026-10-20T10:04:35.382Z","updated":"2026-10-20T15:41:39.646Z","title":"Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse CSI - PIA","kev":false,"epss":0.00467},{"id":"CVE-2026-111844","published":"2026-10-20T09:47:10.054Z","updated":"2026-10-20T16:07:12.280Z","title":"WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brizy","product":"Brizy","kev":false,"epss":0.00204},{"id":"CVE-2026-113381","published":"2026-10-20T09:45:06.205Z","updated":"2026-10-20T13:28:23.121Z","title":"Osclass Item Model Item.php findUserItems sql injection","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Osclass","kev":false,"epss":0.00382},{"id":"CVE-2026-112069","published":"2026-10-20T09:30:57.192Z","updated":"2026-10-20T15:42:06.502Z","title":"Broken Access Control in extension \"FAL Protect\" (fal_protect)","severity":"MEDIUM","score":6.3,"vendor":"TYPO3","product":"Extension \"FAL Protect\"","kev":false,"epss":0.00474},{"id":"CVE-2026-112065","published":"2026-10-20T09:30:56.537Z","updated":"2026-10-20T15:42:28.575Z","title":"Missing Authorization in extension \"sgalinski Cookie Consent\" (sg_cookie_optin)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"sgalinski Cookie Consent\"","kev":false,"epss":0.00324},{"id":"CVE-2026-112064","published":"2026-10-20T09:30:55.821Z","updated":"2026-10-24T07:24:17.633Z","title":"SQL Injection in extension \"sgalinski Cookie Consent\" (sg_cookie_optin)","severity":"HIGH","score":7.1,"vendor":"TYPO3","product":"Extension \"sgalinski Cookie Consent\"","kev":false,"epss":0.00366},{"id":"CVE-2026-112066","published":"2026-10-20T09:30:55.117Z","updated":"2026-10-20T15:43:32.519Z","title":"Missing Authorization in extension \"sgalinski Cookie Consent\" (sg_cookie_optin)","severity":"HIGH","score":7.1,"vendor":"TYPO3","product":"Extension \"sgalinski Cookie Consent\"","kev":false,"epss":0.00437},{"id":"CVE-2026-112067","published":"2026-10-20T09:30:54.371Z","updated":"2026-10-24T07:24:57.721Z","title":"Captcha Bypass in extension \"Accessible Form Captcha\" (bw_captcha)","severity":"MEDIUM","score":6.9,"vendor":"TYPO3","product":"Extension \"Accessible Form Captcha\"","kev":false,"epss":0.00375},{"id":"CVE-2026-112068","published":"2026-10-20T09:30:53.630Z","updated":"2026-10-20T19:07:15.315Z","title":"Insecure Direct Object Reference in extension \"Analytics\" (analytics)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"Analytics\"","kev":false,"epss":0.00324},{"id":"CVE-2026-112237","published":"2026-10-20T09:30:52.452Z","updated":"2026-10-20T19:06:47.976Z","title":"Server-Side Request Forgery in extension \"Kitodo.Presentation\" (dlf)","severity":"MEDIUM","score":6.9,"vendor":"TYPO3","product":"Extension \"Kitodo.Presentation\"","kev":false,"epss":0.00387},{"id":"CVE-2026-112240","published":"2026-10-20T09:30:51.530Z","updated":"2026-10-20T16:13:19.980Z","title":"Broken Access Control in extension \"TYPO3 Fluid-Form by coding.ms\" (fluid_form)","severity":"MEDIUM","score":6.3,"vendor":"TYPO3","product":"Extension \"TYPO3 Fluid-Form by coding.ms\"","kev":false,"epss":0.00387},{"id":"CVE-2026-113442","published":"2026-10-20T09:30:50.528Z","updated":"2026-10-20T15:43:57.631Z","title":"Cross-Site Scripting in extension \"TYPO3 Fluid-Form by coding.ms\" (fluid_form)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"TYPO3 Fluid-Form by coding.ms\"","kev":false,"epss":0.0046},{"id":"CVE-2026-112238","published":"2026-10-20T09:30:48.389Z","updated":"2026-10-20T15:44:32.296Z","title":"SQL Injection in extension \"File manager\" (ameos_filemanager)","severity":"HIGH","score":8.7,"vendor":"TYPO3","product":"Extension \"File manager\"","kev":false,"epss":0.00448},{"id":"CVE-2026-112071","published":"2026-10-20T09:30:47.669Z","updated":"2026-10-20T15:44:57.053Z","title":"Broken Access Control in extension \"TYPO3 Shop by coding.ms\" (shop)","severity":"MEDIUM","score":6.9,"vendor":"TYPO3","product":"Extension \"TYPO3 Shop by coding.ms\"","kev":false,"epss":0.00439},{"id":"CVE-2026-113468","published":"2026-10-20T09:30:46.881Z","updated":"2026-10-20T15:45:26.410Z","title":"Broken Access Control in extension \"TYPO3 Shop by coding.ms\" (shop)","severity":"MEDIUM","score":6.9,"vendor":"TYPO3","product":"Extension \"TYPO3 Shop by coding.ms\"","kev":false,"epss":0.00439},{"id":"CVE-2026-112239","published":"2026-10-20T09:30:46.019Z","updated":"2026-10-20T15:45:50.344Z","title":"Broken Access Control in extension \"TYPO3 AI Integration Extension\" (ns_t3ai)","severity":"HIGH","score":7.2,"vendor":"TYPO3","product":"Extension \"TYPO3 AI Integration Extension\"","kev":false,"epss":0.0035},{"id":"CVE-2026-113459","published":"2026-10-20T09:30:44.456Z","updated":"2026-10-20T15:48:56.323Z","title":"Sensitive Data Exposure in extension \"TYPO3 AI Integration Extension\" (ns_t3ai)","severity":"HIGH","score":7.1,"vendor":"TYPO3","product":"Extension \"TYPO3 AI Integration Extension\"","kev":false,"epss":0.00353},{"id":"CVE-2026-112070","published":"2026-10-20T09:30:43.759Z","updated":"2026-10-20T15:49:23.108Z","title":"Broken Access Control in extension \"Analytics\" (analytics)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"Analytics\"","kev":false,"epss":0.00324},{"id":"CVE-2026-113378","published":"2026-10-20T09:30:14.745Z","updated":"2026-10-24T00:13:32.107Z","title":"mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection","severity":"MEDIUM","score":4.8,"vendor":"mcollina","product":"mcp-ripgrep","kev":false,"epss":0.00836},{"id":"CVE-2026-43858","published":"2026-10-20T09:19:17.036Z","updated":"2026-10-20T15:50:15.138Z","title":"A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00717},{"id":"CVE-2026-43857","published":"2026-10-20T09:17:49.742Z","updated":"2026-10-20T15:51:05.707Z","title":"A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00683},{"id":"CVE-2026-85267","published":"2026-10-20T09:16:56.533Z","updated":"2026-10-20T19:06:21.384Z","title":"Cross-Site WebSocket Hijacking in Google Cloud Shell","severity":"HIGH","score":8.7,"vendor":"Google Cloud","product":"Cloud Shell","kev":false,"epss":0.00211},{"id":"CVE-2026-43856","published":"2026-10-20T09:16:28.132Z","updated":"2026-10-20T19:08:24.881Z","title":"A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code…","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00656},{"id":"CVE-2026-43855","published":"2026-10-20T09:14:17.583Z","updated":"2026-10-20T19:09:16.338Z","title":"A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.","severity":"HIGH","score":7.5,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00477},{"id":"CVE-2026-43854","published":"2026-10-20T09:12:47.165Z","updated":"2026-10-20T19:09:58.947Z","title":"A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.","severity":"MEDIUM","score":6.3,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00095},{"id":"CVE-2026-43853","published":"2026-10-20T09:10:59.503Z","updated":"2026-10-20T16:00:38.685Z","title":"A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.","severity":"HIGH","score":8.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00395},{"id":"CVE-2026-43852","published":"2026-10-20T09:06:53.865Z","updated":"2026-10-20T16:12:52.535Z","title":"A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.","severity":"HIGH","score":8.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00428},{"id":"CVE-2026-43851","published":"2026-10-20T09:04:34.213Z","updated":"2026-10-20T16:01:26.709Z","title":"A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.","severity":"HIGH","score":8.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00428},{"id":"CVE-2026-43850","published":"2026-10-20T09:02:10.095Z","updated":"2026-10-20T16:02:13.698Z","title":"A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.0157},{"id":"CVE-2026-43849","published":"2026-10-20T09:00:17.036Z","updated":"2026-10-20T16:02:58.717Z","title":"A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00395},{"id":"CVE-2026-43848","published":"2026-10-20T08:58:02.500Z","updated":"2026-10-20T16:03:39.643Z","title":"A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-43847","published":"2026-10-20T08:55:32.287Z","updated":"2026-10-20T16:05:08.471Z","title":"A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the…","severity":"HIGH","score":8.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00296},{"id":"CVE-2026-43846","published":"2026-10-20T08:53:19.939Z","updated":"2026-10-20T16:06:01.213Z","title":"A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00458},{"id":"CVE-2026-43845","published":"2026-10-20T08:48:28.456Z","updated":"2026-10-20T16:04:23.884Z","title":"A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.","severity":"CRITICAL","score":9.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00454},{"id":"CVE-2026-43844","published":"2026-10-20T08:45:47.036Z","updated":"2026-10-20T15:58:59.227Z","title":"A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.","severity":"CRITICAL","score":9.3,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00492},{"id":"CVE-2026-43843","published":"2026-10-20T08:43:10.730Z","updated":"2026-10-20T19:10:49.082Z","title":"An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-43842","published":"2026-10-20T08:37:35.334Z","updated":"2026-10-20T19:11:31.360Z","title":"A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-43841","published":"2026-10-20T08:32:31.027Z","updated":"2026-10-20T19:12:30.514Z","title":"A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-113469","published":"2026-10-20T08:29:49.095Z","updated":"2026-10-20T18:08:00.762Z","title":"Improper Signature Verification of Active Update Files","severity":"HIGH","score":7.5,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00196},{"id":"CVE-2026-43840","published":"2026-10-20T08:28:32.330Z","updated":"2026-10-29T12:10:14.990Z","title":"A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected…","severity":"MEDIUM","score":6.9,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-43839","published":"2026-10-20T08:24:51.155Z","updated":"2026-10-20T15:58:07.636Z","title":"A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.","severity":"HIGH","score":8.7,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00344},{"id":"CVE-2026-101201","published":"2026-10-20T08:20:38.580Z","updated":"2026-10-20T15:56:20.735Z","title":"QBinaryJson::fromBinaryData() integer overflow leading to OOB read","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"qt","kev":false,"epss":0.00165},{"id":"CVE-2026-43838","published":"2026-10-20T08:18:13.241Z","updated":"2026-10-20T16:12:08.657Z","title":"A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.","severity":"CRITICAL","score":9.2,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00383},{"id":"CVE-2026-92287","published":"2026-10-20T08:15:13.747Z","updated":"2026-10-29T18:12:50.412Z","title":"Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache Arrow C++","kev":false,"epss":0.00352},{"id":"CVE-2026-43837","published":"2026-10-20T08:14:44.112Z","updated":"2026-10-20T15:57:06.068Z","title":"A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.","severity":"HIGH","score":7.5,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.0043},{"id":"CVE-2026-11960","published":"2026-10-20T08:14:27.662Z","updated":"2026-10-20T15:55:29.977Z","title":"Multiple vulnerabilities in FacturaScripts","severity":"MEDIUM","score":6.9,"vendor":"FacturaScripts","product":"FacturaScripts","kev":false,"epss":0.00341},{"id":"CVE-2026-11959","published":"2026-10-20T08:13:28.580Z","updated":"2026-10-20T15:54:13.922Z","title":"Multiple vulnerabilities in FacturaScripts","severity":"MEDIUM","score":6.9,"vendor":"FacturaScripts","product":"FacturaScripts","kev":false,"epss":0.003},{"id":"CVE-2026-113465","published":"2026-10-20T08:09:33.956Z","updated":"2026-10-20T15:53:22.668Z","title":"Possible DOM XSS in SNS Web Administration Portal","severity":"MEDIUM","score":6.6,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00226},{"id":"CVE-2026-43836","published":"2026-10-20T08:08:19.495Z","updated":"2026-10-20T15:52:54.813Z","title":"A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.","severity":"CRITICAL","score":9.3,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00888},{"id":"CVE-2026-43835","published":"2026-10-20T08:02:58.943Z","updated":"2026-10-20T15:52:03.513Z","title":"A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising…","severity":"HIGH","score":8.6,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00185},{"id":"CVE-2026-43834","published":"2026-10-20T07:58:24.750Z","updated":"2026-10-20T19:13:17.571Z","title":"A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.","severity":"HIGH","score":7.5,"vendor":"Advantech","product":"ADAM-3600","kev":false,"epss":0.00366},{"id":"CVE-2024-2323","published":"2026-10-20T07:46:37.171Z","updated":"2026-10-20T19:17:46.609Z","title":"Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00229},{"id":"CVE-2026-111090","published":"2026-10-20T07:42:53.842Z","updated":"2026-10-20T19:13:40.735Z","title":"Improper Signature Verification of Firmware Update Files","severity":"HIGH","score":7.8,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00165},{"id":"CVE-2026-112177","published":"2026-10-20T07:25:16.741Z","updated":"2026-11-02T18:26:09.441Z","title":"Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8","severity":"HIGH","score":7.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","kev":false,"epss":0.00352},{"id":"CVE-2026-113407","published":"2026-10-20T07:21:47.618Z","updated":"2026-10-20T18:08:01.040Z","title":"YS-infoware｜BA-Workflow - SQL Injection","severity":"HIGH","score":8.7,"vendor":"YS-infoware","product":"BA-Workflow","kev":false,"epss":0.00455},{"id":"CVE-2026-113406","published":"2026-10-20T07:20:14.580Z","updated":"2026-10-22T02:09:45.606Z","title":"YS-infoware｜BA-Workflow - SQL Injection","severity":"HIGH","score":8.7,"vendor":"YS-infoware","product":"BA-Workflow","kev":false,"epss":0.00515},{"id":"CVE-2026-113405","published":"2026-10-20T07:17:45.541Z","updated":"2026-10-22T02:09:07.199Z","title":"YS-infoware｜BA-Workflow - SQL Injection","severity":"HIGH","score":8.7,"vendor":"YS-infoware","product":"BA-Workflow","kev":false,"epss":0.00515},{"id":"CVE-2026-110725","published":"2026-10-20T07:06:29.946Z","updated":"2026-10-20T19:14:41.685Z","title":"fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references","severity":"LOW","score":3.7,"vendor":"fast-uri","product":"fast-uri","kev":false,"epss":0.00302},{"id":"CVE-2026-113403","published":"2026-10-20T07:04:25.847Z","updated":"2026-10-20T18:08:01.485Z","title":"ArmorX Global Technology｜ArmorX Spam - Command Injection","severity":"HIGH","score":7.1,"vendor":"ArmorX Global Technology","product":"ArmorX Spam","kev":false,"epss":0.00727},{"id":"CVE-2026-110306","published":"2026-10-20T07:03:47.312Z","updated":"2026-10-20T19:14:13.871Z","title":"fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding","severity":"MEDIUM","score":6.1,"vendor":"fast-uri","product":"fast-uri","kev":false,"epss":0.0025},{"id":"CVE-2026-110180","published":"2026-10-20T07:00:42.153Z","updated":"2026-10-20T16:06:48.503Z","title":"fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization","severity":"MEDIUM","score":4.8,"vendor":"fast-uri","product":"fast-uri","kev":false,"epss":0.00255},{"id":"CVE-2026-110095","published":"2026-10-20T06:56:56.456Z","updated":"2026-10-20T16:07:47.737Z","title":"fast-uri vulnerable to improper path equivalence in relative reference normalization","severity":"LOW","score":3.7,"vendor":"fast-uri","product":"fast-uri","kev":false,"epss":0.00289},{"id":"CVE-2026-93878","published":"2026-10-20T06:54:42.377Z","updated":"2026-10-20T13:46:41.730Z","title":"DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX Action","severity":"MEDIUM","score":6.4,"vendor":"Divigear","product":"DiviGear Carousel","kev":false,"epss":0.00215},{"id":"CVE-2026-112148","published":"2026-10-20T06:31:15.606Z","updated":"2026-10-20T16:08:35.384Z","title":"A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute…","severity":"MEDIUM","score":5.1,"vendor":"LY Corporation","product":"LIFF SDK","kev":false,"epss":0.0043},{"id":"CVE-2026-113402","published":"2026-10-20T06:28:45.554Z","updated":"2026-10-20T16:10:32.240Z","title":"ArmorX Global Technology｜ArmorX Spam - Local File Inclusion","severity":"HIGH","score":7.1,"vendor":"ArmorX Global Technology","product":"ArmorX Spam","kev":false,"epss":0.00376},{"id":"CVE-2026-113404","published":"2026-10-20T06:24:08.653Z","updated":"2026-10-20T16:11:21.713Z","title":"Uniong｜WebITR - Insecure Deserialization","severity":"HIGH","score":8.7,"vendor":"Uniong","product":"WebITR","kev":false,"epss":0.0044},{"id":"CVE-2026-96903","published":"2026-10-20T06:00:15.024Z","updated":"2026-10-20T15:26:51.544Z","title":"Easy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX Handlers","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Easy Property Listings","kev":false,"epss":0.00241},{"id":"CVE-2026-96902","published":"2026-10-20T06:00:14.826Z","updated":"2026-10-20T15:26:51.388Z","title":"Easy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Easy Property Listings","kev":false,"epss":0.00304},{"id":"CVE-2026-93300","published":"2026-10-20T05:39:17.375Z","updated":"2026-10-20T16:07:19.927Z","title":"EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter","severity":"HIGH","score":7.5,"vendor":"EventOn","product":"EventON - Subscriber","kev":false,"epss":0.00516},{"id":"CVE-2026-97627","published":"2026-10-20T05:28:49.312Z","updated":"2026-10-20T19:15:11.072Z","title":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…","severity":"HIGH","score":8.6,"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","kev":false,"epss":0.00377},{"id":"CVE-2026-100737","published":"2026-10-20T05:28:36.790Z","updated":"2026-10-20T19:15:34.708Z","title":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…","severity":"MEDIUM","score":6.9,"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","kev":false,"epss":0.00264},{"id":"CVE-2026-113386","published":"2026-10-20T04:53:46.220Z","updated":"2026-10-22T21:17:14.176Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF…","severity":"HIGH","score":7.1,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.01004},{"id":"CVE-2026-109831","published":"2026-10-20T04:34:19.617Z","updated":"2026-10-20T19:15:55.705Z","title":"UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS)…","severity":"MEDIUM","score":5.1,"vendor":"GNU Project","product":"UnRTF","kev":false,"epss":0.00207},{"id":"CVE-2026-113380","published":"2026-10-20T04:25:10.127Z","updated":"2026-10-31T14:55:58.521Z","title":"In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call…","severity":"CRITICAL","score":9.3,"vendor":"Signal","product":"RingRTC","kev":false,"epss":0.00898},{"id":"CVE-2026-86467","published":"2026-10-20T02:37:07.184Z","updated":"2026-10-29T18:02:32.886Z","title":"Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Airflow Amazon provider","kev":false,"epss":0.00264},{"id":"CVE-2026-12489","published":"2026-10-20T02:04:49.838Z","updated":"2026-10-21T03:56:12.843Z","title":"An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an…","severity":"MEDIUM","score":6.5,"vendor":"Zyxel","product":"EX3501-T0 firmware","kev":false,"epss":0.0029},{"id":"CVE-2026-75753","published":"2026-10-20T02:00:27.616Z","updated":"2026-10-20T19:16:34.214Z","title":"Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing…","severity":"MEDIUM","score":5.3,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00231},{"id":"CVE-2026-17518","published":"2026-10-20T02:00:16.884Z","updated":"2026-10-20T19:17:23.552Z","title":"Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial…","severity":"HIGH","score":8.2,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00186},{"id":"CVE-2026-102438","published":"2026-10-20T02:00:05.773Z","updated":"2026-10-21T03:56:15.397Z","title":"An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of…","severity":"HIGH","score":8.5,"vendor":"ASUS","product":"Armoury Crate","kev":false,"epss":0.00162},{"id":"CVE-2026-105299","published":"2026-10-20T01:07:12.767Z","updated":"2026-10-20T19:19:36.616Z","title":"Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments","severity":"HIGH","score":8.7,"vendor":"Cloudflare","product":"https://github.com/cloudflare/pingora","kev":false,"epss":0.00425},{"id":"CVE-2026-86981","published":"2026-10-20T00:50:57.929Z","updated":"2026-10-26T20:41:24.342Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00142},{"id":"CVE-2026-86979","published":"2026-10-20T00:50:57.694Z","updated":"2026-10-26T20:38:48.298Z","title":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00161},{"id":"CVE-2026-86977","published":"2026-10-20T00:50:57.440Z","updated":"2026-10-29T17:29:14.555Z","title":"An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00255},{"id":"CVE-2026-86976","published":"2026-10-20T00:50:57.018Z","updated":"2026-10-26T20:37:21.181Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00132},{"id":"CVE-2026-86975","published":"2026-10-20T00:50:56.724Z","updated":"2026-10-26T20:39:34.546Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00287},{"id":"CVE-2026-86963","published":"2026-10-20T00:50:56.479Z","updated":"2026-10-26T20:39:40.420Z","title":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a…","severity":"MEDIUM","score":5.9,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00341},{"id":"CVE-2026-86962","published":"2026-10-20T00:50:56.208Z","updated":"2026-10-26T20:40:37.665Z","title":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00153},{"id":"CVE-2026-86961","published":"2026-10-20T00:50:55.945Z","updated":"2026-10-26T20:37:03.225Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00103},{"id":"CVE-2026-86959","published":"2026-10-20T00:50:55.665Z","updated":"2026-10-30T20:00:59.163Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00287},{"id":"CVE-2026-86957","published":"2026-10-20T00:50:55.409Z","updated":"2026-10-26T20:35:57.598Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00316},{"id":"CVE-2026-86955","published":"2026-10-20T00:50:54.900Z","updated":"2026-10-26T20:39:26.360Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00135},{"id":"CVE-2026-86953","published":"2026-10-20T00:50:54.619Z","updated":"2026-10-26T20:43:08.570Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS…","severity":"MEDIUM","score":4.6,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00232},{"id":"CVE-2026-86949","published":"2026-10-20T00:50:54.372Z","updated":"2026-10-21T03:56:20.055Z","title":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.0016},{"id":"CVE-2026-86948","published":"2026-10-20T00:50:54.085Z","updated":"2026-10-30T20:00:48.125Z","title":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00143},{"id":"CVE-2026-86944","published":"2026-10-20T00:50:53.850Z","updated":"2026-10-30T20:00:59.291Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00151},{"id":"CVE-2026-86940","published":"2026-10-20T00:50:53.575Z","updated":"2026-10-26T20:38:25.018Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00147},{"id":"CVE-2026-86935","published":"2026-10-20T00:50:53.334Z","updated":"2026-10-30T20:00:59.434Z","title":"This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00095},{"id":"CVE-2026-86933","published":"2026-10-20T00:50:53.052Z","updated":"2026-10-26T20:44:20.759Z","title":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00128},{"id":"CVE-2026-86932","published":"2026-10-20T00:50:52.803Z","updated":"2026-10-26T20:41:56.519Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00135},{"id":"CVE-2026-86928","published":"2026-10-20T00:50:52.525Z","updated":"2026-10-26T20:42:24.114Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00173},{"id":"CVE-2026-86922","published":"2026-10-20T00:50:52.280Z","updated":"2026-10-26T20:39:29.504Z","title":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27.…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00335},{"id":"CVE-2026-86921","published":"2026-10-20T00:50:51.993Z","updated":"2026-10-26T20:37:13.201Z","title":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00142},{"id":"CVE-2026-86919","published":"2026-10-20T00:50:51.749Z","updated":"2026-10-26T20:40:23.826Z","title":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00392},{"id":"CVE-2026-86918","published":"2026-10-20T00:50:51.428Z","updated":"2026-10-26T20:39:56.760Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00287},{"id":"CVE-2026-86915","published":"2026-10-20T00:50:50.781Z","updated":"2026-10-26T20:41:05.461Z","title":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00095},{"id":"CVE-2026-86914","published":"2026-10-20T00:50:50.384Z","updated":"2026-10-26T20:39:13.052Z","title":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00153},{"id":"CVE-2026-86913","published":"2026-10-20T00:50:50.060Z","updated":"2026-10-26T20:43:21.375Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00331},{"id":"CVE-2026-86907","published":"2026-10-20T00:50:48.689Z","updated":"2026-10-26T20:35:05.277Z","title":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00133},{"id":"CVE-2026-86875","published":"2026-10-20T00:50:44.830Z","updated":"2026-10-20T14:54:14.751Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00278},{"id":"CVE-2026-86874","published":"2026-10-20T00:50:44.500Z","updated":"2026-10-20T14:30:23.511Z","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to…","severity":"LOW","score":3.3,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00155},{"id":"CVE-2026-86872","published":"2026-10-20T00:50:44.084Z","updated":"2026-10-26T20:37:33.025Z","title":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00265},{"id":"CVE-2026-86871","published":"2026-10-20T00:50:43.774Z","updated":"2026-10-26T20:39:46.185Z","title":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An…","severity":"MEDIUM","score":5.9,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00489},{"id":"CVE-2026-86868","published":"2026-10-20T00:50:42.725Z","updated":"2026-10-29T17:27:20.950Z","title":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An…","severity":"CRITICAL","score":9.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00487},{"id":"CVE-2026-84613","published":"2026-10-20T00:50:39.589Z","updated":"2026-10-26T20:34:56.364Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00329},{"id":"CVE-2026-84582","published":"2026-10-20T00:50:37.797Z","updated":"2026-10-30T20:00:59.571Z","title":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0014},{"id":"CVE-2026-84579","published":"2026-10-20T00:50:37.488Z","updated":"2026-11-02T16:40:35.669Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00217},{"id":"CVE-2026-84547","published":"2026-10-20T00:50:32.556Z","updated":"2026-10-26T20:38:15.794Z","title":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An…","severity":"LOW","score":3.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196},{"id":"CVE-2026-84508","published":"2026-10-20T00:50:27.719Z","updated":"2026-10-26T20:40:51.637Z","title":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0014},{"id":"CVE-2026-84490","published":"2026-10-20T00:50:26.670Z","updated":"2026-10-26T20:34:58.342Z","title":"This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device…","severity":"LOW","score":2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00178},{"id":"CVE-2026-65396","published":"2026-10-20T00:50:23.850Z","updated":"2026-10-26T20:36:25.808Z","title":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00168},{"id":"CVE-2026-65379","published":"2026-10-20T00:50:22.118Z","updated":"2026-10-26T20:36:26.834Z","title":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00144},{"id":"CVE-2026-65372","published":"2026-10-20T00:50:20.546Z","updated":"2026-10-26T20:35:19.951Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00122},{"id":"CVE-2026-65356","published":"2026-10-20T00:50:18.455Z","updated":"2026-10-26T20:40:59.228Z","title":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00144},{"id":"CVE-2026-28854","published":"2026-10-20T00:50:04.838Z","updated":"2026-10-29T17:25:26.960Z","title":"The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00179},{"id":"CVE-2026-28853","published":"2026-10-20T00:50:04.575Z","updated":"2026-10-26T20:42:57.357Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00143},{"id":"CVE-2026-28850","published":"2026-10-20T00:50:04.249Z","updated":"2026-10-26T20:34:57.306Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00138},{"id":"CVE-2026-105298","published":"2026-10-20T00:46:21.902Z","updated":"2026-10-20T19:20:10.015Z","title":"Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass","severity":"MEDIUM","score":6.3,"vendor":"Cloudflare","product":"https://github.com/cloudflare/pingora","kev":false,"epss":0.00558},{"id":"CVE-2026-77938","published":"2026-10-20T00:46:15.564Z","updated":"2026-10-20T13:47:53.481Z","title":"Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance","severity":"HIGH","score":7.1,"vendor":"letta-ai","product":"letta","kev":false,"epss":0.00416},{"id":"CVE-2026-77937","published":"2026-10-20T00:46:14.829Z","updated":"2026-10-20T13:48:37.840Z","title":"Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header","severity":"HIGH","score":8.6,"vendor":"letta-ai","product":"letta","kev":false,"epss":0.00473},{"id":"CVE-2026-77936","published":"2026-10-20T00:46:14.144Z","updated":"2026-10-20T16:07:28.161Z","title":"Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access","severity":"CRITICAL","score":9.3,"vendor":"letta-ai","product":"letta","kev":false,"epss":0.00589},{"id":"CVE-2026-77935","published":"2026-10-20T00:46:13.474Z","updated":"2026-10-20T13:29:43.391Z","title":"Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers","severity":"HIGH","score":8.7,"vendor":"coze-dev","product":"coze-studio","kev":false,"epss":0.00412},{"id":"CVE-2026-77934","published":"2026-10-20T00:46:12.780Z","updated":"2026-10-20T14:29:04.949Z","title":"Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner","severity":"HIGH","score":8.7,"vendor":"coze-dev","product":"coze-studio","kev":false,"epss":0.00669},{"id":"CVE-2026-77933","published":"2026-10-20T00:46:12.076Z","updated":"2026-10-20T13:49:14.362Z","title":"DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment","severity":"CRITICAL","score":9.3,"vendor":"eosphoros-ai","product":"DB-GPT","kev":false,"epss":0.00437},{"id":"CVE-2026-77932","published":"2026-10-20T00:46:11.410Z","updated":"2026-10-20T13:49:48.138Z","title":"DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent","severity":"CRITICAL","score":9.3,"vendor":"eosphoros-ai","product":"DB-GPT","kev":false,"epss":0.00804},{"id":"CVE-2026-77930","published":"2026-10-20T00:46:10.763Z","updated":"2026-10-22T21:09:21.545Z","title":"EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents","severity":"CRITICAL","score":9.3,"vendor":"EvoScientist","product":"EvoScientist","kev":false,"epss":0.00688},{"id":"CVE-2026-77926","published":"2026-10-20T00:46:09.952Z","updated":"2026-10-20T14:33:10.813Z","title":"Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool","severity":"HIGH","score":8.7,"vendor":"apconw","product":"Aix-DB","kev":false,"epss":0.00851},{"id":"CVE-2026-75128","published":"2026-10-20T00:46:08.977Z","updated":"2026-10-20T14:34:07.343Z","title":"Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint","severity":"CRITICAL","score":9.3,"vendor":"chatchat-space","product":"Langchain-Chatchat","kev":false,"epss":0.00632},{"id":"CVE-2026-109444","published":"2026-10-20T00:46:07.986Z","updated":"2026-10-22T21:10:29.956Z","title":"OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection","severity":"CRITICAL","score":9.3,"vendor":"Tracer-Cloud","product":"opensre","kev":false,"epss":0.00703},{"id":"CVE-2026-109443","published":"2026-10-20T00:46:07.343Z","updated":"2026-10-22T21:04:54.787Z","title":"JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell","severity":"HIGH","score":8.7,"vendor":"jd-opensource","product":"JoySafeter","kev":false,"epss":0.0086},{"id":"CVE-2026-109442","published":"2026-10-20T00:46:06.694Z","updated":"2026-10-20T16:07:55.823Z","title":"piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell","severity":"CRITICAL","score":9.3,"vendor":"cas-bigdatalab","product":"piflow","kev":false,"epss":0.0084},{"id":"CVE-2026-109441","published":"2026-10-20T00:46:06.033Z","updated":"2026-10-20T14:34:42.144Z","title":"LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge","severity":"MEDIUM","score":6.9,"vendor":"ginlix-ai","product":"LangAlpha","kev":false,"epss":0.00442},{"id":"CVE-2026-109440","published":"2026-10-20T00:46:05.334Z","updated":"2026-10-22T21:16:20.124Z","title":"LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode","severity":"HIGH","score":8.7,"vendor":"ginlix-ai","product":"LangAlpha","kev":false,"epss":0.00601},{"id":"CVE-2026-109395","published":"2026-10-20T00:46:04.633Z","updated":"2026-10-20T14:29:50.505Z","title":"Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder","severity":"HIGH","score":8.8,"vendor":"ning","product":"compress-lzf","kev":false,"epss":0.00524},{"id":"CVE-2026-105297","published":"2026-10-20T00:40:27.300Z","updated":"2026-10-20T19:20:35.542Z","title":"Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits","severity":"HIGH","score":7.5,"vendor":"Cloudflare","product":"https://github.com/cloudflare/pingora","kev":false,"epss":0.00429},{"id":"CVE-2026-95168","published":"2026-10-20T00:00:00.000Z","updated":"2026-10-21T19:17:42.649Z","title":"An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00222},{"id":"CVE-2025-60496","published":"2026-10-20T00:00:00.000Z","updated":"2026-10-26T15:44:28.502Z","title":"A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00403},{"id":"CVE-2025-60494","published":"2026-10-20T00:00:00.000Z","updated":"2026-10-26T17:28:23.182Z","title":"A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00198},{"id":"CVE-2025-60475","published":"2026-10-20T00:00:00.000Z","updated":"2026-10-28T03:07:03.383Z","title":"A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0021},{"id":"CVE-2026-105453","published":"2026-10-19T23:56:06.910Z","updated":"2026-10-21T03:56:17.640Z","title":"IBM Sterling Connect:Direct for Unix Improper Privilege Management","severity":"HIGH","score":8.4,"vendor":"IBM","product":"Sterling Connect Direct for Unix","kev":false,"epss":0.00127},{"id":"CVE-2026-107366","published":"2026-10-19T23:49:23.120Z","updated":"2026-10-21T03:56:18.876Z","title":"Langflow OSS Authorization Bypass Through User-Controlled Key","severity":"HIGH","score":8.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00302},{"id":"CVE-2026-107400","published":"2026-10-19T23:46:46.720Z","updated":"2026-10-20T13:51:15.010Z","title":"Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication","severity":"HIGH","score":8.8,"vendor":"IBM","product":"TRIRIGA Application Platform","kev":false,"epss":0.00551},{"id":"CVE-2026-109126","published":"2026-10-19T23:43:19.165Z","updated":"2026-10-20T14:35:23.500Z","title":"IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Verify Identity Access","kev":false,"epss":0.00226},{"id":"CVE-2026-8355","published":"2026-10-19T23:42:01.778Z","updated":"2026-10-20T14:37:15.968Z","title":"IBM ContextForge MCP Gateway is affected by server-side request forgery","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"ContextForge MCP Gateway","kev":false,"epss":0.00228},{"id":"CVE-2026-112373","published":"2026-10-19T23:00:16.156Z","updated":"2026-10-20T13:51:59.801Z","title":"H3C Magic NX15 usrlist sub_416874 stack-based overflow","severity":"HIGH","score":7.1,"vendor":"H3C","product":"Magic NX15","kev":false,"epss":0.00472},{"id":"CVE-2025-36061","published":"2026-10-19T22:51:04.688Z","updated":"2026-10-20T14:41:22.294Z","title":"TS4500 Tape Library Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Storage TS4500 Library","kev":false,"epss":0.00321},{"id":"CVE-2025-36069","published":"2026-10-19T22:50:54.345Z","updated":"2026-10-20T16:08:12.399Z","title":"TS4500 Tape Library Insufficient Session Expiration","severity":"MEDIUM","score":5.5,"vendor":"IBM","product":"Storage TS4500 Library","kev":false,"epss":0.00154},{"id":"CVE-2025-36252","published":"2026-10-19T22:50:46.164Z","updated":"2026-10-22T21:15:40.159Z","title":"TS4500 Tape Library Insufficient Session Expiration","severity":"MEDIUM","score":6.3,"vendor":"IBM","product":"Storage TS4500 Library","kev":false,"epss":0.002},{"id":"CVE-2026-19178","published":"2026-10-19T22:50:34.565Z","updated":"2026-10-20T13:52:27.830Z","title":"TS4500 Tape Library Race Condition","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"Storage TS4500 Library","kev":false,"epss":0.00246},{"id":"CVE-2026-77684","published":"2026-10-19T22:49:41.900Z","updated":"2026-10-20T19:21:13.069Z","title":"Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of service","severity":"MEDIUM","score":5.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00254},{"id":"CVE-2026-19595","published":"2026-10-19T22:49:40.334Z","updated":"2026-10-20T19:21:46.367Z","title":"Zephyr RTIO syscall verifier validates output parameters for read instead of write access","severity":"MEDIUM","score":6.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00145},{"id":"CVE-2026-112372","published":"2026-10-19T22:45:19.358Z","updated":"2026-10-20T16:08:20.868Z","title":"H3C Magic NX15 upload importprofile path traversal","severity":"MEDIUM","score":5.1,"vendor":"H3C","product":"Magic NX15","kev":false,"epss":0.00482},{"id":"CVE-2026-112371","published":"2026-10-19T22:30:17.115Z","updated":"2026-10-20T14:42:20.665Z","title":"H3C Magic NX15 RPC esps write code injection","severity":"CRITICAL","score":9.4,"vendor":"H3C","product":"Magic NX15","kev":false,"epss":0.00546},{"id":"CVE-2026-112991","published":"2026-10-19T22:19:50.011Z","updated":"2026-10-20T19:22:15.189Z","title":"MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()","severity":"MEDIUM","score":6.3,"vendor":"MISP","product":"misp-modules","kev":false,"epss":0.00324},{"id":"CVE-2026-112370","published":"2026-10-19T22:15:15.054Z","updated":"2026-10-22T21:15:05.627Z","title":"H3C Magic NX15 usrlist sub_416874 os command injection","severity":"CRITICAL","score":9.4,"vendor":"H3C","product":"Magic NX15","kev":false,"epss":0.02034},{"id":"CVE-2026-112901","published":"2026-10-19T22:09:52.614Z","updated":"2026-10-20T16:08:29.821Z","title":"Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes","severity":"MEDIUM","score":6.9,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00532},{"id":"CVE-2026-112900","published":"2026-10-19T22:07:50.418Z","updated":"2026-10-20T14:43:44.563Z","title":"Pillow: Argument Injection in Ghostscript call, potentially leading into RCE","severity":"CRITICAL","score":9.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.01303},{"id":"CVE-2026-112898","published":"2026-10-19T22:04:23.462Z","updated":"2026-10-28T15:15:44.187Z","title":"Pillow: Image.quantize() with empty palette leaks uninitialized stack memory","severity":"MEDIUM","score":6.9,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00339},{"id":"CVE-2026-112897","published":"2026-10-19T22:00:52.749Z","updated":"2026-10-22T21:13:16.428Z","title":"Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00479},{"id":"CVE-2026-112896","published":"2026-10-19T21:59:17.743Z","updated":"2026-10-20T13:55:36.949Z","title":"Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read","severity":"HIGH","score":8.8,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00475},{"id":"CVE-2026-112895","published":"2026-10-19T21:57:14.207Z","updated":"2026-10-20T16:08:43.138Z","title":"Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00594},{"id":"CVE-2026-112894","published":"2026-10-19T21:55:19.424Z","updated":"2026-10-20T14:46:13.675Z","title":"Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00594},{"id":"CVE-2026-112893","published":"2026-10-19T21:53:49.979Z","updated":"2026-10-28T15:12:48.729Z","title":"Pillow: Invalid free in FreeType glyph rendering when a stroker is active","severity":"HIGH","score":8.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00549},{"id":"CVE-2026-112361","published":"2026-10-19T21:45:06.736Z","updated":"2026-10-20T13:53:23.490Z","title":"Dolibarr CSP document.php protection mechanism","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Dolibarr","kev":false,"epss":0.00359},{"id":"CVE-2026-112261","published":"2026-10-19T21:37:25.644Z","updated":"2026-11-02T18:26:06.952Z","title":"Gimp: gimp: use-after-free in xcf loader via prop_selected_path","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","kev":false,"epss":0.00167},{"id":"CVE-2026-112258","published":"2026-10-19T21:37:20.179Z","updated":"2026-11-02T18:26:02.494Z","title":"Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","kev":false,"epss":0.00167},{"id":"CVE-2026-112257","published":"2026-10-19T21:37:19.467Z","updated":"2026-11-02T18:26:00.347Z","title":"Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","kev":false,"epss":0.00167},{"id":"CVE-2026-112892","published":"2026-10-19T21:35:25.797Z","updated":"2026-10-22T21:11:24.689Z","title":"Pillow: MSP RLE decoder expands a tiny file into unbounded memory","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00503},{"id":"CVE-2026-112891","published":"2026-10-19T21:33:32.180Z","updated":"2026-10-20T13:54:10.370Z","title":"Pillow: Quadratic GIF comment copying during save","severity":"MEDIUM","score":6.9,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00549},{"id":"CVE-2026-112406","published":"2026-10-19T21:31:49.946Z","updated":"2026-10-20T16:08:57.551Z","title":"Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00573},{"id":"CVE-2026-112360","published":"2026-10-19T21:30:19.739Z","updated":"2026-10-20T16:09:08.320Z","title":"Netis EAP930 CGI Endpoint debug return200 backdoor","severity":"HIGH","score":8.9,"vendor":"Netis","product":"EAP930","kev":false,"epss":0.00484},{"id":"CVE-2026-112405","published":"2026-10-19T21:29:53.515Z","updated":"2026-10-20T15:56:29.299Z","title":"Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00594},{"id":"CVE-2026-112404","published":"2026-10-19T21:27:56.705Z","updated":"2026-10-28T15:18:51.938Z","title":"Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels","severity":"HIGH","score":8.8,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00444},{"id":"CVE-2026-105815","published":"2026-10-19T21:27:02.599Z","updated":"2026-10-20T19:22:38.887Z","title":"Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210","severity":"HIGH","score":7.1,"vendor":"TP-Link Systems Inc.","product":"Tapo C210 v3.6","kev":false,"epss":0.00238},{"id":"CVE-2026-105814","published":"2026-10-19T21:26:57.630Z","updated":"2026-10-20T19:23:12.975Z","title":"Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210","severity":"MEDIUM","score":5.3,"vendor":"TP-Link Systems Inc.","product":"Tapo C210 v3.6","kev":false,"epss":0.00261},{"id":"CVE-2026-112403","published":"2026-10-19T21:22:21.077Z","updated":"2026-10-22T21:08:58.141Z","title":"Pillow: Heap buffer overflow in ImagingJpegDecode","severity":"CRITICAL","score":9.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00945},{"id":"CVE-2026-112402","published":"2026-10-19T21:18:57.027Z","updated":"2026-10-19T21:37:35.120Z","title":"Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00594},{"id":"CVE-2026-112397","published":"2026-10-19T21:17:35.684Z","updated":"2026-10-19T21:38:18.176Z","title":"Pillow: Out-of-bounds access in _imagingmorph on a zero-width image","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00573},{"id":"CVE-2026-112392","published":"2026-10-19T21:17:18.908Z","updated":"2026-10-20T14:50:31.632Z","title":"Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images","severity":"HIGH","score":8.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00593},{"id":"CVE-2026-112401","published":"2026-10-19T21:15:21.484Z","updated":"2026-10-20T16:09:15.499Z","title":"Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()","severity":"MEDIUM","score":6.9,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00649},{"id":"CVE-2026-112358","published":"2026-10-19T21:15:15.519Z","updated":"2026-10-20T14:58:56.991Z","title":"TiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgery","severity":"LOW","score":2.1,"vendor":"TiBillet","product":"Lespass","kev":false,"epss":0.0036},{"id":"CVE-2026-112400","published":"2026-10-19T21:12:37.401Z","updated":"2026-10-20T14:59:57.147Z","title":"Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00594},{"id":"CVE-2026-112399","published":"2026-10-19T21:10:11.266Z","updated":"2026-10-28T15:21:14.748Z","title":"Pillow: APNG background disposal allocates full canvas before decompression bomb check","severity":"HIGH","score":8.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00529},{"id":"CVE-2026-112398","published":"2026-10-19T21:07:25.229Z","updated":"2026-10-22T21:06:17.285Z","title":"Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution","severity":"CRITICAL","score":9.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00696},{"id":"CVE-2026-53995","published":"2026-10-19T21:05:16.530Z","updated":"2026-11-02T16:11:13.675Z","title":"MLflow 3.17.1 and prior Path Traversal via Trace ID API","severity":"HIGH","score":8.8,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00604},{"id":"CVE-2026-112396","published":"2026-10-19T21:02:15.197Z","updated":"2026-10-20T16:09:21.913Z","title":"Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer","severity":"MEDIUM","score":5.9,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00694},{"id":"CVE-2026-112302","published":"2026-10-19T21:00:23.649Z","updated":"2026-10-22T21:05:07.719Z","title":"kiwilan php-archive Extraction ArchiveZip.php extract path traversal","severity":"MEDIUM","score":5.3,"vendor":"kiwilan","product":"php-archive","kev":false,"epss":0.00499},{"id":"CVE-2026-112395","published":"2026-10-19T20:59:15.098Z","updated":"2026-10-28T15:24:49.805Z","title":"Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00514},{"id":"CVE-2026-111946","published":"2026-10-19T20:54:56.964Z","updated":"2026-10-29T17:21:25.384Z","title":"Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Plack-Middleware-ETag","kev":false,"epss":0.00341},{"id":"CVE-2026-112394","published":"2026-10-19T20:48:28.141Z","updated":"2026-10-22T21:04:15.766Z","title":"Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size","severity":"MEDIUM","score":6.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00555},{"id":"CVE-2026-112393","published":"2026-10-19T20:46:40.784Z","updated":"2026-10-19T21:17:41.571Z","title":"Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO","severity":"CRITICAL","score":9.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.01019},{"id":"CVE-2026-112301","published":"2026-10-19T20:45:16.274Z","updated":"2026-10-19T21:18:21.595Z","title":"orbitale imagemagick-php Command.php font os command injection","severity":"MEDIUM","score":6.9,"vendor":"orbitale","product":"imagemagick-php","kev":false,"epss":0.02039},{"id":"CVE-2026-112391","published":"2026-10-19T20:40:36.285Z","updated":"2026-10-20T16:09:28.294Z","title":"Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()","severity":"MEDIUM","score":6.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00581},{"id":"CVE-2026-76788","published":"2026-10-19T20:39:22.074Z","updated":"2026-10-20T18:08:01.647Z","title":"Stack out-of-bounds write in the OSDP Control Panel reply parser","severity":"HIGH","score":8.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00249},{"id":"CVE-2026-76787","published":"2026-10-19T20:39:20.425Z","updated":"2026-10-20T18:08:01.790Z","title":"NULL pointer dereference in the UpdateHub FOTA client when probe metadata omits sha256sum","severity":"MEDIUM","score":5.9,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00362},{"id":"CVE-2026-112390","published":"2026-10-19T20:35:39.189Z","updated":"2026-10-20T15:02:38.367Z","title":"Pillow: Infinite loop in MIC n_frames when the embedded TIFF","severity":"HIGH","score":8.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00593},{"id":"CVE-2026-112300","published":"2026-10-19T20:30:18.020Z","updated":"2026-10-20T16:09:34.927Z","title":"DiffSK configobj __init__.py _sectionmarker redos","severity":"MEDIUM","score":6.9,"vendor":"DiffSK","product":"configobj","kev":false,"epss":0.00534},{"id":"CVE-2026-112299","published":"2026-10-19T20:15:27.596Z","updated":"2026-10-20T15:04:50.594Z","title":"smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"smrealms","product":"smr","kev":false,"epss":0.0055},{"id":"CVE-2026-111766","published":"2026-10-19T19:47:46.488Z","updated":"2026-10-26T17:37:11.818Z","title":"markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled","severity":"LOW","score":3.7,"vendor":"markdown-it","product":"markdown-it","kev":false,"epss":0.00428},{"id":"CVE-2026-112297","published":"2026-10-19T19:45:05.618Z","updated":"2026-10-22T21:03:05.179Z","title":"ptbsare anx-calibre-manager LLM Configuration llm.py LLMClient.chat server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"ptbsare","product":"anx-calibre-manager","kev":false,"epss":0.00312},{"id":"CVE-2026-71169","published":"2026-10-19T19:41:05.089Z","updated":"2026-10-20T16:09:41.284Z","title":"Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"HIGH","score":7,"vendor":"Dell","product":"Application Store","kev":false,"epss":0.00109},{"id":"CVE-2026-82166","published":"2026-10-19T19:38:44.336Z","updated":"2026-10-19T21:19:32.343Z","title":"Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"Application Store","kev":false,"epss":0.00299},{"id":"CVE-2026-71170","published":"2026-10-19T19:35:38.819Z","updated":"2026-10-20T15:06:55.624Z","title":"Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"Application Store","kev":false,"epss":0.00149},{"id":"CVE-2026-112254","published":"2026-10-19T19:30:12.663Z","updated":"2026-10-19T21:20:40.728Z","title":"agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"agit8or1","product":"clientst0r","kev":false,"epss":0.00345},{"id":"CVE-2026-112260","published":"2026-10-19T19:24:49.017Z","updated":"2026-11-02T18:26:05.141Z","title":"Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","kev":false,"epss":0.00157},{"id":"CVE-2026-112782","published":"2026-10-19T19:10:58.093Z","updated":"2026-10-20T16:09:47.734Z","title":"Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00758},{"id":"CVE-2026-112781","published":"2026-10-19T19:10:57.417Z","updated":"2026-10-20T15:07:46.991Z","title":"Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00617},{"id":"CVE-2026-112780","published":"2026-10-19T19:10:56.708Z","updated":"2026-10-22T21:02:32.455Z","title":"Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@","severity":"CRITICAL","score":9.3,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00717},{"id":"CVE-2026-112779","published":"2026-10-19T19:10:55.987Z","updated":"2026-10-20T14:14:32.480Z","title":"Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass","severity":"CRITICAL","score":9.3,"vendor":"getgrav","product":"grav-plugin-api","kev":false,"epss":0.00761},{"id":"CVE-2026-112778","published":"2026-10-19T19:10:55.264Z","updated":"2026-10-19T21:16:12.196Z","title":"Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations","severity":"MEDIUM","score":6.4,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00204},{"id":"CVE-2026-112777","published":"2026-10-19T19:10:54.567Z","updated":"2026-10-20T16:09:54.518Z","title":"Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00612},{"id":"CVE-2026-112776","published":"2026-10-19T19:10:53.896Z","updated":"2026-10-20T15:09:02.690Z","title":"Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations","severity":"CRITICAL","score":9.3,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00386},{"id":"CVE-2026-112775","published":"2026-10-19T19:10:53.219Z","updated":"2026-10-22T21:01:53.422Z","title":"Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00403},{"id":"CVE-2026-112774","published":"2026-10-19T19:10:52.576Z","updated":"2026-10-20T14:36:01.519Z","title":"Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00638},{"id":"CVE-2026-112773","published":"2026-10-19T19:10:51.883Z","updated":"2026-10-19T21:23:32.874Z","title":"Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00712},{"id":"CVE-2026-112772","published":"2026-10-19T19:10:51.181Z","updated":"2026-10-20T16:10:01.251Z","title":"Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00712},{"id":"CVE-2026-112771","published":"2026-10-19T19:10:50.470Z","updated":"2026-10-20T15:11:08.927Z","title":"Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowlist Bypass via Array Filters","severity":"HIGH","score":7.1,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00317},{"id":"CVE-2026-112770","published":"2026-10-19T19:10:49.743Z","updated":"2026-10-22T20:59:49.756Z","title":"Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00712},{"id":"CVE-2026-112769","published":"2026-10-19T19:10:49.061Z","updated":"2026-10-20T15:35:25.264Z","title":"Parse Server before 8.6.98 and 9.x before 9.10.3-alpha.1 Session Class-Level Permission Bypass","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00324},{"id":"CVE-2026-112768","published":"2026-10-19T19:10:48.394Z","updated":"2026-10-19T21:24:16.538Z","title":"Parse Server before 8.6.99 and 9.x before 9.10.3-alpha.2 Information Disclosure via User Update","severity":"MEDIUM","score":6.9,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00398},{"id":"CVE-2026-112252","published":"2026-10-19T19:00:17.701Z","updated":"2026-10-20T16:10:10.887Z","title":"Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection","severity":"MEDIUM","score":6.9,"vendor":"Wuxi Wubang Security Software","product":"Wubang Five-in-One Safety Production Management Information System","kev":false,"epss":0.00325},{"id":"CVE-2026-112259","published":"2026-10-19T18:42:52.539Z","updated":"2026-10-22T20:58:08.166Z","title":"Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00147},{"id":"CVE-2026-112251","published":"2026-10-19T18:30:17.553Z","updated":"2026-10-19T18:49:54.959Z","title":"antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect","severity":"MEDIUM","score":5.3,"vendor":"antoinersx","product":"clawhost","kev":false,"epss":0.00319},{"id":"CVE-2026-109437","published":"2026-10-19T18:22:57.431Z","updated":"2026-10-23T13:28:30.752Z","title":"Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend","severity":"CRITICAL","score":9.2,"vendor":"CognicellAI","product":"Cognition","kev":false,"epss":0.00778},{"id":"CVE-2026-112249","published":"2026-10-19T18:15:20.969Z","updated":"2026-10-22T20:57:30.197Z","title":"grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"grandnode","product":"grandnode2","kev":false,"epss":0.00398},{"id":"CVE-2026-109434","published":"2026-10-19T18:12:51.637Z","updated":"2026-10-19T18:36:45.158Z","title":"Sleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing","severity":"MEDIUM","score":5.1,"vendor":"Fenrir","product":"Sleipnir Mobile for Android","kev":false,"epss":0.00303},{"id":"CVE-2026-110688","published":"2026-10-19T18:12:25.276Z","updated":"2026-10-29T17:18:17.844Z","title":"Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00485},{"id":"CVE-2026-110687","published":"2026-10-19T18:12:22.028Z","updated":"2026-10-29T17:15:37.701Z","title":"Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00422},{"id":"CVE-2026-110686","published":"2026-10-19T18:12:19.804Z","updated":"2026-10-29T17:11:22.136Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00434},{"id":"CVE-2026-110685","published":"2026-10-19T18:12:17.344Z","updated":"2026-10-29T17:06:21.316Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00508},{"id":"CVE-2026-110684","published":"2026-10-19T18:12:13.737Z","updated":"2026-10-29T17:01:30.913Z","title":"Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify","severity":"HIGH","score":8.1,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00454},{"id":"CVE-2026-110682","published":"2026-10-19T18:12:09.582Z","updated":"2026-10-29T16:47:42.179Z","title":"Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00422},{"id":"CVE-2026-110681","published":"2026-10-19T18:12:05.543Z","updated":"2026-10-30T11:04:48.764Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread","severity":"HIGH","score":8.1,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00429},{"id":"CVE-2026-110680","published":"2026-10-19T18:12:01.950Z","updated":"2026-10-30T11:03:11.404Z","title":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00467},{"id":"CVE-2026-110678","published":"2026-10-19T18:11:58.610Z","updated":"2026-10-29T16:44:49.590Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00486},{"id":"CVE-2026-110677","published":"2026-10-19T18:11:53.004Z","updated":"2026-10-29T16:43:21.148Z","title":"Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00485},{"id":"CVE-2026-110676","published":"2026-10-19T18:11:45.805Z","updated":"2026-10-29T16:41:41.919Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00486},{"id":"CVE-2026-110675","published":"2026-10-19T18:11:35.561Z","updated":"2026-10-29T16:38:54.111Z","title":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv","severity":"HIGH","score":8.1,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00454},{"id":"CVE-2026-110674","published":"2026-10-19T18:11:25.890Z","updated":"2026-10-29T16:35:40.051Z","title":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00514},{"id":"CVE-2026-110673","published":"2026-10-19T18:11:15.412Z","updated":"2026-10-29T16:34:55.069Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00486},{"id":"CVE-2026-110672","published":"2026-10-19T18:11:08.038Z","updated":"2026-10-29T16:33:27.499Z","title":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv","severity":"HIGH","score":7.5,"vendor":null,"product":"Cpanel-JSON-XS","kev":false,"epss":0.00486},{"id":"CVE-2026-112248","published":"2026-10-19T18:00:16.670Z","updated":"2026-10-20T04:22:56.236Z","title":"grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal","severity":"MEDIUM","score":5.1,"vendor":"grandnode","product":"grandnode2","kev":false,"epss":0.0059},{"id":"CVE-2026-11319","published":"2026-10-19T17:58:54.222Z","updated":"2026-10-22T20:56:29.624Z","title":"TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity","severity":"MEDIUM","score":6.9,"vendor":"TickTick Limited","product":"TickTick for Android","kev":false,"epss":0.00171},{"id":"CVE-2026-55644","published":"2026-10-19T17:54:58.499Z","updated":"2026-10-22T20:55:32.146Z","title":"Element X iOS: io.element.call deeplink allows attacker-controlled HTTPS origin and may grant mic/camera to that origin","severity":"MEDIUM","score":5.1,"vendor":"element-hq","product":"element-x-ios","kev":false,"epss":0.0038},{"id":"CVE-2026-105810","published":"2026-10-19T17:46:42.190Z","updated":"2026-10-20T19:23:34.083Z","title":"Authenticated Local Stack Overflow in TP-Link Tapo C320WS","severity":"HIGH","score":8.5,"vendor":"TP-Link Systems Inc.","product":"Tapo C320WS v2","kev":false,"epss":0.0046},{"id":"CVE-2023-38375","published":"2026-10-19T17:40:04.905Z","updated":"2026-10-20T16:10:23.989Z","title":"IBM Cloud Pak System Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"IBM","product":"Cloud Pak System","kev":false,"epss":0.00194},{"id":"CVE-2026-3161","published":"2026-10-19T17:39:57.551Z","updated":"2026-10-22T20:54:26.968Z","title":"IBM Cloud Pak System Risky Cryptographic Algorithm","severity":"MEDIUM","score":5.9,"vendor":"IBM","product":"Cloud Pak System","kev":false,"epss":0.0017},{"id":"CVE-2026-3295","published":"2026-10-19T17:39:49.804Z","updated":"2026-10-19T18:18:43.531Z","title":"IBM Cloud Pak System Cross-Site Scripting","severity":"HIGH","score":7.4,"vendor":"IBM","product":"Cloud Pak System","kev":false,"epss":0.00222},{"id":"CVE-2026-4418","published":"2026-10-19T17:39:41.586Z","updated":"2026-10-19T18:12:10.504Z","title":"IBM Cloud Pak System HTML Injection","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"Cloud Pak System","kev":false,"epss":0.00173},{"id":"CVE-2026-111759","published":"2026-10-19T17:39:10.264Z","updated":"2026-10-19T18:22:54.696Z","title":"markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes","severity":"HIGH","score":7.5,"vendor":"markdown-it","product":"markdown-it","kev":false,"epss":0.00591},{"id":"CVE-2026-111757","published":"2026-10-19T17:31:20.341Z","updated":"2026-10-20T16:10:30.638Z","title":"Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths","severity":"MEDIUM","score":5.3,"vendor":"honojs","product":"hono","kev":false,"epss":0.0031},{"id":"CVE-2026-111755","published":"2026-10-19T17:27:09.215Z","updated":"2026-10-19T18:00:16.343Z","title":"follow-redirects sensitiveHeaders regex escaping can expose credential headers","severity":"HIGH","score":8.2,"vendor":"follow-redirects","product":"follow-redirects","kev":false,"epss":0.00471},{"id":"CVE-2026-112377","published":"2026-10-19T17:26:39.111Z","updated":"2026-10-20T17:39:42.185Z","title":"CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack","severity":"CRITICAL","score":9.1,"vendor":"CCC-Attestation","product":"attested-tls-poc","kev":false,"epss":0.00218},{"id":"CVE-2026-1501","published":"2026-10-19T17:18:00.687Z","updated":"2026-10-19T17:53:40.919Z","title":"IBM Concert Software Improper Certificate Validation","severity":"LOW","score":3.7,"vendor":"IBM","product":"Concert","kev":false,"epss":0.0009},{"id":"CVE-2026-1510","published":"2026-10-19T17:17:53.903Z","updated":"2026-10-19T18:01:35.430Z","title":"IBM Concert Software Improper Clearing of Heap Memory","severity":"MEDIUM","score":4.7,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00129},{"id":"CVE-2026-3303","published":"2026-10-19T17:17:45.343Z","updated":"2026-10-20T16:10:39.862Z","title":"IBM Concert Software Permissive Cross-domain Security Policy","severity":"LOW","score":3.7,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00222},{"id":"CVE-2026-3628","published":"2026-10-19T17:17:36.917Z","updated":"2026-10-22T20:53:57.630Z","title":"IBM Concert Software Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"Concert","kev":false,"epss":0.0027},{"id":"CVE-2026-4405","published":"2026-10-19T17:17:27.412Z","updated":"2026-10-19T18:23:21.592Z","title":"IBM Concert Software Use of Web Browser Cache Containing Sensitive Information","severity":"MEDIUM","score":4,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00159},{"id":"CVE-2026-4413","published":"2026-10-19T17:17:18.567Z","updated":"2026-10-19T17:57:13.032Z","title":"IBM Concert Software Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00211},{"id":"CVE-2026-6719","published":"2026-10-19T17:17:08.395Z","updated":"2026-10-19T18:02:41.810Z","title":"IBM Concert Software Use of Insufficiently Random Values","severity":"HIGH","score":7.5,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00335},{"id":"CVE-2026-112247","published":"2026-10-19T17:15:15.630Z","updated":"2026-10-20T16:10:48.654Z","title":"Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Wuxi Wubang Security Software","product":"Five-in-One Safety Production Management Information System","kev":false,"epss":0.0033},{"id":"CVE-2026-6930","published":"2026-10-19T17:11:49.495Z","updated":"2026-10-19T18:24:35.665Z","title":"IBM Concert Software Risky Cryptographic Algorithm","severity":"LOW","score":3.7,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00141},{"id":"CVE-2026-15661","published":"2026-10-19T17:11:39.981Z","updated":"2026-10-22T20:53:27.978Z","title":"IBM Concert Software Improper Output Neutralization for Logs","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"Concert","kev":false,"epss":0.00242},{"id":"CVE-2026-111750","published":"2026-10-19T17:06:37.997Z","updated":"2026-10-28T15:27:37.704Z","title":"AIOHTTP: Pure-Python parser request smuggling","severity":"MEDIUM","score":6.3,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00382},{"id":"CVE-2026-111749","published":"2026-10-19T17:04:42.374Z","updated":"2026-10-22T20:52:37.188Z","title":"AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies","severity":"LOW","score":2.3,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00384},{"id":"CVE-2026-111748","published":"2026-10-19T17:02:21.289Z","updated":"2026-10-19T18:22:09.618Z","title":"AIOHTTP: Absolute-form request targets can spoof Request.scheme","severity":"MEDIUM","score":6.3,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00386},{"id":"CVE-2026-112195","published":"2026-10-19T17:00:17.863Z","updated":"2026-10-19T18:03:19.427Z","title":"FusionPBX Dialplan Editor dialplan.php os command injection","severity":"MEDIUM","score":5.1,"vendor":null,"product":"FusionPBX","kev":false,"epss":0.05045},{"id":"CVE-2026-111066","published":"2026-10-19T16:59:47.217Z","updated":"2026-10-20T16:10:55.842Z","title":"AIOHTTP: File descriptor exhaustion in multipart requests","severity":"HIGH","score":8.2,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00412},{"id":"CVE-2024-4412","published":"2026-10-19T16:59:05.004Z","updated":"2026-10-20T19:31:26.457Z","title":"Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations","severity":"LOW","score":2.7,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00369},{"id":"CVE-2026-111065","published":"2026-10-19T16:57:26.696Z","updated":"2026-10-19T17:35:52.967Z","title":"AIOHTTP: Connector pool exhaustion via Max-Age overflow","severity":"MEDIUM","score":6.9,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00395},{"id":"CVE-2025-13173","published":"2026-10-19T16:49:08.687Z","updated":"2026-10-20T19:31:45.535Z","title":"Improper Token Revocation via Session-Bound Token Flow in Multiple WSO2 Products Allows Unauthorized Access After Session Termination","severity":"MEDIUM","score":6.5,"vendor":"WSO2","product":"WSO2 API Control Plane","kev":false,"epss":0.00194},{"id":"CVE-2026-111064","published":"2026-10-19T16:47:35.036Z","updated":"2026-10-28T15:29:24.279Z","title":"aiohttp server lacks an initial request/header timeout","severity":"HIGH","score":8.2,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00399},{"id":"CVE-2025-13591","published":"2026-10-19T16:45:59.519Z","updated":"2026-10-20T19:32:03.360Z","title":"Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery","severity":"MEDIUM","score":5.3,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00297},{"id":"CVE-2026-112193","published":"2026-10-19T16:45:10.250Z","updated":"2026-10-22T20:51:29.159Z","title":"Webkul Aureus ERP UserForm.php weak password","severity":"MEDIUM","score":6.3,"vendor":"Webkul","product":"Aureus ERP","kev":false,"epss":0.00476},{"id":"CVE-2026-111063","published":"2026-10-19T16:44:31.331Z","updated":"2026-10-22T20:50:40.634Z","title":"AIOHTTP: Secure attribute not enforced for shared cookie","severity":"MEDIUM","score":6.3,"vendor":"aio-libs","product":"aiohttp","kev":false,"epss":0.00233},{"id":"CVE-2026-14511","published":"2026-10-19T16:43:22.662Z","updated":"2026-10-20T16:11:08.437Z","title":"IBM MQ Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00328},{"id":"CVE-2026-10572","published":"2026-10-19T16:41:42.171Z","updated":"2026-10-20T12:57:47.471Z","title":"IBM MQ Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00447},{"id":"CVE-2026-10574","published":"2026-10-19T16:41:34.104Z","updated":"2026-10-20T12:57:57.696Z","title":"IBM MQ Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00437},{"id":"CVE-2026-10743","published":"2026-10-19T16:41:25.083Z","updated":"2026-10-20T03:55:38.958Z","title":"IBM MQ Race Condition","severity":"HIGH","score":8.8,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00283},{"id":"CVE-2026-11828","published":"2026-10-19T16:41:17.597Z","updated":"2026-10-19T17:58:40.361Z","title":"IBM MQ Buffer Overflow","severity":"MEDIUM","score":5.9,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00254},{"id":"CVE-2026-11829","published":"2026-10-19T16:41:09.911Z","updated":"2026-10-19T16:57:56.455Z","title":"IBM MQ Buffer Overflow","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.0024},{"id":"CVE-2026-11831","published":"2026-10-19T16:41:02.438Z","updated":"2026-10-20T16:11:18.172Z","title":"IBM MQ Heap-based Buffer Overflow","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00201},{"id":"CVE-2026-12148","published":"2026-10-19T16:40:55.117Z","updated":"2026-10-20T12:58:09.900Z","title":"IBM MQ Deserialization of Untrusted Data","severity":"HIGH","score":7.5,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00395},{"id":"CVE-2026-12155","published":"2026-10-19T16:40:44.471Z","updated":"2026-10-19T18:25:50.095Z","title":"IBM MQ Deserialization of Untrusted Data","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00259},{"id":"CVE-2026-12343","published":"2026-10-19T16:40:37.209Z","updated":"2026-10-19T17:52:17.052Z","title":"IBM MQ Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.0024},{"id":"CVE-2026-12350","published":"2026-10-19T16:40:28.489Z","updated":"2026-10-19T16:58:34.572Z","title":"IBM MQ Deserialization of Untrusted Data","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00259},{"id":"CVE-2025-10149","published":"2026-10-19T16:40:26.522Z","updated":"2026-10-20T19:29:50.753Z","title":"Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover","severity":"HIGH","score":8.2,"vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","kev":false,"epss":0.00178},{"id":"CVE-2026-12660","published":"2026-10-19T16:40:20.554Z","updated":"2026-10-20T16:11:26.821Z","title":"IBM MQ Path Traversal","severity":"LOW","score":2.7,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.0024},{"id":"CVE-2026-12665","published":"2026-10-19T16:40:12.974Z","updated":"2026-10-20T12:58:19.535Z","title":"IBM MQ Buffer Overflow","severity":"HIGH","score":8.1,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00315},{"id":"CVE-2026-12669","published":"2026-10-19T16:40:03.110Z","updated":"2026-10-19T18:27:07.282Z","title":"IBM MQ Out-of-bounds Read","severity":"LOW","score":3.1,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00157},{"id":"CVE-2026-12727","published":"2026-10-19T16:39:55.294Z","updated":"2026-10-19T17:03:24.593Z","title":"IBM MQ Buffer Overflow","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.0022},{"id":"CVE-2026-12670","published":"2026-10-19T16:39:30.332Z","updated":"2026-10-19T18:10:58.089Z","title":"IBM MQ Denial of Service","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"MQ Operator","kev":false,"epss":0.00211},{"id":"CVE-2025-7203","published":"2026-10-19T16:38:01.795Z","updated":"2026-10-20T19:33:23.028Z","title":"Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of Credentials","severity":"MEDIUM","score":4.9,"vendor":"WSO2","product":"WSO2 Universal Gateway","kev":false,"epss":0.00154},{"id":"CVE-2026-107188","published":"2026-10-19T16:37:39.202Z","updated":"2026-10-20T19:30:58.437Z","title":"Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Eptura","product":"Archibus","kev":false,"epss":0.00376},{"id":"CVE-2026-111862","published":"2026-10-19T16:35:59.949Z","updated":"2026-10-20T14:10:31.918Z","title":"Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code","severity":"CRITICAL","score":9.8,"vendor":"RankMath","product":"Rank Math SEO PRO","kev":false,"epss":0.00658},{"id":"CVE-2026-107187","published":"2026-10-19T16:35:01.728Z","updated":"2026-10-20T19:30:36.980Z","title":"Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables","severity":"HIGH","score":8.5,"vendor":"Eptura","product":"Archibus","kev":false,"epss":0.00275},{"id":"CVE-2026-107186","published":"2026-10-19T16:32:05.063Z","updated":"2026-10-20T19:30:17.854Z","title":"Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse","severity":"HIGH","score":8.6,"vendor":"Eptura","product":"Archibus","kev":false,"epss":0.00362},{"id":"CVE-2026-111061","published":"2026-10-19T16:30:24.445Z","updated":"2026-10-19T18:29:47.486Z","title":"russh agent server converts constraint records into unbounded never-rolled-back tasks","severity":"MEDIUM","score":4.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00347},{"id":"CVE-2026-112190","published":"2026-10-19T16:30:16.100Z","updated":"2026-10-19T18:30:56.708Z","title":"Webkul Aureus ERP composer.json insertion of sensitive information into debugging code","severity":"MEDIUM","score":6.9,"vendor":"Webkul","product":"Aureus ERP","kev":false,"epss":0.00302},{"id":"CVE-2025-7043","published":"2026-10-19T16:28:15.063Z","updated":"2026-10-28T20:05:51.992Z","title":"Refresh Token Misuse via Validation Flaw in Multiple WSO2 Products Enables Unauthorized Resource Consumption","severity":"MEDIUM","score":5.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00184},{"id":"CVE-2025-6623","published":"2026-10-19T16:25:50.419Z","updated":"2026-10-20T19:29:07.389Z","title":"Stored Cross-Site Scripting via XML Input in Multiple WSO2 Products Allows UI Manipulation and Redirection","severity":"MEDIUM","score":4.3,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00265},{"id":"CVE-2026-112159","published":"2026-10-19T16:15:17.871Z","updated":"2026-10-20T16:11:34.028Z","title":"JumpServer Template Rendering os command injection","severity":"MEDIUM","score":5.1,"vendor":null,"product":"JumpServer","kev":false,"epss":0.01043},{"id":"CVE-2026-103038","published":"2026-10-19T16:13:35.444Z","updated":"2026-10-20T19:29:29.488Z","title":"PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host","severity":"HIGH","score":8.6,"vendor":"StreamSoft","product":"PingTools Network Utilities","kev":false,"epss":0.03441},{"id":"CVE-2026-111059","published":"2026-10-19T16:11:29.745Z","updated":"2026-10-20T16:11:40.067Z","title":"Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML","severity":"MEDIUM","score":6.1,"vendor":"mljar","product":"mercury","kev":false,"epss":0.00284},{"id":"CVE-2026-111058","published":"2026-10-19T16:06:22.646Z","updated":"2026-10-19T17:06:53.899Z","title":"Mercury: Unauthenticated Remote Code Execution via /api/kernels","severity":"CRITICAL","score":9.8,"vendor":"mljar","product":"mercury","kev":false,"epss":0.00523},{"id":"CVE-2026-111057","published":"2026-10-19T16:04:07.065Z","updated":"2026-10-28T15:31:24.524Z","title":"Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass","severity":"CRITICAL","score":10,"vendor":"mljar","product":"mercury","kev":false,"epss":0.00698},{"id":"CVE-2026-111056","published":"2026-10-19T16:00:57.576Z","updated":"2026-10-22T03:02:43.261Z","title":"FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint","severity":"MEDIUM","score":6.9,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00285},{"id":"CVE-2026-112158","published":"2026-10-19T16:00:06.444Z","updated":"2026-10-19T17:09:43.696Z","title":"MikroTik RouterOS ipt_SAME.ko same_check integer overflow","severity":"HIGH","score":7.1,"vendor":"MikroTik","product":"RouterOS","kev":false,"epss":0.00334},{"id":"CVE-2026-111053","published":"2026-10-19T15:54:17.610Z","updated":"2026-10-19T16:36:49.366Z","title":"FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists","severity":"MEDIUM","score":6.9,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00368},{"id":"CVE-2026-111046","published":"2026-10-19T15:49:48.717Z","updated":"2026-10-19T16:33:30.338Z","title":"FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions","severity":"LOW","score":2.3,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00246},{"id":"CVE-2026-112368","published":"2026-10-19T15:49:16.053Z","updated":"2026-10-20T19:28:39.257Z","title":"Unbounded Recursion in phongo_bson_visit_document/visit_array:","severity":"HIGH","score":8.2,"vendor":"MongoDB Inc.","product":"PHP Driver","kev":false,"epss":0.00263},{"id":"CVE-2026-112157","published":"2026-10-19T15:45:16.283Z","updated":"2026-10-22T03:01:28.323Z","title":"MemTensor memmy-agent Memory Service http.ts requireAdminWrite resource consumption","severity":"LOW","score":2.3,"vendor":"MemTensor","product":"memmy-agent","kev":false,"epss":0.00296},{"id":"CVE-2026-111045","published":"2026-10-19T15:42:24.691Z","updated":"2026-10-19T17:13:27.831Z","title":"CLI Bridge: High-severity sandbox escape via dangling symlink","severity":"HIGH","score":7.5,"vendor":"anshupriyan","product":"cli-bridge","kev":false,"epss":0.00375},{"id":"CVE-2026-12254","published":"2026-10-19T15:37:11.423Z","updated":"2026-10-21T16:31:04.871Z","title":"Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue","severity":"MEDIUM","score":6.4,"vendor":"Netskope Inc.","product":"Netskope Client","kev":false,"epss":0.00312},{"id":"CVE-2026-107571","published":"2026-10-19T15:34:47.493Z","updated":"2026-10-20T19:27:48.906Z","title":"Incorrect Default Permissions in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00102},{"id":"CVE-2026-107569","published":"2026-10-19T15:34:37.492Z","updated":"2026-10-20T19:27:26.604Z","title":"Unchecked Input for Loop Condition in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00372},{"id":"CVE-2026-107566","published":"2026-10-19T15:34:27.491Z","updated":"2026-10-20T19:25:48.560Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00181},{"id":"CVE-2026-107568","published":"2026-10-19T15:34:22.493Z","updated":"2026-10-20T19:26:59.743Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00244},{"id":"CVE-2026-107567","published":"2026-10-19T15:34:17.494Z","updated":"2026-10-20T19:26:19.977Z","title":"Use of Less Trusted Source in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00166},{"id":"CVE-2026-112153","published":"2026-10-19T15:30:16.983Z","updated":"2026-10-19T16:37:50.313Z","title":"vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection","severity":"MEDIUM","score":6.9,"vendor":"vraj404","product":"Criminal-Management-System","kev":false,"epss":0.00263},{"id":"CVE-2026-112366","published":"2026-10-19T15:29:00.491Z","updated":"2026-10-19T16:40:19.321Z","title":"Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns","severity":"HIGH","score":8.7,"vendor":"micromatch","product":"picomatch","kev":false,"epss":0.00335},{"id":"CVE-2026-112363","published":"2026-10-19T15:28:59.792Z","updated":"2026-10-19T16:33:37.088Z","title":"Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0017},{"id":"CVE-2026-112310","published":"2026-10-19T15:28:59.122Z","updated":"2026-10-19T20:30:59.607Z","title":"docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef","severity":"MEDIUM","score":5.3,"vendor":"docling-project","product":"docling-core","kev":false,"epss":0.00335},{"id":"CVE-2026-112309","published":"2026-10-19T15:28:58.442Z","updated":"2026-10-22T03:00:39.446Z","title":"@rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods","severity":"HIGH","score":8.7,"vendor":"airjp73","product":"@rvf/set-get","kev":false,"epss":0.00395},{"id":"CVE-2026-112308","published":"2026-10-19T15:28:57.761Z","updated":"2026-10-19T18:23:27.612Z","title":"crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool","severity":"HIGH","score":8.3,"vendor":"crewAIInc","product":"crewai-tools","kev":false,"epss":0.00239},{"id":"CVE-2026-112307","published":"2026-10-19T15:28:57.066Z","updated":"2026-10-19T16:41:10.929Z","title":"sqlparse through 0.6.0 PHP Code Injection via output_format='php'","severity":"HIGH","score":8.4,"vendor":"andialbrecht","product":"sqlparse","kev":false,"epss":0.00142},{"id":"CVE-2026-112306","published":"2026-10-19T15:28:56.450Z","updated":"2026-10-19T16:33:44.883Z","title":"NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields","severity":"HIGH","score":8.6,"vendor":"nocobase","product":"nocobase","kev":false,"epss":0.00311},{"id":"CVE-2026-112305","published":"2026-10-19T15:28:55.694Z","updated":"2026-10-19T17:40:14.094Z","title":"Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override","severity":"HIGH","score":8.7,"vendor":"semaphoreui","product":"Semaphore UI","kev":false,"epss":0.00563},{"id":"CVE-2026-112304","published":"2026-10-19T15:28:54.688Z","updated":"2026-10-22T02:59:45.557Z","title":"docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()","severity":"HIGH","score":7.7,"vendor":"Mindee","product":"docTR","kev":false,"epss":0.00368},{"id":"CVE-2026-112303","published":"2026-10-19T15:28:54.002Z","updated":"2026-10-19T18:22:14.926Z","title":"GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs","severity":"MEDIUM","score":5.3,"vendor":"GDevelop","product":"GDevelop","kev":false,"epss":0.0026},{"id":"CVE-2026-112152","published":"2026-10-19T15:15:12.996Z","updated":"2026-10-19T16:33:54.301Z","title":"vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"vraj404","product":"Criminal-Management-System","kev":false,"epss":0.00328},{"id":"CVE-2026-109433","published":"2026-10-19T15:10:59.006Z","updated":"2026-10-23T16:16:49.778Z","title":"Camunda Broken Access Control via Cockpit","severity":"MEDIUM","score":6,"vendor":"Camunda","product":"Camunda 7","kev":false,"epss":0.00434},{"id":"CVE-2026-109432","published":"2026-10-19T15:08:29.023Z","updated":"2026-10-19T16:34:01.291Z","title":"Camunda Expression Injection via orQueries RCE","severity":"CRITICAL","score":9.3,"vendor":"Camunda","product":"Camunda 7","kev":false,"epss":0.00558},{"id":"CVE-2026-109431","published":"2026-10-19T15:06:00.780Z","updated":"2026-10-27T16:16:21.231Z","title":"Camunda Missing Authorization in Task Sub-Resources","severity":"HIGH","score":8.6,"vendor":"Camunda","product":"Camunda 7","kev":false,"epss":0.00359},{"id":"CVE-2026-112151","published":"2026-10-19T15:00:14.288Z","updated":"2026-10-19T17:44:38.782Z","title":"vraj404 Criminal Management System Submission Form home.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"vraj404","product":"Criminal Management System","kev":false,"epss":0.00254},{"id":"CVE-2026-86375","published":"2026-10-19T14:51:49.544Z","updated":"2026-10-19T18:19:59.198Z","title":"Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local…","severity":"MEDIUM","score":6.2,"vendor":"Dell","product":"Application Installer,","kev":false,"epss":0.00063},{"id":"CVE-2026-112329","published":"2026-10-19T14:45:24.844Z","updated":"2026-10-27T10:14:04.227Z","title":"Sensei LMS 4.26.4 Broken Access Control via save_new_message","severity":"MEDIUM","score":5.3,"vendor":"Automattic","product":"Sensei LMS","kev":false,"epss":0.0018},{"id":"CVE-2026-112150","published":"2026-10-19T14:45:18.145Z","updated":"2026-10-22T02:56:43.621Z","title":"vraj404 Criminal-Management-System search.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"vraj404","product":"Criminal-Management-System","kev":false,"epss":0.00263},{"id":"CVE-2026-112328","published":"2026-10-19T14:44:00.760Z","updated":"2026-10-27T10:14:03.607Z","title":"Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX","severity":"MEDIUM","score":5.3,"vendor":"Automattic","product":"Sensei LMS","kev":false,"epss":0.00158},{"id":"CVE-2026-112149","published":"2026-10-19T14:30:16.739Z","updated":"2026-10-19T16:44:41.590Z","title":"vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"vraj404","product":"Criminal-Management-System","kev":false,"epss":0.00288},{"id":"CVE-2026-112147","published":"2026-10-19T14:15:16.138Z","updated":"2026-10-19T16:34:10.892Z","title":"ai-genius-automations octoally index.ts information disclosure","severity":"MEDIUM","score":6.9,"vendor":"ai-genius-automations","product":"octoally","kev":false,"epss":0.00475},{"id":"CVE-2026-112146","published":"2026-10-19T14:00:20.611Z","updated":"2026-10-19T17:45:45.319Z","title":"D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials","severity":"MEDIUM","score":5.3,"vendor":"D-Link","product":"E15","kev":false,"epss":0.00443},{"id":"CVE-2026-112296","published":"2026-10-19T13:55:36.847Z","updated":"2026-10-27T10:14:02.985Z","title":"FlyCms through commit edfdf724 Default Super Administrator Credentials","severity":"CRITICAL","score":9.3,"vendor":"sunkaifei","product":"FlyCms","kev":false,"epss":0.00418},{"id":"CVE-2026-112295","published":"2026-10-19T13:55:36.176Z","updated":"2026-10-27T10:14:02.317Z","title":"FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update","severity":"MEDIUM","score":5.3,"vendor":"sunkaifei","product":"FlyCms","kev":false,"epss":0.00257},{"id":"CVE-2026-112294","published":"2026-10-19T13:55:35.493Z","updated":"2026-10-27T10:14:01.624Z","title":"FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint","severity":"MEDIUM","score":5.3,"vendor":"sunkaifei","product":"FlyCms","kev":false,"epss":0.00196},{"id":"CVE-2026-112293","published":"2026-10-19T13:55:34.785Z","updated":"2026-10-22T02:55:49.317Z","title":"BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment API","severity":"MEDIUM","score":5.3,"vendor":"BoxyHQ","product":"saas-starter-kit","kev":false,"epss":0.00184},{"id":"CVE-2026-112292","published":"2026-10-19T13:55:34.097Z","updated":"2026-10-19T18:27:55.844Z","title":"CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules","severity":"CRITICAL","score":9.3,"vendor":"operacle","product":"checkcle","kev":false,"epss":0.00347},{"id":"CVE-2026-112291","published":"2026-10-19T13:55:33.404Z","updated":"2026-10-19T14:18:17.505Z","title":"Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API","severity":"MEDIUM","score":6.9,"vendor":"Flarum","product":"Extension Manager","kev":false,"epss":0.00346},{"id":"CVE-2026-112290","published":"2026-10-19T13:55:32.741Z","updated":"2026-10-19T16:34:26.673Z","title":"MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item","severity":"LOW","score":2.3,"vendor":"MI6","product":"Intelligence Community UI Kit canary web components","kev":false,"epss":0.00183},{"id":"CVE-2026-112289","published":"2026-10-19T13:55:32.059Z","updated":"2026-10-19T17:52:26.383Z","title":"Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin","severity":"MEDIUM","score":5.1,"vendor":"KoalixSwitzerland","product":"koalixcrm","kev":false,"epss":0.00203},{"id":"CVE-2026-112288","published":"2026-10-19T13:55:31.283Z","updated":"2026-10-22T02:54:40.630Z","title":"Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding","severity":"LOW","score":2.1,"vendor":"krayin","product":"laravel-crm","kev":false,"epss":0.00218},{"id":"CVE-2026-112287","published":"2026-10-19T13:55:30.623Z","updated":"2026-10-19T18:30:27.530Z","title":"Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module","severity":"HIGH","score":7.1,"vendor":"krayin","product":"laravel-crm","kev":false,"epss":0.00199},{"id":"CVE-2026-112286","published":"2026-10-19T13:55:29.924Z","updated":"2026-10-19T14:19:36.695Z","title":"Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints","severity":"HIGH","score":7.1,"vendor":"krayin","product":"laravel-crm","kev":false,"epss":0.0025},{"id":"CVE-2026-112285","published":"2026-10-19T13:55:29.184Z","updated":"2026-10-19T16:34:33.839Z","title":"Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders","severity":"MEDIUM","score":5.3,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.00289},{"id":"CVE-2026-112284","published":"2026-10-19T13:55:28.447Z","updated":"2026-10-19T17:55:16.813Z","title":"libaribcaption 1.1.0 through 1.1.2 Out-of-Bounds Read via DecoderImpl::HandleGLGR","severity":"MEDIUM","score":4.8,"vendor":"xqq","product":"libaribcaption","kev":false,"epss":0.0018},{"id":"CVE-2026-112283","published":"2026-10-19T13:55:27.741Z","updated":"2026-10-22T02:53:35.556Z","title":"libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points","severity":"MEDIUM","score":6.8,"vendor":"VideoLAN","product":"libbluray","kev":false,"epss":0.00182},{"id":"CVE-2026-112282","published":"2026-10-19T13:55:27.008Z","updated":"2026-10-19T18:42:52.370Z","title":"VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point","severity":"MEDIUM","score":6.8,"vendor":"VideoLAN","product":"libbluray","kev":false,"epss":0.0018},{"id":"CVE-2026-112281","published":"2026-10-19T13:55:26.323Z","updated":"2026-10-19T14:20:24.874Z","title":"libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi","severity":"MEDIUM","score":6.9,"vendor":"nkoriyama","product":"aribb24","kev":false,"epss":0.00197},{"id":"CVE-2026-112280","published":"2026-10-19T13:55:25.644Z","updated":"2026-10-19T16:34:41.023Z","title":"libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflow via parse_data_unit_statement_body","severity":"MEDIUM","score":6.9,"vendor":"nkoriyama","product":"aribb24","kev":false,"epss":0.00132},{"id":"CVE-2026-112279","published":"2026-10-19T13:55:24.937Z","updated":"2026-10-19T17:56:06.184Z","title":"rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_bmpcache2","severity":"HIGH","score":7.1,"vendor":"rdesktop","product":"rdesktop","kev":false,"epss":0.00306},{"id":"CVE-2026-112278","published":"2026-10-19T13:55:24.239Z","updated":"2026-10-22T02:52:31.934Z","title":"rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache","severity":"HIGH","score":7.1,"vendor":"rdesktop","product":"rdesktop","kev":false,"epss":0.00306},{"id":"CVE-2026-112277","published":"2026-10-19T13:55:23.436Z","updated":"2026-10-19T19:28:48.290Z","title":"rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_plane","severity":"HIGH","score":7.1,"vendor":"rdesktop","product":"rdesktop","kev":false,"epss":0.0039},{"id":"CVE-2026-112276","published":"2026-10-19T13:55:22.723Z","updated":"2026-10-19T14:13:40.705Z","title":"Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap","severity":"MEDIUM","score":6.9,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00197},{"id":"CVE-2026-112275","published":"2026-10-19T13:55:22.019Z","updated":"2026-10-19T16:34:48.175Z","title":"Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image","severity":"MEDIUM","score":6.9,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00128},{"id":"CVE-2026-112274","published":"2026-10-19T13:55:21.345Z","updated":"2026-10-19T17:57:12.363Z","title":"libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init","severity":"MEDIUM","score":6.3,"vendor":"libtins","product":"libtins","kev":false,"epss":0.00522},{"id":"CVE-2026-112273","published":"2026-10-19T13:55:20.684Z","updated":"2026-10-22T02:51:25.912Z","title":"libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name","severity":"MEDIUM","score":6.9,"vendor":"libtins","product":"libtins","kev":false,"epss":0.00565},{"id":"CVE-2026-112272","published":"2026-10-19T13:55:20.018Z","updated":"2026-10-19T19:34:25.467Z","title":"libdisplay-info 0.4.0 Heap Out-of-Bounds Read via DisplayID v2 Parser","severity":"MEDIUM","score":6.8,"vendor":"emersion","product":"libdisplay-info","kev":false,"epss":0.00196},{"id":"CVE-2026-112271","published":"2026-10-19T13:55:19.362Z","updated":"2026-10-19T14:11:35.515Z","title":"libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser","severity":"MEDIUM","score":6.8,"vendor":"emersion","product":"libdisplay-info","kev":false,"epss":0.00195},{"id":"CVE-2026-112270","published":"2026-10-19T13:55:18.694Z","updated":"2026-10-19T16:34:55.350Z","title":"SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx","severity":"HIGH","score":7.1,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00249},{"id":"CVE-2026-112269","published":"2026-10-19T13:55:17.954Z","updated":"2026-10-19T18:06:43.345Z","title":"SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations","severity":"HIGH","score":7.1,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00487},{"id":"CVE-2026-112268","published":"2026-10-19T13:55:17.198Z","updated":"2026-10-22T02:48:54.213Z","title":"sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes","severity":"MEDIUM","score":5.3,"vendor":"sgl-project","product":"sglang-router","kev":false,"epss":0.00324},{"id":"CVE-2026-112267","published":"2026-10-19T13:55:16.522Z","updated":"2026-10-19T19:36:30.282Z","title":"SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker","severity":"MEDIUM","score":6.9,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00423},{"id":"CVE-2026-112266","published":"2026-10-19T13:55:15.822Z","updated":"2026-10-19T14:21:40.361Z","title":"SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching","severity":"HIGH","score":8.2,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00421},{"id":"CVE-2026-112265","published":"2026-10-19T13:55:15.112Z","updated":"2026-10-19T16:35:03.804Z","title":"LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification","severity":"HIGH","score":8.3,"vendor":"langbot-app","product":"LangBot","kev":false,"epss":0.00154},{"id":"CVE-2026-112264","published":"2026-10-19T13:55:14.430Z","updated":"2026-10-19T18:08:19.307Z","title":"BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys","severity":"HIGH","score":8.5,"vendor":"bentoml","product":"BentoML","kev":false,"epss":0.00218},{"id":"CVE-2026-112263","published":"2026-10-19T13:55:13.736Z","updated":"2026-10-22T02:47:14.637Z","title":"Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting","severity":"HIGH","score":8.5,"vendor":"alexpasmantier","product":"television","kev":false,"epss":0.00659},{"id":"CVE-2026-112262","published":"2026-10-19T13:55:13.053Z","updated":"2026-10-19T19:30:17.015Z","title":"RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors","severity":"HIGH","score":7.1,"vendor":"risingwavelabs","product":"risingwave","kev":false,"epss":0.00288},{"id":"CVE-2026-111939","published":"2026-10-19T13:55:12.366Z","updated":"2026-10-19T14:23:03.987Z","title":"Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation","severity":"MEDIUM","score":5.1,"vendor":"frappe","product":"helpdesk","kev":false,"epss":0.00223},{"id":"CVE-2026-111938","published":"2026-10-19T13:55:11.692Z","updated":"2026-10-19T16:35:11.497Z","title":"Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"crm","kev":false,"epss":0.00259},{"id":"CVE-2026-111937","published":"2026-10-19T13:55:10.989Z","updated":"2026-10-19T18:11:17.821Z","title":"Frappe CRM before 1.81.2 Missing Authorization on CRM Notification Records","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"crm","kev":false,"epss":0.00235},{"id":"CVE-2026-111936","published":"2026-10-19T13:55:10.311Z","updated":"2026-10-22T02:46:37.174Z","title":"Sigma File Manager through 2.2.0 SSRF via Extension Download Commands","severity":"MEDIUM","score":5.3,"vendor":"aleksey-hoffman","product":"Sigma File Manager","kev":false,"epss":0.0026},{"id":"CVE-2026-111935","published":"2026-10-19T13:55:09.563Z","updated":"2026-10-19T18:58:39.107Z","title":"NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis","severity":"LOW","score":2.1,"vendor":"codexu","product":"NoteGen","kev":false,"epss":0.00252},{"id":"CVE-2026-111925","published":"2026-10-19T13:55:08.874Z","updated":"2026-10-19T14:24:41.987Z","title":"Mopidy before 4.0.5 Path Traversal via File Backend library.lookup","severity":"MEDIUM","score":6.9,"vendor":"Mopidy","product":"Mopidy","kev":false,"epss":0.00431},{"id":"CVE-2026-111915","published":"2026-10-19T13:55:08.190Z","updated":"2026-10-19T16:35:17.856Z","title":"Yank Note before 3.93.1 Path Traversal via /api/help Endpoint","severity":"HIGH","score":8.2,"vendor":"purocean","product":"Yank Note","kev":false,"epss":0.00455},{"id":"CVE-2026-111899","published":"2026-10-19T13:55:07.523Z","updated":"2026-10-19T18:12:44.619Z","title":"KitchenOwl through 0.7.10 SSRF via Recipe Import scrapeKitchenOwl Fetch","severity":"MEDIUM","score":5.3,"vendor":"TomBursch","product":"kitchenowl","kev":false,"epss":0.00269},{"id":"CVE-2026-111883","published":"2026-10-19T13:55:06.849Z","updated":"2026-10-22T02:45:12.513Z","title":"Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset","severity":"MEDIUM","score":5.3,"vendor":"locustio","product":"locust","kev":false,"epss":0.00194},{"id":"CVE-2026-112145","published":"2026-10-19T13:45:17.561Z","updated":"2026-10-22T02:43:07.609Z","title":"speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code","severity":"MEDIUM","score":6.9,"vendor":"speaches-ai","product":"speaches","kev":false,"epss":0.00427},{"id":"CVE-2026-112144","published":"2026-10-19T13:30:20.857Z","updated":"2026-10-19T14:25:40.803Z","title":"satya-vinay Events-Management-System project.sql file access","severity":"MEDIUM","score":6.9,"vendor":"satya-vinay","product":"Events-Management-System","kev":false,"epss":0.00498},{"id":"CVE-2026-111828","published":"2026-10-19T13:29:02.276Z","updated":"2026-10-19T18:13:06.617Z","title":"WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Mamunur Rashid","product":"Classified Listing","kev":false,"epss":0.00215},{"id":"CVE-2026-112222","published":"2026-10-19T13:28:19.208Z","updated":"2026-10-19T14:59:04.484Z","title":"WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Surfer","product":"Surfer","kev":false,"epss":0.00168},{"id":"CVE-2026-111829","published":"2026-10-19T13:27:57.467Z","updated":"2026-10-19T18:14:19.288Z","title":"WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Mailster","product":"WP Mailster","kev":false,"epss":0.00321},{"id":"CVE-2026-110902","published":"2026-10-19T13:27:05.415Z","updated":"2026-10-19T14:26:14.786Z","title":"WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"Event Tickets","kev":false,"epss":0.00225},{"id":"CVE-2026-110008","published":"2026-10-19T13:24:27.988Z","updated":"2026-10-19T14:26:45.991Z","title":"@fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback","severity":"MEDIUM","score":4.2,"vendor":"@fastify/oauth2","product":"@fastify/oauth2","kev":false,"epss":0.00096},{"id":"CVE-2026-112143","published":"2026-10-19T13:15:20.213Z","updated":"2026-10-19T16:35:25.242Z","title":"satya-vinay Events-Management-System missing authentication","severity":"MEDIUM","score":6.9,"vendor":"satya-vinay","product":"Events-Management-System","kev":false,"epss":0.00514},{"id":"CVE-2026-8168","published":"2026-10-19T13:08:14.544Z","updated":"2026-10-19T14:27:15.747Z","title":"Denial-of-service vulnerability in the SVG parser and renderer impacts Qt","severity":"HIGH","score":7.1,"vendor":"qt","product":"qt","kev":false,"epss":0.00404},{"id":"CVE-2026-112142","published":"2026-10-19T13:00:19.942Z","updated":"2026-10-19T18:37:40.003Z","title":"satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"satya-vinay","product":"Events-Management-System","kev":false,"epss":0.00263},{"id":"CVE-2026-111845","published":"2026-10-19T12:38:16.661Z","updated":"2026-10-19T16:45:42.720Z","title":"WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITH","product":"YITH WooCommerce Product Bundles","kev":false,"epss":0.00176},{"id":"CVE-2026-112141","published":"2026-10-19T12:30:13.033Z","updated":"2026-10-22T02:42:14.335Z","title":"satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"satya-vinay","product":"Events-Management-System","kev":false,"epss":0.00263},{"id":"CVE-2026-111831","published":"2026-10-19T12:24:22.785Z","updated":"2026-10-19T14:28:05.700Z","title":"WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP ManageNinja LLC","product":"FluentForm","kev":false,"epss":0.00176},{"id":"CVE-2026-110363","published":"2026-10-19T12:21:58.494Z","updated":"2026-10-19T18:15:27.691Z","title":"WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00138},{"id":"CVE-2026-111836","published":"2026-10-19T12:21:27.605Z","updated":"2026-10-19T18:19:12.683Z","title":"WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP ManageNinja LLC","product":"FluentCommunity","kev":false,"epss":0.00162},{"id":"CVE-2026-111414","published":"2026-10-19T12:20:08.655Z","updated":"2026-10-19T18:23:08.474Z","title":"WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetElements For Elementor","kev":false,"epss":0.0013},{"id":"CVE-2026-111410","published":"2026-10-19T12:16:12.230Z","updated":"2026-10-19T14:28:31.696Z","title":"WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"E2Pdf.com","product":"e2pdf","kev":false,"epss":0.0013},{"id":"CVE-2026-112214","published":"2026-10-19T12:15:06.140Z","updated":"2026-10-19T16:35:33.242Z","title":"Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00206},{"id":"CVE-2026-103314","published":"2026-10-19T12:14:27.338Z","updated":"2026-10-31T10:00:46.401Z","title":"Stackrox: stackrox: saml response replay allows multiple central authentication tokens","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Advanced Cluster Security for Kubernetes 4.10","kev":false,"epss":0.00405},{"id":"CVE-2026-111839","published":"2026-10-19T12:13:50.340Z","updated":"2026-10-19T18:25:34.806Z","title":"WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VideoWhisper.com","product":"Broadcast Live Video","kev":false,"epss":0.00187},{"id":"CVE-2026-112199","published":"2026-10-19T12:06:43.446Z","updated":"2026-10-19T18:26:29.775Z","title":"WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"YITH","product":"YITH WooCommerce Wishlist","kev":false,"epss":0.0013},{"id":"CVE-2026-112140","published":"2026-10-19T12:00:23.977Z","updated":"2026-10-19T12:43:12.565Z","title":"llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection","severity":"MEDIUM","score":5.3,"vendor":"llSourcell","product":"Doctor-Dignity","kev":false,"epss":0.00244},{"id":"CVE-2026-112139","published":"2026-10-19T11:45:20.246Z","updated":"2026-10-19T16:35:40.676Z","title":"subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00263},{"id":"CVE-2026-112210","published":"2026-10-19T11:39:13.590Z","updated":"2026-10-19T18:29:07.128Z","title":"Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service","severity":"MEDIUM","score":6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00133},{"id":"CVE-2026-112138","published":"2026-10-19T11:30:20.613Z","updated":"2026-10-19T18:30:15.530Z","title":"diem-project diem dmCodeEditor actions.class.php join path traversal","severity":"MEDIUM","score":5.1,"vendor":"diem-project","product":"diem","kev":false,"epss":0.0033},{"id":"CVE-2026-112108","published":"2026-10-19T11:15:20.037Z","updated":"2026-10-22T02:41:05.943Z","title":"ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow","severity":"MEDIUM","score":5.3,"vendor":"ztxz16","product":"fastllm","kev":false,"epss":0.00267},{"id":"CVE-2026-88900","published":"2026-10-19T11:07:34.371Z","updated":"2026-10-20T03:55:30.209Z","title":"Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00559},{"id":"CVE-2026-112107","published":"2026-10-19T11:00:18.558Z","updated":"2026-10-19T12:44:53.682Z","title":"ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow","severity":"MEDIUM","score":5.3,"vendor":"ztxz16","product":"fastllm","kev":false,"epss":0.00267},{"id":"CVE-2026-91858","published":"2026-10-19T10:47:48.267Z","updated":"2026-10-19T14:30:10.376Z","title":"Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00306},{"id":"CVE-2026-112106","published":"2026-10-19T10:45:08.083Z","updated":"2026-10-19T16:35:49.075Z","title":"TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation","severity":"MEDIUM","score":6.3,"vendor":"TufayelLUS","product":"TikTok-Video-Downloader-PHP","kev":false,"epss":0.00187},{"id":"CVE-2026-88901","published":"2026-10-19T10:44:07.084Z","updated":"2026-10-19T14:30:52.101Z","title":"Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00448},{"id":"CVE-2026-85317","published":"2026-10-19T10:43:39.184Z","updated":"2026-10-19T14:31:27.611Z","title":"Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00267},{"id":"CVE-2026-85316","published":"2026-10-19T10:43:00.504Z","updated":"2026-10-19T14:32:09.821Z","title":"Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00248},{"id":"CVE-2026-85315","published":"2026-10-19T10:42:10.032Z","updated":"2026-10-19T14:38:44.708Z","title":"Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.0032},{"id":"CVE-2026-85314","published":"2026-10-19T10:41:45.323Z","updated":"2026-10-19T14:32:46.401Z","title":"Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00278},{"id":"CVE-2026-85313","published":"2026-10-19T10:40:58.206Z","updated":"2026-10-19T14:33:28.013Z","title":"Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00271},{"id":"CVE-2026-85312","published":"2026-10-19T10:40:26.439Z","updated":"2026-10-19T14:34:13.505Z","title":"Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00267},{"id":"CVE-2026-85300","published":"2026-10-19T10:40:04.752Z","updated":"2026-10-19T14:35:02.757Z","title":"Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions","severity":"MEDIUM","score":5.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00165},{"id":"CVE-2026-85301","published":"2026-10-19T10:39:46.650Z","updated":"2026-10-19T14:35:58.104Z","title":"Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.003},{"id":"CVE-2026-85296","published":"2026-10-19T10:38:11.146Z","updated":"2026-10-19T16:46:25.273Z","title":"Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00391},{"id":"CVE-2026-85260","published":"2026-10-19T10:37:42.980Z","updated":"2026-10-19T16:47:15.565Z","title":"Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default","severity":"MEDIUM","score":5.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.0018},{"id":"CVE-2026-85257","published":"2026-10-19T10:37:14.792Z","updated":"2026-10-19T16:47:59.389Z","title":"Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00416},{"id":"CVE-2026-85254","published":"2026-10-19T10:36:46.283Z","updated":"2026-10-19T16:48:42.551Z","title":"Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00343},{"id":"CVE-2026-71253","published":"2026-10-19T10:36:41.781Z","updated":"2026-10-20T19:34:25.835Z","title":"Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Johnzon","kev":false,"epss":0.0038},{"id":"CVE-2026-85251","published":"2026-10-19T10:36:09.521Z","updated":"2026-10-19T16:49:37.974Z","title":"Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00502},{"id":"CVE-2026-85250","published":"2026-10-19T10:35:21.670Z","updated":"2026-10-19T16:50:38.120Z","title":"Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00559},{"id":"CVE-2026-85249","published":"2026-10-19T10:34:39.838Z","updated":"2026-10-19T16:53:06.515Z","title":"Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00343},{"id":"CVE-2026-85248","published":"2026-10-19T10:34:16.177Z","updated":"2026-10-19T16:58:32.142Z","title":"Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00424},{"id":"CVE-2026-85247","published":"2026-10-19T10:33:39.667Z","updated":"2026-10-19T17:00:20.717Z","title":"Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00423},{"id":"CVE-2026-85246","published":"2026-10-19T10:33:16.880Z","updated":"2026-10-19T18:31:23.502Z","title":"Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00416},{"id":"CVE-2026-85245","published":"2026-10-19T10:32:44.450Z","updated":"2026-10-19T18:32:37.783Z","title":"Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00371},{"id":"CVE-2026-85243","published":"2026-10-19T10:32:21.246Z","updated":"2026-10-19T18:34:48.550Z","title":"Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00185},{"id":"CVE-2026-84181","published":"2026-10-19T10:31:41.671Z","updated":"2026-10-19T18:39:02.725Z","title":"Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00418},{"id":"CVE-2026-84180","published":"2026-10-19T10:31:08.913Z","updated":"2026-10-19T18:35:59.978Z","title":"Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00403},{"id":"CVE-2026-84178","published":"2026-10-19T10:30:42.299Z","updated":"2026-10-19T18:40:29.279Z","title":"Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow","severity":"MEDIUM","score":6.1,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00181},{"id":"CVE-2026-112105","published":"2026-10-19T10:30:22.671Z","updated":"2026-10-19T18:41:43.522Z","title":"GlitterWare Passy TLS main.dart MyHttpOverrides certificate validation","severity":"MEDIUM","score":6.3,"vendor":"GlitterWare","product":"Passy","kev":false,"epss":0.00293},{"id":"CVE-2026-84176","published":"2026-10-19T10:30:00.854Z","updated":"2026-10-19T18:42:24.974Z","title":"Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00417},{"id":"CVE-2026-83531","published":"2026-10-19T10:29:33.329Z","updated":"2026-10-20T03:55:30.995Z","title":"Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.0085},{"id":"CVE-2026-80344","published":"2026-10-19T10:28:48.809Z","updated":"2026-10-19T18:43:46.791Z","title":"Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00489},{"id":"CVE-2026-80343","published":"2026-10-19T10:27:58.845Z","updated":"2026-10-19T18:44:28.360Z","title":"Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00516},{"id":"CVE-2026-80312","published":"2026-10-19T10:27:34.015Z","updated":"2026-10-19T17:02:55.787Z","title":"Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00573},{"id":"CVE-2026-79986","published":"2026-10-19T10:25:58.121Z","updated":"2026-10-20T03:55:31.778Z","title":"Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00645},{"id":"CVE-2026-79985","published":"2026-10-19T10:16:14.300Z","updated":"2026-10-20T13:10:15.042Z","title":"Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00659},{"id":"CVE-2026-79984","published":"2026-10-19T10:15:38.348Z","updated":"2026-10-20T13:09:38.995Z","title":"Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00659},{"id":"CVE-2026-112104","published":"2026-10-19T10:15:19.942Z","updated":"2026-10-22T02:40:13.789Z","title":"eremef bandcamp-player Remote Control Server database.ts missing authentication","severity":"MEDIUM","score":6.9,"vendor":"eremef","product":"bandcamp-player","kev":false,"epss":0.00628},{"id":"CVE-2026-79983","published":"2026-10-19T10:08:43.054Z","updated":"2026-10-20T13:09:03.529Z","title":"Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00659},{"id":"CVE-2026-78165","published":"2026-10-19T10:08:06.783Z","updated":"2026-10-20T13:08:03.518Z","title":"Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00727},{"id":"CVE-2026-78164","published":"2026-10-19T10:07:40.078Z","updated":"2026-10-19T18:46:16.020Z","title":"Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00344},{"id":"CVE-2026-78163","published":"2026-10-19T10:07:06.939Z","updated":"2026-10-19T18:49:01.897Z","title":"Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00461},{"id":"CVE-2026-78162","published":"2026-10-19T10:03:57.474Z","updated":"2026-10-20T03:55:29.414Z","title":"Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00918},{"id":"CVE-2026-112103","published":"2026-10-19T10:00:23.901Z","updated":"2026-10-19T12:46:14.439Z","title":"f3-factory fatfree-core HTTP Client web.php _curl certificate validation","severity":"MEDIUM","score":6.3,"vendor":"f3-factory","product":"fatfree-core","kev":false,"epss":0.00384},{"id":"CVE-2026-112102","published":"2026-10-19T09:45:15.416Z","updated":"2026-10-19T16:35:57.796Z","title":"AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection","severity":"MEDIUM","score":5.3,"vendor":"AXA Group","product":"NLP.js","kev":false,"epss":0.00312},{"id":"CVE-2026-90910","published":"2026-10-19T09:35:54.679Z","updated":"2026-10-19T18:50:42.533Z","title":"Apache Answer: Reaction API authorization bypass for restricted content","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00479},{"id":"CVE-2026-86589","published":"2026-10-19T09:35:27.540Z","updated":"2026-10-30T16:35:36.307Z","title":"Apache Answer: User Center integration does not revoke first-login sessions after central account suspension","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00254},{"id":"CVE-2026-79633","published":"2026-10-19T09:35:05.903Z","updated":"2026-10-19T10:14:11.913Z","title":"Apache Answer: Missing Authorization Allows Mutations of Non-Public Content","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00176},{"id":"CVE-2026-79624","published":"2026-10-19T09:34:39.806Z","updated":"2026-10-19T10:14:09.376Z","title":"Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00176},{"id":"CVE-2026-79620","published":"2026-10-19T09:34:11.041Z","updated":"2026-10-19T10:14:06.751Z","title":"Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00176},{"id":"CVE-2026-79613","published":"2026-10-19T09:33:52.177Z","updated":"2026-10-19T10:14:04.016Z","title":"Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00167},{"id":"CVE-2026-76994","published":"2026-10-19T09:33:14.033Z","updated":"2026-10-19T10:13:57.208Z","title":"Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00178},{"id":"CVE-2026-71563","published":"2026-10-19T09:32:40.826Z","updated":"2026-10-20T19:00:27.382Z","title":"Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00224},{"id":"CVE-2026-68482","published":"2026-10-19T09:31:50.762Z","updated":"2026-10-30T20:00:59.721Z","title":"Apache Answer: Improper Authorization in Question Invite User Lookup","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00265},{"id":"CVE-2026-67249","published":"2026-10-19T09:31:20.492Z","updated":"2026-10-26T13:41:23.891Z","title":"Apache Answer: Email Code Purpose Confusion May Allow Account Takeover","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00195},{"id":"CVE-2026-64945","published":"2026-10-19T09:30:51.414Z","updated":"2026-10-19T10:13:44.202Z","title":"Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00176},{"id":"CVE-2026-112101","published":"2026-10-19T09:30:25.707Z","updated":"2026-10-19T16:57:14.652Z","title":"BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation","severity":"MEDIUM","score":5.3,"vendor":"BlackBeltTechnology","product":"pi-agent-dashboard","kev":false,"epss":0.00222},{"id":"CVE-2026-112192","published":"2026-10-19T09:28:08.054Z","updated":"2026-10-30T10:06:28.714Z","title":"MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings","severity":"MEDIUM","score":5.3,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00365},{"id":"CVE-2026-64944","published":"2026-10-19T09:26:52.224Z","updated":"2026-10-19T10:13:41.573Z","title":"Apache Answer: Stored XSS via unsanitized HTML in imported question content","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00183},{"id":"CVE-2026-64943","published":"2026-10-19T09:26:13.696Z","updated":"2026-10-20T18:57:09.507Z","title":"Apache Answer: API keys logged in plaintext during authentication","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache Answer","kev":false,"epss":0.00317},{"id":"CVE-2026-112188","published":"2026-10-19T09:22:37.880Z","updated":"2026-10-28T20:05:58.430Z","title":"MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution","severity":"HIGH","score":7.1,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00271},{"id":"CVE-2026-108837","published":"2026-10-19T09:22:03.856Z","updated":"2026-10-19T10:12:03.537Z","title":"Apache Kylin: Potential computed-column resource exhaustion","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.0017},{"id":"CVE-2026-108833","published":"2026-10-19T09:21:54.065Z","updated":"2026-10-19T10:12:01.039Z","title":"Apache Kylin: default startup profile miss security settings","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.0017},{"id":"CVE-2026-108823","published":"2026-10-19T09:21:30.729Z","updated":"2026-10-19T10:11:58.574Z","title":"Apache Kylin: Potential unauthenticated job metadata replacement","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.0017},{"id":"CVE-2026-108780","published":"2026-10-19T09:21:19.963Z","updated":"2026-10-30T16:34:27.855Z","title":"Apache Kylin: Potential JDBC source configuration validation issue","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00233},{"id":"CVE-2026-108776","published":"2026-10-19T09:21:09.051Z","updated":"2026-10-30T16:32:51.344Z","title":"Apache Kylin: tables/names SparkSQL injection","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00269},{"id":"CVE-2026-108771","published":"2026-10-19T09:20:59.076Z","updated":"2026-10-30T16:31:42.241Z","title":"Apache Kylin: unauthenticated broadcast API and polymorphic deserialization","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.0047},{"id":"CVE-2026-108766","published":"2026-10-19T09:20:48.058Z","updated":"2026-10-30T16:30:46.005Z","title":"Apache Kylin: missing JDBC-config authorization","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00221},{"id":"CVE-2026-112184","published":"2026-10-19T09:19:45.056Z","updated":"2026-10-19T17:14:52.401Z","title":"MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels","severity":"MEDIUM","score":4.8,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00352},{"id":"CVE-2026-108764","published":"2026-10-19T09:18:57.199Z","updated":"2026-10-30T16:29:19.621Z","title":"Apache Kylin: job-driver UI proxy SSRF","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00221},{"id":"CVE-2026-108762","published":"2026-10-19T09:16:25.736Z","updated":"2026-10-30T16:28:09.058Z","title":"Apache Kylin: delete metadata backup path-confinement bypass","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00321},{"id":"CVE-2026-112183","published":"2026-10-19T09:15:47.453Z","updated":"2026-10-19T17:15:45.687Z","title":"MISP CSS Injection via Remote Tag Colour in Event Preview","severity":"MEDIUM","score":4.8,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00288},{"id":"CVE-2026-112100","published":"2026-10-19T09:15:19.570Z","updated":"2026-10-22T02:38:58.820Z","title":"DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection","severity":"MEDIUM","score":5.1,"vendor":null,"product":"DeepPavlov","kev":false,"epss":0.00229},{"id":"CVE-2026-110887","published":"2026-10-19T09:09:19.849Z","updated":"2026-10-19T16:51:04.682Z","title":"WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":9.9,"vendor":"HivePress","product":"HivePress","kev":false,"epss":0.00352},{"id":"CVE-2026-111398","published":"2026-10-19T09:09:19.440Z","updated":"2026-10-19T17:17:11.133Z","title":"WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability","severity":"HIGH","score":7.7,"vendor":"PT Norther Lights Production","product":"MapSVG","kev":false,"epss":0.00327},{"id":"CVE-2026-110898","published":"2026-10-19T09:09:19.416Z","updated":"2026-10-19T16:50:35.254Z","title":"WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability","severity":"MEDIUM","score":6.4,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00208},{"id":"CVE-2026-111407","published":"2026-10-19T09:09:19.001Z","updated":"2026-10-19T12:49:03.673Z","title":"WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Themeum","product":"Tutor LMS","kev":false,"epss":0.00156},{"id":"CVE-2026-111408","published":"2026-10-19T09:09:18.970Z","updated":"2026-10-19T17:17:55.950Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00352},{"id":"CVE-2026-110379","published":"2026-10-19T09:09:18.538Z","updated":"2026-10-19T12:49:30.765Z","title":"WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Ays Pro","product":"Quiz Maker","kev":false,"epss":0.00175},{"id":"CVE-2026-111406","published":"2026-10-19T09:09:18.419Z","updated":"2026-10-19T16:54:29.679Z","title":"WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":9.9,"vendor":"PT Norther Lights Production","product":"MapSVG","kev":false,"epss":0.00326},{"id":"CVE-2026-112098","published":"2026-10-19T09:00:19.171Z","updated":"2026-10-19T17:19:09.502Z","title":"DeepPavlov Config Reference Resolver params.py resolve code injection","severity":"MEDIUM","score":5.3,"vendor":null,"product":"DeepPavlov","kev":false,"epss":0.00315},{"id":"CVE-2026-112180","published":"2026-10-19T09:00:13.049Z","updated":"2026-10-19T17:19:56.212Z","title":"MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records","severity":"MEDIUM","score":5.1,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00331},{"id":"CVE-2026-112179","published":"2026-10-19T08:53:57.689Z","updated":"2026-10-19T18:32:29.985Z","title":"MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances","severity":"MEDIUM","score":5.3,"vendor":"MISP","product":"MISP","kev":false,"epss":0.00309},{"id":"CVE-2026-112178","published":"2026-10-19T08:50:52.402Z","updated":"2026-10-19T17:20:40.642Z","title":"MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control","severity":"HIGH","score":7.1,"vendor":"MISP","product":"MISP","kev":false,"epss":0.0023},{"id":"CVE-2026-112097","published":"2026-10-19T08:45:14.782Z","updated":"2026-10-19T16:36:07.532Z","title":"SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"SourceCodester","product":"Inventory System","kev":false,"epss":0.00199},{"id":"CVE-2026-13695","published":"2026-10-19T08:37:47.737Z","updated":"2026-10-19T17:21:16.872Z","title":"SQL Injection in the Integratec Application","severity":"HIGH","score":8.8,"vendor":"Integratec","product":"Integratec","kev":false,"epss":0.00249},{"id":"CVE-2026-104679","published":"2026-10-19T08:31:40.984Z","updated":"2026-10-20T18:16:31.692Z","title":"VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product…","severity":"MEDIUM","score":6.9,"vendor":"Yamaha Corporation","product":"VOCALOID6 Editor","kev":false,"epss":0.0013},{"id":"CVE-2026-112096","published":"2026-10-19T08:30:19.861Z","updated":"2026-10-19T16:50:09.536Z","title":"SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"SourceCodester","product":"Inventory System","kev":false,"epss":0.00199},{"id":"CVE-2026-112161","published":"2026-10-19T08:19:20.794Z","updated":"2026-10-20T18:20:13.384Z","title":"Lack of integrity checks in Mobatek’s MobaXterm","severity":"HIGH","score":8.5,"vendor":"Mobatek","product":"MobaXterm","kev":false,"epss":0.00079},{"id":"CVE-2026-112095","published":"2026-10-19T08:15:16.628Z","updated":"2026-10-22T02:37:51.848Z","title":"SourceCodester Inventory System Product Management products_handler.php save cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"SourceCodester","product":"Inventory System","kev":false,"epss":0.00199},{"id":"CVE-2026-111438","published":"2026-10-19T08:08:03.265Z","updated":"2026-10-19T17:22:23.532Z","title":"check_hba_replication 认证与访问控制绕过","severity":"MEDIUM","score":6.5,"vendor":"openGauss-server","product":"openGauss-server","kev":false,"epss":0.00361},{"id":"CVE-2026-112094","published":"2026-10-19T08:00:22.009Z","updated":"2026-10-19T17:23:50.222Z","title":"michaelrsweet mxml mxml-file.c mxml_load_data use after free","severity":"MEDIUM","score":5.1,"vendor":"michaelrsweet","product":"mxml","kev":false,"epss":0.0018},{"id":"CVE-2026-111439","published":"2026-10-19T07:59:44.700Z","updated":"2026-10-19T17:25:07.334Z","title":"pg_read_binary_file_blocks 缺少初始用户权限校验，普通用户可读取 relation 文件块","severity":"MEDIUM","score":4.3,"vendor":"openGauss-server","product":"openGauss-server","kev":false,"epss":0.00259},{"id":"CVE-2026-112093","published":"2026-10-19T07:45:17.117Z","updated":"2026-10-19T16:36:13.885Z","title":"subhajitkhan online-clinic-management-system feedback.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00273},{"id":"CVE-2026-112092","published":"2026-10-19T07:30:12.696Z","updated":"2026-10-19T16:48:15.516Z","title":"subhajitkhan online-clinic-management-system Doctor Registration doctorregistration.php echo cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00273},{"id":"CVE-2026-112091","published":"2026-10-19T07:15:15.643Z","updated":"2026-10-22T02:36:40.055Z","title":"Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure","severity":"MEDIUM","score":6.9,"vendor":"Dav-ee","product":"dairy-management-system","kev":false,"epss":0.00311},{"id":"CVE-2026-112090","published":"2026-10-19T07:00:11.646Z","updated":"2026-10-19T17:29:00.886Z","title":"Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection","severity":"MEDIUM","score":5.3,"vendor":"Dav-ee","product":"dairy-management-system","kev":false,"epss":0.00251},{"id":"CVE-2026-94294","published":"2026-10-19T06:46:21.082Z","updated":"2026-10-19T09:31:20.315Z","title":"App Builder 3.8.4 - 5.7.0 - Unauthenticated Option Write and Redirect via includes/pure.php","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"App Builder","kev":false,"epss":0.00213},{"id":"CVE-2026-94272","published":"2026-10-19T06:46:20.466Z","updated":"2026-10-19T09:31:20.467Z","title":"Snap Finance 1.0.8 - 3.11.0 - Unauthenticated Arbitrary Order Status Change via Multiple AJAX Actions","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Snap Finance","kev":false,"epss":0.00182},{"id":"CVE-2026-94231","published":"2026-10-19T06:46:19.823Z","updated":"2026-10-19T09:31:20.610Z","title":"TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TrueBooker","kev":false,"epss":0.00182},{"id":"CVE-2026-94230","published":"2026-10-19T06:46:19.199Z","updated":"2026-10-19T09:31:20.753Z","title":"TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TrueBooker","kev":false,"epss":0.00182},{"id":"CVE-2026-94229","published":"2026-10-19T06:46:18.554Z","updated":"2026-10-19T09:31:20.898Z","title":"TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TrueBooker","kev":false,"epss":0.00193},{"id":"CVE-2026-94228","published":"2026-10-19T06:46:17.916Z","updated":"2026-10-19T09:31:21.057Z","title":"TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TrueBooker","kev":false,"epss":0.00171},{"id":"CVE-2026-91831","published":"2026-10-19T06:46:17.280Z","updated":"2026-10-19T09:31:21.214Z","title":"Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Subscribe to Comments","kev":false,"epss":0.00161},{"id":"CVE-2026-86791","published":"2026-10-19T06:46:16.658Z","updated":"2026-10-19T09:31:21.374Z","title":"iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"iPOSpays Payment Gateway for WooCommerce","kev":false,"epss":0.00114},{"id":"CVE-2026-74922","published":"2026-10-19T06:46:16.054Z","updated":"2026-10-19T09:31:21.524Z","title":"Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Document Gallery","kev":false,"epss":0.00117},{"id":"CVE-2026-74921","published":"2026-10-19T06:46:15.459Z","updated":"2026-10-19T09:31:21.665Z","title":"Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Document Gallery","kev":false,"epss":0.00229},{"id":"CVE-2026-110034","published":"2026-10-19T06:46:14.845Z","updated":"2026-10-19T09:31:21.812Z","title":"Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00168},{"id":"CVE-2026-106010","published":"2026-10-19T06:46:14.216Z","updated":"2026-10-19T09:31:21.956Z","title":"BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BDM Digital Payment Gateway","kev":false,"epss":0.00182},{"id":"CVE-2026-103311","published":"2026-10-19T06:46:13.617Z","updated":"2026-10-19T09:31:22.100Z","title":"Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Coinbase Commerce Payment Gateway for WooCommerce","kev":false,"epss":0.00114},{"id":"CVE-2026-112089","published":"2026-10-19T06:45:16.887Z","updated":"2026-10-19T16:36:20.414Z","title":"Dav-ee dairy-management-system delete.php mysqli_query sql injection","severity":"MEDIUM","score":5.1,"vendor":"Dav-ee","product":"dairy-management-system","kev":false,"epss":0.0021},{"id":"CVE-2026-16460","published":"2026-10-19T06:40:50.466Z","updated":"2026-10-21T18:56:55.605Z","title":"Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00098},{"id":"CVE-2026-112088","published":"2026-10-19T06:30:16.024Z","updated":"2026-10-19T16:46:53.655Z","title":"Dav-ee dairy-management-system add.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"Dav-ee","product":"dairy-management-system","kev":false,"epss":0.00251},{"id":"CVE-2026-76740","published":"2026-10-19T06:25:55.088Z","updated":"2026-10-21T03:56:22.565Z","title":"HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise","product":"HPE Compute Scale-up Server 3200 platform","kev":false,"epss":0.00484},{"id":"CVE-2026-112087","published":"2026-10-19T06:15:13.605Z","updated":"2026-10-22T02:35:54.390Z","title":"itsourcecode Online Cake Ordering System confirm.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.0025},{"id":"CVE-2026-112086","published":"2026-10-19T06:00:25.807Z","updated":"2026-10-19T17:32:44.974Z","title":"ESPnet Inference Model inference_model.py build_model deserialization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"ESPnet","kev":false,"epss":0.00316},{"id":"CVE-2026-94273","published":"2026-10-19T06:00:13.365Z","updated":"2026-10-19T09:31:19.231Z","title":"Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Snap Finance","kev":false,"epss":0.00182},{"id":"CVE-2026-106014","published":"2026-10-19T06:00:12.925Z","updated":"2026-10-19T09:31:19.387Z","title":"Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Gateway for Vantiv on WC","kev":false,"epss":0.00221},{"id":"CVE-2026-89286","published":"2026-10-19T06:00:12.752Z","updated":"2026-10-19T09:31:19.535Z","title":"FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"FormFlow for GoHighLevel (GHL)","kev":false,"epss":0.00206},{"id":"CVE-2026-91047","published":"2026-10-19T06:00:12.572Z","updated":"2026-10-19T09:31:19.699Z","title":"ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"ElementsReady Addons for Elementor","kev":false,"epss":0.0021},{"id":"CVE-2026-91046","published":"2026-10-19T06:00:12.393Z","updated":"2026-10-19T09:31:19.851Z","title":"ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"ElementsReady Addons for Elementor","kev":false,"epss":0.00182},{"id":"CVE-2026-106933","published":"2026-10-19T06:00:12.213Z","updated":"2026-10-19T09:31:20.009Z","title":"Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Blaze Demo Importer","kev":false,"epss":0.00282},{"id":"CVE-2026-106028","published":"2026-10-19T06:00:11.466Z","updated":"2026-10-19T09:31:20.161Z","title":"ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"ActiveTrail for WooCommerce","kev":false,"epss":0.00221},{"id":"CVE-2026-76739","published":"2026-10-19T05:48:44.116Z","updated":"2026-10-19T17:34:41.862Z","title":"HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification","severity":"MEDIUM","score":4.3,"vendor":"Hewlett Packard Enterprise","product":"HPE Compute Scale-up Server 3200 platform","kev":false,"epss":0.00241},{"id":"CVE-2026-112083","published":"2026-10-19T05:45:18.578Z","updated":"2026-10-19T16:36:26.379Z","title":"sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service","severity":"MEDIUM","score":6.9,"vendor":"sgl-project","product":"SGLang","kev":false,"epss":0.00419},{"id":"CVE-2026-112082","published":"2026-10-19T05:30:22.073Z","updated":"2026-10-19T16:45:48.503Z","title":"sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service","severity":"HIGH","score":8.7,"vendor":"sgl-project","product":"SGLang","kev":false,"epss":0.00626},{"id":"CVE-2026-112081","published":"2026-10-19T05:15:14.456Z","updated":"2026-10-22T02:35:10.809Z","title":"hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization","severity":"MEDIUM","score":5.3,"vendor":"hankcs","product":"HanLP","kev":false,"epss":0.00337},{"id":"CVE-2026-108120","published":"2026-10-19T05:12:00.139Z","updated":"2026-10-19T18:33:10.143Z","title":"path traversal inKoozali - SME Server","severity":"HIGH","score":7.7,"vendor":"koozali","product":"SME Server","kev":false,"epss":0.00368},{"id":"CVE-2026-108121","published":"2026-10-19T05:07:58.680Z","updated":"2026-10-19T17:36:10.887Z","title":"Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service","severity":"MEDIUM","score":6.9,"vendor":"Koozali","product":"SME Server","kev":false,"epss":0.00309},{"id":"CVE-2026-112080","published":"2026-10-19T05:00:18.385Z","updated":"2026-10-19T17:38:29.836Z","title":"LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection","severity":"MEDIUM","score":5.3,"vendor":"LlamaChinese","product":"Llama-Chinese","kev":false,"epss":0.00385},{"id":"CVE-2026-112079","published":"2026-10-19T04:45:08.929Z","updated":"2026-10-19T16:36:33.443Z","title":"hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization","severity":"MEDIUM","score":5.3,"vendor":"hankcs","product":"HanLP","kev":false,"epss":0.00261},{"id":"CVE-2026-112078","published":"2026-10-19T04:30:19.922Z","updated":"2026-10-19T16:40:29.435Z","title":"RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection","severity":"MEDIUM","score":5.3,"vendor":"RVC-Project","product":"Retrieval-based-Voice-Conversion-WebUI","kev":false,"epss":0.00244},{"id":"CVE-2026-112077","published":"2026-10-19T04:15:17.808Z","updated":"2026-10-22T02:34:10.802Z","title":"radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism","severity":"MEDIUM","score":6.3,"vendor":"radareorg","product":"radare2","kev":false,"epss":0.00285},{"id":"CVE-2026-112076","published":"2026-10-19T04:00:24.548Z","updated":"2026-10-19T17:39:09.855Z","title":"alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.__write_feed_metadata_sync server-side request forgery","severity":"MEDIUM","score":6.3,"vendor":"alexta69","product":"MeTube","kev":false,"epss":0.0027},{"id":"CVE-2026-111440","published":"2026-10-19T03:55:19.107Z","updated":"2026-10-19T17:39:59.272Z","title":"JDBC LogFactory 任意类加载/构造导致潜在 RCE","severity":"HIGH","score":7,"vendor":"openGauss-server","product":"openGauss-connector-jdbc","kev":false,"epss":0.00186},{"id":"CVE-2026-112075","published":"2026-10-19T03:45:20.785Z","updated":"2026-10-19T16:36:42.853Z","title":"unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code","severity":"MEDIUM","score":5.3,"vendor":"unslothai","product":"unsloth","kev":false,"epss":0.00325},{"id":"CVE-2026-112074","published":"2026-10-19T03:30:21.932Z","updated":"2026-10-19T16:37:33.056Z","title":"Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow","severity":"MEDIUM","score":5.3,"vendor":"Tencent","product":"ncnn","kev":false,"epss":0.0024},{"id":"CVE-2026-112073","published":"2026-10-19T03:15:18.986Z","updated":"2026-10-22T02:31:41.124Z","title":"Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds","severity":"MEDIUM","score":5.3,"vendor":"Tencent","product":"ncnn","kev":false,"epss":0.0024},{"id":"CVE-2026-112045","published":"2026-10-19T03:00:17.338Z","updated":"2026-10-19T17:41:32.177Z","title":"donetick History Deletion model.go CanDeleteHistory improper authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"donetick","kev":false,"epss":0.00235},{"id":"CVE-2026-112044","published":"2026-10-19T02:45:18.604Z","updated":"2026-10-19T16:36:51.678Z","title":"dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication","severity":"MEDIUM","score":6.9,"vendor":"dotnet","product":"eShop","kev":false,"epss":0.00405},{"id":"CVE-2026-111441","published":"2026-10-19T02:31:01.069Z","updated":"2026-10-19T17:42:42.026Z","title":"HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写","severity":"HIGH","score":8.1,"vendor":"openGauss-server","product":"openGauss-server","kev":false,"epss":0.00404},{"id":"CVE-2026-112043","published":"2026-10-19T02:30:14.914Z","updated":"2026-10-19T16:36:31.150Z","title":"calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization","severity":"MEDIUM","score":5.3,"vendor":"calcom","product":"cal.com","kev":false,"epss":0.00364},{"id":"CVE-2026-103091","published":"2026-10-19T02:24:35.225Z","updated":"2026-10-19T17:44:31.625Z","title":"Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)","severity":"CRITICAL","score":9.3,"vendor":"Google","product":"SAM","kev":false,"epss":0.00642},{"id":"CVE-2026-102503","published":"2026-10-19T02:20:35.753Z","updated":"2026-10-19T17:46:47.397Z","title":"Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)","severity":"CRITICAL","score":9.3,"vendor":"Google","product":"SAM","kev":false,"epss":0.00429},{"id":"CVE-2026-112042","published":"2026-10-19T02:15:20.010Z","updated":"2026-10-22T02:30:30.260Z","title":"diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00199},{"id":"CVE-2026-112041","published":"2026-10-19T02:00:21.063Z","updated":"2026-10-19T17:48:35.750Z","title":"diem-project diem dmString.php random weak prng","severity":"MEDIUM","score":6.3,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00308},{"id":"CVE-2026-112040","published":"2026-10-19T01:45:16.543Z","updated":"2026-10-19T16:36:58.717Z","title":"diem-project diem Sign-In BasedmUserActions.class.php redirect","severity":"MEDIUM","score":5.3,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00258},{"id":"CVE-2026-112039","published":"2026-10-19T01:30:21.462Z","updated":"2026-10-19T16:31:39.679Z","title":"diem-project diem Administrative Console actions.class.php append cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"diem-project","product":"diem","kev":false,"epss":0.0021},{"id":"CVE-2026-112038","published":"2026-10-19T01:15:18.578Z","updated":"2026-10-22T02:29:38.154Z","title":"diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"diem-project","product":"diem","kev":false,"epss":0.0021},{"id":"CVE-2026-112037","published":"2026-10-19T01:00:17.150Z","updated":"2026-10-19T17:49:36.324Z","title":"diem-project diem Google Analytics Client gapi.class.php certificate validation","severity":"MEDIUM","score":6.3,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00179},{"id":"CVE-2026-108984","published":"2026-10-19T00:52:19.412Z","updated":"2026-10-20T18:41:00.691Z","title":"GV-ASManager Web Server Buffer Overflow Vulnerability","severity":"HIGH","score":7.5,"vendor":"GeoVision Inc.","product":"GV-ASManager","kev":false,"epss":0.00359},{"id":"CVE-2026-108983","published":"2026-10-19T00:51:53.770Z","updated":"2026-10-19T18:33:49.046Z","title":"GV-ASManager Web Server Command Injection Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"GeoVision Inc.","product":"GV-ASManager","kev":false,"epss":0.00408},{"id":"CVE-2026-112036","published":"2026-10-19T00:45:12.234Z","updated":"2026-10-19T16:37:09.673Z","title":"Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free","severity":"MEDIUM","score":5.3,"vendor":"Artifex","product":"MuPDF","kev":false,"epss":0.00333},{"id":"CVE-2026-112035","published":"2026-10-19T00:30:56.113Z","updated":"2026-10-19T16:31:06.932Z","title":"aircheng-org iWebShop-5 simple.php send_message_mobile password recovery","severity":"MEDIUM","score":5.3,"vendor":"aircheng-org","product":"iWebShop-5","kev":false,"epss":0.00346},{"id":"CVE-2026-112034","published":"2026-10-19T00:15:19.433Z","updated":"2026-10-22T02:28:42.909Z","title":"aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect","severity":"MEDIUM","score":5.3,"vendor":"aircheng-org","product":"iWebShop-5","kev":false,"epss":0.00348},{"id":"CVE-2026-112033","published":"2026-10-19T00:00:20.246Z","updated":"2026-10-19T17:50:39.431Z","title":"aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"aircheng-org","product":"iWebShop-5","kev":false,"epss":0.00159},{"id":"CVE-2026-107084","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-26T19:40:35.913Z","title":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00202},{"id":"CVE-2026-107083","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-19T20:20:43.746Z","title":"SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00487},{"id":"CVE-2026-107082","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-20T16:06:59.546Z","title":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00455},{"id":"CVE-2026-107081","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-22T02:26:03.172Z","title":"SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php,…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00487},{"id":"CVE-2026-38671","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-19T17:52:06.247Z","title":"Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version available)…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00361},{"id":"CVE-2025-60482","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-29T18:07:06.968Z","title":"A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00158},{"id":"CVE-2025-60480","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-20T18:09:49.329Z","title":"A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00192},{"id":"CVE-2025-55667","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-20T18:09:48.406Z","title":"A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00249},{"id":"CVE-2025-55654","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-22T02:27:44.110Z","title":"A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00236},{"id":"CVE-2025-52290","published":"2026-10-19T00:00:00.000Z","updated":"2026-10-20T18:09:46.460Z","title":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00578},{"id":"CVE-2026-112032","published":"2026-10-18T23:45:20.459Z","updated":"2026-10-19T16:37:16.437Z","title":"aircheng-org iWebShop-5 util.php search sql injection","severity":"MEDIUM","score":5.1,"vendor":"aircheng-org","product":"iWebShop-5","kev":false,"epss":0.0021},{"id":"CVE-2026-112031","published":"2026-10-18T23:30:21.096Z","updated":"2026-10-19T16:26:25.422Z","title":"Chamilo LMS Ticket TicketManager.php addProject cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"Chamilo","product":"LMS","kev":false,"epss":0.00254},{"id":"CVE-2026-112030","published":"2026-10-18T23:15:19.936Z","updated":"2026-10-22T02:24:15.691Z","title":"diem-project diem dmDataLoad.php default password","severity":"MEDIUM","score":5.3,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00262},{"id":"CVE-2026-112112","published":"2026-10-18T23:01:05.633Z","updated":"2026-10-19T18:41:47.949Z","title":"An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations…","severity":"LOW","score":2.3,"vendor":"nic","product":"BIRD","kev":false,"epss":0.00308},{"id":"CVE-2026-112029","published":"2026-10-18T23:00:14.234Z","updated":"2026-10-19T17:52:54.951Z","title":"diem-project diem SHA1 PluginDmUser.class.php weak password hash","severity":"LOW","score":2,"vendor":"diem-project","product":"diem","kev":false,"epss":0.00078},{"id":"CVE-2026-112028","published":"2026-10-18T22:45:20.618Z","updated":"2026-10-19T16:37:24.891Z","title":"light0011 cms Vote VoteController.class.php logic error","severity":"MEDIUM","score":6.9,"vendor":"light0011","product":"cms","kev":false,"epss":0.00343},{"id":"CVE-2026-112111","published":"2026-10-18T22:39:46.933Z","updated":"2026-10-19T16:20:39.966Z","title":"The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent()…","severity":"MEDIUM","score":5.1,"vendor":"Bootstrap Shortcodes project","product":"Bootstrap Shortcodes","kev":false,"epss":0.00374},{"id":"CVE-2026-112027","published":"2026-10-18T22:30:17.291Z","updated":"2026-10-19T16:18:53.095Z","title":"light0011 cms Uploadify check-exists.php file_exists file information disclosure","severity":"MEDIUM","score":6.9,"vendor":"light0011","product":"cms","kev":false,"epss":0.00335},{"id":"CVE-2026-112026","published":"2026-10-18T22:15:07.093Z","updated":"2026-10-22T02:23:31.089Z","title":"light0011 cms UserModel.class.php sha1 weak password hash","severity":"MEDIUM","score":6.3,"vendor":"light0011","product":"cms","kev":false,"epss":0.00202},{"id":"CVE-2026-112025","published":"2026-10-18T22:00:14.621Z","updated":"2026-10-19T17:54:19.476Z","title":"light0011 cms Captcha Validation UserController.class.php access control","severity":"MEDIUM","score":6.9,"vendor":"light0011","product":"cms","kev":false,"epss":0.00361},{"id":"CVE-2026-97859","published":"2026-10-18T19:01:04.328Z","updated":"2026-10-19T18:54:32.163Z","title":"Gitea API disclosure of private user social graph, keys and stars","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00309},{"id":"CVE-2026-97204","published":"2026-10-18T19:00:50.994Z","updated":"2026-10-19T20:18:14.773Z","title":"Gitea label deletion across repository and organization IDs","severity":"LOW","score":3.1,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00185},{"id":"CVE-2026-110494","published":"2026-10-18T18:57:26.290Z","updated":"2026-10-19T20:20:57.542Z","title":"Gitea release attachment re-linking of issue attachments","severity":"MEDIUM","score":6.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00198},{"id":"CVE-2026-110324","published":"2026-10-18T18:57:20.717Z","updated":"2026-10-19T20:17:32.466Z","title":"Gitea private profile information disclosure through POST request","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.0026},{"id":"CVE-2026-110311","published":"2026-10-18T18:57:14.140Z","updated":"2026-10-19T20:17:02.703Z","title":"Gitea draft release creation disclosing attachment metadata","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00217},{"id":"CVE-2026-109844","published":"2026-10-18T18:57:08.476Z","updated":"2026-10-19T20:16:31.969Z","title":"Gitea watched repositories API disclosure after access revocation","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00199},{"id":"CVE-2026-107686","published":"2026-10-18T18:56:59.087Z","updated":"2026-10-29T12:07:54.065Z","title":"Gitea reactions accepted on locked issues and comments","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00237},{"id":"CVE-2026-107618","published":"2026-10-18T18:56:53.428Z","updated":"2026-10-29T16:31:42.147Z","title":"Gitea cross-site request forgery on repository topics","severity":"HIGH","score":8.1,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00153},{"id":"CVE-2026-105964","published":"2026-10-18T18:56:47.881Z","updated":"2026-10-19T20:15:15.234Z","title":"Gitea Actions artifact v4 API unbounded request body","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00305},{"id":"CVE-2026-105661","published":"2026-10-18T18:56:41.198Z","updated":"2026-10-19T20:14:33.347Z","title":"Gitea panic on the repositories route of individual users","severity":"MEDIUM","score":5.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00344},{"id":"CVE-2026-109553","published":"2026-10-18T18:51:31.037Z","updated":"2026-11-02T16:45:21.932Z","title":"Gitea SSH certificate principal impersonation of other users","severity":"HIGH","score":7.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00198},{"id":"CVE-2026-104627","published":"2026-10-18T18:51:06.543Z","updated":"2026-10-19T20:20:15.460Z","title":"Gitea OpenID account linking without session binding","severity":"MEDIUM","score":5.4,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00119},{"id":"CVE-2024-4457","published":"2026-10-18T18:05:34.050Z","updated":"2026-10-20T18:41:54.437Z","title":"Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution","severity":"CRITICAL","score":9.1,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00417},{"id":"CVE-2026-111993","published":"2026-10-18T17:00:07.731Z","updated":"2026-10-19T16:37:32.212Z","title":"Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage","severity":"MEDIUM","score":4.8,"vendor":"Soarkey","product":"StudentManagement","kev":false,"epss":0.00081},{"id":"CVE-2026-111992","published":"2026-10-18T16:45:13.905Z","updated":"2026-10-19T16:15:30.652Z","title":"itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00241},{"id":"CVE-2026-98868","published":"2026-10-18T15:51:30.658Z","updated":"2026-10-19T09:27:02.926Z","title":"dm-pcache: reject a kset that overruns its segment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98867","published":"2026-10-18T15:51:29.499Z","updated":"2026-10-19T09:27:01.563Z","title":"dm-pcache: bound the logical key offset from persistent memory","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98866","published":"2026-10-18T15:51:27.883Z","updated":"2026-10-19T09:27:00.570Z","title":"sched/cache: Introduce task_struct->sched_cache_grp to fix UAF","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-98865","published":"2026-10-18T15:51:26.449Z","updated":"2026-10-19T09:26:59.604Z","title":"sched_ext: Don't run ops.dequeue() with a DSQ lock held","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98864","published":"2026-10-18T15:51:25.532Z","updated":"2026-10-19T09:26:58.668Z","title":"sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-98863","published":"2026-10-18T15:51:24.446Z","updated":"2026-10-19T09:26:57.709Z","title":"KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154},{"id":"CVE-2026-98862","published":"2026-10-18T15:51:23.224Z","updated":"2026-10-30T12:40:19.578Z","title":"audit: fix exe mark UAF in kill_rules()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-98861","published":"2026-10-18T15:51:22.271Z","updated":"2026-10-19T09:26:55.805Z","title":"fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167},{"id":"CVE-2026-98860","published":"2026-10-18T15:51:21.403Z","updated":"2026-10-19T09:26:54.770Z","title":"HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98859","published":"2026-10-18T15:51:20.456Z","updated":"2026-10-21T12:57:37.465Z","title":"HID: multitouch: stop the release timer from being rearmed on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98858","published":"2026-10-18T15:51:19.578Z","updated":"2026-10-19T09:26:52.852Z","title":"io_uring: fix task_work add use-after-free with SQPOLL","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98857","published":"2026-10-18T15:51:17.262Z","updated":"2026-10-30T12:40:18.489Z","title":"ipvs: bound LBLCR and LBLC cache growth","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98856","published":"2026-10-18T15:51:12.359Z","updated":"2026-10-30T12:40:17.396Z","title":"kprobes: Skip disarmed probes when checking optkprobe overlap","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98855","published":"2026-10-18T15:51:09.970Z","updated":"2026-10-30T12:40:16.306Z","title":"of/overlay: put property on deadprops only after changeset add succeeds","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-98854","published":"2026-10-18T15:51:06.167Z","updated":"2026-10-30T12:40:15.237Z","title":"of/overlay: only treat a positive changeset id as registered","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161},{"id":"CVE-2026-98853","published":"2026-10-18T15:51:02.683Z","updated":"2026-10-30T12:40:14.136Z","title":"net: gso: limit recursive IP-in-IP segmentation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98852","published":"2026-10-18T15:50:55.946Z","updated":"2026-10-21T12:57:32.027Z","title":"net: extend IPv6 exthdr detection of tunneled packets","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98851","published":"2026-10-18T15:50:50.910Z","updated":"2026-10-30T12:40:13.069Z","title":"netfilter: nft_flow_offload: drop flowtable reference on init error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-98850","published":"2026-10-18T15:50:50.062Z","updated":"2026-10-30T12:40:11.960Z","title":"net/packet: prevent TX_RING byte count overflow","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-98849","published":"2026-10-18T15:50:48.743Z","updated":"2026-10-19T09:26:41.559Z","title":"pfcp: fix socket lifetime on netdevice registration failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98848","published":"2026-10-18T15:50:47.105Z","updated":"2026-10-21T12:57:28.688Z","title":"rtc: ac100: Assign .num before accessing .hws","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157},{"id":"CVE-2026-98847","published":"2026-10-18T15:50:40.825Z","updated":"2026-10-30T12:40:10.886Z","title":"rtc: spear: initialize IRQ state before requesting alarm IRQ","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98846","published":"2026-10-18T15:50:34.714Z","updated":"2026-10-30T12:40:09.817Z","title":"sctp: check RCV_SHUTDOWN after the sendmsg connect wait","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98845","published":"2026-10-18T15:50:27.596Z","updated":"2026-10-19T09:26:37.375Z","title":"tpm: Disable TPM on null key name mismatch","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98844","published":"2026-10-18T15:50:25.256Z","updated":"2026-10-19T09:26:36.394Z","title":"netfs: clear post-EOF pagecache when extending a file via write","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98843","published":"2026-10-18T15:50:23.578Z","updated":"2026-10-19T09:26:35.419Z","title":"netfs: zero gaps in read-gaps folio to avoid writing back stale data","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98842","published":"2026-10-18T15:50:19.217Z","updated":"2026-10-19T09:26:34.441Z","title":"module: fix lost error code from codetag_load_module()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98841","published":"2026-10-18T15:50:15.224Z","updated":"2026-10-19T09:26:33.492Z","title":"virt: vmgenid: set driver_data before registering notification handlers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98840","published":"2026-10-18T15:50:14.029Z","updated":"2026-10-30T12:40:08.759Z","title":"vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98839","published":"2026-10-18T15:50:11.869Z","updated":"2026-10-19T09:26:31.558Z","title":"vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98838","published":"2026-10-18T15:50:07.004Z","updated":"2026-10-30T12:40:07.684Z","title":"vt: skip screen update for DEC alignment test on backgroup consoles","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98837","published":"2026-10-18T15:50:05.338Z","updated":"2026-10-30T12:40:06.606Z","title":"ALSA: caiaq: unregister the input device when probe fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98836","published":"2026-10-18T15:49:51.823Z","updated":"2026-10-30T12:40:05.522Z","title":"ALSA: line6: reject oversized playback packets","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98835","published":"2026-10-18T15:49:48.676Z","updated":"2026-10-21T12:57:20.938Z","title":"iio: accel: kionix-kx022a: Fix array boundary check","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98834","published":"2026-10-18T15:49:46.003Z","updated":"2026-10-19T09:26:26.676Z","title":"mtd: core: avoid double-free of OTP NVMEM device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98833","published":"2026-10-18T15:49:42.181Z","updated":"2026-10-30T12:40:04.468Z","title":"mtd: core: call _get_device() with the master MTD","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98832","published":"2026-10-18T15:49:36.925Z","updated":"2026-10-19T09:26:24.782Z","title":"blk-cgroup: save IRQ state in blkg_tryget_closest()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98831","published":"2026-10-18T15:49:32.909Z","updated":"2026-10-30T12:40:03.420Z","title":"of/overlay: don't leak fragment references when changeset init fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98830","published":"2026-10-18T15:49:31.843Z","updated":"2026-10-30T12:40:02.347Z","title":"wifi: wfx: validate MIB read length before copying to caller","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98829","published":"2026-10-18T15:49:29.426Z","updated":"2026-10-19T09:26:21.901Z","title":"wifi: mac80211: drop oversized fragments to avoid extra_len overflow","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98828","published":"2026-10-18T15:49:22.580Z","updated":"2026-10-19T09:26:20.947Z","title":"wifi: ath9k: reject short WMI command responses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98827","published":"2026-10-18T15:49:20.872Z","updated":"2026-10-19T09:26:19.987Z","title":"wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98826","published":"2026-10-18T15:49:19.709Z","updated":"2026-10-19T09:26:19.030Z","title":"rtc: ac100: Fix clock provider use-after-free on probe failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98825","published":"2026-10-18T15:49:17.605Z","updated":"2026-10-30T12:40:01.280Z","title":"rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98824","published":"2026-10-18T15:49:16.650Z","updated":"2026-10-19T09:26:17.090Z","title":"wifi: mac80211: validate TX status rate metadata","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98823","published":"2026-10-18T15:49:15.473Z","updated":"2026-10-30T12:40:00.224Z","title":"wifi: cfg80211: preserve hidden-group beacon IE ownership","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00184},{"id":"CVE-2026-98822","published":"2026-10-18T15:49:14.593Z","updated":"2026-10-21T12:57:13.743Z","title":"wifi: mac80211: prevent AP VLAN tx from other interfaces","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98821","published":"2026-10-18T15:49:13.154Z","updated":"2026-10-19T09:26:14.186Z","title":"block: reject polled dio with user integrity metadata","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98820","published":"2026-10-18T15:49:12.251Z","updated":"2026-10-19T09:26:13.210Z","title":"blk-mq: set RQF_USE_SCHED when the operation is known","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98819","published":"2026-10-18T15:49:11.226Z","updated":"2026-10-30T12:39:59.162Z","title":"Bluetooth: btintel: validate DDC record lengths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00184},{"id":"CVE-2026-98818","published":"2026-10-18T15:49:10.258Z","updated":"2026-10-19T09:26:11.267Z","title":"mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98817","published":"2026-10-18T15:49:07.163Z","updated":"2026-10-19T09:26:10.318Z","title":"ASoC: SDCA: Add better pm_runtime error handling in func probe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98816","published":"2026-10-18T15:49:05.616Z","updated":"2026-10-19T09:26:09.337Z","title":"bpf: Fix overflow of jump offset in constant blinding","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98815","published":"2026-10-18T15:49:03.248Z","updated":"2026-10-26T06:55:52.556Z","title":"nvme: fix cdev lifetime","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98814","published":"2026-10-18T15:49:01.538Z","updated":"2026-10-19T09:26:07.427Z","title":"nvme: fix command effects log lifetime for multipath heads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98813","published":"2026-10-18T15:48:59.745Z","updated":"2026-10-19T09:26:06.490Z","title":"bpf: Hold map BTF for the memory allocator destructor record","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98812","published":"2026-10-18T15:48:58.470Z","updated":"2026-10-30T12:39:58.094Z","title":"net/mctp: publish the mctp_dev only after it is initialised","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0018},{"id":"CVE-2026-98811","published":"2026-10-18T15:48:57.588Z","updated":"2026-10-30T12:39:57.018Z","title":"net/sched: cls_api: reclaim an empty proto on the error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98810","published":"2026-10-18T15:48:56.733Z","updated":"2026-10-19T09:26:03.626Z","title":"wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98809","published":"2026-10-18T15:48:55.913Z","updated":"2026-10-30T12:39:55.898Z","title":"Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98808","published":"2026-10-18T15:48:55.053Z","updated":"2026-10-21T12:57:08.174Z","title":"net: systemport: Fix buffer overflow in bcm_sysport_get_stats()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00193},{"id":"CVE-2026-98807","published":"2026-10-18T15:48:53.992Z","updated":"2026-10-19T09:26:00.670Z","title":"net/mlx5: Fix slab-out-of-bounds when handling team device events","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175},{"id":"CVE-2026-98806","published":"2026-10-18T15:48:52.707Z","updated":"2026-10-19T09:25:59.674Z","title":"octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0018},{"id":"CVE-2026-98805","published":"2026-10-18T15:48:51.902Z","updated":"2026-10-30T12:39:54.828Z","title":"tipc: prevent GCM nonce reuse on peer key changes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00178},{"id":"CVE-2026-98804","published":"2026-10-18T15:48:51.062Z","updated":"2026-10-19T09:25:57.688Z","title":"net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98803","published":"2026-10-18T15:48:50.108Z","updated":"2026-10-19T09:25:56.634Z","title":"net: stmmac: fix rx Scatter-Gather support","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98802","published":"2026-10-18T15:48:49.192Z","updated":"2026-10-19T09:25:55.677Z","title":"seg6: ensure packet data is writable before modifying SRH and IPv6 DA","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98801","published":"2026-10-18T15:48:47.171Z","updated":"2026-10-19T09:25:54.691Z","title":"net: restrict SO_RESERVE_MEM to TCP sockets and cap max value","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98800","published":"2026-10-18T15:48:46.223Z","updated":"2026-10-19T09:25:53.724Z","title":"bpf: Wait for an RCU tasks grace period before freeing trampoline progs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98799","published":"2026-10-18T15:48:44.434Z","updated":"2026-10-19T09:25:51.855Z","title":"bpf: Skip detached progs in trampoline images that are still in use","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98798","published":"2026-10-18T15:48:43.367Z","updated":"2026-10-30T12:39:53.751Z","title":"net: bcmgenet: fix NULL dereference in set_coalesce before first open","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98797","published":"2026-10-18T15:48:41.613Z","updated":"2026-10-19T09:25:49.920Z","title":"net: cap skb->queue_mapping when the tx queue is picked","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0016},{"id":"CVE-2026-98796","published":"2026-10-18T15:48:40.684Z","updated":"2026-10-21T12:57:04.919Z","title":"net: ethernet: mtk_eth_soc: allocate dummy netdev sooner","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98795","published":"2026-10-18T15:48:39.633Z","updated":"2026-10-19T09:25:48.008Z","title":"net: sparx5: skip ptp deinit if init was skipped","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98794","published":"2026-10-18T15:48:37.924Z","updated":"2026-10-30T12:39:52.699Z","title":"ipvs: filter some flags received in the backup server","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98793","published":"2026-10-18T15:48:33.555Z","updated":"2026-10-30T12:39:51.633Z","title":"netfilter: bpf: reject invalid NAT manipulation types","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98792","published":"2026-10-18T15:48:31.098Z","updated":"2026-10-21T12:57:01.669Z","title":"netfilter: flowtable: generalize pending status bit","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98791","published":"2026-10-18T15:48:30.080Z","updated":"2026-10-19T09:25:44.148Z","title":"net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98790","published":"2026-10-18T15:48:27.412Z","updated":"2026-10-30T12:39:50.548Z","title":"perf: Fix race between perf_event_exit_task() and perf_pending_task()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98789","published":"2026-10-18T15:48:25.665Z","updated":"2026-10-19T09:25:42.177Z","title":"bpf: Fix objects stuck in free_by_rcu_ttrace","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98788","published":"2026-10-18T15:48:24.833Z","updated":"2026-10-19T09:25:41.209Z","title":"futex: Fix private hash use-after-free on resize","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98787","published":"2026-10-18T15:48:23.947Z","updated":"2026-10-19T09:25:40.244Z","title":"bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98786","published":"2026-10-18T15:48:22.989Z","updated":"2026-10-19T09:25:39.296Z","title":"drm/amd/display: guard dc_sink dereferences in MST mode validation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98785","published":"2026-10-18T15:48:22.111Z","updated":"2026-10-30T12:39:49.489Z","title":"drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00186},{"id":"CVE-2026-98784","published":"2026-10-18T15:48:21.282Z","updated":"2026-10-30T12:39:48.411Z","title":"drm/amdgpu/gfx6: fix firmware leak on teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98783","published":"2026-10-18T15:48:20.377Z","updated":"2026-10-21T12:56:57.231Z","title":"drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98782","published":"2026-10-18T15:48:19.567Z","updated":"2026-10-21T12:56:56.157Z","title":"drm/mediatek: Fix ovl adaptor platform device leak","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98781","published":"2026-10-18T15:48:18.590Z","updated":"2026-10-21T12:56:55.059Z","title":"drm/mediatek: Fix pdev reference leak in mtk_drm_bind()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98780","published":"2026-10-18T15:48:17.804Z","updated":"2026-10-30T12:39:47.351Z","title":"drm/amdgpu: fix IP instance memory leak on kobject add failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00186},{"id":"CVE-2026-98779","published":"2026-10-18T15:48:16.729Z","updated":"2026-10-30T12:39:46.267Z","title":"drm/amdgpu: fix ACP MFD device leak on init failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98778","published":"2026-10-18T15:48:15.254Z","updated":"2026-10-30T12:39:45.207Z","title":"binder: fix is_failure flag for superseded transaction cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98777","published":"2026-10-18T15:48:13.993Z","updated":"2026-10-30T12:39:44.001Z","title":"binder: fix leaked fd fixups on TF_UPDATE_TXN supersede","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98776","published":"2026-10-18T15:48:12.661Z","updated":"2026-10-19T09:25:29.605Z","title":"binderfs: fix UAF write in binder_add_device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98775","published":"2026-10-18T15:48:11.317Z","updated":"2026-10-30T12:39:42.932Z","title":"nitro_enclaves: fix use-after-free on SLOT_ALLOC failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98774","published":"2026-10-18T15:48:09.884Z","updated":"2026-10-19T09:25:27.235Z","title":"rust_binder: cancel deferred work items in thread exit","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98773","published":"2026-10-18T15:48:09.093Z","updated":"2026-10-30T12:39:41.890Z","title":"USB: cdc-acm: skip URB restart in port_shutdown if disconnected","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98772","published":"2026-10-18T15:48:08.184Z","updated":"2026-10-30T12:39:40.826Z","title":"USB: serial: fix port tear down use-after-free","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98771","published":"2026-10-18T15:48:07.367Z","updated":"2026-10-30T12:39:39.761Z","title":"usb: storage: sierra_ms: reject short SWoC info transfers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98770","published":"2026-10-18T15:48:06.586Z","updated":"2026-10-21T12:56:45.210Z","title":"usb: gadget: midi2: Fix the jack descriptor array sizes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98769","published":"2026-10-18T15:48:04.800Z","updated":"2026-10-30T12:39:38.690Z","title":"usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98768","published":"2026-10-18T15:48:03.089Z","updated":"2026-10-30T12:39:37.620Z","title":"usb: typec: anx7411 - stop the IRQ before destroying the workqueue","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98767","published":"2026-10-18T15:48:02.089Z","updated":"2026-10-30T12:39:36.527Z","title":"usb: dwc3: gadget: fix IRQ storm on invalid event buffer count","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98766","published":"2026-10-18T15:47:59.061Z","updated":"2026-10-30T12:39:35.461Z","title":"usb: gadget: aspeed-vhub: cancel wake work on device removal","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98765","published":"2026-10-18T15:47:57.358Z","updated":"2026-10-30T12:39:34.382Z","title":"USB: gadget: dummy-hcd: Fix wait for outstanding request completions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98764","published":"2026-10-18T15:47:56.225Z","updated":"2026-10-30T12:39:33.311Z","title":"usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98763","published":"2026-10-18T15:47:54.526Z","updated":"2026-10-30T12:39:32.238Z","title":"usb: core: clear both ep_in and ep_out for non-ep0 control endpoints","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98762","published":"2026-10-18T15:47:53.656Z","updated":"2026-10-30T12:39:31.169Z","title":"USB: dwc2: shut down wakeup timer before freeing HCD state","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98761","published":"2026-10-18T15:47:51.757Z","updated":"2026-10-30T12:39:30.112Z","title":"usb: typec: tcpm: recover after failure to start the frs ams","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98760","published":"2026-10-18T15:47:50.759Z","updated":"2026-10-30T12:39:29.050Z","title":"usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98759","published":"2026-10-18T15:47:47.988Z","updated":"2026-10-19T09:25:12.754Z","title":"usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98758","published":"2026-10-18T15:47:46.209Z","updated":"2026-10-19T09:25:11.783Z","title":"usb: typec: ucsi: glink: fix use-after-free of ucsi on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98757","published":"2026-10-18T15:47:44.486Z","updated":"2026-10-30T12:39:27.986Z","title":"usb: cdns3: fix use-after-free in cdns3_gadget_exit()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98756","published":"2026-10-18T15:47:42.085Z","updated":"2026-10-30T12:39:26.925Z","title":"usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98755","published":"2026-10-18T15:47:41.106Z","updated":"2026-10-30T12:39:25.859Z","title":"tty: vcc: zero-initialize control packet in vcc_send_ctl()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98754","published":"2026-10-18T15:47:40.255Z","updated":"2026-10-30T12:39:24.788Z","title":"tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98753","published":"2026-10-18T15:47:37.700Z","updated":"2026-10-30T12:39:23.712Z","title":"tty: tty_port: restore TTY_IO_ERROR on activation failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98752","published":"2026-10-18T15:47:36.877Z","updated":"2026-10-30T12:39:22.635Z","title":"tty: port: fix tty_port_tty_vhangup() race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98751","published":"2026-10-18T15:47:36.026Z","updated":"2026-10-30T12:39:21.567Z","title":"tty: abort break signalling on hangup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98750","published":"2026-10-18T15:47:35.167Z","updated":"2026-10-30T12:39:20.512Z","title":"tty: fix saved termios reset race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98749","published":"2026-10-18T15:47:34.347Z","updated":"2026-10-30T12:39:19.454Z","title":"tty: serial: max3100: shut down timer before freeing port","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185},{"id":"CVE-2026-98748","published":"2026-10-18T15:47:33.446Z","updated":"2026-10-30T12:39:18.369Z","title":"serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98747","published":"2026-10-18T15:47:32.607Z","updated":"2026-10-19T09:24:59.721Z","title":"serial: core: fix NULL pointer dereference in serial_core_unregister_port()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98746","published":"2026-10-18T15:47:31.780Z","updated":"2026-10-21T12:56:22.318Z","title":"serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98745","published":"2026-10-18T15:47:30.967Z","updated":"2026-10-30T12:39:17.288Z","title":"arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98744","published":"2026-10-18T15:47:29.706Z","updated":"2026-10-21T12:56:20.042Z","title":"ASoC: codecs: max98363: fix uninitialized stream_config->type","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98743","published":"2026-10-18T15:47:28.831Z","updated":"2026-10-21T12:56:18.942Z","title":"ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98742","published":"2026-10-18T15:47:27.137Z","updated":"2026-10-30T12:39:16.216Z","title":"ALSA: seq: Serialize compat port-info ioctls","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98741","published":"2026-10-18T15:47:26.283Z","updated":"2026-10-30T12:39:15.151Z","title":"ALSA: ua101: reject mismatched capture/playback packet sizes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98740","published":"2026-10-18T15:47:24.602Z","updated":"2026-10-19T09:24:50.943Z","title":"EDAC/altera: Drop __init from ECC setup paths for re-probe safety","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00178},{"id":"CVE-2026-98739","published":"2026-10-18T15:47:23.653Z","updated":"2026-10-30T12:39:14.099Z","title":"Bluetooth: RFCOMM: Fix initial port reference race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98738","published":"2026-10-18T15:47:21.503Z","updated":"2026-10-21T12:56:14.531Z","title":"Bluetooth: Serialize SMP remote OOB data access","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98737","published":"2026-10-18T15:47:14.936Z","updated":"2026-10-21T12:56:13.421Z","title":"Bluetooth: hci_sync: Fix inquiry cache use-after-free","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98736","published":"2026-10-18T15:47:14.076Z","updated":"2026-10-30T12:39:13.042Z","title":"Bluetooth: hci_conn: Lock parent access during enhanced SCO setup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98735","published":"2026-10-18T15:47:13.062Z","updated":"2026-10-30T12:39:11.976Z","title":"Bluetooth: hci_core: Serialize ACL scheduling with channel deletion","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98734","published":"2026-10-18T15:47:12.203Z","updated":"2026-10-21T12:56:10.088Z","title":"Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98733","published":"2026-10-18T15:47:11.210Z","updated":"2026-10-30T12:39:09.881Z","title":"Bluetooth: hci_core: Serialize fragmented ISO packet queueing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98732","published":"2026-10-18T15:47:10.364Z","updated":"2026-10-30T12:39:08.820Z","title":"Bluetooth: btintel: fix buffer over-read in btintel_hw_error()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98731","published":"2026-10-18T15:47:08.399Z","updated":"2026-10-19T09:24:41.766Z","title":"Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98730","published":"2026-10-18T15:47:07.600Z","updated":"2026-10-19T09:24:40.788Z","title":"Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98729","published":"2026-10-18T15:47:06.633Z","updated":"2026-10-19T09:24:39.819Z","title":"x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98728","published":"2026-10-18T15:47:05.722Z","updated":"2026-10-19T09:24:38.853Z","title":"tpm: fix off-by-four bounds check in tpm2_get_random()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98727","published":"2026-10-18T15:47:04.645Z","updated":"2026-10-19T09:24:37.897Z","title":"nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98726","published":"2026-10-18T15:47:03.665Z","updated":"2026-10-30T12:39:07.738Z","title":"nvme-multipath: fix underflow in ANA log bounds checks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98725","published":"2026-10-18T15:47:02.735Z","updated":"2026-10-30T12:39:06.682Z","title":"nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98724","published":"2026-10-18T15:47:01.614Z","updated":"2026-10-19T09:24:34.979Z","title":"nvmet: pci-epf: reject too-short SGL segments","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98723","published":"2026-10-18T15:46:59.444Z","updated":"2026-10-19T09:24:33.989Z","title":"nvmet: copy the hostid into the ctrl before creating PR pc_refs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98722","published":"2026-10-18T15:46:58.093Z","updated":"2026-10-30T12:39:05.611Z","title":"mtd: block2mtd: Fix divide error when erase_size is zero","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98721","published":"2026-10-18T15:46:56.857Z","updated":"2026-10-30T12:39:04.545Z","title":"mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98720","published":"2026-10-18T15:46:55.863Z","updated":"2026-10-19T09:24:31.090Z","title":"KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98719","published":"2026-10-18T15:46:54.631Z","updated":"2026-10-19T09:24:30.132Z","title":"KVM: SEV: Nullify \"have run CPUs\" mask pointer when freeing it","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98718","published":"2026-10-18T15:46:53.611Z","updated":"2026-10-19T09:24:29.156Z","title":"KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98717","published":"2026-10-18T15:46:51.862Z","updated":"2026-10-21T12:56:02.536Z","title":"KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98716","published":"2026-10-18T15:46:49.960Z","updated":"2026-10-30T12:39:03.485Z","title":"KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98715","published":"2026-10-18T15:46:47.988Z","updated":"2026-10-19T09:24:26.247Z","title":"KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98714","published":"2026-10-18T15:46:47.176Z","updated":"2026-10-26T06:55:47.638Z","title":"KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98713","published":"2026-10-18T15:46:45.902Z","updated":"2026-10-19T09:24:24.367Z","title":"KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98712","published":"2026-10-18T15:46:44.857Z","updated":"2026-10-19T09:24:23.386Z","title":"KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98711","published":"2026-10-18T15:46:44.001Z","updated":"2026-10-30T12:39:02.373Z","title":"wifi: cw1200: fix TX padding OOB read leaking heap data to device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98710","published":"2026-10-18T15:46:40.790Z","updated":"2026-10-30T12:39:01.294Z","title":"wifi: iwlegacy: 3945: free EEPROM data on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98709","published":"2026-10-18T15:46:39.290Z","updated":"2026-10-30T12:39:00.231Z","title":"wifi: mac80211: count only matching reservations in reserved switch","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98708","published":"2026-10-18T15:46:38.475Z","updated":"2026-10-30T12:38:59.169Z","title":"wifi: mac80211: keep paired old chanctx alive","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98707","published":"2026-10-18T15:46:37.587Z","updated":"2026-10-30T12:38:58.097Z","title":"wifi: mac80211: shut down RX BA session timer on teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98706","published":"2026-10-18T15:46:36.328Z","updated":"2026-10-30T12:38:57.040Z","title":"wifi: mac80211: drain PS delivery work during station teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98705","published":"2026-10-18T15:46:35.520Z","updated":"2026-10-30T12:38:55.966Z","title":"wifi: mac80211: account proxy paths against the mesh path limit","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98704","published":"2026-10-18T15:46:34.493Z","updated":"2026-10-30T12:38:54.905Z","title":"wifi: mac80211: keep fallback association elements alive","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98703","published":"2026-10-18T15:46:33.395Z","updated":"2026-10-30T12:38:53.843Z","title":"wifi: mac80211: minstrel_ht: validate fixed rate index","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98702","published":"2026-10-18T15:46:32.122Z","updated":"2026-10-19T09:24:11.728Z","title":"wifi: mac80211: reject invalid 320 MHz CSA bandwidth","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98701","published":"2026-10-18T15:46:31.257Z","updated":"2026-10-30T12:38:52.791Z","title":"wifi: mac80211: release mesh path quota on failed additions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98700","published":"2026-10-18T15:46:30.043Z","updated":"2026-10-30T12:38:51.724Z","title":"wifi: mac80211: set info->band for 802.3 encap offload frames","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98699","published":"2026-10-18T15:46:29.245Z","updated":"2026-10-21T12:55:49.005Z","title":"wifi: mac80211: fix mesh fast xmit path deletion UAF","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98698","published":"2026-10-18T15:46:23.363Z","updated":"2026-10-30T12:38:50.641Z","title":"wifi: mac80211: handle empty FILS association request payload","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98697","published":"2026-10-18T15:46:22.503Z","updated":"2026-10-30T12:38:49.567Z","title":"USB: serial: fix dynamic id driver deregistration race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98696","published":"2026-10-18T15:46:20.399Z","updated":"2026-10-30T12:38:48.486Z","title":"USB: serial: fix driver deregistration order","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98695","published":"2026-10-18T15:46:19.498Z","updated":"2026-10-30T12:38:47.405Z","title":"USB: serial: fix ioctl hangup race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98694","published":"2026-10-18T15:46:18.654Z","updated":"2026-10-30T12:38:46.335Z","title":"thunderbolt: Fix KASAN reported use-after-free when request is canceled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98693","published":"2026-10-18T15:46:17.742Z","updated":"2026-10-19T09:24:03.100Z","title":"thunderbolt: Hold a router reference for each allocated HopID","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98692","published":"2026-10-18T15:46:16.794Z","updated":"2026-10-19T09:24:02.145Z","title":"thunderbolt: Make the DP tunnel activation callback mandatory","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98691","published":"2026-10-18T15:46:15.299Z","updated":"2026-10-19T09:24:01.186Z","title":"thunderbolt: Tear down inactive DP tunnels when the domain is stopped","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98690","published":"2026-10-18T15:46:13.825Z","updated":"2026-10-19T09:24:00.240Z","title":"thunderbolt: Fix domain reference leak when DPRX read is canceled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98689","published":"2026-10-18T15:46:04.217Z","updated":"2026-10-19T09:23:59.268Z","title":"thunderbolt: Don't access a DP tunnel after its DPRX read was canceled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98688","published":"2026-10-18T15:46:02.231Z","updated":"2026-10-19T09:23:58.312Z","title":"thunderbolt: Fix NULL dereference in tb_remove_work()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98687","published":"2026-10-18T15:45:58.719Z","updated":"2026-10-30T12:38:45.242Z","title":"thunderbolt: Reject oversized XDomain properties responses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98686","published":"2026-10-18T15:45:55.193Z","updated":"2026-10-30T12:38:44.094Z","title":"smb: client: discard post-EOF pagecache when extending a file via zero range","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98685","published":"2026-10-18T15:45:53.821Z","updated":"2026-10-19T09:23:55.472Z","title":"smb: client: discard post-EOF pagecache when extending a file via clone range","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98684","published":"2026-10-18T15:45:52.828Z","updated":"2026-10-19T09:23:54.479Z","title":"smb: client: flush and commit data before querying allocated ranges","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98683","published":"2026-10-18T15:45:50.014Z","updated":"2026-10-19T09:23:53.516Z","title":"smb: client: flush dirty data before zeroing a range","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98682","published":"2026-10-18T15:45:47.375Z","updated":"2026-10-19T09:23:52.548Z","title":"smb: client: drain and invalidate before server-side copy/clone","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98681","published":"2026-10-18T15:45:45.654Z","updated":"2026-10-30T12:38:43.025Z","title":"smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98680","published":"2026-10-18T15:45:39.927Z","updated":"2026-10-19T09:23:49.667Z","title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98679","published":"2026-10-18T15:45:38.283Z","updated":"2026-10-30T12:38:41.965Z","title":"iio: accel: kxcjk-1013: reject duplicate event disable","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98678","published":"2026-10-18T15:45:35.605Z","updated":"2026-10-19T09:23:47.783Z","title":"iio: adc: ad4030: fix invalid oversampling_ratio validation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98677","published":"2026-10-18T15:45:33.871Z","updated":"2026-10-30T12:38:40.900Z","title":"iio: adc: ad_sigma_delta: fix use-after-free on unbind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98676","published":"2026-10-18T15:45:31.286Z","updated":"2026-10-19T09:23:45.848Z","title":"iio: adc: ade9000: fix NULL pointer dereference in clkout registration","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98675","published":"2026-10-18T15:45:29.569Z","updated":"2026-10-19T09:23:44.902Z","title":"iio: adc: ade9000: handle Phase C dip events in IRQ1 handler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98674","published":"2026-10-18T15:45:28.739Z","updated":"2026-10-19T09:23:43.939Z","title":"iio: adc: adi-axi-adc: Initialize state mutex","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98673","published":"2026-10-18T15:45:27.705Z","updated":"2026-10-19T09:23:42.843Z","title":"iio: adc: pac1934: check ACPI label duplication","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98672","published":"2026-10-18T15:45:25.169Z","updated":"2026-10-30T12:38:39.835Z","title":"iio: adc: stm32-adc: fix possible division by zero in processed channel","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98671","published":"2026-10-18T15:45:17.500Z","updated":"2026-10-30T12:38:38.781Z","title":"iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98670","published":"2026-10-18T15:45:14.810Z","updated":"2026-10-30T12:38:37.715Z","title":"iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98669","published":"2026-10-18T15:45:05.836Z","updated":"2026-10-30T12:38:36.653Z","title":"iio: buffer: serialize buffer teardown with mode claims","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98668","published":"2026-10-18T15:44:55.291Z","updated":"2026-10-30T12:38:35.592Z","title":"iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98667","published":"2026-10-18T15:44:51.640Z","updated":"2026-10-19T09:23:35.252Z","title":"iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98666","published":"2026-10-18T15:44:43.803Z","updated":"2026-10-30T12:38:34.520Z","title":"iio: gyro: adis16136: fix unprotected debugfs reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98665","published":"2026-10-18T15:44:35.323Z","updated":"2026-10-21T12:55:30.413Z","title":"iio: health: max30102: fix NULL dereference in interrupt handler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98664","published":"2026-10-18T15:44:32.940Z","updated":"2026-10-30T12:38:33.465Z","title":"iio: imu: adis16400: fix unprotected debugfs reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98663","published":"2026-10-18T15:44:31.100Z","updated":"2026-10-30T12:38:32.405Z","title":"iio: imu: adis16480: fix unprotected debugfs reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98662","published":"2026-10-18T15:44:24.421Z","updated":"2026-10-30T12:38:31.341Z","title":"iio: light: gp2ap020a00f: drain irq_work after free_irq","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98661","published":"2026-10-18T15:44:21.543Z","updated":"2026-10-19T09:23:29.422Z","title":"iio: light: rohm-bu27034: Fix infinite delay on error","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98660","published":"2026-10-18T15:44:19.707Z","updated":"2026-10-30T12:38:30.274Z","title":"iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205},{"id":"CVE-2026-98659","published":"2026-10-18T15:44:17.572Z","updated":"2026-10-19T09:23:27.492Z","title":"iio: pressure: rohm-bm1390: Return error when read fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98658","published":"2026-10-18T15:44:12.196Z","updated":"2026-10-19T09:23:26.505Z","title":"iio: proximity: aw96103: validate firmware data length","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98657","published":"2026-10-18T15:44:09.808Z","updated":"2026-10-30T12:38:29.218Z","title":"iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176},{"id":"CVE-2026-98656","published":"2026-10-18T15:44:07.883Z","updated":"2026-10-30T12:38:28.155Z","title":"iio: trigger: cancel reenable_work before freeing trigger","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172},{"id":"CVE-2026-98655","published":"2026-10-18T15:44:05.722Z","updated":"2026-10-30T12:38:27.085Z","title":"perf: Require kernel access for text poke events","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0019},{"id":"CVE-2026-98653","published":"2026-10-18T15:20:24.848Z","updated":"2026-10-19T09:23:22.624Z","title":"KVM: s390: Fix _gaccess_shadow_fault()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98652","published":"2026-10-18T15:20:23.975Z","updated":"2026-10-19T09:23:21.668Z","title":"KVM: s390: Add missing srcu in kvm_s390_set_irq_state()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98651","published":"2026-10-18T15:20:22.978Z","updated":"2026-10-19T09:23:20.711Z","title":"KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98650","published":"2026-10-18T15:20:22.173Z","updated":"2026-10-19T09:23:19.769Z","title":"KVM: s390: Fix potential races in dat skey functions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98649","published":"2026-10-18T15:20:21.346Z","updated":"2026-10-19T09:23:18.799Z","title":"KVM: s390: Fix race in _destroy_pages_crste()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98648","published":"2026-10-18T15:20:20.496Z","updated":"2026-10-19T09:23:17.853Z","title":"s390/uv: Prevent potential out-of-bounds read","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98647","published":"2026-10-18T15:20:18.360Z","updated":"2026-10-19T09:23:16.870Z","title":"bpf: Fix divide-by-zero in btf_struct_walk()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98646","published":"2026-10-18T15:20:17.490Z","updated":"2026-10-19T09:23:15.900Z","title":"tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98645","published":"2026-10-18T15:20:16.676Z","updated":"2026-10-19T09:23:14.926Z","title":"HID: winwing: fix use-after-free in force feedback teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98644","published":"2026-10-18T15:20:15.380Z","updated":"2026-10-19T09:23:13.963Z","title":"bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98643","published":"2026-10-18T15:20:14.561Z","updated":"2026-10-19T09:23:12.946Z","title":"bpf: Fix out-of-bounds read of rtt_min in sock_ops","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98642","published":"2026-10-18T15:20:13.740Z","updated":"2026-10-19T09:23:11.995Z","title":"bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98641","published":"2026-10-18T15:20:12.730Z","updated":"2026-10-19T09:23:10.965Z","title":"bpf, arm64: set up the frame pointer for the exception callback","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98640","published":"2026-10-18T15:20:11.777Z","updated":"2026-10-19T09:23:09.980Z","title":"HID: amd_sfh: Validate PCI BAR size before mapping","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98639","published":"2026-10-18T15:20:10.591Z","updated":"2026-10-19T09:23:09.004Z","title":"KVM: riscv: Fix NACL hfence entry update order","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98638","published":"2026-10-18T15:20:09.380Z","updated":"2026-10-19T09:23:08.052Z","title":"KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98637","published":"2026-10-18T15:20:08.157Z","updated":"2026-10-19T09:23:07.105Z","title":"KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98636","published":"2026-10-18T15:20:07.184Z","updated":"2026-10-19T09:23:06.005Z","title":"squashfs: Add dictionary size range check to prevent shift-out-of-bounds","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98635","published":"2026-10-18T15:20:05.961Z","updated":"2026-10-19T09:23:04.703Z","title":"scsi: block: Fix zones_cond out-of-bounds write on zone report","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98634","published":"2026-10-18T15:20:03.198Z","updated":"2026-10-19T09:23:03.375Z","title":"scsi: sd_zbc: Reject disks with too many zones","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98633","published":"2026-10-18T15:19:58.365Z","updated":"2026-10-19T09:23:02.041Z","title":"Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98632","published":"2026-10-18T15:19:56.287Z","updated":"2026-10-19T09:23:00.460Z","title":"Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98631","published":"2026-10-18T15:19:53.529Z","updated":"2026-10-19T09:22:59.147Z","title":"xsk: Use a 32-bit compare in xsk_map_gen_lookup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0021},{"id":"CVE-2026-98630","published":"2026-10-18T15:19:51.484Z","updated":"2026-10-19T09:22:58.173Z","title":"eth: fbnic: Fix payload page pool error cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98629","published":"2026-10-18T15:19:50.589Z","updated":"2026-10-19T09:22:57.219Z","title":"net/sched: cls_u32: fix manual hash table handle IDR aliasing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98628","published":"2026-10-18T15:19:49.746Z","updated":"2026-10-19T09:22:56.237Z","title":"bpf: Make post-verification instruction rewrites killable","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0019},{"id":"CVE-2026-98627","published":"2026-10-18T15:19:48.952Z","updated":"2026-10-19T09:22:55.260Z","title":"bpf: Preserve packet pointer class displacement in regsafe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-98626","published":"2026-10-18T15:19:47.832Z","updated":"2026-10-19T09:22:54.307Z","title":"bpf: Restrict CO-RE poisoning to relocatable instructions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00212},{"id":"CVE-2026-98625","published":"2026-10-18T15:19:46.372Z","updated":"2026-10-19T09:22:53.321Z","title":"netfilter: flowtable: publish HW_DEAD after worker is done","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98624","published":"2026-10-18T15:19:45.566Z","updated":"2026-10-19T09:22:52.337Z","title":"netfilter: nfnetlink_queue: hold nfnl mutex in event notifier","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98623","published":"2026-10-18T15:19:44.744Z","updated":"2026-10-19T09:22:51.359Z","title":"drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98622","published":"2026-10-18T15:19:42.514Z","updated":"2026-10-19T09:22:50.359Z","title":"net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98621","published":"2026-10-18T15:19:41.211Z","updated":"2026-10-19T09:22:49.371Z","title":"net: gue: reject invalid REMCSUM offsets","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98620","published":"2026-10-18T15:19:40.320Z","updated":"2026-10-19T09:22:48.289Z","title":"net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98619","published":"2026-10-18T15:19:39.448Z","updated":"2026-10-19T09:22:47.182Z","title":"net: ethtool: keep rtnl_lock for the ioctl self test","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98618","published":"2026-10-18T15:19:38.631Z","updated":"2026-10-19T09:22:46.174Z","title":"eth: fbnic: Handle maximum standalone channels","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98617","published":"2026-10-18T15:19:37.060Z","updated":"2026-10-19T09:22:45.221Z","title":"eth: fbnic: use the Rx queue napi pointer to find the napi vector","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98616","published":"2026-10-18T15:19:36.165Z","updated":"2026-10-19T09:22:44.159Z","title":"eth: fbnic: reset num_napi when the napi vectors are freed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98615","published":"2026-10-18T15:19:35.307Z","updated":"2026-10-19T09:22:43.182Z","title":"eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98614","published":"2026-10-18T15:19:34.494Z","updated":"2026-10-19T09:22:42.185Z","title":"sctp: avoid livelock while updating retransmit path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98613","published":"2026-10-18T15:19:33.624Z","updated":"2026-10-19T09:22:41.226Z","title":"bpf: Bound ownership depth through local kptrs and graph roots","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98612","published":"2026-10-18T15:19:32.790Z","updated":"2026-10-19T09:22:40.233Z","title":"net: usb: catc: bound the RX packet length in catc_rx_done()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191},{"id":"CVE-2026-98611","published":"2026-10-18T15:19:26.922Z","updated":"2026-10-19T09:22:38.197Z","title":"bpf: Check params size before reading reserved fields","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98610","published":"2026-10-18T15:19:25.128Z","updated":"2026-10-19T09:22:37.236Z","title":"net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98609","published":"2026-10-18T15:19:24.250Z","updated":"2026-10-19T09:22:36.271Z","title":"drm/virtio: fix object leak when drm_gem_handle_create() fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98608","published":"2026-10-18T15:19:23.052Z","updated":"2026-10-19T09:22:35.287Z","title":"drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98607","published":"2026-10-18T15:19:21.585Z","updated":"2026-10-19T09:22:34.330Z","title":"drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98606","published":"2026-10-18T15:19:20.639Z","updated":"2026-10-19T09:22:33.369Z","title":"drm/virtio: release the GEM object on virtio_gpu_vram_create() errors","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98605","published":"2026-10-18T15:19:18.294Z","updated":"2026-10-19T09:22:32.426Z","title":"drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98604","published":"2026-10-18T15:19:17.227Z","updated":"2026-10-19T09:22:31.480Z","title":"ovpn: replace bind when learning local endpoint","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98603","published":"2026-10-18T15:19:16.215Z","updated":"2026-10-19T09:22:30.537Z","title":"ovpn: replace bind when clearing stale local source","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98602","published":"2026-10-18T15:19:14.606Z","updated":"2026-10-19T09:22:29.455Z","title":"Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98601","published":"2026-10-18T15:19:13.760Z","updated":"2026-10-19T09:22:28.028Z","title":"Bluetooth: btintel_pcie: validate device-supplied DMA indices","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98600","published":"2026-10-18T15:19:12.864Z","updated":"2026-10-19T09:22:26.711Z","title":"Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98599","published":"2026-10-18T15:19:11.941Z","updated":"2026-10-19T09:22:25.359Z","title":"bpf: Reject non-negative offsets in stack_slot_obj_get_spi()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98598","published":"2026-10-18T15:19:11.126Z","updated":"2026-10-19T09:22:24.055Z","title":"ipv6: Prevent rt6_insert_exception() for dying fib6_info.","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98597","published":"2026-10-18T15:19:10.088Z","updated":"2026-10-19T09:22:22.716Z","title":"net: usb: sr9700: include receive overhead in the length check","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98596","published":"2026-10-18T15:19:09.189Z","updated":"2026-10-19T09:22:21.750Z","title":"ipv6: Fix dst leak for uncached routes.","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98595","published":"2026-10-18T15:19:07.840Z","updated":"2026-10-19T09:22:20.774Z","title":"udp: remove a disconnected socket from the 4-tuple hash table","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98594","published":"2026-10-18T15:19:06.696Z","updated":"2026-10-19T09:22:19.792Z","title":"tg3: clean up PHYLIB resources on probe failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98593","published":"2026-10-18T15:19:05.272Z","updated":"2026-10-19T09:22:18.775Z","title":"s390/debug: Fix NULL pointer dereference in debug_info_copy()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98592","published":"2026-10-18T15:19:04.373Z","updated":"2026-10-19T09:22:17.811Z","title":"net: spacemit: clear TX descriptor on fragment mapping failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98591","published":"2026-10-18T15:19:03.567Z","updated":"2026-10-19T09:22:16.758Z","title":"bpf: Fix bounds check for skb-backed dynptrs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00201},{"id":"CVE-2026-98590","published":"2026-10-18T15:19:02.747Z","updated":"2026-10-19T09:22:15.786Z","title":"bpf: Fix bpf_sock context code generation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98589","published":"2026-10-18T15:19:01.769Z","updated":"2026-10-19T09:22:14.803Z","title":"bpf: Reject pkt arguments in mutating subprogs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00196},{"id":"CVE-2026-98588","published":"2026-10-18T15:19:00.934Z","updated":"2026-10-19T09:22:13.833Z","title":"bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98587","published":"2026-10-18T15:19:00.077Z","updated":"2026-10-19T09:22:12.874Z","title":"firewire: cdev: fix back-transition for iso_resource_auto client resource","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98586","published":"2026-10-18T15:18:59.046Z","updated":"2026-10-19T09:22:11.899Z","title":"sctp: hold asoc or transport before mod_timer() in timer handlers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98585","published":"2026-10-18T15:18:58.018Z","updated":"2026-10-19T09:22:10.939Z","title":"eth: fbnic: Avoid rounding zero ring sizes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98584","published":"2026-10-18T15:18:57.204Z","updated":"2026-10-19T09:22:09.980Z","title":"net/sched: fix potential stack infoleak in em_text_dump()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98583","published":"2026-10-18T15:18:56.360Z","updated":"2026-10-19T09:22:09.019Z","title":"nfc: nfcmrvl: validate helper command length before pull","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98582","published":"2026-10-18T15:18:55.545Z","updated":"2026-10-19T09:22:08.022Z","title":"nfc: st21nfca: validate received frame size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98581","published":"2026-10-18T15:18:54.696Z","updated":"2026-10-19T09:22:07.016Z","title":"nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98580","published":"2026-10-18T15:18:53.819Z","updated":"2026-10-19T09:22:05.887Z","title":"nfc: llcp: Fix race condition in accept_queue lifecycle","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98579","published":"2026-10-18T15:18:52.611Z","updated":"2026-10-19T09:22:04.617Z","title":"nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98578","published":"2026-10-18T15:18:51.807Z","updated":"2026-10-19T09:22:03.614Z","title":"nfc: st21nfca: validate ISO15693 inventory length","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98577","published":"2026-10-18T15:18:47.635Z","updated":"2026-10-19T09:22:02.632Z","title":"nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98576","published":"2026-10-18T15:18:41.629Z","updated":"2026-10-19T09:22:01.670Z","title":"nfc: llcp: fix slab-out-of-bounds reads when logging service names","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98575","published":"2026-10-18T15:18:40.577Z","updated":"2026-10-19T09:22:00.641Z","title":"nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98574","published":"2026-10-18T15:18:39.767Z","updated":"2026-10-19T09:21:59.645Z","title":"net: bcmgenet: stop Tx NAPI before disabling the queues","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98573","published":"2026-10-18T15:18:38.914Z","updated":"2026-10-19T09:21:58.681Z","title":"net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98572","published":"2026-10-18T15:18:38.105Z","updated":"2026-10-19T09:21:57.711Z","title":"bpf: Fix immediate JMP JEQ/JNE on MIPS32","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98571","published":"2026-10-18T15:18:37.195Z","updated":"2026-10-19T09:21:56.739Z","title":"net: stmmac: clear stale buf->page after recycling on skb build failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98570","published":"2026-10-18T15:18:36.308Z","updated":"2026-10-19T09:21:55.765Z","title":"net: ipv6: keep room for the mac header in dst_dev_overhead()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98569","published":"2026-10-18T15:18:35.413Z","updated":"2026-10-19T09:21:54.816Z","title":"ip_gre: Reject enabling collect metadata through changelink","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98568","published":"2026-10-18T15:18:34.562Z","updated":"2026-10-30T12:38:26.027Z","title":"vxlan: use one headroom snapshot for neighbour replies","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98567","published":"2026-10-18T15:18:33.721Z","updated":"2026-10-19T09:21:52.909Z","title":"net: xps: reject an out of range traffic class","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98566","published":"2026-10-18T15:18:32.679Z","updated":"2026-10-19T09:21:51.721Z","title":"drm/imagination: clamp freelist reconstruction requests","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98565","published":"2026-10-18T15:18:31.836Z","updated":"2026-10-19T09:21:50.349Z","title":"net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98564","published":"2026-10-18T15:18:31.044Z","updated":"2026-10-19T09:21:49.010Z","title":"net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98563","published":"2026-10-18T15:18:30.158Z","updated":"2026-10-19T09:21:47.748Z","title":"net: phylink: record the PHY only once bringup cannot fail","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98562","published":"2026-10-18T15:18:29.310Z","updated":"2026-10-19T09:21:46.397Z","title":"net: libwx: fix races in Tx timestamp handling","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98561","published":"2026-10-18T15:18:28.011Z","updated":"2026-10-19T09:21:45.378Z","title":"nfp: hold IPsec RX state under the XArray lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98560","published":"2026-10-18T15:18:27.162Z","updated":"2026-10-19T09:21:44.401Z","title":"net/rds: size a connection's path set by the transport it ends up with","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98559","published":"2026-10-18T15:18:26.349Z","updated":"2026-10-19T09:21:43.436Z","title":"net/smc: fix UAF on lgr list traversal in smcr_port_err()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98558","published":"2026-10-18T15:18:25.282Z","updated":"2026-10-19T09:21:42.443Z","title":"net: flush skb_defer_nodes in dev_cpu_dead()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98557","published":"2026-10-18T15:18:24.415Z","updated":"2026-10-19T09:21:41.472Z","title":"gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98556","published":"2026-10-18T15:18:23.536Z","updated":"2026-10-19T09:21:40.064Z","title":"gve: DQO: reject TSO packets with an out of range MSS","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98555","published":"2026-10-18T15:18:22.631Z","updated":"2026-10-24T14:09:24.593Z","title":"llc: fix skb UAF and leaks on llc_mac_hdr_init() failure","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0031},{"id":"CVE-2026-98554","published":"2026-10-18T15:18:21.751Z","updated":"2026-10-19T09:21:37.221Z","title":"vlan: ensure sufficient headroom in vlan_dev_hard_header()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98553","published":"2026-10-18T15:18:20.728Z","updated":"2026-10-19T09:21:36.247Z","title":"autofs: fix sbi->pipe file reference leak in autofs_kill_sb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98552","published":"2026-10-18T15:18:19.810Z","updated":"2026-10-19T09:21:35.261Z","title":"perf/core: Fix a refcount leak in attach_perf_ctx_data()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98551","published":"2026-10-18T15:18:19.008Z","updated":"2026-10-19T09:21:34.288Z","title":"perf/core: Fill branch entries with a single assignment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98550","published":"2026-10-18T15:18:18.173Z","updated":"2026-10-24T14:09:23.470Z","title":"tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00677},{"id":"CVE-2026-98549","published":"2026-10-18T15:18:17.361Z","updated":"2026-10-30T12:38:24.928Z","title":"tcp: prevent collapsing skbs across boundary in rtx queue","severity":"CRITICAL","score":9.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00559},{"id":"CVE-2026-98548","published":"2026-10-18T15:18:16.510Z","updated":"2026-10-24T14:09:21.243Z","title":"sctp: discard the rest of the packet on a stale-cookie error","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00694},{"id":"CVE-2026-98547","published":"2026-10-18T15:18:15.669Z","updated":"2026-10-19T09:21:30.417Z","title":"af_packet: fix integer overflow in prb_calc_retire_blk_tmo()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98546","published":"2026-10-18T15:18:14.808Z","updated":"2026-10-19T09:21:29.442Z","title":"arm64/boot: Disable trapping of PMZR_EL0 writes to EL2","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98545","published":"2026-10-18T15:18:13.949Z","updated":"2026-10-19T09:21:28.453Z","title":"ata: libata-scsi: bound the ATA passthru sense descriptor writes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98544","published":"2026-10-18T15:18:12.964Z","updated":"2026-10-30T12:38:23.865Z","title":"bna: prevent IOC timer rearm during teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98543","published":"2026-10-18T15:18:10.823Z","updated":"2026-10-24T14:09:20.159Z","title":"bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir","severity":"HIGH","score":7.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154},{"id":"CVE-2026-98542","published":"2026-10-18T15:18:10.035Z","updated":"2026-10-19T09:21:25.599Z","title":"cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98541","published":"2026-10-18T15:18:09.190Z","updated":"2026-10-19T09:21:24.620Z","title":"fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98540","published":"2026-10-18T15:18:08.352Z","updated":"2026-10-19T09:21:23.633Z","title":"fprobe: Terminate the fgraph_data list when the reservation is not filled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98539","published":"2026-10-18T15:18:06.921Z","updated":"2026-10-19T09:21:22.671Z","title":"fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's \"WARNING in do_new_mount\" saga","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98538","published":"2026-10-18T15:18:05.901Z","updated":"2026-10-19T09:21:21.678Z","title":"writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00215},{"id":"CVE-2026-98537","published":"2026-10-18T15:18:05.028Z","updated":"2026-10-19T09:21:20.715Z","title":"workqueue: Fix NULL current_pwq deref in flush dependency check","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98536","published":"2026-10-18T15:18:04.013Z","updated":"2026-10-19T09:21:19.730Z","title":"writeback: report a Tasks-RCU quiescent state per cgwb drain pass","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00215},{"id":"CVE-2026-98535","published":"2026-10-18T15:17:58.081Z","updated":"2026-10-19T09:21:18.753Z","title":"fsl/fman: Fix clk reference leak in read_dts_node()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98534","published":"2026-10-18T15:17:57.236Z","updated":"2026-10-19T09:21:17.763Z","title":"ipe: fix use-after-free when auditing a newly loaded policy","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98533","published":"2026-10-18T15:17:51.339Z","updated":"2026-10-19T09:21:16.820Z","title":"ipe: protect the dm-verity root hash with RCU","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98532","published":"2026-10-18T15:17:50.490Z","updated":"2026-10-24T14:09:19.064Z","title":"ipv6: do not let ipv6_find_hdr() return an offset past the packet end","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00613},{"id":"CVE-2026-98531","published":"2026-10-18T15:17:49.632Z","updated":"2026-10-19T09:21:14.351Z","title":"ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98530","published":"2026-10-18T15:17:48.670Z","updated":"2026-10-19T09:21:13.045Z","title":"kprobes: Fix permanent hang when flushing the kprobe optimizer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98529","published":"2026-10-18T15:17:47.577Z","updated":"2026-10-19T09:21:11.695Z","title":"gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98528","published":"2026-10-18T15:17:46.695Z","updated":"2026-10-19T09:21:10.272Z","title":"gpio: cdev: fix kernel stack leak to user-space in error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98527","published":"2026-10-18T15:17:45.684Z","updated":"2026-10-19T09:21:08.961Z","title":"gpio: zynq: fix runtime PM leak on request error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98526","published":"2026-10-18T15:17:44.018Z","updated":"2026-10-19T09:21:07.983Z","title":"llc: reserve device headroom for allocated frames","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022},{"id":"CVE-2026-98525","published":"2026-10-18T15:17:43.216Z","updated":"2026-10-19T09:21:07.010Z","title":"mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98524","published":"2026-10-18T15:17:41.420Z","updated":"2026-10-24T14:09:17.970Z","title":"rds: ib: Clear the sg list when mapping an MR fails","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171},{"id":"CVE-2026-98523","published":"2026-10-18T15:17:40.598Z","updated":"2026-10-19T09:21:05.087Z","title":"drm/client: fix restore of partially initialized client","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98522","published":"2026-10-18T15:17:39.774Z","updated":"2026-10-19T09:21:04.111Z","title":"drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98521","published":"2026-10-18T15:17:38.938Z","updated":"2026-10-19T09:21:03.153Z","title":"drm/i915: fix incorrect RCU teardown order","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00215},{"id":"CVE-2026-98520","published":"2026-10-18T15:17:38.113Z","updated":"2026-10-24T14:09:16.913Z","title":"drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98519","published":"2026-10-18T15:17:37.306Z","updated":"2026-10-30T12:38:22.800Z","title":"drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98518","published":"2026-10-18T15:17:36.371Z","updated":"2026-10-24T14:09:15.821Z","title":"drm/nouveau/dmem: pin VRAM for the whole registered range","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00132},{"id":"CVE-2026-98517","published":"2026-10-18T15:17:35.521Z","updated":"2026-10-24T14:09:14.724Z","title":"drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98516","published":"2026-10-18T15:17:34.436Z","updated":"2026-10-19T09:20:57.329Z","title":"drm/nouveau: Fix bridge reference leak in nv1a_ram_new()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98515","published":"2026-10-18T15:17:31.953Z","updated":"2026-10-24T14:09:13.699Z","title":"drm/nouveau: fix double-free in nvif_vmm_dtor","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98514","published":"2026-10-18T15:17:30.612Z","updated":"2026-10-19T09:20:54.190Z","title":"drm/nouveau: Fix gem reference leak in validate_init()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98513","published":"2026-10-18T15:17:29.308Z","updated":"2026-10-19T09:20:53.197Z","title":"drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98512","published":"2026-10-18T15:17:27.102Z","updated":"2026-10-24T14:09:12.662Z","title":"drm/nouveau: RCU-free the scheduler-containing nouveau_sched","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159},{"id":"CVE-2026-98511","published":"2026-10-18T15:17:25.033Z","updated":"2026-10-30T12:38:21.735Z","title":"drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98510","published":"2026-10-18T15:17:20.805Z","updated":"2026-10-24T14:09:11.598Z","title":"drm/xe/vm: nuke PTs only after unlinking contested VMAs","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98509","published":"2026-10-18T15:17:19.352Z","updated":"2026-10-19T09:20:48.207Z","title":"drm/virtio: fix memory leak of fence event on execbuffer failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98508","published":"2026-10-18T15:17:15.082Z","updated":"2026-10-19T09:20:47.221Z","title":"drm/virtio: fix NULL pointer dereference on fence allocation failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98507","published":"2026-10-18T15:17:13.767Z","updated":"2026-10-30T12:38:20.652Z","title":"mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-98506","published":"2026-10-18T15:17:12.898Z","updated":"2026-10-19T09:20:45.266Z","title":"mm/hugetlb: do not dissolve gigantic pages without runtime support","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98505","published":"2026-10-18T15:17:06.200Z","updated":"2026-10-21T12:55:16.703Z","title":"mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98504","published":"2026-10-18T15:17:05.274Z","updated":"2026-10-19T09:20:43.250Z","title":"PCI: of_property: Omit bus properties without a subordinate bus","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98503","published":"2026-10-18T15:17:03.904Z","updated":"2026-10-19T09:20:42.115Z","title":"packet: use ubuf_info completion for TX_RING packets","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.002},{"id":"CVE-2026-98502","published":"2026-10-18T15:16:51.221Z","updated":"2026-10-30T12:38:19.578Z","title":"HID: alps: unregister DualPoint Stick input device on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98501","published":"2026-10-18T15:16:46.205Z","updated":"2026-10-24T14:09:09.356Z","title":"HID: alps: fix use-after-free on input2 registration failure","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00259},{"id":"CVE-2026-98500","published":"2026-10-18T15:16:33.969Z","updated":"2026-10-19T09:20:39.271Z","title":"HID: hid-oxp: use cancel_delayed_work_sync() in remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189},{"id":"CVE-2026-98499","published":"2026-10-18T15:16:31.629Z","updated":"2026-10-24T14:09:08.254Z","title":"HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0039},{"id":"CVE-2026-98498","published":"2026-10-18T15:16:30.116Z","updated":"2026-10-19T09:20:36.589Z","title":"net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98497","published":"2026-10-18T15:16:28.852Z","updated":"2026-10-24T14:09:07.181Z","title":"net/mlx5e: fix swapped IPv6 IPsec policy masks","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00459},{"id":"CVE-2026-98496","published":"2026-10-18T15:16:27.545Z","updated":"2026-10-19T09:20:33.996Z","title":"net: airoha: npu: cancel wdt_work after releasing the WDT IRQ","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98495","published":"2026-10-18T15:16:24.810Z","updated":"2026-10-19T09:20:32.370Z","title":"net: arp: terminate device name before lookup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98494","published":"2026-10-18T15:16:23.155Z","updated":"2026-10-19T09:20:31.295Z","title":"net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98493","published":"2026-10-18T15:16:22.301Z","updated":"2026-10-30T12:38:18.516Z","title":"net: ipconfig: bound DHCP option construction","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98492","published":"2026-10-18T15:16:21.208Z","updated":"2026-10-19T09:20:29.361Z","title":"net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98491","published":"2026-10-18T15:16:20.069Z","updated":"2026-10-24T14:09:06.117Z","title":"net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169},{"id":"CVE-2026-98490","published":"2026-10-18T15:16:19.215Z","updated":"2026-10-30T12:38:17.458Z","title":"net: openvswitch: conntrack: fix helper UAF due to extensions realloc","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00695},{"id":"CVE-2026-98489","published":"2026-10-18T15:16:16.084Z","updated":"2026-10-19T09:20:26.482Z","title":"net: atl1c: fix soft lockup on out-of-range tpd_cons read","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98488","published":"2026-10-18T15:16:14.168Z","updated":"2026-10-19T09:20:25.516Z","title":"net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98487","published":"2026-10-18T15:16:04.746Z","updated":"2026-10-24T14:09:03.998Z","title":"net: bridge: mdb: restart port group walk after deletion","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164},{"id":"CVE-2026-98486","published":"2026-10-18T15:16:03.002Z","updated":"2026-10-30T12:38:16.404Z","title":"net: ena: fix MMIO read buffer leak on probe failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98485","published":"2026-10-18T15:16:00.435Z","updated":"2026-10-24T14:09:02.897Z","title":"netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98484","published":"2026-10-18T15:15:58.118Z","updated":"2026-10-30T12:38:15.332Z","title":"netfilter: nf_tables: skip expired catchall elements on insert and delete","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98483","published":"2026-10-18T15:15:57.275Z","updated":"2026-10-19T09:20:20.665Z","title":"nfc: fix use-after-free in nfc_get_local_general_bytes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98482","published":"2026-10-18T15:15:56.227Z","updated":"2026-10-19T09:20:19.712Z","title":"nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211},{"id":"CVE-2026-98481","published":"2026-10-18T15:15:55.360Z","updated":"2026-10-19T09:20:18.735Z","title":"nfc: port100: reject frames whose declared length exceeds the received data","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98480","published":"2026-10-18T15:15:54.528Z","updated":"2026-10-19T09:20:17.774Z","title":"nfc: trf7970a: power down on startup RX gain failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98479","published":"2026-10-18T15:15:53.663Z","updated":"2026-10-24T14:09:01.805Z","title":"scsi: libiscsi_tcp: Check the data direction of a Data-In PDU","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00392},{"id":"CVE-2026-98478","published":"2026-10-18T15:15:52.338Z","updated":"2026-10-19T09:20:15.817Z","title":"scsi: ufs: core: Keep internal commands dispatchable during error handling","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98477","published":"2026-10-18T15:15:51.475Z","updated":"2026-10-21T12:55:10.170Z","title":"perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98476","published":"2026-10-18T15:15:45.100Z","updated":"2026-10-19T09:20:13.920Z","title":"s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98475","published":"2026-10-18T15:15:44.206Z","updated":"2026-10-19T09:20:12.941Z","title":"s390/cmf: Fix virtual vs physical address confusion","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98474","published":"2026-10-18T15:15:36.667Z","updated":"2026-10-19T09:20:12.011Z","title":"s390/pci: Fix missing device lock in zpci_report_status()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98473","published":"2026-10-18T15:15:35.479Z","updated":"2026-10-19T09:20:11.069Z","title":"s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98472","published":"2026-10-18T15:15:24.654Z","updated":"2026-10-19T09:20:10.096Z","title":"KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98471","published":"2026-10-18T15:15:23.690Z","updated":"2026-10-24T14:09:00.765Z","title":"KVM: SEV: Do cache maintenance on the source VM during intra-host migration","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00158},{"id":"CVE-2026-98470","published":"2026-10-18T15:15:22.878Z","updated":"2026-10-19T09:20:08.206Z","title":"KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98469","published":"2026-10-18T15:15:22.065Z","updated":"2026-10-24T14:08:59.643Z","title":"KVM: arm64: Fix AArch32 DBGBXVR<n> handling","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174},{"id":"CVE-2026-98468","published":"2026-10-18T15:15:20.882Z","updated":"2026-10-19T09:20:06.341Z","title":"KVM: arm64: Fix spurious warning for benign stage 2 teardown race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98467","published":"2026-10-18T15:15:19.294Z","updated":"2026-10-19T09:20:05.363Z","title":"KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98466","published":"2026-10-18T15:15:18.414Z","updated":"2026-10-24T14:08:58.562Z","title":"KVM: arm64: Transfer the hyp stack pages out of the host stage-2","severity":"HIGH","score":8.2,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98465","published":"2026-10-18T15:15:17.498Z","updated":"2026-10-24T14:08:57.467Z","title":"RISC-V: KVM: Serialize IMSIC attributes with vCPU migration","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00136},{"id":"CVE-2026-98464","published":"2026-10-18T15:15:16.624Z","updated":"2026-10-24T14:08:56.354Z","title":"RISC-V: KVM: Synchronize hrtimer callback during teardown","severity":"CRITICAL","score":9.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00143},{"id":"CVE-2026-98463","published":"2026-10-18T15:15:15.775Z","updated":"2026-10-19T09:20:01.130Z","title":"sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00198},{"id":"CVE-2026-98462","published":"2026-10-18T15:15:11.696Z","updated":"2026-10-19T09:19:59.841Z","title":"Bluetooth: hci_conn: fix CIS hold ownership on reuse","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206},{"id":"CVE-2026-98461","published":"2026-10-18T15:15:10.726Z","updated":"2026-10-19T09:19:58.505Z","title":"Bluetooth: hci_sock: validate event length before filtering","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00216},{"id":"CVE-2026-98460","published":"2026-10-18T15:15:09.787Z","updated":"2026-10-19T09:19:57.273Z","title":"Bluetooth: hci_sock: reject out-of-range OCF values","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98459","published":"2026-10-18T15:15:08.537Z","updated":"2026-10-19T09:19:55.996Z","title":"Bluetooth: ISO: balance the parent hold in hci_bind_bis()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98458","published":"2026-10-18T15:15:07.572Z","updated":"2026-10-19T09:19:54.818Z","title":"Bluetooth: ISO: release unused CIS holds after channel attach","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209},{"id":"CVE-2026-98457","published":"2026-10-18T15:15:06.718Z","updated":"2026-10-19T09:19:53.885Z","title":"Bluetooth: L2CAP: validate frame length before control and FCS access","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00184},{"id":"CVE-2026-98456","published":"2026-10-18T15:15:05.909Z","updated":"2026-10-30T12:38:14.270Z","title":"Bluetooth: mgmt: fix race in read_unconf_index_list()","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126},{"id":"CVE-2026-98455","published":"2026-10-18T15:15:04.988Z","updated":"2026-10-19T09:19:50.740Z","title":"Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98454","published":"2026-10-18T15:15:04.139Z","updated":"2026-10-30T12:38:13.210Z","title":"smb: client: fix create context out-of-bounds reads","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00387},{"id":"CVE-2026-98453","published":"2026-10-18T15:15:03.262Z","updated":"2026-10-30T12:38:12.139Z","title":"smb: client: close handle after create-context parsing failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98452","published":"2026-10-18T15:15:02.436Z","updated":"2026-10-19T09:19:47.547Z","title":"smb: client: clean up failed cached directory opens","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175},{"id":"CVE-2026-98451","published":"2026-10-18T15:15:01.473Z","updated":"2026-10-30T12:38:11.067Z","title":"smb: client: use finish_no_open() for non-regular inodes","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00398},{"id":"CVE-2026-98450","published":"2026-10-18T15:15:00.649Z","updated":"2026-10-30T12:38:10.005Z","title":"smb: client: close completed creates on compound wait errors","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177},{"id":"CVE-2026-98449","published":"2026-10-18T15:14:59.772Z","updated":"2026-10-19T09:19:44.655Z","title":"smb: client: delete compound mids on send failure before unlock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162},{"id":"CVE-2026-98448","published":"2026-10-18T15:14:58.880Z","updated":"2026-10-19T09:19:43.713Z","title":"xfs: release orphanage dir inode if chown fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175},{"id":"CVE-2026-98447","published":"2026-10-18T15:14:57.561Z","updated":"2026-10-19T09:19:42.728Z","title":"xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166},{"id":"CVE-2026-98446","published":"2026-10-18T15:14:56.724Z","updated":"2026-10-19T09:19:41.777Z","title":"xfs: don't let hidden_space go negative in xfs_metafile_resv_init","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173},{"id":"CVE-2026-98445","published":"2026-10-18T15:14:55.754Z","updated":"2026-10-19T09:19:40.826Z","title":"xfs: don't let memory failures leak blocks and kill repairs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168},{"id":"CVE-2026-98444","published":"2026-10-18T15:14:54.559Z","updated":"2026-10-19T09:19:39.866Z","title":"xfs: drop dquot flush lock when we can't find a buffer to flush","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98443","published":"2026-10-18T15:14:53.597Z","updated":"2026-10-30T12:38:08.950Z","title":"xfs: fix cursor and pointer handling when recovering iunlink buckets","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00135},{"id":"CVE-2026-98442","published":"2026-10-18T15:14:52.614Z","updated":"2026-10-24T14:08:50.801Z","title":"net/sched: act_ct: fix helper UAF due to extensions realloc","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00129},{"id":"CVE-2026-98441","published":"2026-10-18T15:14:51.664Z","updated":"2026-10-24T14:08:49.686Z","title":"net/sched: act_ct: avoid modifying shared unconfirmed ct entry","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00133},{"id":"CVE-2026-98440","published":"2026-10-18T15:14:50.740Z","updated":"2026-10-24T14:08:48.611Z","title":"KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122},{"id":"CVE-2026-111991","published":"2026-10-18T15:00:15.472Z","updated":"2026-10-22T02:22:45.394Z","title":"WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection","severity":"MEDIUM","score":5.3,"vendor":"WongKinYiu","product":"yolov9","kev":false,"epss":0.00381},{"id":"CVE-2026-98439","published":"2026-10-18T14:45:28.290Z","updated":"2026-10-26T06:55:46.410Z","title":"smb/server: cancel async requests when closing connection","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-98438","published":"2026-10-18T14:45:27.288Z","updated":"2026-10-19T09:19:34.132Z","title":"mptcp: options: fix uninit-value in mptcp_write_data_fin","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-98437","published":"2026-10-18T14:45:26.337Z","updated":"2026-10-19T09:19:33.190Z","title":"media: qcom: iris: fix runtime PM reference leaks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155},{"id":"CVE-2026-98436","published":"2026-10-18T14:45:25.364Z","updated":"2026-10-26T06:55:45.188Z","title":"accel/amdxdna: Disable device buffer exporting","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00112},{"id":"CVE-2026-98435","published":"2026-10-18T14:45:24.453Z","updated":"2026-10-19T09:19:31.284Z","title":"EDAC/altera: Use parent device for devres in altr_portb_setup()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156},{"id":"CVE-2026-111990","published":"2026-10-18T14:45:11.222Z","updated":"2026-10-19T17:55:27.601Z","title":"kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"kishan0725","product":"Hospital Management System","kev":false,"epss":0.00254},{"id":"CVE-2026-98434","published":"2026-10-18T14:38:19.729Z","updated":"2026-10-19T09:19:30.349Z","title":"sysctl: Check range in  proc_dointvec_ms_jiffies_minmax","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145},{"id":"CVE-2026-98433","published":"2026-10-18T14:38:18.296Z","updated":"2026-10-19T09:19:29.371Z","title":"KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165},{"id":"CVE-2026-110024","published":"2026-10-18T14:31:38.949Z","updated":"2026-10-20T18:40:02.655Z","title":"@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults","severity":"MEDIUM","score":6.8,"vendor":"@fastify/jwt","product":"@fastify/jwt","kev":false,"epss":0.00188},{"id":"CVE-2026-111988","published":"2026-10-18T14:30:22.617Z","updated":"2026-10-19T16:37:41.939Z","title":"dyad-sh dyad OAuth Callback cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"dyad-sh","product":"dyad","kev":false,"epss":0.00196},{"id":"CVE-2026-111987","published":"2026-10-18T13:15:16.251Z","updated":"2026-10-19T16:14:37.028Z","title":"AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00353},{"id":"CVE-2026-111986","published":"2026-10-18T13:00:16.340Z","updated":"2026-10-22T02:21:58.777Z","title":"AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00306},{"id":"CVE-2026-112063","published":"2026-10-18T12:19:52.787Z","updated":"2026-10-19T19:38:04.100Z","title":"libstrophe through 0.14.0 Stack-Based Buffer Overflow via SCRAM Salt in SCRAM_Hi","severity":"MEDIUM","score":6,"vendor":"strophe","product":"libstrophe","kev":false,"epss":0.00283},{"id":"CVE-2026-112062","published":"2026-10-18T12:19:52.023Z","updated":"2026-10-19T17:56:37.505Z","title":"lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler","severity":"MEDIUM","score":6,"vendor":"lwIP","product":"lwIP","kev":false,"epss":0.00356},{"id":"CVE-2026-112061","published":"2026-10-18T12:19:51.237Z","updated":"2026-10-19T16:37:50.638Z","title":"librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode","severity":"MEDIUM","score":5.3,"vendor":"RTMPDump","product":"librtmp","kev":false,"epss":0.00221},{"id":"CVE-2026-112060","published":"2026-10-18T12:19:50.440Z","updated":"2026-10-19T16:12:27.073Z","title":"librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Write via AMF3_Decode","severity":"MEDIUM","score":6.1,"vendor":"RTMPDump","product":"librtmp","kev":false,"epss":0.00177},{"id":"CVE-2026-112059","published":"2026-10-18T12:19:49.627Z","updated":"2026-10-22T02:19:48.617Z","title":"libLAS through 1.8.1 Heap Out-of-Bounds Write via LASSchema VLR","severity":"MEDIUM","score":6.9,"vendor":"libLAS","product":"libLAS","kev":false,"epss":0.00182},{"id":"CVE-2026-112058","published":"2026-10-18T12:19:48.829Z","updated":"2026-10-19T20:30:01.860Z","title":"libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT","severity":"MEDIUM","score":6.8,"vendor":"VideoLAN","product":"libdvdnav","kev":false,"epss":0.00183},{"id":"CVE-2026-112057","published":"2026-10-18T12:19:48.021Z","updated":"2026-10-19T17:58:02.002Z","title":"libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters","severity":"MEDIUM","score":6.8,"vendor":"VideoLAN","product":"libdvdnav","kev":false,"epss":0.00185},{"id":"CVE-2026-112056","published":"2026-10-18T12:19:47.212Z","updated":"2026-10-19T16:37:58.644Z","title":"wvWare wv through 1.2.9 Heap Out-of-Bounds Read via wvGetSTSH","severity":"MEDIUM","score":6.8,"vendor":"wvWare","product":"wv","kev":false,"epss":0.00118},{"id":"CVE-2026-112055","published":"2026-10-18T12:19:46.319Z","updated":"2026-10-19T16:29:54.331Z","title":"wvWare wv through 1.2.9 Stack Out-of-Bounds Read via wvGetPAPX_FKP and wvGetCHPX_FKP","severity":"MEDIUM","score":6.8,"vendor":"wvWare","product":"wv","kev":false,"epss":0.0018},{"id":"CVE-2026-112054","published":"2026-10-18T12:19:45.481Z","updated":"2026-10-22T02:17:56.690Z","title":"Schroedinger libschroedinger through 1.0.11 Divide by Zero in Low-Delay Transform Parsing","severity":"MEDIUM","score":6.8,"vendor":"Schroedinger","product":"schroedinger","kev":false,"epss":0.00182},{"id":"CVE-2026-112053","published":"2026-10-18T12:19:44.638Z","updated":"2026-10-19T20:28:25.210Z","title":"Schroedinger libschroedinger through 1.0.11 Out-of-Bounds Read via schro_params_set_default_quant_matrix","severity":"MEDIUM","score":6.8,"vendor":"Schroedinger","product":"schroedinger","kev":false,"epss":0.0018},{"id":"CVE-2026-112052","published":"2026-10-18T12:19:43.850Z","updated":"2026-10-19T18:01:10.776Z","title":"libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing","severity":"MEDIUM","score":6.9,"vendor":"SpatiaLite","product":"libspatialite","kev":false,"epss":0.00182},{"id":"CVE-2026-112051","published":"2026-10-18T12:19:43.049Z","updated":"2026-10-19T16:38:08.267Z","title":"Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration","severity":"HIGH","score":8.3,"vendor":"xorbitsai","product":"inference","kev":false,"epss":0.00365},{"id":"CVE-2026-112050","published":"2026-10-18T12:19:42.143Z","updated":"2026-10-19T16:09:30.685Z","title":"Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation","severity":"LOW","score":2.3,"vendor":"gitify-app","product":"gitify","kev":false,"epss":0.00147},{"id":"CVE-2026-112049","published":"2026-10-18T12:19:40.323Z","updated":"2026-10-22T02:16:33.061Z","title":"Vita3K before build 4187 Path Traversal via VPK Package Installation","severity":"MEDIUM","score":6.7,"vendor":"Vita3K","product":"Vita3K","kev":false,"epss":0.00151},{"id":"CVE-2026-112048","published":"2026-10-18T12:19:36.940Z","updated":"2026-10-20T15:31:53.762Z","title":"libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count","severity":"MEDIUM","score":6.9,"vendor":"SpatiaLite","product":"libspatialite","kev":false,"epss":0.0018},{"id":"CVE-2026-112047","published":"2026-10-18T12:19:36.162Z","updated":"2026-10-19T18:05:36.937Z","title":"OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions","severity":"MEDIUM","score":5.3,"vendor":"OneUptime","product":"oneuptime","kev":false,"epss":0.00177},{"id":"CVE-2026-112046","published":"2026-10-18T12:19:35.358Z","updated":"2026-10-19T16:38:14.812Z","title":"OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve()","severity":"MEDIUM","score":6.8,"vendor":"OW2","product":"ASM","kev":false,"epss":0.00119},{"id":"CVE-2026-111985","published":"2026-10-18T12:00:17.515Z","updated":"2026-10-19T18:35:22.920Z","title":"AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00425},{"id":"CVE-2026-111984","published":"2026-10-18T11:45:16.475Z","updated":"2026-10-19T16:38:21.574Z","title":"AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00358},{"id":"CVE-2026-112021","published":"2026-10-18T11:38:40.652Z","updated":"2026-10-19T16:05:15.544Z","title":"snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()","severity":"HIGH","score":8.7,"vendor":"grunfink","product":"snac2","kev":false,"epss":0.0067},{"id":"CVE-2026-112020","published":"2026-10-18T11:38:39.921Z","updated":"2026-10-22T02:15:36.959Z","title":"LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()","severity":"MEDIUM","score":6.9,"vendor":"lvandeve","product":"lodepng","kev":false,"epss":0.00187},{"id":"CVE-2026-112019","published":"2026-10-18T11:38:39.224Z","updated":"2026-10-20T17:42:50.088Z","title":"cgltf through 1.15 Heap Out-of-Bounds Read via cgltf_accessor_unpack_floats()","severity":"MEDIUM","score":6.9,"vendor":"jkuhlmann","product":"cgltf","kev":false,"epss":0.00187},{"id":"CVE-2026-112018","published":"2026-10-18T11:38:38.538Z","updated":"2026-10-19T18:36:59.959Z","title":"cgltf through 1.15 Heap Out-of-Bounds Write via cgltf_accessor_unpack_floats()","severity":"HIGH","score":7.3,"vendor":"jkuhlmann","product":"cgltf","kev":false,"epss":0.00199},{"id":"CVE-2026-112017","published":"2026-10-18T11:38:37.829Z","updated":"2026-10-19T16:38:28.327Z","title":"JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass","severity":"HIGH","score":7.1,"vendor":"jeecgboot","product":"JeecgBoot","kev":false,"epss":0.00282},{"id":"CVE-2026-112016","published":"2026-10-18T11:38:37.119Z","updated":"2026-10-19T16:03:11.589Z","title":"Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00335},{"id":"CVE-2026-112015","published":"2026-10-18T11:38:36.085Z","updated":"2026-10-18T12:23:31.576Z","title":"Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd","severity":"HIGH","score":7.7,"vendor":"omnigent-ai","product":"omnigent","kev":false,"epss":0.00447},{"id":"CVE-2026-112014","published":"2026-10-18T11:38:35.397Z","updated":"2026-10-20T15:12:51.711Z","title":"LobsterAI before 2026.10.16 Hardcoded Password in Provider API Key Export","severity":"MEDIUM","score":6.8,"vendor":"netease-youdao","product":"LobsterAI","kev":false,"epss":0.00126},{"id":"CVE-2026-112013","published":"2026-10-18T11:38:34.718Z","updated":"2026-10-19T18:37:55.900Z","title":"libtta through 2.3 Divide by Zero via tta_decoder_init_get_info","severity":"MEDIUM","score":6.8,"vendor":"True Audio","product":"libtta","kev":false,"epss":0.0013},{"id":"CVE-2026-112012","published":"2026-10-18T11:38:34.029Z","updated":"2026-10-19T16:38:35.225Z","title":"libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count","severity":"MEDIUM","score":4.8,"vendor":"True Audio","product":"libtta","kev":false,"epss":0.00125},{"id":"CVE-2026-112011","published":"2026-10-18T11:38:33.369Z","updated":"2026-10-19T16:01:06.785Z","title":"libtta through 2.3 Integer Overflow via tta_decoder_init_get_info Seek Table","severity":"MEDIUM","score":5.8,"vendor":"True Audio","product":"libtta","kev":false,"epss":0.00137},{"id":"CVE-2026-112010","published":"2026-10-18T11:38:32.683Z","updated":"2026-10-18T12:23:31.721Z","title":"smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp","severity":"MEDIUM","score":6.8,"vendor":"icculus","product":"smpeg","kev":false,"epss":0.00128},{"id":"CVE-2026-112009","published":"2026-10-18T11:38:31.991Z","updated":"2026-10-18T12:23:31.861Z","title":"smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer","severity":"MEDIUM","score":6.8,"vendor":"icculus","product":"smpeg","kev":false,"epss":0.00128},{"id":"CVE-2026-112008","published":"2026-10-18T11:38:31.288Z","updated":"2026-10-19T19:04:44.302Z","title":"libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr","severity":"MEDIUM","score":6.9,"vendor":"libmng","product":"libmng","kev":false,"epss":0.00144},{"id":"CVE-2026-112007","published":"2026-10-18T11:38:30.590Z","updated":"2026-10-19T16:38:41.739Z","title":"Schism Tracker through 20260524 Heap Out-of-Bounds Write via ULT Loader","severity":"MEDIUM","score":6.9,"vendor":"schismtracker","product":"Schism Tracker","kev":false,"epss":0.00128},{"id":"CVE-2026-112006","published":"2026-10-18T11:38:29.855Z","updated":"2026-10-19T15:59:16.298Z","title":"OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation","severity":"HIGH","score":8.3,"vendor":"OpenTelemetry","product":"opentelemetry-exporter-otlp-proto-http","kev":false,"epss":0.00215},{"id":"CVE-2026-112005","published":"2026-10-18T11:38:29.173Z","updated":"2026-10-28T17:25:58.643Z","title":"WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor","severity":"CRITICAL","score":9.2,"vendor":"clidey","product":"whodb","kev":false,"epss":0.00691},{"id":"CVE-2026-112004","published":"2026-10-18T11:38:28.495Z","updated":"2026-10-20T15:09:09.557Z","title":"Teable before 2026-10-12T12-45-53Z.3331 Authorization Bypass via Folder Rename Endpoint","severity":"LOW","score":2.3,"vendor":"teableio","product":"teable","kev":false,"epss":0.0031},{"id":"CVE-2026-112003","published":"2026-10-18T11:38:27.804Z","updated":"2026-10-19T18:41:57.810Z","title":"ProjectSend 2.0.0 before 2.7.0 Path Validation Bypass via Orphan File Import/Delete","severity":"MEDIUM","score":6,"vendor":"ProjectSend","product":"ProjectSend","kev":false,"epss":0.00432},{"id":"CVE-2026-112002","published":"2026-10-18T11:38:27.111Z","updated":"2026-10-19T16:38:48.998Z","title":"ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password","severity":"HIGH","score":7.6,"vendor":"ProjectSend","product":"ProjectSend","kev":false,"epss":0.0029},{"id":"CVE-2026-112001","published":"2026-10-18T11:38:26.451Z","updated":"2026-10-19T15:55:45.461Z","title":"ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities","severity":"HIGH","score":8.6,"vendor":"ProjectSend","product":"ProjectSend","kev":false,"epss":0.00617},{"id":"CVE-2026-112000","published":"2026-10-18T11:38:25.755Z","updated":"2026-10-22T02:13:24.964Z","title":"Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs","severity":"HIGH","score":7.2,"vendor":"vanus-labs","product":"vanus","kev":false,"epss":0.00289},{"id":"CVE-2026-111999","published":"2026-10-18T11:38:25.071Z","updated":"2026-10-20T15:03:48.645Z","title":"Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver","severity":"HIGH","score":8.7,"vendor":"vanus-labs","product":"vanus","kev":false,"epss":0.00532},{"id":"CVE-2026-111998","published":"2026-10-18T11:38:24.388Z","updated":"2026-10-19T18:43:52.466Z","title":"Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway","severity":"CRITICAL","score":9.3,"vendor":"vanus-labs","product":"vanus","kev":false,"epss":0.00688},{"id":"CVE-2026-78497","published":"2026-10-18T11:32:05.853Z","updated":"2026-10-20T18:22:12.298Z","title":"JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval","severity":"HIGH","score":8.4,"vendor":null,"product":"JQ-Lite","kev":false,"epss":0.00196},{"id":"CVE-2026-110895","published":"2026-10-18T11:00:30.914Z","updated":"2026-10-18T11:42:55.685Z","title":"WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"DevItems","product":"Support Genix","kev":false,"epss":0.00253},{"id":"CVE-2026-107436","published":"2026-10-18T11:00:30.528Z","updated":"2026-10-19T18:44:42.166Z","title":"WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.00437},{"id":"CVE-2026-110373","published":"2026-10-18T11:00:30.495Z","updated":"2026-10-19T18:56:33.875Z","title":"WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability","severity":"HIGH","score":8.1,"vendor":"Hamid Alinia","product":"Login with phone number","kev":false,"epss":0.00335},{"id":"CVE-2026-110880","published":"2026-10-18T11:00:30.027Z","updated":"2026-10-19T18:57:25.484Z","title":"WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kit","product":"Kit (formerly ConvertKit)","kev":false,"epss":0.00239},{"id":"CVE-2026-110886","published":"2026-10-18T11:00:30.021Z","updated":"2026-10-19T15:53:23.555Z","title":"WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"QuantumCloud","product":"Conversational Forms for ChatBot","kev":false,"epss":0.00304},{"id":"CVE-2026-109895","published":"2026-10-18T11:00:29.573Z","updated":"2026-10-18T11:42:55.835Z","title":"WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00175},{"id":"CVE-2026-109894","published":"2026-10-18T11:00:29.562Z","updated":"2026-10-19T15:51:39.092Z","title":"WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00229},{"id":"CVE-2026-110883","published":"2026-10-18T11:00:29.126Z","updated":"2026-10-19T19:00:19.026Z","title":"WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability","severity":"MEDIUM","score":6.5,"vendor":"VideoWhisper.com","product":"2Way VideoCalls and Random Chat","kev":false,"epss":0.00301},{"id":"CVE-2026-110383","published":"2026-10-18T11:00:29.114Z","updated":"2026-10-18T11:42:55.982Z","title":"WordPress Electronic Signature Add-on for Fluent Forms plugin <= 2.0.5 - Insecure Direct Object References (IDOR) vulnerability","severity":"HIGH","score":7.5,"vendor":"WP E-Signature","product":"Electronic Signature Add-on for Fluent Forms","kev":false,"epss":0.00295},{"id":"CVE-2026-110897","published":"2026-10-18T11:00:28.706Z","updated":"2026-10-19T15:48:00.679Z","title":"WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"IdeaBox Creations","product":"PowerPack Lite for Beaver Builder","kev":false,"epss":0.00175},{"id":"CVE-2026-110372","published":"2026-10-18T11:00:28.694Z","updated":"2026-10-19T19:01:11.342Z","title":"WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Brainstorm Force","product":"OttoKit","kev":false,"epss":0.01365},{"id":"CVE-2026-110382","published":"2026-10-18T11:00:28.191Z","updated":"2026-10-19T15:45:31.217Z","title":"WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NSquared","product":"Simply Schedule Appointments","kev":false,"epss":0.00175},{"id":"CVE-2026-108485","published":"2026-10-18T11:00:28.148Z","updated":"2026-10-19T15:42:56.281Z","title":"WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ThemeGrill","product":"eStore","kev":false,"epss":0.00175},{"id":"CVE-2026-110885","published":"2026-10-18T11:00:22.694Z","updated":"2026-10-19T19:03:21.300Z","title":"WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability","severity":"MEDIUM","score":6.5,"vendor":"HivePress","product":"HivePress","kev":false,"epss":0.00333},{"id":"CVE-2026-110365","published":"2026-10-18T11:00:22.685Z","updated":"2026-10-19T19:03:53.371Z","title":"WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPExperts","product":"Advanced File Manager","kev":false,"epss":0.00307},{"id":"CVE-2026-111942","published":"2026-10-18T06:15:07.764Z","updated":"2026-10-19T15:38:22.610Z","title":"hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"hrisikeshpal","product":"Blood_Bank_Management_System","kev":false,"epss":0.00278},{"id":"CVE-2026-96534","published":"2026-10-18T06:00:17.293Z","updated":"2026-10-18T11:12:29.701Z","title":"Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export","severity":"HIGH","score":7.7,"vendor":"Unknown","product":"Modern Events Calendar Lite","kev":false,"epss":0.00213},{"id":"CVE-2026-111041","published":"2026-10-18T06:00:16.875Z","updated":"2026-10-18T11:12:29.843Z","title":"AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"AI Engine","kev":false,"epss":0.00197},{"id":"CVE-2026-110981","published":"2026-10-18T06:00:16.701Z","updated":"2026-10-18T11:12:29.980Z","title":"WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"WP Photo Album Plus","kev":false,"epss":0.00164},{"id":"CVE-2026-110976","published":"2026-10-18T06:00:16.527Z","updated":"2026-10-18T11:12:30.129Z","title":"AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"AI Engine","kev":false,"epss":0.00193},{"id":"CVE-2026-110070","published":"2026-10-18T06:00:16.343Z","updated":"2026-10-18T11:12:30.273Z","title":"Modern Events Calendar Lite < 7.36.4 - Subscriber+ Arbitrary Post Modification via IDOR","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Modern Events Calendar Lite","kev":false,"epss":0.00174},{"id":"CVE-2026-110069","published":"2026-10-18T06:00:16.169Z","updated":"2026-10-18T11:12:30.423Z","title":"Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Modern Events Calendar Lite","kev":false,"epss":0.00176},{"id":"CVE-2026-110035","published":"2026-10-18T06:00:15.992Z","updated":"2026-10-18T11:12:30.568Z","title":"Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Route","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00162},{"id":"CVE-2026-110033","published":"2026-10-18T06:00:15.557Z","updated":"2026-10-18T11:12:30.710Z","title":"Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00229},{"id":"CVE-2026-110032","published":"2026-10-18T06:00:15.382Z","updated":"2026-10-18T11:12:30.848Z","title":"Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editor","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00215},{"id":"CVE-2026-110031","published":"2026-10-18T06:00:15.210Z","updated":"2026-10-18T11:12:30.988Z","title":"Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00249},{"id":"CVE-2026-110026","published":"2026-10-18T06:00:15.022Z","updated":"2026-10-18T11:12:31.150Z","title":"Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Tasty Recipes Lite","kev":false,"epss":0.00193},{"id":"CVE-2026-109937","published":"2026-10-18T06:00:14.838Z","updated":"2026-10-18T11:12:31.318Z","title":"Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00146},{"id":"CVE-2026-87844","published":"2026-10-18T06:00:14.663Z","updated":"2026-10-18T11:12:31.478Z","title":"Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PickPlugins Product Designer for WooCommerce","kev":false,"epss":0.00185},{"id":"CVE-2026-111877","published":"2026-10-18T06:00:13.648Z","updated":"2026-10-22T02:11:35.863Z","title":"dext34-morgan Books4Cash search.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"dext34-morgan","product":"Books4Cash","kev":false,"epss":0.00269},{"id":"CVE-2026-111876","published":"2026-10-18T05:45:17.843Z","updated":"2026-10-19T19:05:34.026Z","title":"alexpasmantier television entry.rs output command injection","severity":"MEDIUM","score":4.8,"vendor":"alexpasmantier","product":"television","kev":false,"epss":0.00918},{"id":"CVE-2026-111875","published":"2026-10-18T05:30:17.829Z","updated":"2026-10-19T16:38:55.279Z","title":"David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization","severity":"MEDIUM","score":5.1,"vendor":"David-Crty","product":"Databasement","kev":false,"epss":0.00227},{"id":"CVE-2026-111874","published":"2026-10-18T05:15:11.452Z","updated":"2026-10-19T15:31:33.050Z","title":"OpenCATS Career Portal CareersUI.php processLogin excessive authentication","severity":"MEDIUM","score":6.3,"vendor":null,"product":"OpenCATS","kev":false,"epss":0.00484},{"id":"CVE-2026-111873","published":"2026-10-18T04:15:14.564Z","updated":"2026-10-22T02:11:00.662Z","title":"itsmeravitejak Online-Examination-System AJAX Endpoint exammanger.php topicslist sql injection","severity":"MEDIUM","score":6.9,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00263},{"id":"CVE-2026-111872","published":"2026-10-18T04:00:19.161Z","updated":"2026-10-19T21:31:31.442Z","title":"itsmeravitejak Online-Examination-System database.php getreport sql injection","severity":"MEDIUM","score":6.9,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00329},{"id":"CVE-2026-111871","published":"2026-10-18T03:45:17.829Z","updated":"2026-10-19T16:39:04.791Z","title":"itsmeravitejak Online-Examination-System subjectsdb.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00263},{"id":"CVE-2026-111870","published":"2026-10-18T03:30:21.418Z","updated":"2026-10-19T15:24:11.923Z","title":"itsmeravitejak Online-Examination-System admin.php isAdmin missing authentication","severity":"MEDIUM","score":6.9,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00429},{"id":"CVE-2026-111869","published":"2026-10-18T02:45:15.572Z","updated":"2026-10-22T02:09:55.748Z","title":"makeplane API Endpoint reliance on untrusted inputs in a security decision","severity":"MEDIUM","score":6.9,"vendor":"makeplane","product":"plane","kev":false,"epss":0.00526},{"id":"CVE-2026-111868","published":"2026-10-18T00:15:17.334Z","updated":"2026-10-19T21:32:00.800Z","title":"datastax pulsar-jms PulsarObjectMessage.java decode deserialization","severity":"MEDIUM","score":5.3,"vendor":"datastax","product":"pulsar-jms","kev":false,"epss":0.00247},{"id":"CVE-2026-111997","published":"2026-10-18T00:07:21.112Z","updated":"2026-10-18T11:12:55.202Z","title":"ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching…","severity":"MEDIUM","score":6.3,"vendor":"beaugunderson","product":"ip-address","kev":false,"epss":0.00315},{"id":"CVE-2026-111866","published":"2026-10-17T23:45:21.536Z","updated":"2026-10-19T16:39:11.372Z","title":"nemoTyrant manong func.php arr2sql sql injection","severity":"MEDIUM","score":6.9,"vendor":"nemoTyrant","product":"manong","kev":false,"epss":0.00254},{"id":"CVE-2026-111865","published":"2026-10-17T20:45:12.470Z","updated":"2026-10-19T15:04:22.292Z","title":"THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection","severity":"MEDIUM","score":4.8,"vendor":"THU-MIG","product":"yoloe","kev":false,"epss":0.00123},{"id":"CVE-2026-110882","published":"2026-10-17T19:00:11.325Z","updated":"2026-10-18T11:22:45.458Z","title":"WordPress SMS Alert Order Notifications plugin <= 4.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Cozy Vision Technologies Pvt. Ltd.","product":"SMS Alert Order Notifications","kev":false,"epss":0.00185},{"id":"CVE-2026-111934","published":"2026-10-17T18:46:44.142Z","updated":"2026-10-19T16:39:17.593Z","title":"Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header","severity":"MEDIUM","score":6.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00123},{"id":"CVE-2026-111933","published":"2026-10-17T18:46:43.456Z","updated":"2026-10-19T15:12:57.230Z","title":"Coder before 2.34.2 User Enumeration via Login Placeholder Hash","severity":"MEDIUM","score":6.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00225},{"id":"CVE-2026-111932","published":"2026-10-17T18:46:42.757Z","updated":"2026-10-22T02:08:49.284Z","title":"Coder before 2.34.2 Stored HTML Injection via Appearance Settings","severity":"MEDIUM","score":4.8,"vendor":"coder","product":"coder","kev":false,"epss":0.00167},{"id":"CVE-2026-111931","published":"2026-10-17T18:46:42.064Z","updated":"2026-10-18T11:42:56.130Z","title":"Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy","severity":"MEDIUM","score":5.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00165},{"id":"CVE-2026-111930","published":"2026-10-17T18:46:41.399Z","updated":"2026-10-19T21:32:31.858Z","title":"Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint","severity":"MEDIUM","score":5.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00187},{"id":"CVE-2026-111929","published":"2026-10-17T18:46:40.707Z","updated":"2026-10-19T16:39:24.356Z","title":"Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC","severity":"MEDIUM","score":6,"vendor":"coder","product":"coder","kev":false,"epss":0.00199},{"id":"CVE-2026-111928","published":"2026-10-17T18:46:40.029Z","updated":"2026-10-19T15:03:05.568Z","title":"Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policy","severity":"MEDIUM","score":5.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00143},{"id":"CVE-2026-111927","published":"2026-10-17T18:46:39.347Z","updated":"2026-10-21T21:45:39.027Z","title":"Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match","severity":"HIGH","score":8.7,"vendor":"coder","product":"coder","kev":false,"epss":0.00205},{"id":"CVE-2026-111926","published":"2026-10-17T18:46:38.631Z","updated":"2026-10-18T11:42:56.278Z","title":"Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest","severity":"MEDIUM","score":4.8,"vendor":"coder","product":"coder","kev":false,"epss":0.00102},{"id":"CVE-2026-111924","published":"2026-10-17T18:46:37.369Z","updated":"2026-10-19T21:35:14.859Z","title":"Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression","severity":"HIGH","score":8.7,"vendor":"fleetdm","product":"fleet","kev":false,"epss":0.00359},{"id":"CVE-2026-111923","published":"2026-10-17T18:46:36.681Z","updated":"2026-10-19T16:39:31.301Z","title":"Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing","severity":"HIGH","score":8.7,"vendor":"fleetdm","product":"fleet","kev":false,"epss":0.00359},{"id":"CVE-2026-111922","published":"2026-10-17T18:46:35.991Z","updated":"2026-10-19T15:00:44.366Z","title":"Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins","severity":"HIGH","score":7.2,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.0015},{"id":"CVE-2026-111921","published":"2026-10-17T18:46:35.329Z","updated":"2026-10-21T21:44:01.251Z","title":"Vikunja 0.13.0 before 2.7.0 Incorrect Authorization in Link Share Deletion","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00213},{"id":"CVE-2026-111920","published":"2026-10-17T18:46:34.636Z","updated":"2026-10-18T11:17:27.926Z","title":"Vikunja 2.6.0 Broken Access Control via Inherited Project Permissions","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00191},{"id":"CVE-2026-111919","published":"2026-10-17T18:46:33.951Z","updated":"2026-10-19T21:34:42.072Z","title":"Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00355},{"id":"CVE-2026-111918","published":"2026-10-17T18:46:33.245Z","updated":"2026-10-19T16:39:37.953Z","title":"Vikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Position Writes via Saved Filter Creation","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00176},{"id":"CVE-2026-111917","published":"2026-10-17T18:46:32.545Z","updated":"2026-10-19T14:59:06.808Z","title":"Vikunja 2.3.0 before 2.7.0 WebSocket Authentication Ignores Session Revocation","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00355},{"id":"CVE-2026-111916","published":"2026-10-17T18:46:31.787Z","updated":"2026-10-21T21:43:01.660Z","title":"Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed","severity":"MEDIUM","score":6.9,"vendor":"Admidio","product":"admidio","kev":false,"epss":0.00349},{"id":"CVE-2026-111914","published":"2026-10-17T18:46:31.095Z","updated":"2026-10-18T11:18:13.498Z","title":"Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php","severity":"HIGH","score":7.1,"vendor":"Admidio","product":"admidio","kev":false,"epss":0.00311},{"id":"CVE-2026-111913","published":"2026-10-17T18:46:30.372Z","updated":"2026-10-19T21:33:52.436Z","title":"Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php","severity":"MEDIUM","score":5.3,"vendor":"Admidio","product":"admidio","kev":false,"epss":0.00228},{"id":"CVE-2026-111912","published":"2026-10-17T18:46:29.658Z","updated":"2026-10-19T16:39:44.005Z","title":"Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update","severity":"HIGH","score":7.1,"vendor":"Admidio","product":"admidio","kev":false,"epss":0.00219},{"id":"CVE-2026-111911","published":"2026-10-17T18:46:28.833Z","updated":"2026-10-19T14:54:32.100Z","title":"phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection","severity":"CRITICAL","score":9.3,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00533},{"id":"CVE-2026-111910","published":"2026-10-17T18:46:28.155Z","updated":"2026-10-21T21:41:44.258Z","title":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloads","severity":"HIGH","score":7.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.0028},{"id":"CVE-2026-111909","published":"2026-10-17T18:46:27.466Z","updated":"2026-10-18T11:42:56.427Z","title":"phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API","severity":"HIGH","score":7.2,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00275},{"id":"CVE-2026-111908","published":"2026-10-17T18:46:26.780Z","updated":"2026-10-19T21:33:12.329Z","title":"phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API","severity":"HIGH","score":8.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00369},{"id":"CVE-2026-111907","published":"2026-10-17T18:46:26.117Z","updated":"2026-10-19T16:39:51.053Z","title":"phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database","severity":"HIGH","score":7.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00115},{"id":"CVE-2026-111906","published":"2026-10-17T18:46:25.460Z","updated":"2026-10-19T14:52:20.126Z","title":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations","severity":"HIGH","score":7.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00153},{"id":"CVE-2026-111905","published":"2026-10-17T18:46:24.781Z","updated":"2026-10-21T21:40:10.782Z","title":"phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/data","severity":"HIGH","score":7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00413},{"id":"CVE-2026-111904","published":"2026-10-17T18:46:24.116Z","updated":"2026-10-18T11:19:42.277Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions API","severity":"MEDIUM","score":6.9,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00337},{"id":"CVE-2026-111903","published":"2026-10-17T18:46:23.442Z","updated":"2026-10-19T21:30:45.472Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG DTD Entity Bypass","severity":"MEDIUM","score":5.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00223},{"id":"CVE-2026-111902","published":"2026-10-17T18:46:22.764Z","updated":"2026-10-19T16:39:57.712Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API","severity":"MEDIUM","score":6.9,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00265},{"id":"CVE-2026-111901","published":"2026-10-17T18:46:22.075Z","updated":"2026-10-19T14:50:09.039Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination","severity":"HIGH","score":8.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00415},{"id":"CVE-2026-111900","published":"2026-10-17T18:46:21.382Z","updated":"2026-10-21T21:39:13.659Z","title":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.php","severity":"MEDIUM","score":5.3,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00256},{"id":"CVE-2026-111898","published":"2026-10-17T18:46:20.655Z","updated":"2026-10-18T11:21:21.852Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account Linking","severity":"HIGH","score":7.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00435},{"id":"CVE-2026-111897","published":"2026-10-17T18:46:19.963Z","updated":"2026-10-19T21:29:59.961Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints","severity":"HIGH","score":7.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00329},{"id":"CVE-2026-111896","published":"2026-10-17T18:46:19.253Z","updated":"2026-10-19T16:40:09.249Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG Upload Sanitizer Bypass","severity":"MEDIUM","score":5.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00168},{"id":"CVE-2026-111895","published":"2026-10-17T18:46:18.581Z","updated":"2026-10-19T14:46:24.561Z","title":"phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username","severity":"HIGH","score":7.6,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00371},{"id":"CVE-2026-111894","published":"2026-10-17T18:46:17.887Z","updated":"2026-10-21T21:36:08.684Z","title":"phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Stored XSS via iframe data: URI","severity":"MEDIUM","score":5.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00223},{"id":"CVE-2026-111893","published":"2026-10-17T18:46:17.171Z","updated":"2026-10-18T11:20:40.712Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API","severity":"HIGH","score":8.5,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.0036},{"id":"CVE-2026-111892","published":"2026-10-17T18:46:15.921Z","updated":"2026-10-19T21:36:11.201Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Rate Limiting on Password-Reset Endpoints","severity":"MEDIUM","score":6.9,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00328},{"id":"CVE-2026-111891","published":"2026-10-17T18:46:15.227Z","updated":"2026-10-19T16:40:19.217Z","title":"phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API","severity":"HIGH","score":7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00226},{"id":"CVE-2026-111890","published":"2026-10-17T18:46:14.542Z","updated":"2026-10-19T14:43:14.146Z","title":"phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights","severity":"HIGH","score":7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00283},{"id":"CVE-2026-111889","published":"2026-10-17T18:46:13.883Z","updated":"2026-10-18T13:26:41.571Z","title":"phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard","severity":"MEDIUM","score":5.3,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00256},{"id":"CVE-2026-111888","published":"2026-10-17T18:46:13.202Z","updated":"2026-10-18T11:21:59.896Z","title":"phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API","severity":"MEDIUM","score":5.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00257},{"id":"CVE-2026-111887","published":"2026-10-17T18:46:12.494Z","updated":"2026-10-18T13:26:01.243Z","title":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint","severity":"MEDIUM","score":6.9,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00337},{"id":"CVE-2026-111886","published":"2026-10-17T18:46:11.821Z","updated":"2026-10-18T13:25:20.125Z","title":"phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpoint","severity":"HIGH","score":7.1,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00273},{"id":"CVE-2026-111885","published":"2026-10-17T18:46:11.116Z","updated":"2026-10-18T13:24:35.633Z","title":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API","severity":"HIGH","score":7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.0032},{"id":"CVE-2026-111884","published":"2026-10-17T18:46:10.426Z","updated":"2026-10-18T12:18:30.268Z","title":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover","severity":"HIGH","score":8.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00348},{"id":"CVE-2026-111882","published":"2026-10-17T18:46:09.750Z","updated":"2026-10-18T12:23:32.006Z","title":"phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks","severity":"HIGH","score":8.6,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00387},{"id":"CVE-2026-111881","published":"2026-10-17T18:46:09.069Z","updated":"2026-10-19T21:29:11.944Z","title":"FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard","severity":"HIGH","score":7.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00245},{"id":"CVE-2026-111880","published":"2026-10-17T18:46:08.393Z","updated":"2026-10-19T16:40:26.597Z","title":"FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset","severity":"HIGH","score":8.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00321},{"id":"CVE-2025-71435","published":"2026-10-17T18:46:07.735Z","updated":"2026-10-19T14:40:10.199Z","title":"Coder before 2.23.0 Session Expiration Bypass via OIDC Without Refresh Token","severity":"LOW","score":2.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00175},{"id":"CVE-2024-58398","published":"2026-10-17T18:46:07.073Z","updated":"2026-10-21T21:34:59.156Z","title":"Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter","severity":"MEDIUM","score":5.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00268},{"id":"CVE-2026-109701","published":"2026-10-17T17:00:45.175Z","updated":"2026-10-18T11:22:45.594Z","title":"WordPress PAYCOMET for WooCommerce plugin <= 5.45 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"PAYCOMET","product":"PAYCOMET for WooCommerce","kev":false,"epss":0.00184},{"id":"CVE-2026-110889","published":"2026-10-17T11:00:12.190Z","updated":"2026-10-18T11:22:45.735Z","title":"WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Gantry","product":"Gantry 5 Framework","kev":false,"epss":0.00332},{"id":"CVE-2026-110253","published":"2026-10-17T07:51:25.761Z","updated":"2026-10-18T11:22:45.876Z","title":"weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter","severity":"MEDIUM","score":5.4,"vendor":"boldgrid","product":"weForms – Easy Drag & Drop Contact Form Builder For WordPress","kev":false,"epss":0.00279},{"id":"CVE-2026-100316","published":"2026-10-17T07:51:25.399Z","updated":"2026-10-18T11:12:33.487Z","title":"European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header","severity":"HIGH","score":7.2,"vendor":"davidanderson","product":"European VAT Compliance Assistant for WooCommerce","kev":false,"epss":0.00272},{"id":"CVE-2026-109983","published":"2026-10-17T07:51:25.038Z","updated":"2026-10-18T11:12:33.640Z","title":"YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wssoffice21","product":"YMC Filter","kev":false,"epss":0.00215},{"id":"CVE-2026-111110","published":"2026-10-17T07:51:24.536Z","updated":"2026-10-18T11:12:33.793Z","title":"Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter","severity":"HIGH","score":7.2,"vendor":"stiofansisland","product":"Payment forms, Buy now buttons, and Invoicing System | GetPaid","kev":false,"epss":0.00278},{"id":"CVE-2026-110384","published":"2026-10-17T07:00:31.036Z","updated":"2026-10-18T11:22:46.019Z","title":"WordPress Fancy Comments WordPress plugin <= 1.2.21 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Heateor Support","product":"Fancy Comments WordPress","kev":false,"epss":0.00188},{"id":"CVE-2026-97314","published":"2026-10-17T06:00:15.251Z","updated":"2026-10-18T11:12:31.635Z","title":"ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"ThirstyAffiliates","kev":false,"epss":0.00179},{"id":"CVE-2026-81344","published":"2026-10-17T06:00:14.995Z","updated":"2026-10-18T11:12:31.792Z","title":"Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection","severity":"MEDIUM","score":6.6,"vendor":"Unknown","product":"ACF Frontend Admin by DynamiApps","kev":false,"epss":0.0034},{"id":"CVE-2026-81343","published":"2026-10-17T06:00:14.821Z","updated":"2026-10-18T11:12:31.936Z","title":"Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"ACF Frontend Admin by DynamiApps","kev":false,"epss":0.00171},{"id":"CVE-2026-110527","published":"2026-10-17T06:00:14.648Z","updated":"2026-10-18T11:12:32.083Z","title":"WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP User Manager","kev":false,"epss":0.00182},{"id":"CVE-2026-106470","published":"2026-10-17T06:00:13.602Z","updated":"2026-10-18T11:12:32.232Z","title":"WP Data Access < 5.5.88 - Subscriber+ SSRF","severity":"MEDIUM","score":5,"vendor":"Unknown","product":"WP Data Access","kev":false,"epss":0.00107},{"id":"CVE-2026-103376","published":"2026-10-17T06:00:13.428Z","updated":"2026-10-18T11:12:32.398Z","title":"PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)","kev":false,"epss":0.00192},{"id":"CVE-2026-104122","published":"2026-10-17T06:00:13.250Z","updated":"2026-10-18T11:12:32.557Z","title":"Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Ukr-To-Lat","kev":false,"epss":0.00224},{"id":"CVE-2026-92432","published":"2026-10-17T06:00:13.073Z","updated":"2026-10-18T11:12:32.731Z","title":"Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Patreon WordPress","kev":false,"epss":0.00164},{"id":"CVE-2026-92431","published":"2026-10-17T06:00:12.898Z","updated":"2026-10-18T11:12:32.885Z","title":"Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Patreon WordPress","kev":false,"epss":0.0017},{"id":"CVE-2026-92433","published":"2026-10-17T06:00:12.725Z","updated":"2026-10-18T11:12:33.034Z","title":"Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Patreon WordPress","kev":false,"epss":0.00136},{"id":"CVE-2026-104246","published":"2026-10-17T06:00:12.551Z","updated":"2026-10-18T11:12:33.183Z","title":"Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments","severity":"MEDIUM","score":5.9,"vendor":"Unknown","product":"Contact Form 7 Signature Addon","kev":false,"epss":0.0028},{"id":"CVE-2026-91074","published":"2026-10-17T06:00:12.377Z","updated":"2026-10-18T11:12:33.337Z","title":"BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"BSK PDF Manager","kev":false,"epss":0.00224},{"id":"CVE-2026-92798","published":"2026-10-17T03:43:31.068Z","updated":"2026-10-18T11:22:46.165Z","title":"User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag","severity":"HIGH","score":8.1,"vendor":"wpeverest","product":"User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder","kev":false,"epss":0.00369},{"id":"CVE-2026-103899","published":"2026-10-17T03:43:30.740Z","updated":"2026-10-18T11:12:33.948Z","title":"EU VAT Assistant for WooCommerce <= 2.1.30.260413 - Unauthenticated Stored Cross-Site Scripting via 'vat_number' Parameter","severity":"HIGH","score":7.2,"vendor":"daigo75","product":"EU VAT Assistant for WooCommerce","kev":false,"epss":0.00241},{"id":"CVE-2026-109989","published":"2026-10-17T03:43:30.393Z","updated":"2026-10-18T11:12:34.106Z","title":"Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter","severity":"MEDIUM","score":6.4,"vendor":"themifyme","product":"Themify Popup","kev":false,"epss":0.00188},{"id":"CVE-2026-107744","published":"2026-10-17T03:43:30.064Z","updated":"2026-10-18T11:22:46.337Z","title":"LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action","severity":"MEDIUM","score":6.5,"vendor":"thimpress","product":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses","kev":false,"epss":0.00243},{"id":"CVE-2026-111726","published":"2026-10-17T03:43:29.731Z","updated":"2026-10-18T11:12:34.477Z","title":"Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"themifyme","product":"Themify Builder","kev":false,"epss":0.00188},{"id":"CVE-2026-108123","published":"2026-10-17T03:43:29.401Z","updated":"2026-10-18T11:22:46.479Z","title":"WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action","severity":"HIGH","score":7.5,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.01024},{"id":"CVE-2026-92978","published":"2026-10-17T03:43:29.067Z","updated":"2026-10-18T11:22:46.625Z","title":"User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()","severity":"MEDIUM","score":4.3,"vendor":"wpeverest","product":"User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder","kev":false,"epss":0.00154},{"id":"CVE-2026-109369","published":"2026-10-17T03:43:28.717Z","updated":"2026-10-18T11:22:46.780Z","title":"WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce Reuse","severity":"MEDIUM","score":6.8,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.00247},{"id":"CVE-2026-96660","published":"2026-10-17T03:43:28.389Z","updated":"2026-10-18T11:12:34.629Z","title":"User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value","severity":"HIGH","score":7.2,"vendor":"wpeverest","product":"User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder","kev":false,"epss":0.0023},{"id":"CVE-2026-104736","published":"2026-10-17T03:43:28.046Z","updated":"2026-10-18T11:22:46.937Z","title":"LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter","severity":"CRITICAL","score":9.8,"vendor":"thimpress","product":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses","kev":false,"epss":0.02524},{"id":"CVE-2026-109368","published":"2026-10-17T03:43:27.683Z","updated":"2026-10-18T11:22:47.086Z","title":"WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action","severity":"MEDIUM","score":6.5,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.00256},{"id":"CVE-2026-92715","published":"2026-10-17T03:43:27.343Z","updated":"2026-10-18T11:22:47.245Z","title":"Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' Parameter","severity":"MEDIUM","score":4.3,"vendor":"themeum","product":"Tutor LMS – eLearning and online course solution","kev":false,"epss":0.00204},{"id":"CVE-2026-107752","published":"2026-10-17T03:43:27.014Z","updated":"2026-10-18T11:22:47.396Z","title":"Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie","severity":"MEDIUM","score":4.9,"vendor":"uscnanbu","product":"Welcart e-Commerce","kev":false,"epss":0.00301},{"id":"CVE-2026-109985","published":"2026-10-17T03:43:26.663Z","updated":"2026-10-18T11:12:34.780Z","title":"xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN","kev":false,"epss":0.00195},{"id":"CVE-2026-110268","published":"2026-10-17T03:43:26.196Z","updated":"2026-10-18T11:22:47.553Z","title":"Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter","severity":"MEDIUM","score":4.9,"vendor":"wpazleen","product":"Post Export Import with Media","kev":false,"epss":0.00766},{"id":"CVE-2026-111602","published":"2026-10-17T02:31:07.048Z","updated":"2026-10-18T11:22:47.696Z","title":"Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameter","severity":"LOW","score":3.7,"vendor":"latepoint","product":"Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress","kev":false,"epss":0.00289},{"id":"CVE-2026-110653","published":"2026-10-17T02:31:06.697Z","updated":"2026-10-18T11:22:47.841Z","title":"Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter","severity":"CRITICAL","score":9.1,"vendor":"latepoint","product":"Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress","kev":false,"epss":0.00403},{"id":"CVE-2026-109208","published":"2026-10-17T02:31:06.356Z","updated":"2026-10-18T11:12:34.936Z","title":"LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters","severity":"HIGH","score":7.2,"vendor":"thimpress","product":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses","kev":false,"epss":0.00285},{"id":"CVE-2026-111601","published":"2026-10-17T02:31:06.019Z","updated":"2026-10-18T11:12:35.093Z","title":"Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' Parameter","severity":"MEDIUM","score":6.1,"vendor":"hippooo","product":"Hippoo Mobile App for WooCommerce","kev":false,"epss":0.00226},{"id":"CVE-2026-104734","published":"2026-10-17T02:31:05.687Z","updated":"2026-10-18T11:22:47.982Z","title":"Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Object Injection via Deserialization of Untrusted Input via ZIP Template Import","severity":"HIGH","score":7.2,"vendor":"themeum","product":"Kirki – Freeform Page Builder, Website Builder & Customizer","kev":false,"epss":0.00452},{"id":"CVE-2026-107762","published":"2026-10-17T02:31:05.352Z","updated":"2026-10-18T11:22:48.151Z","title":"Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' Parameter","severity":"HIGH","score":7.5,"vendor":"themeum","product":"Kirki – Freeform Page Builder, Website Builder & Customizer","kev":false,"epss":0.00396},{"id":"CVE-2026-107763","published":"2026-10-17T02:31:04.849Z","updated":"2026-10-18T11:22:48.291Z","title":"Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update Hook","severity":"MEDIUM","score":4.3,"vendor":"hostspa","product":"Fastcache by Host.it","kev":false,"epss":0.00213},{"id":"CVE-2026-111855","published":"2026-10-17T02:09:21.352Z","updated":"2026-10-21T21:34:00.446Z","title":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device.…","severity":"HIGH","score":7.5,"vendor":"Tektronix","product":"3 Series MDO","kev":false,"epss":0.00608},{"id":"CVE-2026-111854","published":"2026-10-17T02:08:50.037Z","updated":"2026-10-19T21:27:31.886Z","title":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote…","severity":"HIGH","score":8.1,"vendor":"Tektronix","product":"3 Series MDO","kev":false,"epss":0.00476},{"id":"CVE-2026-111853","published":"2026-10-17T02:08:13.787Z","updated":"2026-10-19T18:41:55.891Z","title":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI…","severity":"HIGH","score":8.8,"vendor":"Tektronix","product":"3 Series MDO","kev":false,"epss":0.01034},{"id":"CVE-2026-111823","published":"2026-10-16T23:16:29.244Z","updated":"2026-10-19T14:37:19.362Z","title":"Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.","severity":"CRITICAL","score":9.8,"vendor":"Mage","product":"mage-ai","kev":false,"epss":0.00556},{"id":"CVE-2026-89096","published":"2026-10-16T23:06:19.924Z","updated":"2026-10-19T16:40:35.710Z","title":"Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd","severity":"MEDIUM","score":5.9,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.0031},{"id":"CVE-2026-89088","published":"2026-10-16T23:06:18.907Z","updated":"2026-10-19T15:04:58.470Z","title":"Parted: parted: denial of service via heap buffer overflow during fat16 resize","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00216},{"id":"CVE-2026-89085","published":"2026-10-16T23:04:28.673Z","updated":"2026-10-19T15:08:57.567Z","title":"Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image","severity":"MEDIUM","score":6.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00206},{"id":"CVE-2026-110759","published":"2026-10-16T22:08:23.781Z","updated":"2026-10-20T18:36:33.803Z","title":"Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00407},{"id":"CVE-2026-110758","published":"2026-10-16T22:08:10.917Z","updated":"2026-10-20T18:31:16.823Z","title":"Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace","severity":"HIGH","score":7.5,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00354},{"id":"CVE-2026-110757","published":"2026-10-16T22:07:56.450Z","updated":"2026-10-20T18:28:25.925Z","title":"Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00407},{"id":"CVE-2026-110756","published":"2026-10-16T22:07:37.437Z","updated":"2026-10-20T18:27:42.479Z","title":"Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00407},{"id":"CVE-2026-110755","published":"2026-10-16T22:07:10.643Z","updated":"2026-10-20T18:25:20.728Z","title":"Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline","severity":"HIGH","score":7.5,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00408},{"id":"CVE-2026-110754","published":"2026-10-16T22:06:46.839Z","updated":"2026-10-20T18:15:41.395Z","title":"Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00302},{"id":"CVE-2026-110753","published":"2026-10-16T22:06:23.680Z","updated":"2026-10-20T18:14:23.696Z","title":"Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00407},{"id":"CVE-2026-110752","published":"2026-10-16T22:06:03.622Z","updated":"2026-10-20T18:12:38.953Z","title":"Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment","severity":"HIGH","score":7.5,"vendor":null,"product":"Text-CSV_XS","kev":false,"epss":0.00408},{"id":"CVE-2026-111802","published":"2026-10-16T22:03:50.287Z","updated":"2026-11-01T03:49:46.578Z","title":"Nautilus: nautilus: arbitrary file deletion via trash symlink","severity":"MEDIUM","score":6.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00162},{"id":"CVE-2026-17591","published":"2026-10-16T22:03:40.603Z","updated":"2026-10-19T21:28:22.621Z","title":"Libarchive: libarchive: use-after-free via aliased mac metadata copy","severity":"LOW","score":3.6,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00154},{"id":"CVE-2026-111044","published":"2026-10-16T21:59:00.939Z","updated":"2026-10-28T15:32:53.402Z","title":"Disabled Sunshine clients can bypass revocation with a derived client certificate","severity":"HIGH","score":7.6,"vendor":"LizardByte","product":"Sunshine","kev":false,"epss":0.00158},{"id":"CVE-2026-62438","published":"2026-10-16T21:56:18.452Z","updated":"2026-10-19T16:40:42.906Z","title":"Gimp: gimp: paa integer overflow out-of-bounds read","severity":"MEDIUM","score":6.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00117},{"id":"CVE-2026-62439","published":"2026-10-16T21:54:49.538Z","updated":"2026-10-31T07:29:24.763Z","title":"Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability","severity":"HIGH","score":7,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00246},{"id":"CVE-2026-108372","published":"2026-10-16T21:29:13.757Z","updated":"2026-10-21T21:31:36.971Z","title":"LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files","severity":"HIGH","score":7.1,"vendor":"huangruiteng","product":"loopx","kev":false,"epss":0.00304},{"id":"CVE-2026-49410","published":"2026-10-16T21:25:02.030Z","updated":"2026-10-19T21:26:57.193Z","title":"OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation","severity":"HIGH","score":8.1,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00191},{"id":"CVE-2026-96627","published":"2026-10-16T21:13:16.717Z","updated":"2026-10-19T14:34:05.584Z","title":"Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)","severity":"HIGH","score":8.8,"vendor":"getarcaneapp","product":"arcane","kev":false,"epss":0.00368},{"id":"CVE-2026-68498","published":"2026-10-16T21:11:03.551Z","updated":"2026-10-20T18:08:01.960Z","title":"jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-core","kev":false,"epss":0.00652},{"id":"CVE-2026-96628","published":"2026-10-16T21:10:29.214Z","updated":"2026-10-19T16:40:50.253Z","title":"Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`","severity":"MEDIUM","score":4.3,"vendor":"getarcaneapp","product":"arcane","kev":false,"epss":0.00204},{"id":"CVE-2026-96626","published":"2026-10-16T21:07:39.570Z","updated":"2026-10-28T17:50:38.766Z","title":"Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host","severity":"HIGH","score":8.5,"vendor":"getarcaneapp","product":"arcane","kev":false,"epss":0.00216},{"id":"CVE-2026-96542","published":"2026-10-16T21:00:54.224Z","updated":"2026-10-19T14:31:10.432Z","title":"EA Javelin Anticheat Installer Local Privilege Escalation","severity":"MEDIUM","score":5,"vendor":"Electronic Arts","product":"EA Javelin Anticheat (EA Javelin Anticheat Installer)","kev":false,"epss":0.00083},{"id":"CVE-2026-64862","published":"2026-10-16T20:52:53.666Z","updated":"2026-10-19T16:40:58.253Z","title":"Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS","severity":"MEDIUM","score":6.5,"vendor":"frappe","product":"hrms","kev":false,"epss":0.00238},{"id":"CVE-2026-55796","published":"2026-10-16T20:50:01.927Z","updated":"2026-10-21T21:29:08.361Z","title":"Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report","severity":"MEDIUM","score":6.5,"vendor":"frappe","product":"hrms","kev":false,"epss":0.0026},{"id":"CVE-2026-108373","published":"2026-10-16T20:48:46.241Z","updated":"2026-10-19T21:26:03.462Z","title":"ERPNext: Unauthorised access to financial data due to missing validation","severity":"MEDIUM","score":6.5,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00238},{"id":"CVE-2026-108374","published":"2026-10-16T20:38:32.806Z","updated":"2026-10-19T14:29:00.708Z","title":"ERPNext: Unauthorised status modification due to missing validation","severity":"HIGH","score":7.7,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00241},{"id":"CVE-2026-102834","published":"2026-10-16T19:51:57.641Z","updated":"2026-10-28T17:53:35.339Z","title":"JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS","severity":"HIGH","score":7.5,"vendor":"bytedeco","product":"javacv","kev":false,"epss":0.00503},{"id":"CVE-2026-108743","published":"2026-10-16T19:44:37.833Z","updated":"2026-10-20T12:58:48.518Z","title":"Apache Kylin: spark job OS command injection","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.01387},{"id":"CVE-2026-96620","published":"2026-10-16T19:44:01.260Z","updated":"2026-10-21T21:28:24.631Z","title":"Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","severity":"CRITICAL","score":9.2,"vendor":"anthropics","product":"claude-agent-sdk-python","kev":false,"epss":0.00705},{"id":"CVE-2026-30971","published":"2026-10-16T19:40:51.681Z","updated":"2026-10-16T19:57:11.752Z","title":"ZoneMinder: Authenticated RCE via command injection in monitor Device Path","severity":"HIGH","score":8.8,"vendor":"ZoneMinder","product":"zoneminder","kev":false,"epss":0.01065},{"id":"CVE-2026-108709","published":"2026-10-16T19:38:21.601Z","updated":"2026-10-20T18:06:59.378Z","title":"Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00402},{"id":"CVE-2026-69080","published":"2026-10-16T19:37:50.174Z","updated":"2026-10-20T18:04:54.819Z","title":"Apache Kylin: Broken Access Control in QuerySQLBlacklistController","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00385},{"id":"CVE-2026-102608","published":"2026-10-16T19:35:36.862Z","updated":"2026-10-19T16:41:08.186Z","title":"ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)","severity":"CRITICAL","score":9,"vendor":"ZoneMinder","product":"zoneminder","kev":false,"epss":0.00287},{"id":"CVE-2026-69077","published":"2026-10-16T19:33:20.218Z","updated":"2026-10-20T18:03:35.109Z","title":"Apache Kylin: JobController allows unauthorized cross-project manipulation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00385},{"id":"CVE-2026-69076","published":"2026-10-16T19:32:39.538Z","updated":"2026-10-20T18:02:18.110Z","title":"Apache Kylin: Unauthorized cross-project job discard","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00385},{"id":"CVE-2026-68573","published":"2026-10-16T19:32:22.205Z","updated":"2026-10-20T17:59:10.444Z","title":"Apache Kylin: Unauthenticated Metastore Cleanup","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00496},{"id":"CVE-2026-68572","published":"2026-10-16T19:32:03.193Z","updated":"2026-10-20T17:50:19.415Z","title":"Apache Kylin: Unauthorized SQL execution to Spark SQL env","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00279},{"id":"CVE-2026-102607","published":"2026-10-16T19:29:58.131Z","updated":"2026-10-19T14:26:23.072Z","title":"ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature","severity":"HIGH","score":8.8,"vendor":"ZoneMinder","product":"zoneminder","kev":false,"epss":0.00447},{"id":"CVE-2026-59970","published":"2026-10-16T19:21:07.358Z","updated":"2026-10-21T21:26:53.503Z","title":"Tandoor Recipes: Blind SSRF via AI provider URL (api_base)","severity":"HIGH","score":7.7,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00311},{"id":"CVE-2026-61726","published":"2026-10-16T19:19:57.552Z","updated":"2026-10-28T18:00:30.729Z","title":"Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content","severity":"HIGH","score":8.1,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00293},{"id":"CVE-2026-59966","published":"2026-10-16T19:18:57.453Z","updated":"2026-10-16T19:40:13.402Z","title":"Tandoor Recipes: ReDoS (Regular Expression Denial of Service) via User-Controlled Automation Regex Patterns","severity":"MEDIUM","score":5.7,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00319},{"id":"CVE-2026-59963","published":"2026-10-16T19:17:25.148Z","updated":"2026-10-16T21:16:08.364Z","title":"Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpoints","severity":"HIGH","score":7.1,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00212},{"id":"CVE-2026-17068","published":"2026-10-16T18:39:45.465Z","updated":"2026-10-16T21:16:16.013Z","title":"IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"i","kev":false,"epss":0.00112},{"id":"CVE-2026-17073","published":"2026-10-16T18:39:33.190Z","updated":"2026-10-21T21:25:39.003Z","title":"IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"i","kev":false,"epss":0.00171},{"id":"CVE-2026-17275","published":"2026-10-16T18:39:21.610Z","updated":"2026-10-16T19:09:21.358Z","title":"IBM i is Affected by an Improper Validation Vulnerability","severity":"LOW","score":3.7,"vendor":"IBM","product":"i","kev":false,"epss":0.00189},{"id":"CVE-2026-17488","published":"2026-10-16T18:38:13.974Z","updated":"2026-10-19T14:53:56.464Z","title":"IBM i is Affected By An Improper Authentication Vulnerability in SST / DST","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"i","kev":false,"epss":0.0024},{"id":"CVE-2026-17491","published":"2026-10-16T18:38:02.880Z","updated":"2026-10-19T14:23:45.270Z","title":"IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"i","kev":false,"epss":0.00173},{"id":"CVE-2026-102917","published":"2026-10-16T18:37:54.693Z","updated":"2026-10-20T13:05:49.605Z","title":"IBM i is Affected By An Improper Privilege Management Vulnerability","severity":"HIGH","score":7.8,"vendor":"IBM","product":"i","kev":false,"epss":0.00133},{"id":"CVE-2026-111793","published":"2026-10-16T18:28:10.170Z","updated":"2026-10-19T15:27:38.728Z","title":"Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an…","severity":"MEDIUM","score":4.3,"vendor":"Openwave Messaging (Ireland) Limited","product":"Webtop Media Transcoder","kev":false,"epss":0.00241},{"id":"CVE-2026-85977","published":"2026-10-16T18:20:43.454Z","updated":"2026-10-19T14:21:52.857Z","title":"Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.0042},{"id":"CVE-2026-85231","published":"2026-10-16T18:20:40.761Z","updated":"2026-10-30T07:21:52.547Z","title":"Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00297},{"id":"CVE-2026-107674","published":"2026-10-16T18:00:59.693Z","updated":"2026-10-19T14:55:31.510Z","title":"IBM i is Affected by a Denial of Service in Digital Certificate Manager","severity":"MEDIUM","score":5.1,"vendor":"IBM","product":"i","kev":false,"epss":0.00058},{"id":"CVE-2026-109838","published":"2026-10-16T17:44:26.027Z","updated":"2026-10-16T19:11:28.518Z","title":"IBM Db2 Genius Hub Improper verification of cryptographic signature","severity":"MEDIUM","score":5.1,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00076},{"id":"CVE-2026-89098","published":"2026-10-16T17:43:21.720Z","updated":"2026-10-19T14:19:34.274Z","title":"Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00147},{"id":"CVE-2026-111723","published":"2026-10-16T17:40:09.757Z","updated":"2026-10-20T15:10:52.945Z","title":"LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API","severity":"HIGH","score":8.7,"vendor":"LingGuoAI","product":"LingGuo-Drama","kev":false,"epss":0.0036},{"id":"CVE-2026-111722","published":"2026-10-16T17:40:09.064Z","updated":"2026-10-16T18:17:12.430Z","title":"LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API","severity":"HIGH","score":8.6,"vendor":"LingGuoAI","product":"LingGuo-Drama","kev":false,"epss":0.00303},{"id":"CVE-2026-111721","published":"2026-10-16T17:40:08.350Z","updated":"2026-10-16T21:16:25.789Z","title":"Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping","severity":"MEDIUM","score":5.3,"vendor":"jingsewu","product":"open-wes","kev":false,"epss":0.00233},{"id":"CVE-2026-111720","published":"2026-10-16T17:40:07.659Z","updated":"2026-10-19T14:13:29.044Z","title":"fish-island-backend through commit 7c61b78 SSRF via /api/web/parse","severity":"MEDIUM","score":6.9,"vendor":"lhccong","product":"fish-island-backend","kev":false,"epss":0.00384},{"id":"CVE-2026-111719","published":"2026-10-16T17:40:06.967Z","updated":"2026-10-21T21:25:01.722Z","title":"Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query","severity":"HIGH","score":8.2,"vendor":"roncoo","product":"roncoo-pay","kev":false,"epss":0.0034},{"id":"CVE-2026-111718","published":"2026-10-16T17:40:06.267Z","updated":"2026-10-16T19:56:23.952Z","title":"AipexBase through commit 690adb9 SQL Injection via /api/data/invoke","severity":"HIGH","score":7.1,"vendor":"kuafuai","product":"aipexbase","kev":false,"epss":0.00327},{"id":"CVE-2026-111717","published":"2026-10-16T17:40:05.568Z","updated":"2026-10-16T18:18:24.044Z","title":"Arkon through 0.9.2 Missing Authorization via Skills Versions API","severity":"MEDIUM","score":5.3,"vendor":"nduckmink","product":"arkon","kev":false,"epss":0.00269},{"id":"CVE-2026-111716","published":"2026-10-16T17:40:04.869Z","updated":"2026-10-16T21:16:33.552Z","title":"Arkon through 0.9.2 Broken Access Control via Sources By-ID Routes","severity":"MEDIUM","score":5.3,"vendor":"nduckmink","product":"arkon","kev":false,"epss":0.00177},{"id":"CVE-2026-111715","published":"2026-10-16T17:40:04.155Z","updated":"2026-10-19T14:08:21.621Z","title":"Arkon through 0.9.2 Missing Authorization via Wiki Graph Neighborhood API","severity":"MEDIUM","score":5.3,"vendor":"nduckmink","product":"arkon","kev":false,"epss":0.00251},{"id":"CVE-2026-111714","published":"2026-10-16T17:40:03.460Z","updated":"2026-10-21T21:23:25.025Z","title":"tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge","severity":"LOW","score":2.3,"vendor":"AmauriC","product":"tarteaucitron.js","kev":false,"epss":0.00218},{"id":"CVE-2026-111713","published":"2026-10-16T17:40:02.702Z","updated":"2026-10-20T15:07:35.987Z","title":"tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch","severity":"MEDIUM","score":5.1,"vendor":"AmauriC","product":"tarteaucitron.js","kev":false,"epss":0.00171},{"id":"CVE-2026-111712","published":"2026-10-16T17:40:02.008Z","updated":"2026-10-16T18:19:03.901Z","title":"Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00227},{"id":"CVE-2026-111711","published":"2026-10-16T17:40:01.282Z","updated":"2026-10-16T21:16:42.070Z","title":"Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()","severity":"CRITICAL","score":9.3,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00492},{"id":"CVE-2026-111710","published":"2026-10-16T17:40:00.612Z","updated":"2026-10-19T14:03:41.974Z","title":"Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00291},{"id":"CVE-2026-111709","published":"2026-10-16T17:39:59.914Z","updated":"2026-10-21T21:20:01.674Z","title":"WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId","severity":"MEDIUM","score":5.3,"vendor":"canove","product":"whaticket-community","kev":false,"epss":0.00217},{"id":"CVE-2026-111708","published":"2026-10-16T17:39:59.242Z","updated":"2026-10-16T19:45:36.979Z","title":"WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup","severity":"CRITICAL","score":9.3,"vendor":"canove","product":"whaticket-community","kev":false,"epss":0.00578},{"id":"CVE-2026-111707","published":"2026-10-16T17:39:58.546Z","updated":"2026-10-16T18:20:01.823Z","title":"99AI through 4.3.0 IDOR via /api/chatLog/querySingleChat Chat Message Disclosure","severity":"MEDIUM","score":6.9,"vendor":"vastxie","product":"99AI","kev":false,"epss":0.0031},{"id":"CVE-2026-111706","published":"2026-10-16T17:39:57.886Z","updated":"2026-10-16T21:16:51.203Z","title":"99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel","severity":"HIGH","score":8.7,"vendor":"vastxie","product":"99AI","kev":false,"epss":0.00347},{"id":"CVE-2026-111705","published":"2026-10-16T17:39:57.175Z","updated":"2026-10-19T13:43:38.931Z","title":"Fuint through commit 57ec018 IDOR via bookId in myBookDetail","severity":"MEDIUM","score":5.3,"vendor":"fushengqian","product":"fuint","kev":false,"epss":0.00251},{"id":"CVE-2026-111704","published":"2026-10-16T17:39:56.489Z","updated":"2026-10-21T21:18:21.966Z","title":"LangChat through commit 2a6285a Missing Authentication on REST API Controllers","severity":"CRITICAL","score":9.3,"vendor":"LangChat","product":"langchat","kev":false,"epss":0.00653},{"id":"CVE-2026-111703","published":"2026-10-16T17:39:55.802Z","updated":"2026-10-16T19:51:05.638Z","title":"yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints","severity":"MEDIUM","score":5.3,"vendor":"guchengwuyue","product":"yshop-crm","kev":false,"epss":0.00243},{"id":"CVE-2026-111702","published":"2026-10-16T17:39:55.104Z","updated":"2026-10-16T18:23:17.690Z","title":"ChatOllama through commit 96c3ce5 IDOR Exposes Private Knowledge Bases","severity":"HIGH","score":8.7,"vendor":"sugarforever","product":"chat-ollama","kev":false,"epss":0.00426},{"id":"CVE-2026-81452","published":"2026-10-16T17:39:55.070Z","updated":"2026-10-20T13:05:49.759Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local…","severity":"HIGH","score":7,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.0008},{"id":"CVE-2026-111701","published":"2026-10-16T17:39:54.414Z","updated":"2026-10-16T21:16:58.942Z","title":"OtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API","severity":"HIGH","score":8.3,"vendor":"OtterMind","product":"Nubase","kev":false,"epss":0.003},{"id":"CVE-2026-111700","published":"2026-10-16T17:39:53.721Z","updated":"2026-10-19T13:40:04.709Z","title":"WebVella ERP through 1.8.8 SQL Injection via EQL Query API","severity":"HIGH","score":7.1,"vendor":"WebVella","product":"WebVella-ERP","kev":false,"epss":0.0027},{"id":"CVE-2026-111699","published":"2026-10-16T17:39:53.049Z","updated":"2026-10-21T21:13:48.951Z","title":"Niefy wx-api through 0.8.2 Authentication Bypass via Unverified openid Cookie","severity":"MEDIUM","score":6.3,"vendor":"niefy","product":"wx-api","kev":false,"epss":0.00411},{"id":"CVE-2026-111698","published":"2026-10-16T17:39:52.360Z","updated":"2026-10-16T19:41:02.118Z","title":"HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Credit via /pay/xcxRecharge","severity":"HIGH","score":7.1,"vendor":"roinli","product":"HUIZHI-ChargeOS-cloud","kev":false,"epss":0.00326},{"id":"CVE-2026-111697","published":"2026-10-16T17:39:51.674Z","updated":"2026-10-16T18:15:00.443Z","title":"HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Member and Order APIs","severity":"HIGH","score":7.1,"vendor":"roinli","product":"HUIZHI-ChargeOS-cloud","kev":false,"epss":0.00386},{"id":"CVE-2026-111696","published":"2026-10-16T17:39:50.964Z","updated":"2026-10-16T21:17:09.657Z","title":"data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords","severity":"HIGH","score":7.1,"vendor":"shaiwz","product":"data-platform-open","kev":false,"epss":0.00304},{"id":"CVE-2026-111695","published":"2026-10-16T17:39:50.272Z","updated":"2026-10-19T13:36:34.574Z","title":"Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API","severity":"HIGH","score":7.1,"vendor":"shaiwz","product":"data-platform-open","kev":false,"epss":0.00335},{"id":"CVE-2026-111694","published":"2026-10-16T17:39:49.601Z","updated":"2026-10-21T21:12:49.599Z","title":"qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints","severity":"MEDIUM","score":6.9,"vendor":"qiantongtech","product":"qKnow","kev":false,"epss":0.00564},{"id":"CVE-2026-111693","published":"2026-10-16T17:39:48.920Z","updated":"2026-10-23T13:57:59.704Z","title":"DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials","severity":"CRITICAL","score":9.3,"vendor":"databufflabs","product":"databuff","kev":false,"epss":0.00495},{"id":"CVE-2026-111692","published":"2026-10-16T17:39:48.239Z","updated":"2026-10-16T19:06:45.355Z","title":"DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret","severity":"CRITICAL","score":9.3,"vendor":"databufflabs","product":"databuff","kev":false,"epss":0.00607},{"id":"CVE-2026-111691","published":"2026-10-16T17:39:47.608Z","updated":"2026-10-16T21:17:17.620Z","title":"WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header","severity":"CRITICAL","score":9.1,"vendor":"wimoor-erp","product":"wimoor","kev":false,"epss":0.00409},{"id":"CVE-2026-111690","published":"2026-10-16T17:39:46.960Z","updated":"2026-10-19T13:35:10.955Z","title":"Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass","severity":"CRITICAL","score":9.3,"vendor":"suyuan32","product":"simple-admin-core","kev":false,"epss":0.00578},{"id":"CVE-2026-111689","published":"2026-10-16T17:39:46.265Z","updated":"2026-10-21T21:11:19.211Z","title":"XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint","severity":"MEDIUM","score":5.3,"vendor":"Exrick","product":"xboot","kev":false,"epss":0.00338},{"id":"CVE-2026-111688","published":"2026-10-16T17:39:45.564Z","updated":"2026-10-16T20:16:18.861Z","title":"Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter","severity":"MEDIUM","score":5.3,"vendor":"Exrick","product":"xboot","kev":false,"epss":0.00331},{"id":"CVE-2026-111687","published":"2026-10-16T17:39:44.866Z","updated":"2026-10-16T19:05:43.558Z","title":"WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint","severity":"CRITICAL","score":9.3,"vendor":"rachelos","product":"we-mp-rss","kev":false,"epss":0.01003},{"id":"CVE-2026-111686","published":"2026-10-16T17:39:44.117Z","updated":"2026-10-16T21:17:27.385Z","title":"IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum","severity":"HIGH","score":8.7,"vendor":"Thecosy","product":"IceCMS","kev":false,"epss":0.00425},{"id":"CVE-2026-111685","published":"2026-10-16T17:39:42.293Z","updated":"2026-10-19T13:32:07.251Z","title":"IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum","severity":"HIGH","score":8.7,"vendor":"Thecosy","product":"IceCMS","kev":false,"epss":0.00523},{"id":"CVE-2026-111684","published":"2026-10-16T17:39:41.598Z","updated":"2026-10-21T21:05:32.356Z","title":"Magistrala through 1.0.0 Cross-Tenant Authorization Bypass in Certs Service","severity":"HIGH","score":7.2,"vendor":"absmach","product":"magistrala","kev":false,"epss":0.0022},{"id":"CVE-2026-111683","published":"2026-10-16T17:39:40.888Z","updated":"2026-10-23T13:59:41.560Z","title":"Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API","severity":"MEDIUM","score":5.3,"vendor":"allegro","product":"ralph","kev":false,"epss":0.00294},{"id":"CVE-2026-111682","published":"2026-10-16T17:39:40.095Z","updated":"2026-10-16T19:04:04.560Z","title":"EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys","severity":"HIGH","score":7.1,"vendor":"smartloli","product":"EFAK","kev":false,"epss":0.00386},{"id":"CVE-2026-111681","published":"2026-10-16T17:39:39.410Z","updated":"2026-10-16T21:17:35.235Z","title":"EFAK through 5.1.0 Privilege Escalation via /api/users REST API","severity":"HIGH","score":8.7,"vendor":"smartloli","product":"EFAK","kev":false,"epss":0.00283},{"id":"CVE-2026-111680","published":"2026-10-16T17:39:38.720Z","updated":"2026-10-19T13:30:28.317Z","title":"APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter","severity":"HIGH","score":7.2,"vendor":"APIParkLab","product":"APIPark","kev":false,"epss":0.00326},{"id":"CVE-2026-111679","published":"2026-10-16T17:39:38.049Z","updated":"2026-10-21T21:02:10.862Z","title":"Ekko Studio through 0.7.36 Missing Authorization via /api/auth/locked-ips","severity":"MEDIUM","score":5.3,"vendor":"EKKOLearnAI","product":"ekko-studio","kev":false,"epss":0.00223},{"id":"CVE-2026-111678","published":"2026-10-16T17:39:37.367Z","updated":"2026-10-23T14:03:28.591Z","title":"Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c FKP Parsing","severity":"MEDIUM","score":4.8,"vendor":"Adri van Os","product":"antiword","kev":false,"epss":0.00222},{"id":"CVE-2026-111677","published":"2026-10-16T17:39:36.663Z","updated":"2026-10-18T12:26:10.819Z","title":"Antiword through 0.37 Heap Out-of-Bounds Read via vGet8LstInfo in prop8.c","severity":"MEDIUM","score":6.8,"vendor":"Adri van Os","product":"antiword","kev":false,"epss":0.00187},{"id":"CVE-2026-111676","published":"2026-10-16T17:39:35.960Z","updated":"2026-10-16T21:17:46.687Z","title":"Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint","severity":"MEDIUM","score":5.3,"vendor":"faveosuite","product":"faveo-helpdesk","kev":false,"epss":0.00251},{"id":"CVE-2026-111675","published":"2026-10-16T17:39:35.253Z","updated":"2026-10-19T13:27:20.007Z","title":"Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover","severity":"CRITICAL","score":9.1,"vendor":"xiaochong0302","product":"course-tencent-cloud","kev":false,"epss":0.00535},{"id":"CVE-2026-111674","published":"2026-10-16T17:39:34.559Z","updated":"2026-10-21T21:01:08.491Z","title":"Tbed through 20240319 Missing Authorization via setImgFileName Endpoint","severity":"MEDIUM","score":5.3,"vendor":"Hello-hao","product":"Tbed","kev":false,"epss":0.00299},{"id":"CVE-2026-111673","published":"2026-10-16T17:39:33.876Z","updated":"2026-10-16T19:53:09.859Z","title":"IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints","severity":"CRITICAL","score":9.3,"vendor":"Thecosy","product":"IceCMS","kev":false,"epss":0.0055},{"id":"CVE-2026-111672","published":"2026-10-16T17:39:33.162Z","updated":"2026-10-16T18:27:10.186Z","title":"Cube-studio through 2026.09.01 IDOR via Pipeline View and Copy Endpoints","severity":"MEDIUM","score":5.3,"vendor":"data-infra","product":"cube-studio","kev":false,"epss":0.00332},{"id":"CVE-2026-111671","published":"2026-10-16T17:39:32.472Z","updated":"2026-10-16T21:17:54.276Z","title":"Cube-studio through 2026.09.01 IDOR via Notebook and Serving Lifecycle Endpoints","severity":"HIGH","score":7.1,"vendor":"data-infra","product":"cube-studio","kev":false,"epss":0.00309},{"id":"CVE-2026-111670","published":"2026-10-16T17:39:31.782Z","updated":"2026-10-19T13:25:08.275Z","title":"ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module","severity":"MEDIUM","score":5.3,"vendor":"clickvisual","product":"clickvisual","kev":false,"epss":0.00315},{"id":"CVE-2026-111669","published":"2026-10-16T17:39:31.080Z","updated":"2026-10-21T20:59:36.503Z","title":"ZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo.Sort ORDER BY","severity":"HIGH","score":7.1,"vendor":"izhaorui","product":"Zr.Admin.NET","kev":false,"epss":0.0042},{"id":"CVE-2026-111668","published":"2026-10-16T17:39:30.328Z","updated":"2026-10-23T14:07:02.761Z","title":"AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API","severity":"MEDIUM","score":5.3,"vendor":"beizhu-1209","product":"AIHelms","kev":false,"epss":0.00294},{"id":"CVE-2026-111667","published":"2026-10-16T17:39:29.644Z","updated":"2026-10-16T18:25:28.071Z","title":"REBUILD through 4.5.0 Missing Authorization via /project/comments/list Endpoint","severity":"MEDIUM","score":5.3,"vendor":"getrebuild","product":"rebuild","kev":false,"epss":0.00305},{"id":"CVE-2026-111666","published":"2026-10-16T17:39:28.959Z","updated":"2026-10-16T21:18:06.427Z","title":"Steedos Platform through 3.0.15-beta.51 Cross-Tenant Information Disclosure via Reports API","severity":"MEDIUM","score":5.3,"vendor":"steedos","product":"steedos-platform","kev":false,"epss":0.00269},{"id":"CVE-2026-111665","published":"2026-10-16T17:39:28.253Z","updated":"2026-10-19T13:23:30.162Z","title":"Piranha CMS through 12.2 Missing Authorization in Manager Language API","severity":"MEDIUM","score":5.3,"vendor":"PiranhaCMS","product":"Piranha CMS","kev":false,"epss":0.00338},{"id":"CVE-2026-111664","published":"2026-10-16T17:39:27.588Z","updated":"2026-10-21T20:58:29.603Z","title":"Safing Portmaster before 2.2.5 Unauthenticated Forced Downgrade via /api/v1/updates/from-url","severity":"MEDIUM","score":4.8,"vendor":"safing","product":"portmaster","kev":false,"epss":0.00116},{"id":"CVE-2026-111663","published":"2026-10-16T17:39:26.910Z","updated":"2026-10-23T15:56:17.575Z","title":"Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation","severity":"CRITICAL","score":9.2,"vendor":"chaskiq","product":"chaskiq","kev":false,"epss":0.00374},{"id":"CVE-2026-111662","published":"2026-10-16T17:39:26.219Z","updated":"2026-10-16T19:13:57.537Z","title":"Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpoint","severity":"MEDIUM","score":6.9,"vendor":"chaskiq","product":"chaskiq","kev":false,"epss":0.0039},{"id":"CVE-2026-111661","published":"2026-10-16T17:39:25.521Z","updated":"2026-10-16T21:18:14.959Z","title":"waynboot-mall through 2.0.0 Missing Authentication via /callback/email Mail Endpoint","severity":"MEDIUM","score":6.9,"vendor":"wayn111","product":"waynboot-mall","kev":false,"epss":0.00353},{"id":"CVE-2026-111660","published":"2026-10-16T17:39:24.825Z","updated":"2026-10-19T13:22:09.770Z","title":"waynboot-mall through 2.0.0 Missing Authentication via /callback/order/unpaid","severity":"MEDIUM","score":6.9,"vendor":"wayn111","product":"waynboot-mall","kev":false,"epss":0.00514},{"id":"CVE-2026-111659","published":"2026-10-16T17:39:24.138Z","updated":"2026-10-21T20:56:19.053Z","title":"Waynboot-mall through 2.0.0 Unauthenticated Order Forgery via /callback/order/submit","severity":"MEDIUM","score":6.9,"vendor":"wayn111","product":"waynboot-mall","kev":false,"epss":0.00403},{"id":"CVE-2026-111658","published":"2026-10-16T17:39:23.461Z","updated":"2026-10-23T15:58:20.254Z","title":"SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API","severity":"MEDIUM","score":5.1,"vendor":"SiteServer","product":"SSCMS","kev":false,"epss":0.00325},{"id":"CVE-2026-111657","published":"2026-10-16T17:39:22.798Z","updated":"2026-10-16T19:15:51.541Z","title":"BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shipped Endpoint","severity":"MEDIUM","score":5.3,"vendor":"beikeshop","product":"beikeshop","kev":false,"epss":0.00299},{"id":"CVE-2026-111656","published":"2026-10-16T17:39:22.093Z","updated":"2026-10-16T21:18:25.806Z","title":"ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filter Management Endpoints","severity":"MEDIUM","score":5.3,"vendor":"zhimaAi","product":"chatwiki","kev":false,"epss":0.00223},{"id":"CVE-2026-111655","published":"2026-10-16T17:39:21.412Z","updated":"2026-10-19T13:20:25.246Z","title":"ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit","severity":"MEDIUM","score":5.1,"vendor":"zoujingli","product":"think-plugs-admin","kev":false,"epss":0.00303},{"id":"CVE-2026-111654","published":"2026-10-16T17:39:20.715Z","updated":"2026-10-21T20:53:32.854Z","title":"FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints","severity":"MEDIUM","score":5.3,"vendor":"kerwincui","product":"FastBee","kev":false,"epss":0.00309},{"id":"CVE-2026-111653","published":"2026-10-16T17:39:20.030Z","updated":"2026-10-23T16:02:24.828Z","title":"53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id","severity":"MEDIUM","score":6.9,"vendor":"53AI","product":"53AIHub","kev":false,"epss":0.00446},{"id":"CVE-2026-111652","published":"2026-10-16T17:39:19.344Z","updated":"2026-10-16T19:17:31.852Z","title":"Engineercms through 2.0.5 Missing Authorization via AttachController.Attachment","severity":"MEDIUM","score":6.9,"vendor":"3xxx","product":"engineercms","kev":false,"epss":0.0039},{"id":"CVE-2026-111651","published":"2026-10-16T17:39:18.666Z","updated":"2026-10-16T21:18:33.584Z","title":"Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController","severity":"HIGH","score":7.1,"vendor":"risesoft-y9","product":"Digital-Infrastructure","kev":false,"epss":0.00304},{"id":"CVE-2026-111650","published":"2026-10-16T17:39:17.995Z","updated":"2026-10-19T13:19:39.585Z","title":"ChronoFrame through 1.0.0 Missing Authentication via Setup Wizard API","severity":"HIGH","score":8.8,"vendor":"HoshinoSuzumi","product":"chronoframe","kev":false,"epss":0.00419},{"id":"CVE-2026-111649","published":"2026-10-16T17:39:17.296Z","updated":"2026-10-21T20:51:20.277Z","title":"Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint","severity":"HIGH","score":7.1,"vendor":"rocboss","product":"paopao-ce","kev":false,"epss":0.00386},{"id":"CVE-2026-111648","published":"2026-10-16T17:39:16.585Z","updated":"2026-10-23T16:20:19.266Z","title":"BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter","severity":"MEDIUM","score":5.1,"vendor":"build-admin","product":"buildadmin","kev":false,"epss":0.00381},{"id":"CVE-2026-111647","published":"2026-10-16T17:39:15.886Z","updated":"2026-10-16T19:19:42.403Z","title":"PickMall lilishop through 5.0.0 IDOR via /buyer/trade/receipt/{id}","severity":"MEDIUM","score":5.3,"vendor":"PickMall","product":"lilishop","kev":false,"epss":0.00315},{"id":"CVE-2026-111646","published":"2026-10-16T17:39:15.125Z","updated":"2026-10-16T21:18:43.318Z","title":"SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview","severity":"HIGH","score":8.2,"vendor":"javahuang","product":"SurveyKing","kev":false,"epss":0.00385},{"id":"CVE-2026-111645","published":"2026-10-16T17:39:14.432Z","updated":"2026-10-19T13:13:46.523Z","title":"MrDoc through 1.1.1 Missing Authorization via api/import_local_doc/ Endpoint","severity":"MEDIUM","score":5.3,"vendor":"zmister2016","product":"MrDoc","kev":false,"epss":0.00265},{"id":"CVE-2026-111644","published":"2026-10-16T17:39:13.747Z","updated":"2026-10-21T20:47:20.877Z","title":"Misaka Danmu Server through 2.8.9 Missing Authentication on /api/ui Routes","severity":"MEDIUM","score":6.9,"vendor":"l429609201","product":"misaka_danmu_server","kev":false,"epss":0.00368},{"id":"CVE-2026-111643","published":"2026-10-16T17:39:13.043Z","updated":"2026-10-23T16:08:12.073Z","title":"Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback","severity":"CRITICAL","score":9.3,"vendor":"l429609201","product":"misaka_danmu_server","kev":false,"epss":0.00581},{"id":"CVE-2026-111642","published":"2026-10-16T17:39:12.365Z","updated":"2026-10-16T19:21:12.720Z","title":"FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"fastapiadmin","product":"FastapiAdmin","kev":false,"epss":0.0036},{"id":"CVE-2026-111641","published":"2026-10-16T17:39:11.674Z","updated":"2026-10-16T21:18:51.468Z","title":"FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints","severity":"CRITICAL","score":9.3,"vendor":"fastapiadmin","product":"FastapiAdmin","kev":false,"epss":0.00433},{"id":"CVE-2026-111640","published":"2026-10-16T17:39:10.978Z","updated":"2026-10-19T13:10:53.878Z","title":"DooTask through 1.9.66 Missing Authorization in OKR Comment Dialogs","severity":"MEDIUM","score":5.3,"vendor":"kuaifan","product":"dootask","kev":false,"epss":0.00288},{"id":"CVE-2026-111639","published":"2026-10-16T17:39:10.284Z","updated":"2026-10-21T20:45:39.318Z","title":"bbs-go through 4.4.6 Account Takeover via Google One Tap Login","severity":"HIGH","score":8.6,"vendor":"mlogclub","product":"bbs-go","kev":false,"epss":0.00473},{"id":"CVE-2026-111638","published":"2026-10-16T17:39:09.600Z","updated":"2026-10-23T16:11:02.880Z","title":"sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys","severity":"HIGH","score":8.3,"vendor":"moul","product":"sshportal","kev":false,"epss":0.00397},{"id":"CVE-2026-111637","published":"2026-10-16T17:39:08.931Z","updated":"2026-10-16T19:12:40.180Z","title":"NexoPOS through 6.2.4 Unauthenticated Transaction Disclosure via /api/fields Endpoint","severity":"MEDIUM","score":6.9,"vendor":"Blair2004","product":"NexoPOS","kev":false,"epss":0.00465},{"id":"CVE-2026-111636","published":"2026-10-16T17:39:08.257Z","updated":"2026-10-16T21:19:00.346Z","title":"OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret","severity":"CRITICAL","score":9.2,"vendor":"OpenBMB","product":"StaffDeck","kev":false,"epss":0.00402},{"id":"CVE-2026-111635","published":"2026-10-16T17:39:07.571Z","updated":"2026-10-19T13:09:49.000Z","title":"Helical Insight through 7.0.0 Path Traversal via /getExternalResource","severity":"MEDIUM","score":5.3,"vendor":"helicalinsight","product":"helicalinsight","kev":false,"epss":0.00397},{"id":"CVE-2026-111634","published":"2026-10-16T17:39:06.906Z","updated":"2026-10-21T20:44:36.649Z","title":"Helical Insight through 7.0.0 SQL Injection via /executeDatasource","severity":"HIGH","score":8.6,"vendor":"helicalinsight","product":"helicalinsight","kev":false,"epss":0.00328},{"id":"CVE-2026-111633","published":"2026-10-16T17:39:06.226Z","updated":"2026-10-23T18:31:57.561Z","title":"ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key","severity":"HIGH","score":8.8,"vendor":"SeriaWei","product":"ZKEACMS","kev":false,"epss":0.00439},{"id":"CVE-2026-111632","published":"2026-10-16T17:39:05.550Z","updated":"2026-10-16T19:33:21.197Z","title":"Aureus ERP through 1.6.0 Multi-Company Authorization Bypass via company_id","severity":"MEDIUM","score":5.3,"vendor":"aureuserp","product":"aureuserp","kev":false,"epss":0.00294},{"id":"CVE-2026-111631","published":"2026-10-16T17:39:04.861Z","updated":"2026-10-16T21:19:10.473Z","title":"Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions","severity":"MEDIUM","score":5.3,"vendor":"10up","product":"Distributor","kev":false,"epss":0.00235},{"id":"CVE-2026-111630","published":"2026-10-16T17:39:04.184Z","updated":"2026-10-19T13:09:02.973Z","title":"abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagement Chat Conversations","severity":"MEDIUM","score":5.3,"vendor":"colinin","product":"abp-next-admin","kev":false,"epss":0.00273},{"id":"CVE-2026-111629","published":"2026-10-16T17:39:03.518Z","updated":"2026-10-21T20:43:22.568Z","title":"IoTSharp through 3.6.1 Cross-Tenant Data Exposure via Customers and Devices APIs","severity":"MEDIUM","score":5.3,"vendor":"IoTSharp","product":"IoTSharp","kev":false,"epss":0.00315},{"id":"CVE-2026-111628","published":"2026-10-16T17:39:02.847Z","updated":"2026-10-23T18:34:49.579Z","title":"10up Distributor before 2.3.2 PHP Object Injection via set_meta()","severity":"LOW","score":2.3,"vendor":"10up","product":"Distributor","kev":false,"epss":0.0027},{"id":"CVE-2026-111627","published":"2026-10-16T17:39:02.155Z","updated":"2026-10-16T19:32:00.506Z","title":"HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation","severity":"HIGH","score":8.6,"vendor":"hestiacp","product":"hestiacp","kev":false,"epss":0.00574},{"id":"CVE-2026-111626","published":"2026-10-16T17:39:01.458Z","updated":"2026-10-16T21:19:19.069Z","title":"Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers","severity":"CRITICAL","score":9.3,"vendor":"Webreaper","product":"Damselfly","kev":false,"epss":0.00445},{"id":"CVE-2026-111625","published":"2026-10-16T17:39:00.780Z","updated":"2026-10-19T13:05:49.838Z","title":"10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"10up","product":"Distributor","kev":false,"epss":0.00246},{"id":"CVE-2026-111624","published":"2026-10-16T17:39:00.093Z","updated":"2026-10-21T20:41:26.462Z","title":"Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs","severity":"MEDIUM","score":6.3,"vendor":"umbraco","product":"Umbraco-CMS","kev":false,"epss":0.00309},{"id":"CVE-2026-111623","published":"2026-10-16T17:38:59.425Z","updated":"2026-10-23T18:36:30.866Z","title":"Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance","severity":"MEDIUM","score":6.3,"vendor":"joey-zhou","product":"xiaozhi-esp32-server-java","kev":false,"epss":0.00465},{"id":"CVE-2026-111622","published":"2026-10-16T17:38:58.736Z","updated":"2026-10-16T19:29:48.555Z","title":"smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri","severity":"HIGH","score":7.6,"vendor":"a466350665","product":"smart-sso","kev":false,"epss":0.00429},{"id":"CVE-2026-111621","published":"2026-10-16T17:38:58.051Z","updated":"2026-10-16T21:19:28.058Z","title":"TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}","severity":"MEDIUM","score":5.3,"vendor":"TDuckCloud","product":"tduck-survey-form","kev":false,"epss":0.00251},{"id":"CVE-2026-111620","published":"2026-10-16T17:38:57.366Z","updated":"2026-10-19T13:02:47.413Z","title":"O2OA through 10.0.2-ce Cross-Work Attachment Read via Attachment Download Endpoint","severity":"MEDIUM","score":6,"vendor":"O2OA","product":"O2OA","kev":false,"epss":0.00382},{"id":"CVE-2026-111619","published":"2026-10-16T17:38:56.671Z","updated":"2026-10-21T20:39:17.187Z","title":"FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php","severity":"HIGH","score":7.1,"vendor":"zyx0814","product":"FilePress","kev":false,"epss":0.0042},{"id":"CVE-2026-111618","published":"2026-10-16T17:38:55.985Z","updated":"2026-10-23T18:38:09.146Z","title":"CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints","severity":"MEDIUM","score":6.9,"vendor":"coaidev","product":"CoAI","kev":false,"epss":0.0043},{"id":"CVE-2026-111617","published":"2026-10-16T17:38:55.285Z","updated":"2026-10-16T19:28:17.272Z","title":"WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints","severity":"MEDIUM","score":6.9,"vendor":"MGdaasLab","product":"WHartTest","kev":false,"epss":0.00406},{"id":"CVE-2026-111616","published":"2026-10-16T17:38:54.615Z","updated":"2026-10-16T21:19:35.462Z","title":"Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API","severity":"MEDIUM","score":6.9,"vendor":"Oqtane","product":"Oqtane Framework","kev":false,"epss":0.00346},{"id":"CVE-2026-111615","published":"2026-10-16T17:38:53.890Z","updated":"2026-10-19T13:01:07.851Z","title":"Mall4cloud through 4.0 IDOR Exposing Buyer Addresses via order_addr Endpoint","severity":"HIGH","score":7.1,"vendor":"gz-yami","product":"mall4cloud","kev":false,"epss":0.00386},{"id":"CVE-2026-111614","published":"2026-10-16T17:38:53.190Z","updated":"2026-10-21T20:37:34.593Z","title":"DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials","severity":"HIGH","score":7.1,"vendor":"devlive-community","product":"DataCap","kev":false,"epss":0.00386},{"id":"CVE-2026-111613","published":"2026-10-16T17:38:52.517Z","updated":"2026-10-23T18:39:50.789Z","title":"AllData through 0.7.1 Unauthenticated JDBC Injection via /jobJdbcDatasource/test","severity":"HIGH","score":8.7,"vendor":"alldatacenter","product":"alldata","kev":false,"epss":0.00592},{"id":"CVE-2026-111612","published":"2026-10-16T17:38:51.828Z","updated":"2026-10-16T19:27:08.464Z","title":"netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth","severity":"HIGH","score":8.7,"vendor":"qaiu","product":"netdisk-fast-download","kev":false,"epss":0.00486},{"id":"CVE-2026-111611","published":"2026-10-16T17:38:51.139Z","updated":"2026-10-16T21:19:45.346Z","title":"roncoo-education through 25.0.0-RELEASE IDOR via Order Pay Cancel and Continue Endpoints","severity":"MEDIUM","score":5.3,"vendor":"roncoo","product":"roncoo-education","kev":false,"epss":0.00223},{"id":"CVE-2026-111610","published":"2026-10-16T17:38:50.451Z","updated":"2026-10-19T12:58:25.595Z","title":"B3log Solo through 4.4.0 Missing Authorization in ArticleConsole","severity":"MEDIUM","score":5.3,"vendor":"b3log","product":"Solo","kev":false,"epss":0.00273},{"id":"CVE-2026-111609","published":"2026-10-16T17:38:49.767Z","updated":"2026-10-21T02:31:53.986Z","title":"PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription","severity":"MEDIUM","score":5.1,"vendor":"PKP","product":"Open Journal Systems","kev":false,"epss":0.00303},{"id":"CVE-2026-111608","published":"2026-10-16T17:38:49.058Z","updated":"2026-10-23T18:44:58.148Z","title":"Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}","severity":"LOW","score":2.3,"vendor":"jeequan","product":"jeepay","kev":false,"epss":0.00302},{"id":"CVE-2026-111607","published":"2026-10-16T17:38:48.333Z","updated":"2026-10-16T19:26:11.339Z","title":"Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs","severity":"HIGH","score":7.1,"vendor":"jeequan","product":"jeepay","kev":false,"epss":0.00249},{"id":"CVE-2026-111606","published":"2026-10-16T17:38:47.643Z","updated":"2026-10-16T21:19:52.033Z","title":"Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC","severity":"HIGH","score":8.6,"vendor":"hcengineering","product":"Huly Platform","kev":false,"epss":0.00238},{"id":"CVE-2026-111605","published":"2026-10-16T17:38:46.940Z","updated":"2026-10-19T12:56:50.501Z","title":"Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController","severity":"HIGH","score":8.6,"vendor":"dromara","product":"Jpom","kev":false,"epss":0.00318},{"id":"CVE-2026-111604","published":"2026-10-16T17:38:46.270Z","updated":"2026-10-21T02:30:50.899Z","title":"eladmin through 2.7 Broken Access Control via /api/users Update and Delete","severity":"MEDIUM","score":5.1,"vendor":"elunez","product":"eladmin","kev":false,"epss":0.00398},{"id":"CVE-2026-111603","published":"2026-10-16T17:38:45.572Z","updated":"2026-10-23T18:47:25.698Z","title":"PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints","severity":"MEDIUM","score":5.3,"vendor":"PlayEdu","product":"PlayEdu","kev":false,"epss":0.00315},{"id":"CVE-2026-111392","published":"2026-10-16T17:38:44.867Z","updated":"2026-10-16T19:24:54.109Z","title":"SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate","severity":"MEDIUM","score":6.3,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00206},{"id":"CVE-2026-109839","published":"2026-10-16T17:37:58.609Z","updated":"2026-10-16T19:23:47.475Z","title":"IBM Db2 Genius Hub Missing Cryptographic Step","severity":"LOW","score":3.1,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00481},{"id":"CVE-2026-102552","published":"2026-10-16T17:28:47.578Z","updated":"2026-10-19T12:54:33.789Z","title":"Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver","severity":"HIGH","score":8.2,"vendor":"FreeRTOS","product":"FreeRTOS-Plus-TCP","kev":false,"epss":0.00233},{"id":"CVE-2026-102551","published":"2026-10-16T17:27:38.483Z","updated":"2026-10-19T12:51:13.488Z","title":"Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling","severity":"CRITICAL","score":9.2,"vendor":"FreeRTOS","product":"FreeRTOS-Plus-TCP","kev":false,"epss":0.00273},{"id":"CVE-2026-80092","published":"2026-10-16T17:12:01.521Z","updated":"2026-10-31T18:13:31.111Z","title":"Microsoft Identity Web Elevation of Privilege Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Microsoft","product":"microsoft-identity-web","kev":false,"epss":0.00617},{"id":"CVE-2026-109461","published":"2026-10-16T17:11:24.532Z","updated":"2026-10-31T18:13:30.541Z","title":"Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Microsoft","product":"Microsoft Identity Client for NodeJS","kev":false,"epss":0.00361},{"id":"CVE-2026-109588","published":"2026-10-16T17:09:51.788Z","updated":"2026-10-20T18:08:02.113Z","title":"Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel","severity":"CRITICAL","score":9.3,"vendor":"FreeRTOS","product":"FreeRTOS-Kernel","kev":false,"epss":0.00157},{"id":"CVE-2026-109587","published":"2026-10-16T17:08:07.685Z","updated":"2026-10-20T15:16:10.707Z","title":"Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel","severity":"CRITICAL","score":9.3,"vendor":"FreeRTOS","product":"FreeRTOS-Kernel","kev":false,"epss":0.00138},{"id":"CVE-2026-59962","published":"2026-10-16T16:52:49.172Z","updated":"2026-10-28T18:03:14.314Z","title":"Tandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipes","severity":"MEDIUM","score":6.5,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00337},{"id":"CVE-2026-59967","published":"2026-10-16T16:51:54.639Z","updated":"2026-10-19T12:47:26.855Z","title":"Tandoor Recipes: Cross-user IDOR in /api/recipe-from-source/ bookmarklet import — read and destroy another space member's pending BookmarkletImport","severity":"MEDIUM","score":5.4,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00276},{"id":"CVE-2026-49868","published":"2026-10-16T16:50:58.750Z","updated":"2026-10-21T02:29:33.220Z","title":"RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read","severity":"CRITICAL","score":9.8,"vendor":"RIOT-OS","product":"RIOT","kev":false,"epss":0.00371},{"id":"CVE-2026-102693","published":"2026-10-16T16:49:45.584Z","updated":"2026-10-16T19:23:03.423Z","title":"RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID","severity":"CRITICAL","score":9.6,"vendor":"RIOT-OS","product":"RIOT","kev":false,"epss":0.00226},{"id":"CVE-2026-102692","published":"2026-10-16T16:48:35.776Z","updated":"2026-10-16T21:20:02.887Z","title":"RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access","severity":"CRITICAL","score":9.1,"vendor":"RIOT-OS","product":"RIOT","kev":false,"epss":0.0035},{"id":"CVE-2026-62362","published":"2026-10-16T16:43:52.058Z","updated":"2026-10-28T18:05:25.124Z","title":"PeerBanHelper: SQL injection via ${field} interpolation in MyBatis mapper for analysis endpoint","severity":"MEDIUM","score":4.9,"vendor":"PBH-BTN","product":"PeerBanHelper","kev":false,"epss":0.00342},{"id":"CVE-2026-86047","published":"2026-10-16T16:37:04.254Z","updated":"2026-10-19T12:42:14.961Z","title":"MariaDB: Insufficient quoting in mariadb-dump and SHOW commands","severity":"HIGH","score":7.7,"vendor":"MariaDB","product":"server","kev":false,"epss":0.00856},{"id":"CVE-2026-85745","published":"2026-10-16T16:30:30.866Z","updated":"2026-10-19T12:39:16.848Z","title":"MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.","severity":"MEDIUM","score":4.3,"vendor":"MariaDB","product":"server","kev":false,"epss":0.00534},{"id":"CVE-2026-85748","published":"2026-10-16T16:28:55.829Z","updated":"2026-10-16T16:54:40.841Z","title":"MariaDB: Use-after-free with a large number of SYS_REFCURSOR's","severity":"CRITICAL","score":9.9,"vendor":"MariaDB","product":"server","kev":false,"epss":0.01179},{"id":"CVE-2026-85746","published":"2026-10-16T16:27:36.763Z","updated":"2026-10-16T17:05:31.146Z","title":"MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections","severity":"CRITICAL","score":9.9,"vendor":"MariaDB","product":"server","kev":false,"epss":0.0097},{"id":"CVE-2026-92262","published":"2026-10-16T16:25:46.964Z","updated":"2026-10-21T02:28:14.389Z","title":"MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.","severity":"CRITICAL","score":9.9,"vendor":"MariaDB","product":"server","kev":false,"epss":0.01451},{"id":"CVE-2026-97380","published":"2026-10-16T16:23:07.975Z","updated":"2026-10-28T18:07:06.625Z","title":"MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges","severity":"HIGH","score":8.8,"vendor":"MariaDB","product":"server","kev":false,"epss":0.01276},{"id":"CVE-2026-85985","published":"2026-10-16T16:21:14.677Z","updated":"2026-10-16T17:05:42.975Z","title":"MariaDB: Unauthorized file access via CONNECT engine UDFs","severity":"MEDIUM","score":5.4,"vendor":"MariaDB","product":"server","kev":false,"epss":0.00452},{"id":"CVE-2026-86009","published":"2026-10-16T16:19:06.420Z","updated":"2026-10-21T02:26:54.464Z","title":"Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control","severity":"HIGH","score":8.2,"vendor":"Mailu","product":"Mailu","kev":false,"epss":0.00378},{"id":"CVE-2026-86008","published":"2026-10-16T16:16:51.097Z","updated":"2026-10-16T16:53:59.579Z","title":"Mailu domain managers can take over higher-privileged accounts","severity":"HIGH","score":7.2,"vendor":"Mailu","product":"Mailu","kev":false,"epss":0.00314},{"id":"CVE-2026-57169","published":"2026-10-16T16:13:20.542Z","updated":"2026-10-28T18:17:58.881Z","title":"Dockhand: Unauthenticated container exec via WebSocket upgrade","severity":"CRITICAL","score":9.6,"vendor":"Finsys","product":"dockhand","kev":false,"epss":0.00304},{"id":"CVE-2026-77474","published":"2026-10-16T16:10:57.120Z","updated":"2026-10-19T12:38:04.696Z","title":"dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open","severity":"HIGH","score":7.1,"vendor":"Dicklesworthstone","product":"destructive_command_guard","kev":false,"epss":0.00124},{"id":"CVE-2026-44977","published":"2026-10-16T16:04:45.868Z","updated":"2026-10-21T02:24:31.741Z","title":"countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context","severity":"CRITICAL","score":9,"vendor":"Countly","product":"countly-server","kev":false,"epss":0.00436},{"id":"CVE-2026-41582","published":"2026-10-16T16:03:39.860Z","updated":"2026-10-19T12:37:13.079Z","title":"countly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal Files","severity":"HIGH","score":7.5,"vendor":"Countly","product":"countly-server","kev":false,"epss":0.00527},{"id":"CVE-2026-42270","published":"2026-10-16T16:02:00.196Z","updated":"2026-10-16T16:52:38.647Z","title":"countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception","severity":"HIGH","score":7.5,"vendor":"Countly","product":"countly-server","kev":false,"epss":0.00542},{"id":"CVE-2026-42269","published":"2026-10-16T15:59:04.637Z","updated":"2026-10-16T17:05:51.713Z","title":"countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion","severity":"HIGH","score":8.1,"vendor":"Countly","product":"countly-server","kev":false,"epss":0.00469},{"id":"CVE-2026-102923","published":"2026-10-16T15:53:05.454Z","updated":"2026-10-28T18:20:33.855Z","title":"SparkyFitness: SSRF via unvalidated custom_url in AI service settings","severity":"MEDIUM","score":5.4,"vendor":"CodeWithCJ","product":"SparkyFitness","kev":false,"epss":0.00265},{"id":"CVE-2026-92263","published":"2026-10-16T15:50:54.302Z","updated":"2026-10-21T02:23:37.265Z","title":"SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore","severity":"HIGH","score":7.2,"vendor":"CodeWithCJ","product":"SparkyFitness","kev":false,"epss":0.0045},{"id":"CVE-2026-68906","published":"2026-10-16T15:49:32.595Z","updated":"2026-10-19T12:33:42.207Z","title":"libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU","severity":"HIGH","score":8.7,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00471},{"id":"CVE-2026-68907","published":"2026-10-16T15:48:33.080Z","updated":"2026-10-16T17:05:59.282Z","title":"libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments","severity":"HIGH","score":8.2,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00371},{"id":"CVE-2026-68908","published":"2026-10-16T15:47:25.012Z","updated":"2026-10-16T16:51:44.888Z","title":"libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path","severity":"MEDIUM","score":5.3,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00451},{"id":"CVE-2026-57446","published":"2026-10-16T15:46:33.549Z","updated":"2026-10-28T18:23:51.341Z","title":"libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle","severity":"MEDIUM","score":5.3,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00401},{"id":"CVE-2026-48741","published":"2026-10-16T15:45:32.680Z","updated":"2026-10-21T02:22:38.275Z","title":"libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS","severity":"HIGH","score":7.5,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00524},{"id":"CVE-2026-48503","published":"2026-10-16T15:44:47.303Z","updated":"2026-10-16T16:50:42.640Z","title":"libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead","severity":"HIGH","score":7.5,"vendor":"mz-automation","product":"libiec61850","kev":false,"epss":0.00458},{"id":"CVE-2026-111581","published":"2026-10-16T15:42:04.580Z","updated":"2026-10-16T17:06:09.524Z","title":"Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method","severity":"LOW","score":3.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00126},{"id":"CVE-2026-102941","published":"2026-10-16T15:38:18.086Z","updated":"2026-10-26T17:37:11.962Z","title":"gomarkdown/markdown IsSafeURL panics on short URLs","severity":"HIGH","score":7.5,"vendor":"gomarkdown","product":"markdown","kev":false,"epss":0.00279},{"id":"CVE-2026-77630","published":"2026-10-16T15:36:05.117Z","updated":"2026-10-16T17:06:16.423Z","title":"pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing","severity":"HIGH","score":7.5,"vendor":"pupnp","product":"pupnp","kev":false,"epss":0.0034},{"id":"CVE-2026-96425","published":"2026-10-16T15:35:22.447Z","updated":"2026-10-18T13:54:07.958Z","title":"Incorrect Permission Assignment for Critical Resource in lomiri-download-manager","severity":"MEDIUM","score":5.5,"vendor":"UBports","product":"lomiri-download-manager","kev":false,"epss":0.00105},{"id":"CVE-2026-96424","published":"2026-10-16T15:35:17.561Z","updated":"2026-10-18T13:54:08.107Z","title":"Incorrect Permission Assignment for Critical Resource in lomiri-download-manager","severity":"HIGH","score":7.8,"vendor":"UBports","product":"lomiri-download-manager","kev":false,"epss":0.00106},{"id":"CVE-2026-57488","published":"2026-10-16T15:34:49.625Z","updated":"2026-10-16T19:08:25.462Z","title":"pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling","severity":"HIGH","score":7.1,"vendor":"pupnp","product":"pupnp","kev":false,"epss":0.00331},{"id":"CVE-2026-57487","published":"2026-10-16T15:33:56.394Z","updated":"2026-10-21T02:21:37.115Z","title":"libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered","severity":"HIGH","score":7.5,"vendor":"pupnp","product":"pupnp","kev":false,"epss":0.0041},{"id":"CVE-2026-57486","published":"2026-10-16T15:32:57.234Z","updated":"2026-10-16T15:56:47.362Z","title":"pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes","severity":"HIGH","score":7.5,"vendor":"pupnp","product":"pupnp","kev":false,"epss":0.0041},{"id":"CVE-2026-55862","published":"2026-10-16T15:32:08.277Z","updated":"2026-10-16T19:07:30.396Z","title":"pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow","severity":"MEDIUM","score":6.5,"vendor":"pupnp","product":"pupnp","kev":false,"epss":0.00465},{"id":"CVE-2026-57447","published":"2026-10-16T15:31:10.493Z","updated":"2026-10-16T17:06:24.293Z","title":"Discourse Doc Categories: Doc category index refresh leaks private topic titles","severity":"MEDIUM","score":4.3,"vendor":"discourse","product":"discourse-doc-categories","kev":false,"epss":0.00183},{"id":"CVE-2026-55543","published":"2026-10-16T15:28:14.201Z","updated":"2026-10-28T18:26:15.640Z","title":"TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file","severity":"HIGH","score":8.5,"vendor":"helge17","product":"tuxguitar","kev":false,"epss":0.00213},{"id":"CVE-2026-55836","published":"2026-10-16T15:23:22.783Z","updated":"2026-10-16T16:01:37.738Z","title":"Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)","severity":"MEDIUM","score":6.8,"vendor":"open-zaak","product":"open-zaak","kev":false,"epss":0.00391},{"id":"CVE-2026-54657","published":"2026-10-16T15:21:57.401Z","updated":"2026-10-16T17:06:31.247Z","title":"Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token","severity":"MEDIUM","score":6.5,"vendor":"open-zaak","product":"open-zaak","kev":false,"epss":0.00263},{"id":"CVE-2026-95859","published":"2026-10-16T15:19:04.504Z","updated":"2026-10-21T02:20:36.706Z","title":"libp2p-rust: Gossipsub GRAFT topics unbounded growth","severity":"HIGH","score":8.7,"vendor":"libp2p","product":"rust-libp2p","kev":false,"epss":0.00291},{"id":"CVE-2026-111728","published":"2026-10-16T15:02:08.025Z","updated":"2026-10-16T17:06:38.459Z","title":"Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings","severity":"MEDIUM","score":5.3,"vendor":"5rahim","product":"Seanime","kev":false,"epss":0.00256},{"id":"CVE-2026-107777","published":"2026-10-16T14:40:20.840Z","updated":"2026-10-16T15:20:17.858Z","title":"Thermo Fisher Torrent Suite Software Path Traversal","severity":"HIGH","score":7.1,"vendor":"Thermo Fisher","product":"Torrent Suite Software","kev":false,"epss":0.00316},{"id":"CVE-2026-105667","published":"2026-10-16T14:32:22.216Z","updated":"2026-10-16T15:20:18.221Z","title":"J4Care dcm4che Missing Authentication for Critical Function","severity":"HIGH","score":8.7,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00239},{"id":"CVE-2026-105279","published":"2026-10-16T14:30:51.439Z","updated":"2026-10-16T15:20:18.403Z","title":"J4Care dcm4che Missing Authentication for Critical Function","severity":"CRITICAL","score":9.3,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00274},{"id":"CVE-2026-101021","published":"2026-10-16T14:28:54.992Z","updated":"2026-10-16T15:20:18.725Z","title":"J4Care dcm4che Inefficient Algorithmic Complexity","severity":"HIGH","score":8.7,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00377},{"id":"CVE-2026-105273","published":"2026-10-16T14:21:12.116Z","updated":"2026-10-16T15:20:19.042Z","title":"J4Care dcm4che Loop with Unreachable Exit Condition","severity":"HIGH","score":8.7,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00377},{"id":"CVE-2026-107621","published":"2026-10-16T14:19:32.673Z","updated":"2026-10-16T15:20:19.201Z","title":"J4Care dcm4che Loop with Unreachable Exit Condition","severity":"HIGH","score":8.7,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00377},{"id":"CVE-2026-97851","published":"2026-10-16T14:16:55.229Z","updated":"2026-10-16T15:20:19.499Z","title":"J4Care dcm4che Missing Authorization","severity":"HIGH","score":8.8,"vendor":"J4Care","product":"dcm4chee-arc-light","kev":false,"epss":0.00349},{"id":"CVE-2026-105664","published":"2026-10-16T14:06:55.903Z","updated":"2026-10-16T15:20:19.651Z","title":"Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy","severity":"MEDIUM","score":6.9,"vendor":"Guangzhou Juan IoT Technology Co., Ltd.","product":"EseeCloud App","kev":false,"epss":0.00344},{"id":"CVE-2026-97858","published":"2026-10-16T14:04:47.580Z","updated":"2026-10-16T15:20:19.972Z","title":"Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes","severity":"MEDIUM","score":6.9,"vendor":"Guangzhou Juan IoT Technology Co., Ltd.","product":"EseeCloud App","kev":false,"epss":0.0029},{"id":"CVE-2026-107617","published":"2026-10-16T14:02:54.778Z","updated":"2026-10-16T15:20:20.297Z","title":"Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials","severity":"CRITICAL","score":9.3,"vendor":"Guangzhou Juan IoT Technology Co., Ltd.","product":"EseeCloud App","kev":false,"epss":0.0037},{"id":"CVE-2026-110805","published":"2026-10-16T13:46:53.212Z","updated":"2026-10-16T15:08:11.754Z","title":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate…","severity":"LOW","score":2.6,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00124},{"id":"CVE-2026-110804","published":"2026-10-16T13:45:38.143Z","updated":"2026-10-16T15:08:54.643Z","title":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00183},{"id":"CVE-2026-110806","published":"2026-10-16T13:44:20.481Z","updated":"2026-10-16T15:09:31.579Z","title":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain…","severity":"MEDIUM","score":6.5,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00201},{"id":"CVE-2026-110287","published":"2026-10-16T13:43:25.516Z","updated":"2026-10-16T15:10:08.692Z","title":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00185},{"id":"CVE-2026-18516","published":"2026-10-16T13:37:55.079Z","updated":"2026-10-18T13:54:08.252Z","title":"Improper Encoding or Escaping of Output in Crafty Controller","severity":"CRITICAL","score":9.6,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00291},{"id":"CVE-2026-90821","published":"2026-10-16T13:37:40.079Z","updated":"2026-10-16T15:20:20.502Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller","severity":"MEDIUM","score":5.4,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00158},{"id":"CVE-2026-97470","published":"2026-10-16T13:28:15.060Z","updated":"2026-10-16T14:39:00.593Z","title":"Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role","severity":"MEDIUM","score":6.4,"vendor":"themefic","product":"Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental","kev":false,"epss":0.00188},{"id":"CVE-2026-111413","published":"2026-10-16T13:02:14.161Z","updated":"2026-10-16T13:32:40.971Z","title":"WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"aThemeArt","product":"aThemeArt Theme Helper","kev":false,"epss":0.00133},{"id":"CVE-2026-110896","published":"2026-10-16T12:57:24.956Z","updated":"2026-10-16T14:01:22.556Z","title":"WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Chill","product":"Passster","kev":false,"epss":0.00228},{"id":"CVE-2026-107564","published":"2026-10-16T12:55:24.565Z","updated":"2026-10-16T14:01:53.235Z","title":"gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption","severity":"HIGH","score":8.7,"vendor":"gocsaf Development Community","product":"csaf_provider","kev":false,"epss":0.00334},{"id":"CVE-2026-111400","published":"2026-10-16T12:55:17.830Z","updated":"2026-10-16T15:04:12.871Z","title":"WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"IdeaBox Creations","product":"PowerPack Addons for Elementor","kev":false,"epss":0.00129},{"id":"CVE-2026-111396","published":"2026-10-16T12:54:50.256Z","updated":"2026-10-16T13:44:30.141Z","title":"WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"Liquid Web / StellarWP","product":"Advanced Post Manager","kev":false,"epss":0.00203},{"id":"CVE-2026-111409","published":"2026-10-16T12:52:57.180Z","updated":"2026-10-19T08:14:29.318Z","title":"WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITH","product":"YITH PayPal Express Checkout for WooCommerce","kev":false,"epss":0.00187},{"id":"CVE-2026-110903","published":"2026-10-16T12:51:28.928Z","updated":"2026-10-16T14:39:00.735Z","title":"WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00127},{"id":"CVE-2026-110900","published":"2026-10-16T12:51:01.259Z","updated":"2026-10-16T14:59:30.776Z","title":"WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Liquid Web / StellarWP","product":"BookIt","kev":false,"epss":0.00186},{"id":"CVE-2026-110901","published":"2026-10-16T12:50:03.734Z","updated":"2026-10-16T14:59:30.929Z","title":"WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPMU DEV","product":"SmartCrawl","kev":false,"epss":0.0015},{"id":"CVE-2026-110380","published":"2026-10-16T12:31:15.231Z","updated":"2026-10-16T14:59:31.070Z","title":"WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00171},{"id":"CVE-2026-111405","published":"2026-10-16T12:30:54.361Z","updated":"2026-10-16T13:46:12.255Z","title":"WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"PT Norther Lights Production","product":"MapSVG","kev":false,"epss":0.00127},{"id":"CVE-2026-111399","published":"2026-10-16T12:30:32.747Z","updated":"2026-10-16T14:59:31.212Z","title":"WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"PT Norther Lights Production","product":"MapSVG","kev":false,"epss":0.00253},{"id":"CVE-2026-111397","published":"2026-10-16T12:29:35.561Z","updated":"2026-10-16T14:02:23.262Z","title":"WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"PT Norther Lights Production","product":"MapSVG","kev":false,"epss":0.00182},{"id":"CVE-2026-111555","published":"2026-10-16T12:19:44.320Z","updated":"2026-10-19T15:03:39.618Z","title":"Luksmeta: missing slot-range validation permits out-of-gap device i/o","severity":"MEDIUM","score":6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00107},{"id":"CVE-2026-105958","published":"2026-10-16T12:18:26.419Z","updated":"2026-10-20T20:43:05.003Z","title":"Spice-server: spice: heap oob read/write via unchecked migration data offsets","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","kev":false,"epss":0.00246},{"id":"CVE-2026-68571","published":"2026-10-16T12:16:12.526Z","updated":"2026-10-19T10:31:10.638Z","title":"Apache Kylin: JDBC URL Whitelist Verification Bypass","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00381},{"id":"CVE-2026-64959","published":"2026-10-16T12:16:00.359Z","updated":"2026-10-20T15:18:33.054Z","title":"Apache Kylin: Missing authentication on certain cache API endpoints","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00416},{"id":"CVE-2026-64610","published":"2026-10-16T12:13:18.802Z","updated":"2026-10-20T16:08:34.352Z","title":"Apache Kylin: Redis unsafe Java deserialization","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00415},{"id":"CVE-2026-63619","published":"2026-10-16T12:11:51.082Z","updated":"2026-10-20T16:49:10.635Z","title":"Apache Kylin: Missing authorization and path-confinement on system meta dump","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00265},{"id":"CVE-2026-63618","published":"2026-10-16T12:11:35.468Z","updated":"2026-10-16T14:03:00.915Z","title":"Apache Kylin: Low-Privilege Config Exposure","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kylin","kev":false,"epss":0.00279},{"id":"CVE-2026-105959","published":"2026-10-16T11:53:00.840Z","updated":"2026-10-20T20:43:08.849Z","title":"Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","kev":false,"epss":0.0048},{"id":"CVE-2026-111391","published":"2026-10-16T11:41:52.009Z","updated":"2026-10-16T13:52:52.818Z","title":"SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter","severity":"CRITICAL","score":9.2,"vendor":"sgl-project","product":"sglang","kev":false,"epss":0.00452},{"id":"CVE-2026-111390","published":"2026-10-16T11:38:02.147Z","updated":"2026-10-21T02:18:10.357Z","title":"Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API","severity":"MEDIUM","score":6,"vendor":"erupts","product":"erupt","kev":false,"epss":0.00357},{"id":"CVE-2026-107648","published":"2026-10-16T11:28:51.492Z","updated":"2026-10-16T14:39:00.868Z","title":"WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter","severity":"HIGH","score":7.2,"vendor":"switcorp","product":"WP Sessions Time Monitoring Full Automatic","kev":false,"epss":0.00241},{"id":"CVE-2026-110029","published":"2026-10-16T11:08:04.000Z","updated":"2026-10-16T14:49:19.421Z","title":"Squeeze < 1.8.1 - Subscriber+ Missing Authorization via squeeze_restore_attachment","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Squeeze","kev":false,"epss":0.00229},{"id":"CVE-2026-109930","published":"2026-10-16T11:08:03.380Z","updated":"2026-10-16T14:49:19.618Z","title":"MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"MAIO","kev":false,"epss":0.00206},{"id":"CVE-2026-109119","published":"2026-10-16T10:27:28.149Z","updated":"2026-10-16T13:31:33.847Z","title":"Missing Authorization in rdiffweb","severity":"HIGH","score":8.8,"vendor":"ikus-soft","product":"rdiffweb","kev":false,"epss":0.0038},{"id":"CVE-2026-109118","published":"2026-10-16T10:27:18.156Z","updated":"2026-10-16T14:11:59.360Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb","severity":"MEDIUM","score":4.6,"vendor":"ikus-soft","product":"rdiffweb","kev":false,"epss":0.00229},{"id":"CVE-2026-14452","published":"2026-10-16T09:51:30.453Z","updated":"2026-10-16T10:40:17.160Z","title":"Open redirect and XSS via reset_url parameter","severity":"HIGH","score":8.6,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00295},{"id":"CVE-2026-106030","published":"2026-10-16T09:47:20.977Z","updated":"2026-10-16T10:40:51.408Z","title":"Missing Authorization in NordVPN for Windows","severity":"MEDIUM","score":6.8,"vendor":"Nord Security","product":"NordVPN","kev":false,"epss":0.00098},{"id":"CVE-2026-107649","published":"2026-10-16T09:26:38.264Z","updated":"2026-10-16T14:39:01.019Z","title":"Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter","severity":"MEDIUM","score":5.4,"vendor":"liedekef","product":"Events Made Easy","kev":false,"epss":0.00221},{"id":"CVE-2026-110703","published":"2026-10-16T09:26:37.351Z","updated":"2026-10-16T14:13:09.355Z","title":"GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00209},{"id":"CVE-2026-96768","published":"2026-10-16T09:26:36.859Z","updated":"2026-10-16T14:39:01.181Z","title":"GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Body","severity":"HIGH","score":7.2,"vendor":"softaculous","product":"GoSMTP Pro","kev":false,"epss":0.0019},{"id":"CVE-2026-101300","published":"2026-10-16T08:56:02.923Z","updated":"2026-10-16T11:19:56.435Z","title":"Server-Side Request Forgery in Wegow PDF export","severity":"HIGH","score":7.1,"vendor":"Wegow Technologies","product":"Wegow","kev":false,"epss":0.00207},{"id":"CVE-2026-15575","published":"2026-10-16T08:45:41.731Z","updated":"2026-10-16T11:21:41.333Z","title":"Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier","severity":"MEDIUM","score":5.3,"vendor":"SFM Software Technologies Inc.","product":"Costifier","kev":false,"epss":0.00197},{"id":"CVE-2026-15219","published":"2026-10-16T08:42:32.579Z","updated":"2026-10-16T11:22:24.068Z","title":"IDOR in SFM Software's Costifier","severity":"MEDIUM","score":6.5,"vendor":"SFM Software Technologies Inc.","product":"Costifier","kev":false,"epss":0.00195},{"id":"CVE-2026-111472","published":"2026-10-16T08:37:34.959Z","updated":"2026-10-16T11:23:16.889Z","title":"SQL injection in TSG Profleet","severity":"CRITICAL","score":9.3,"vendor":"TSG","product":"Profleet","kev":false,"epss":0.00249},{"id":"CVE-2026-104003","published":"2026-10-16T08:27:43.226Z","updated":"2026-10-16T14:59:31.371Z","title":"Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Comment Content Rendered on ProfilePress User Profile 'Comments' Tab","severity":"MEDIUM","score":5.4,"vendor":"properfraction","product":"Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress","kev":false,"epss":0.00227},{"id":"CVE-2026-92766","published":"2026-10-16T08:27:42.866Z","updated":"2026-10-16T14:59:31.665Z","title":"Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter","severity":"HIGH","score":7.5,"vendor":"appsbd","product":"Vitepos – Point of Sale (POS) for WooCommerce","kev":false,"epss":0.0033},{"id":"CVE-2026-104726","published":"2026-10-16T08:27:42.514Z","updated":"2026-10-16T14:39:01.336Z","title":"Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dir' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"jeroenpeters1986","product":"Name Directory","kev":false,"epss":0.00188},{"id":"CVE-2026-109224","published":"2026-10-16T08:27:42.175Z","updated":"2026-10-16T14:39:01.492Z","title":"SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment","severity":"HIGH","score":7.2,"vendor":"surecart","product":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments","kev":false,"epss":0.0028},{"id":"CVE-2026-93681","published":"2026-10-16T08:27:41.284Z","updated":"2026-10-16T14:39:01.644Z","title":"Tutor LMS <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name Parameter","severity":"MEDIUM","score":6.4,"vendor":"themeum","product":"Tutor LMS – eLearning and online course solution","kev":false,"epss":0.00199},{"id":"CVE-2026-111311","published":"2026-10-16T08:27:40.819Z","updated":"2026-10-16T14:14:12.730Z","title":"DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint","severity":"HIGH","score":8.8,"vendor":"samuelgallegos","product":"DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More","kev":false,"epss":0.00511},{"id":"CVE-2026-14177","published":"2026-10-16T08:13:48.769Z","updated":"2026-10-16T11:24:42.998Z","title":"User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure","severity":"HIGH","score":7.5,"vendor":"IKAS Technology Inc.","product":"ikas E-Commerce Infrastructure","kev":false,"epss":0.00245},{"id":"CVE-2026-96870","published":"2026-10-16T07:44:03.654Z","updated":"2026-10-16T14:14:58.815Z","title":"SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter","severity":"MEDIUM","score":6.4,"vendor":"brainstormforce","product":"SureDash – Community, Courses & Member Dashboard","kev":false,"epss":0.002},{"id":"CVE-2026-100108","published":"2026-10-16T07:44:03.268Z","updated":"2026-10-16T14:39:01.800Z","title":"Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting","severity":"MEDIUM","score":6.4,"vendor":"maxfoundry","product":"Social Share Buttons","kev":false,"epss":0.00195},{"id":"CVE-2026-100106","published":"2026-10-16T07:44:02.898Z","updated":"2026-10-16T14:15:55.302Z","title":"FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter","severity":"MEDIUM","score":6.4,"vendor":"damian-gora","product":"FiboSearch – Ajax Search for WooCommerce","kev":false,"epss":0.00228},{"id":"CVE-2026-75903","published":"2026-10-16T07:44:02.515Z","updated":"2026-10-16T15:09:36.465Z","title":"Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentials","severity":"HIGH","score":8.1,"vendor":"manuelgalan","product":"Vulnity Security","kev":false,"epss":0.00514},{"id":"CVE-2026-87111","published":"2026-10-16T07:44:01.961Z","updated":"2026-10-16T14:39:01.949Z","title":"User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header","severity":"HIGH","score":7.2,"vendor":"WPEverest","product":"User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin","kev":false,"epss":0.0019},{"id":"CVE-2026-18799","published":"2026-10-16T07:16:19.062Z","updated":"2026-10-16T11:28:45.200Z","title":"Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00198},{"id":"CVE-2026-16251","published":"2026-10-16T07:14:59.296Z","updated":"2026-10-16T11:57:33.968Z","title":"Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00286},{"id":"CVE-2026-18256","published":"2026-10-16T07:13:43.684Z","updated":"2026-10-16T11:58:08.912Z","title":"Private team metadata disclosure via the team search API","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00162},{"id":"CVE-2026-18223","published":"2026-10-16T07:12:39.911Z","updated":"2026-10-16T14:16:33.994Z","title":"Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access","severity":"MEDIUM","score":5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00161},{"id":"CVE-2026-19076","published":"2026-10-16T07:11:29.552Z","updated":"2026-10-16T14:06:23.946Z","title":"Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token","severity":"MEDIUM","score":4.4,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00199},{"id":"CVE-2026-18560","published":"2026-10-16T07:10:12.870Z","updated":"2026-10-16T14:17:24.943Z","title":"Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.0018},{"id":"CVE-2026-16453","published":"2026-10-16T07:08:48.627Z","updated":"2026-10-16T14:18:12.181Z","title":"Mattermost SAML RelayState forgery allows unauthorized team membership","severity":"HIGH","score":7.1,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.0019},{"id":"CVE-2026-19600","published":"2026-10-16T07:07:17.899Z","updated":"2026-10-16T12:02:51.761Z","title":"Mattermost logs plaintext authentication tokens in debug-level server logs on failed auth attempts","severity":"MEDIUM","score":4.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00236},{"id":"CVE-2026-19621","published":"2026-10-16T07:06:00.580Z","updated":"2026-10-16T11:58:36.743Z","title":"Mattermost leaks interactive-message integration secrets to non-admin users via post-deletion events and thread reads","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00255},{"id":"CVE-2026-19603","published":"2026-10-16T07:02:38.486Z","updated":"2026-10-16T11:59:09.985Z","title":"Private channel ID disclosure via user status endpoints","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.0018},{"id":"CVE-2026-18795","published":"2026-10-16T07:01:22.549Z","updated":"2026-10-16T11:59:42.771Z","title":"Missing server side validation allowed user to quarantine a DM and GM post","severity":"MEDIUM","score":6.4,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.0015},{"id":"CVE-2026-94169","published":"2026-10-16T07:00:38.023Z","updated":"2026-10-16T18:38:00.753Z","title":"WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":10,"vendor":"Theme-one","product":"The Grid","kev":false,"epss":0.04422},{"id":"CVE-2026-94388","published":"2026-10-16T07:00:37.973Z","updated":"2026-10-16T15:09:36.628Z","title":"WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"halfdata","product":"Green Popups","kev":false,"epss":0.00229},{"id":"CVE-2026-97296","published":"2026-10-16T07:00:37.595Z","updated":"2026-10-16T15:09:37.442Z","title":"WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerability","severity":"HIGH","score":8.1,"vendor":"Rocketgenius, Inc","product":"Gravity Forms","kev":false,"epss":0.0025},{"id":"CVE-2026-96339","published":"2026-10-16T07:00:37.525Z","updated":"2026-10-16T10:36:08.361Z","title":"WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Houzez.co","product":"Houzez","kev":false,"epss":0.00142},{"id":"CVE-2026-19867","published":"2026-10-16T07:00:12.550Z","updated":"2026-10-16T12:00:11.330Z","title":"Uncapped mention keys in user notification properties allow CPU exhaustion during post processing","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00217},{"id":"CVE-2026-19601","published":"2026-10-16T06:58:33.116Z","updated":"2026-10-16T12:00:43.806Z","title":"Disclosure of AD/LDAP bind password via Test Connection","severity":"MEDIUM","score":4.9,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00234},{"id":"CVE-2026-18551","published":"2026-10-16T06:56:51.996Z","updated":"2026-10-20T13:11:28.823Z","title":"Mattermost guest account privilege escalation via member roles API","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00222},{"id":"CVE-2026-19541","published":"2026-10-16T06:54:57.403Z","updated":"2026-10-16T12:03:18.956Z","title":"Outgoing OAuth connection client secret exposure during connection validation","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00224},{"id":"CVE-2026-110366","published":"2026-10-16T06:54:11.866Z","updated":"2026-10-16T15:09:37.698Z","title":"WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Gemini Labs","product":"Site Reviews","kev":false,"epss":0.00171},{"id":"CVE-2026-104715","published":"2026-10-16T06:47:10.481Z","updated":"2026-10-31T10:05:10.020Z","title":"Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00265},{"id":"CVE-2026-92115","published":"2026-10-16T06:41:08.509Z","updated":"2026-10-16T15:09:37.836Z","title":"WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action","severity":"HIGH","score":8.8,"vendor":"opajaap","product":"WP Photo Album Plus","kev":false,"epss":0.01433},{"id":"CVE-2026-15222","published":"2026-10-16T06:41:08.118Z","updated":"2026-10-16T15:09:37.979Z","title":"User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name","severity":"MEDIUM","score":5.4,"vendor":"wpeverest","product":"User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder","kev":false,"epss":0.00179},{"id":"CVE-2026-109401","published":"2026-10-16T06:41:07.717Z","updated":"2026-10-16T14:21:19.789Z","title":"WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email","severity":"LOW","score":2.7,"vendor":"smub","product":"WP Mail Logging","kev":false,"epss":0.00324},{"id":"CVE-2026-97640","published":"2026-10-16T06:41:07.314Z","updated":"2026-10-16T14:39:02.103Z","title":"WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)","severity":"HIGH","score":7.2,"vendor":"smub","product":"WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)","kev":false,"epss":0.00243},{"id":"CVE-2026-110252","published":"2026-10-16T06:41:06.918Z","updated":"2026-10-16T14:39:02.268Z","title":"WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import","severity":"MEDIUM","score":5.4,"vendor":"etruel","product":"WPeMatico RSS Feed Fetcher","kev":false,"epss":0.00288},{"id":"CVE-2026-109193","published":"2026-10-16T06:41:06.532Z","updated":"2026-10-16T14:39:02.457Z","title":"HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value","severity":"HIGH","score":7.2,"vendor":"hivepress","product":"HivePress – Business Directory, Listings & Classified Ads Plugin","kev":false,"epss":0.00362},{"id":"CVE-2026-104730","published":"2026-10-16T06:41:06.131Z","updated":"2026-10-16T14:21:49.208Z","title":"Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter","severity":"CRITICAL","score":9.8,"vendor":"sunshinephotocart","product":"Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers","kev":false,"epss":0.00512},{"id":"CVE-2026-19798","published":"2026-10-16T06:41:05.739Z","updated":"2026-10-16T14:22:54.237Z","title":"WP Map Block <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints","severity":"MEDIUM","score":4.3,"vendor":"tusharimran","product":"WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters","kev":false,"epss":0.00204},{"id":"CVE-2026-109382","published":"2026-10-16T06:41:05.349Z","updated":"2026-10-16T15:09:38.121Z","title":"WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensitive Information Disclosure via Broken Access Control to 'wsp_get_posts' MCP Tool","severity":"MEDIUM","score":6.5,"vendor":"bilalnaseer","product":"WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents","kev":false,"epss":0.00336},{"id":"CVE-2026-104755","published":"2026-10-16T06:41:04.957Z","updated":"2026-10-16T15:09:38.262Z","title":"WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint","severity":"MEDIUM","score":4.8,"vendor":"aresit","product":"WP Compress – Instant Performance & Speed Optimization","kev":false,"epss":0.0031},{"id":"CVE-2026-107768","published":"2026-10-16T06:41:04.583Z","updated":"2026-10-16T14:39:02.658Z","title":"TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers","severity":"HIGH","score":7.2,"vendor":"cozmoslabs","product":"TranslatePress – Translate Multilingual sites with AI Translation","kev":false,"epss":0.00297},{"id":"CVE-2026-109388","published":"2026-10-16T06:41:04.192Z","updated":"2026-10-16T14:39:02.831Z","title":"HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode","severity":"MEDIUM","score":6.4,"vendor":"hivepress","product":"HivePress – Business Directory, Listings & Classified Ads Plugin","kev":false,"epss":0.00248},{"id":"CVE-2026-110290","published":"2026-10-16T06:41:03.815Z","updated":"2026-10-16T14:39:03.035Z","title":"WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"ajay","product":"WebberZone Top 10 — Popular Posts","kev":false,"epss":0.002},{"id":"CVE-2026-92553","published":"2026-10-16T06:41:03.415Z","updated":"2026-10-16T15:09:38.412Z","title":"YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension","severity":"HIGH","score":8.8,"vendor":"yaycommerce","product":"YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports","kev":false,"epss":0.00559},{"id":"CVE-2026-111069","published":"2026-10-16T06:41:02.462Z","updated":"2026-10-16T14:39:03.255Z","title":"GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00214},{"id":"CVE-2026-107770","published":"2026-10-16T06:41:01.346Z","updated":"2026-10-16T14:23:26.406Z","title":"Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' action","severity":"MEDIUM","score":6.8,"vendor":"tigroumeow","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00459},{"id":"CVE-2026-110664","published":"2026-10-16T06:41:00.954Z","updated":"2026-10-16T14:39:03.424Z","title":"Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes","severity":"MEDIUM","score":6.4,"vendor":"codename065","product":"Premium Packages – Sell Digital Products Securely","kev":false,"epss":0.00209},{"id":"CVE-2026-110701","published":"2026-10-16T06:41:00.578Z","updated":"2026-10-16T14:26:52.924Z","title":"CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"CP Multi View Events Calendar","kev":false,"epss":0.00247},{"id":"CVE-2026-111178","published":"2026-10-16T06:41:00.178Z","updated":"2026-10-16T15:09:38.559Z","title":"WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter","severity":"MEDIUM","score":4.9,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.00294},{"id":"CVE-2026-107646","published":"2026-10-16T06:40:59.675Z","updated":"2026-10-16T14:52:03.331Z","title":"HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script","severity":"MEDIUM","score":5.3,"vendor":"realmag777","product":"HUSKY – Products Filter for WooCommerce Professional","kev":false,"epss":0.00348},{"id":"CVE-2026-110191","published":"2026-10-16T06:00:15.743Z","updated":"2026-10-16T14:49:19.792Z","title":"Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Product Delivery Date for WooCommerce","kev":false,"epss":0.0023},{"id":"CVE-2026-110179","published":"2026-10-16T06:00:15.410Z","updated":"2026-10-16T14:49:19.976Z","title":"affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"affiliate-toolkit","kev":false,"epss":0.00285},{"id":"CVE-2026-110135","published":"2026-10-16T06:00:15.231Z","updated":"2026-10-16T14:49:20.138Z","title":"OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force","severity":"HIGH","score":7.4,"vendor":"Unknown","product":"OTP Login & Register Woocommerce","kev":false,"epss":0.00265},{"id":"CVE-2026-110039","published":"2026-10-16T06:00:15.049Z","updated":"2026-10-16T14:49:20.298Z","title":"Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Smush","kev":false,"epss":0.00205},{"id":"CVE-2026-110015","published":"2026-10-16T06:00:14.856Z","updated":"2026-10-16T14:49:20.475Z","title":"Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00135},{"id":"CVE-2026-110014","published":"2026-10-16T06:00:14.661Z","updated":"2026-10-16T14:49:20.626Z","title":"Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00221},{"id":"CVE-2026-110013","published":"2026-10-16T06:00:14.481Z","updated":"2026-10-16T14:49:20.785Z","title":"Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00163},{"id":"CVE-2026-110012","published":"2026-10-16T06:00:14.281Z","updated":"2026-10-16T14:49:20.947Z","title":"Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Salon Booking System","kev":false,"epss":0.00215},{"id":"CVE-2026-109982","published":"2026-10-16T06:00:14.108Z","updated":"2026-10-16T14:49:21.095Z","title":"MB Custom Post Types & Custom Taxonomies < 2.12.2 - Subscriber+ Missing Authorization via CPT UI Migration","severity":"MEDIUM","score":4.2,"vendor":"Unknown","product":"MB Custom Post Types & Custom Taxonomies","kev":false,"epss":0.00177},{"id":"CVE-2026-105974","published":"2026-10-16T06:00:13.926Z","updated":"2026-10-16T14:49:21.253Z","title":"Visual Form Builder <= 3.1 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Visual Form Builder","kev":false,"epss":0.00215},{"id":"CVE-2026-105973","published":"2026-10-16T06:00:13.742Z","updated":"2026-10-16T14:49:21.422Z","title":"Visual Form Builder <= 3.1 - Subscriber+ Arbitrary Form Field Reordering via Missing Authorization","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Visual Form Builder","kev":false,"epss":0.00185},{"id":"CVE-2026-103696","published":"2026-10-16T06:00:13.565Z","updated":"2026-10-16T14:49:21.576Z","title":"Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Mobile builder","kev":false,"epss":0.00268},{"id":"CVE-2026-74923","published":"2026-10-16T06:00:13.033Z","updated":"2026-10-16T14:49:21.732Z","title":"Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Document Gallery","kev":false,"epss":0.00206},{"id":"CVE-2026-92427","published":"2026-10-16T06:00:12.491Z","updated":"2026-10-16T14:49:21.897Z","title":"Coinsnap Bitcoin Crowdfunding <= 1.2.0 - Unauthenticated Payment Record Forgery via Webhook Secret Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Coinsnap Bitcoin Crowdfunding","kev":false,"epss":0.00194},{"id":"CVE-2026-91830","published":"2026-10-16T06:00:11.688Z","updated":"2026-10-16T14:49:22.052Z","title":"Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Subscribe to Comments","kev":false,"epss":0.00176},{"id":"CVE-2026-91833","published":"2026-10-16T06:00:11.471Z","updated":"2026-10-16T14:49:22.203Z","title":"WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"WX Subscribe  微信支付付费订阅","kev":false,"epss":0.00217},{"id":"CVE-2026-100186","published":"2026-10-16T05:30:28.153Z","updated":"2026-10-16T14:39:03.586Z","title":"User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field","severity":"HIGH","score":7.2,"vendor":"cozmoslabs","product":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor","kev":false,"epss":0.00241},{"id":"CVE-2026-88963","published":"2026-10-16T05:30:27.816Z","updated":"2026-10-16T14:39:03.737Z","title":"Tutor LMS <= 4.0.8 - Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting via 'redirect_url' Parameter","severity":"MEDIUM","score":6.1,"vendor":"themeum","product":"Tutor LMS – eLearning and online course solution","kev":false,"epss":0.00194},{"id":"CVE-2026-85659","published":"2026-10-16T05:30:27.472Z","updated":"2026-10-16T14:28:39.370Z","title":"PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter","severity":"HIGH","score":8.8,"vendor":"ontraport","product":"PilotPress","kev":false,"epss":0.00356},{"id":"CVE-2026-104932","published":"2026-10-16T05:30:27.126Z","updated":"2026-10-16T14:53:13.234Z","title":"Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption","severity":"HIGH","score":8,"vendor":"johnny5","product":"Search Regex","kev":false,"epss":0.00282},{"id":"CVE-2026-109513","published":"2026-10-16T05:30:26.784Z","updated":"2026-10-16T14:29:18.061Z","title":"NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00241},{"id":"CVE-2026-109414","published":"2026-10-16T05:30:26.454Z","updated":"2026-10-16T15:09:38.699Z","title":"Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator","severity":"MEDIUM","score":6.5,"vendor":"appsbd","product":"Vitepos – Point of Sale (POS) for WooCommerce","kev":false,"epss":0.00267},{"id":"CVE-2026-107764","published":"2026-10-16T05:30:26.095Z","updated":"2026-10-16T14:30:23.414Z","title":"SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink","severity":"HIGH","score":7.2,"vendor":"gpriday","product":"SiteOrigin CSS","kev":false,"epss":0.00236},{"id":"CVE-2026-111122","published":"2026-10-16T05:30:25.740Z","updated":"2026-10-16T14:39:03.885Z","title":"SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector","severity":"HIGH","score":7.2,"vendor":"gpriday","product":"SiteOrigin CSS","kev":false,"epss":0.00236},{"id":"CVE-2026-89051","published":"2026-10-16T05:30:25.377Z","updated":"2026-10-16T14:39:04.042Z","title":"Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"johndarrel","product":"Hide My WP Ghost – Security & Firewall","kev":false,"epss":0.0019},{"id":"CVE-2026-103768","published":"2026-10-16T05:30:25.043Z","updated":"2026-10-16T15:09:38.837Z","title":"ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment","severity":"CRITICAL","score":9.8,"vendor":"elextensions","product":"ELEX WordPress HelpDesk & Customer Ticketing System","kev":false,"epss":0.00578},{"id":"CVE-2026-109447","published":"2026-10-16T05:30:24.704Z","updated":"2026-10-16T15:09:38.993Z","title":"User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]","severity":"HIGH","score":8.1,"vendor":"cozmoslabs","product":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor","kev":false,"epss":0.00335},{"id":"CVE-2026-103896","published":"2026-10-16T05:30:24.365Z","updated":"2026-10-16T15:09:39.142Z","title":"10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path","severity":"HIGH","score":7.5,"vendor":"10web","product":"10Web Booster – Website speed optimization, Cache & Page Speed optimizer","kev":false,"epss":0.00464},{"id":"CVE-2026-109232","published":"2026-10-16T05:30:24.038Z","updated":"2026-10-16T14:39:04.204Z","title":"Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX","severity":"HIGH","score":7.2,"vendor":"wordpresschef","product":"Salon Booking System – Appointment Booking for Salons, Barbershops & Spas","kev":false,"epss":0.00247},{"id":"CVE-2026-104001","published":"2026-10-16T05:30:23.705Z","updated":"2026-10-16T15:09:39.289Z","title":"Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta","severity":"MEDIUM","score":5.4,"vendor":"rilwis","product":"Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated","kev":false,"epss":0.00227},{"id":"CVE-2026-95809","published":"2026-10-16T05:30:23.365Z","updated":"2026-10-16T14:39:04.367Z","title":"Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter","severity":"HIGH","score":7.2,"vendor":"optiuser","product":"Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights","kev":false,"epss":0.00247},{"id":"CVE-2026-12272","published":"2026-10-16T05:30:22.999Z","updated":"2026-10-16T17:06:46.117Z","title":"Lightweight Cookie Notice <= 1.19 - Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant","severity":"MEDIUM","score":5.3,"vendor":"daext","product":"Lightweight Cookie Notice – Cookie Banner for Cookie Consent","kev":false,"epss":0.00214},{"id":"CVE-2026-89079","published":"2026-10-16T05:30:22.643Z","updated":"2026-10-16T17:06:54.311Z","title":"Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter","severity":"CRITICAL","score":9.8,"vendor":"jfarthing84","product":"Theme My Login","kev":false,"epss":0.01631},{"id":"CVE-2026-93767","published":"2026-10-16T05:30:22.312Z","updated":"2026-10-16T15:44:36.511Z","title":"Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter","severity":"MEDIUM","score":6.5,"vendor":"tainacan","product":"Tainacan","kev":false,"epss":0.00567},{"id":"CVE-2026-95686","published":"2026-10-16T05:30:21.426Z","updated":"2026-10-16T14:39:04.505Z","title":"Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter","severity":"HIGH","score":7.2,"vendor":"optiuser","product":"Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights","kev":false,"epss":0.00278},{"id":"CVE-2026-104000","published":"2026-10-16T05:30:21.082Z","updated":"2026-10-16T15:45:05.671Z","title":"Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}","severity":"HIGH","score":7.2,"vendor":"croixhaug","product":"Simply Schedule Appointments","kev":false,"epss":0.00236},{"id":"CVE-2026-103480","published":"2026-10-16T05:30:20.709Z","updated":"2026-10-16T15:48:35.785Z","title":"Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"themefic","product":"Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental","kev":false,"epss":0.00188},{"id":"CVE-2026-107748","published":"2026-10-16T05:30:20.376Z","updated":"2026-10-16T14:39:04.655Z","title":"User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter","severity":"MEDIUM","score":6.4,"vendor":"cozmoslabs","product":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor","kev":false,"epss":0.00195},{"id":"CVE-2026-103999","published":"2026-10-16T05:30:20.027Z","updated":"2026-10-16T14:39:04.802Z","title":"Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File Upload","severity":"HIGH","score":7.2,"vendor":"themefic","product":"Ultra Addons for Contact Form 7","kev":false,"epss":0.00259},{"id":"CVE-2026-110017","published":"2026-10-16T05:30:19.662Z","updated":"2026-10-16T14:39:04.958Z","title":"Quick PayPal Payments: Payment Button & Form <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"fullworks","product":"Quick PayPal Payments: Payment Button & Form","kev":false,"epss":0.00195},{"id":"CVE-2026-100158","published":"2026-10-16T05:30:19.302Z","updated":"2026-10-16T14:39:05.141Z","title":"SQL Chart Builder <= 3.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SQL Chart Label (X-axis) via Stored User Field","severity":"MEDIUM","score":6.4,"vendor":"elvinhaci","product":"SQL Chart Builder","kev":false,"epss":0.00195},{"id":"CVE-2026-96570","published":"2026-10-16T05:30:18.814Z","updated":"2026-10-16T14:39:05.295Z","title":"Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter","severity":"HIGH","score":7.2,"vendor":"magazine3","product":"Schema & Structured Data for WP & AMP","kev":false,"epss":0.00314},{"id":"CVE-2026-111458","published":"2026-10-16T05:24:43.178Z","updated":"2026-10-16T12:30:53.251Z","title":"ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting","severity":"MEDIUM","score":6.8,"vendor":"adulau","product":"ssldump","kev":false,"epss":0.00094},{"id":"CVE-2026-109221","published":"2026-10-16T04:27:05.579Z","updated":"2026-10-16T17:07:01.282Z","title":"Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping","severity":"HIGH","score":8.1,"vendor":"trainingbusinesspros","product":"Groundhogg — CRM, Newsletters, and Marketing Automation","kev":false,"epss":0.00767},{"id":"CVE-2026-107659","published":"2026-10-16T04:27:05.213Z","updated":"2026-10-16T17:07:09.932Z","title":"Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT","severity":"HIGH","score":7.5,"vendor":"wpchill","product":"Modula Image Gallery – Photo Grid & Video Gallery","kev":false,"epss":0.00302},{"id":"CVE-2026-104798","published":"2026-10-16T04:27:04.876Z","updated":"2026-10-16T17:07:17.621Z","title":"My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute","severity":"CRITICAL","score":9.8,"vendor":"joedolson","product":"My Calendar – Accessible Event Manager","kev":false,"epss":0.00471},{"id":"CVE-2026-103481","published":"2026-10-16T04:27:04.530Z","updated":"2026-10-16T14:39:05.468Z","title":"Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scripting via 'permalink' Parameter","severity":"MEDIUM","score":6.1,"vendor":"mpol","product":"Gwolle Guestbook","kev":false,"epss":0.00211},{"id":"CVE-2026-110019","published":"2026-10-16T04:27:04.158Z","updated":"2026-10-16T16:02:36.966Z","title":"Bulk Page Generator <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion via 'authorize' Parameter / Suite OAuth Flow","severity":"MEDIUM","score":4.3,"vendor":"niklaslindemann","product":"Bulk Page Generator – LPagery","kev":false,"epss":0.00222},{"id":"CVE-2026-110590","published":"2026-10-16T04:27:03.790Z","updated":"2026-10-16T15:09:39.428Z","title":"Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint","severity":"HIGH","score":7.5,"vendor":"klarnaplugin","product":"Klarna for WooCommerce","kev":false,"epss":0.00325},{"id":"CVE-2026-107746","published":"2026-10-16T04:27:03.447Z","updated":"2026-10-16T15:53:00.052Z","title":"FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter","severity":"HIGH","score":7.5,"vendor":"teamfunnelkit","product":"FunnelKit – Funnel Builder Plugin for WooCommerce Checkout","kev":false,"epss":0.00318},{"id":"CVE-2026-111114","published":"2026-10-16T04:27:03.097Z","updated":"2026-10-16T16:04:40.422Z","title":"Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter","severity":"HIGH","score":7.5,"vendor":"posimyththemes","product":"Nexter Extension – Security, Performance, Code Snippets & Site Toolkit","kev":false,"epss":0.00281},{"id":"CVE-2026-109998","published":"2026-10-16T04:27:02.743Z","updated":"2026-10-16T14:39:05.628Z","title":"Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX","severity":"HIGH","score":7.2,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.00272},{"id":"CVE-2026-103911","published":"2026-10-16T04:27:02.364Z","updated":"2026-10-16T15:09:39.559Z","title":"Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter and Anonymous Comment via render_block","severity":"MEDIUM","score":6.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.00275},{"id":"CVE-2026-109191","published":"2026-10-16T04:27:01.828Z","updated":"2026-10-16T15:09:39.704Z","title":"Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML","severity":"MEDIUM","score":4.3,"vendor":"extendthemes","product":"Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy","kev":false,"epss":0.00277},{"id":"CVE-2026-109515","published":"2026-10-16T04:27:01.480Z","updated":"2026-10-16T15:09:39.848Z","title":"MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter","severity":"CRITICAL","score":9.8,"vendor":"properfraction","product":"MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.","kev":false,"epss":0.00439},{"id":"CVE-2026-109400","published":"2026-10-16T04:27:01.115Z","updated":"2026-10-16T15:46:59.318Z","title":"InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting","severity":"HIGH","score":7.5,"vendor":"instawp","product":"InstaWP Connect – 1-click WP Staging & Migration","kev":false,"epss":0.0034},{"id":"CVE-2026-110721","published":"2026-10-16T04:27:00.768Z","updated":"2026-10-16T15:09:39.990Z","title":"NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00245},{"id":"CVE-2026-103525","published":"2026-10-16T04:27:00.357Z","updated":"2026-10-16T15:09:40.130Z","title":"FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters","severity":"HIGH","score":7.5,"vendor":"wpmanageninja","product":"FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler","kev":false,"epss":0.00375},{"id":"CVE-2026-111106","published":"2026-10-16T04:26:59.962Z","updated":"2026-10-16T15:09:40.294Z","title":"Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter","severity":"MEDIUM","score":6.5,"vendor":"getwpfunnels","product":"Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance","kev":false,"epss":0.00273},{"id":"CVE-2026-109512","published":"2026-10-16T04:26:59.633Z","updated":"2026-10-16T14:39:06.105Z","title":"Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.00209},{"id":"CVE-2026-103895","published":"2026-10-16T04:26:59.302Z","updated":"2026-10-16T15:45:41.000Z","title":"miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State","severity":"HIGH","score":8.1,"vendor":"cyberlord92","product":"miniOrange OTP Login, Verification and SMS Notifications","kev":false,"epss":0.00427},{"id":"CVE-2026-101335","published":"2026-10-16T04:26:58.967Z","updated":"2026-10-16T15:09:40.456Z","title":"Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 'User-Agent' Header and 'referer_url' Parameter via Quiz Notification Merge Tags","severity":"MEDIUM","score":6.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.0028},{"id":"CVE-2026-109219","published":"2026-10-16T04:26:58.632Z","updated":"2026-10-23T18:28:46.339Z","title":"Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter","severity":"CRITICAL","score":9.8,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.00685},{"id":"CVE-2026-96562","published":"2026-10-16T04:26:58.157Z","updated":"2026-10-16T15:09:40.737Z","title":"Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback","severity":"MEDIUM","score":6.5,"vendor":"wpmudev","product":"Broken Link Checker","kev":false,"epss":0.0028},{"id":"CVE-2026-111451","published":"2026-10-16T03:52:27.436Z","updated":"2026-10-16T16:05:16.376Z","title":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can…","severity":"HIGH","score":7.8,"vendor":"Wheels","product":"Wheels CLI","kev":false,"epss":0.00141},{"id":"CVE-2026-111450","published":"2026-10-16T03:49:20.178Z","updated":"2026-10-19T18:42:08.011Z","title":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit…","severity":"MEDIUM","score":5.9,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00136},{"id":"CVE-2026-111449","published":"2026-10-16T03:44:11.707Z","updated":"2026-10-16T12:31:28.907Z","title":"Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes…","severity":"MEDIUM","score":5.9,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.0021},{"id":"CVE-2026-111448","published":"2026-10-16T03:41:58.401Z","updated":"2026-10-16T15:00:16.100Z","title":"Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries,…","severity":"LOW","score":3.7,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00208},{"id":"CVE-2026-111447","published":"2026-10-16T03:39:51.368Z","updated":"2026-10-21T02:11:55.972Z","title":"Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to…","severity":"HIGH","score":8.1,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00278},{"id":"CVE-2026-89280","published":"2026-10-16T03:38:42.851Z","updated":"2026-10-16T15:09:40.901Z","title":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id}","severity":"MEDIUM","score":4.3,"vendor":"dokaninc","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy","kev":false,"epss":0.00213},{"id":"CVE-2026-107758","published":"2026-10-16T03:38:42.502Z","updated":"2026-10-16T14:39:06.338Z","title":"Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments","severity":"HIGH","score":7.2,"vendor":"extendthemes","product":"Colibri Page Builder","kev":false,"epss":0.00356},{"id":"CVE-2026-109207","published":"2026-10-16T03:38:42.150Z","updated":"2026-10-16T14:39:06.482Z","title":"RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL","severity":"HIGH","score":7.2,"vendor":"themeisle","product":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator","kev":false,"epss":0.00307},{"id":"CVE-2026-104769","published":"2026-10-16T03:38:41.824Z","updated":"2026-10-16T16:18:46.835Z","title":"Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link>","severity":"MEDIUM","score":5.9,"vendor":"asadkn","product":"Debloat – Remove Unused CSS, Optimize JS","kev":false,"epss":0.00745},{"id":"CVE-2026-104745","published":"2026-10-16T03:38:41.491Z","updated":"2026-10-16T15:09:41.042Z","title":"Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter","severity":"HIGH","score":8.1,"vendor":"wpcodefactory","product":"Customer Email Verification for WooCommerce","kev":false,"epss":0.00684},{"id":"CVE-2026-97339","published":"2026-10-16T03:38:41.150Z","updated":"2026-10-16T16:19:33.306Z","title":"Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter","severity":"HIGH","score":7.2,"vendor":"complianz","product":"Complianz GDPR/CCPA Cookie Consent Banner","kev":false,"epss":0.00254},{"id":"CVE-2026-93953","published":"2026-10-16T03:38:40.799Z","updated":"2026-10-16T15:09:41.205Z","title":"Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation","severity":"HIGH","score":8,"vendor":"softaculous","product":"Backuply – Backup, Restore, Migrate and Clone","kev":false,"epss":0.0034},{"id":"CVE-2026-109990","published":"2026-10-16T03:38:40.465Z","updated":"2026-10-16T14:39:06.625Z","title":"Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"gijo","product":"Flying Scripts: Delay JavaScript to Improve Site Speed & Performance","kev":false,"epss":0.00331},{"id":"CVE-2026-103518","published":"2026-10-16T03:38:40.123Z","updated":"2026-10-16T15:09:41.350Z","title":"FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys","severity":"MEDIUM","score":4.9,"vendor":"wpmanageninja","product":"FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler","kev":false,"epss":0.00377},{"id":"CVE-2026-77829","published":"2026-10-16T03:38:39.787Z","updated":"2026-10-16T16:20:03.763Z","title":"Cooked <= 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content","severity":"MEDIUM","score":6.4,"vendor":"goratech","product":"Cooked – Recipe Management","kev":false,"epss":0.00236},{"id":"CVE-2026-93535","published":"2026-10-16T03:38:39.317Z","updated":"2026-10-16T14:39:06.770Z","title":"WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"wppool","product":"Dark Mode – Improve Accessibility with AI Powered Dark Theme","kev":false,"epss":0.00152},{"id":"CVE-2026-111446","published":"2026-10-16T03:37:32.158Z","updated":"2026-10-16T16:20:50.474Z","title":"Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in…","severity":"HIGH","score":8.6,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00261},{"id":"CVE-2026-111445","published":"2026-10-16T03:35:00.952Z","updated":"2026-10-19T18:42:15.796Z","title":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=),…","severity":"HIGH","score":8.1,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00278},{"id":"CVE-2026-111444","published":"2026-10-16T03:31:30.485Z","updated":"2026-10-16T12:32:27.499Z","title":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request…","severity":"CRITICAL","score":9.8,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00319},{"id":"CVE-2026-111443","published":"2026-10-16T03:28:28.644Z","updated":"2026-10-16T15:01:15.161Z","title":"Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an…","severity":"MEDIUM","score":6.5,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.0016},{"id":"CVE-2026-111442","published":"2026-10-16T03:09:43.812Z","updated":"2026-10-21T02:10:42.533Z","title":"Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous…","severity":"MEDIUM","score":5.3,"vendor":"BackdropCMS","product":"Backdrop","kev":false,"epss":0.00234},{"id":"CVE-2026-109813","published":"2026-10-16T02:57:52.388Z","updated":"2026-10-16T13:54:15.659Z","title":"Shared Hard-coded Root CA Private Key","severity":"HIGH","score":8.6,"vendor":"Moxa","product":"AIG-302 Series","kev":false,"epss":0.00163},{"id":"CVE-2026-109812","published":"2026-10-16T02:54:46.573Z","updated":"2026-10-16T16:21:35.405Z","title":"Missing Authorization on Secret Endpoints","severity":"MEDIUM","score":6.9,"vendor":"Moxa","product":"AIG-302 Series","kev":false,"epss":0.00133},{"id":"CVE-2026-100159","published":"2026-10-16T02:26:09.256Z","updated":"2026-10-16T15:09:41.509Z","title":"Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers","severity":"MEDIUM","score":4.8,"vendor":"ays-pro","product":"Popup Box – Create Countdown, Coupon, Video, Contact Form Popups","kev":false,"epss":0.00258},{"id":"CVE-2026-105228","published":"2026-10-16T01:27:55.508Z","updated":"2026-10-16T16:22:08.950Z","title":"ISPSoft Out-of-Bounds Read Vulnerability","severity":"HIGH","score":7,"vendor":"Deltaww","product":"ISPSoft","kev":false,"epss":0.00308},{"id":"CVE-2026-105227","published":"2026-10-16T01:27:28.267Z","updated":"2026-10-16T16:22:37.872Z","title":"ISPSoft Out-of-Bounds Read Vulnerability","severity":"HIGH","score":7,"vendor":"Deltaww","product":"ISPSoft","kev":false,"epss":0.00308},{"id":"CVE-2026-111389","published":"2026-10-16T01:17:57.752Z","updated":"2026-10-18T12:03:17.805Z","title":"Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation","severity":"HIGH","score":8.3,"vendor":"frappe","product":"hrms","kev":false,"epss":0.00278},{"id":"CVE-2026-111388","published":"2026-10-16T01:17:56.859Z","updated":"2026-10-16T16:23:33.709Z","title":"Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth Authentication","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00174},{"id":"CVE-2026-111387","published":"2026-10-16T01:17:55.957Z","updated":"2026-10-16T17:07:24.986Z","title":"Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint","severity":"HIGH","score":7.1,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.00264},{"id":"CVE-2026-111386","published":"2026-10-16T01:17:54.995Z","updated":"2026-10-16T13:56:01.330Z","title":"Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig","severity":"MEDIUM","score":5.3,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.0021},{"id":"CVE-2026-111385","published":"2026-10-16T01:17:54.057Z","updated":"2026-10-21T02:07:31.134Z","title":"Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools","severity":"MEDIUM","score":6.3,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.00238},{"id":"CVE-2026-111384","published":"2026-10-16T01:17:53.095Z","updated":"2026-10-23T19:42:19.460Z","title":"Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket","severity":"HIGH","score":7.1,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.00358},{"id":"CVE-2026-111383","published":"2026-10-16T01:17:52.239Z","updated":"2026-10-16T16:24:21.877Z","title":"Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket","severity":"HIGH","score":7.1,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.00358},{"id":"CVE-2026-111382","published":"2026-10-16T01:17:51.334Z","updated":"2026-10-16T17:07:31.487Z","title":"FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00384},{"id":"CVE-2026-111381","published":"2026-10-16T01:17:50.516Z","updated":"2026-10-28T19:04:03.455Z","title":"FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser","severity":"HIGH","score":7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00176},{"id":"CVE-2026-111380","published":"2026-10-16T01:17:48.329Z","updated":"2026-10-21T02:06:15.611Z","title":"FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00319},{"id":"CVE-2026-111379","published":"2026-10-16T01:17:47.354Z","updated":"2026-10-28T19:04:34.300Z","title":"FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3","severity":"HIGH","score":7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00192},{"id":"CVE-2026-111378","published":"2026-10-16T01:17:46.340Z","updated":"2026-10-16T16:25:12.637Z","title":"FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00515},{"id":"CVE-2026-111377","published":"2026-10-16T01:17:45.045Z","updated":"2026-10-16T17:07:38.827Z","title":"FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00318},{"id":"CVE-2026-111376","published":"2026-10-16T01:17:43.621Z","updated":"2026-10-16T13:58:15.578Z","title":"FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE","severity":"LOW","score":2.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00167},{"id":"CVE-2026-111375","published":"2026-10-16T01:17:42.614Z","updated":"2026-10-21T02:02:11.431Z","title":"FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title","severity":"MEDIUM","score":6.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00315},{"id":"CVE-2026-111374","published":"2026-10-16T01:17:41.556Z","updated":"2026-10-16T18:05:37.109Z","title":"FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest","severity":"MEDIUM","score":6,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00302},{"id":"CVE-2026-111373","published":"2026-10-16T01:17:40.463Z","updated":"2026-10-16T16:25:47.580Z","title":"FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping","severity":"MEDIUM","score":6.9,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00279},{"id":"CVE-2026-111237","published":"2026-10-16T01:00:18.557Z","updated":"2026-10-21T02:01:19.191Z","title":"Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection","severity":"MEDIUM","score":4.8,"vendor":"Ultralytics","product":"FastSAM","kev":false,"epss":0.00123},{"id":"CVE-2026-111212","published":"2026-10-16T00:45:19.743Z","updated":"2026-10-16T16:28:09.956Z","title":"ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection","severity":"LOW","score":2.4,"vendor":"ImprintLab","product":"Medical-SAM-Adapter","kev":false,"epss":0.00115},{"id":"CVE-2026-111210","published":"2026-10-16T00:00:18.048Z","updated":"2026-10-16T17:07:45.465Z","title":"bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":null,"product":"bitcoinj","kev":false,"epss":0.00291},{"id":"CVE-2026-106705","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-16T16:29:53.956Z","title":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00246},{"id":"CVE-2026-95183","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-21T01:55:26.148Z","title":"An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00255},{"id":"CVE-2026-95182","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-16T15:13:19.214Z","title":"An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable…","severity":"CRITICAL","score":10,"vendor":null,"product":null,"kev":false,"epss":0.00533},{"id":"CVE-2026-88755","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-16T19:06:26.428Z","title":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0021},{"id":"CVE-2026-46472","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-16T19:00:49.489Z","title":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00308},{"id":"CVE-2026-46471","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-19T15:30:39.782Z","title":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00188},{"id":"CVE-2026-26846","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-21T01:57:56.424Z","title":"Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00657},{"id":"CVE-2025-66969","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-21T02:00:04.759Z","title":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00339},{"id":"CVE-2025-55653","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-20T19:25:01.689Z","title":"GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted MP4 file containing…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00183},{"id":"CVE-2025-55640","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-26T17:26:18.665Z","title":"A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00195},{"id":"CVE-2025-52097","published":"2026-10-16T00:00:00.000Z","updated":"2026-10-29T12:06:57.435Z","title":"Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00333},{"id":"CVE-2026-84823","published":"2026-10-15T23:47:13.986Z","updated":"2026-10-26T14:36:53.579Z","title":"Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","kev":false,"epss":0.00416},{"id":"CVE-2026-92777","published":"2026-10-15T23:18:01.762Z","updated":"2026-10-16T16:30:52.846Z","title":"A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections…","severity":"MEDIUM","score":5.4,"vendor":"Lenovo","product":"Idea Tab Pro (TB373FU)","kev":false,"epss":0.00147},{"id":"CVE-2026-92629","published":"2026-10-15T23:17:53.551Z","updated":"2026-10-16T14:00:54.243Z","title":"A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a…","severity":"HIGH","score":7,"vendor":"Lenovo","product":"Baiying PC Client","kev":false,"epss":0.00102},{"id":"CVE-2026-89062","published":"2026-10-15T23:17:46.990Z","updated":"2026-10-16T14:05:04.916Z","title":"A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue…","severity":"MEDIUM","score":6.8,"vendor":"Lenovo","product":"Energy Management Driver","kev":false,"epss":0.00093},{"id":"CVE-2026-89057","published":"2026-10-15T23:17:37.340Z","updated":"2026-10-16T18:58:59.760Z","title":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device…","severity":"HIGH","score":7,"vendor":"Lenovo","product":"Idea Tab Pro (TB373FU)","kev":false,"epss":0.00195},{"id":"CVE-2026-75941","published":"2026-10-15T23:17:26.930Z","updated":"2026-10-16T14:07:12.156Z","title":"A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on…","severity":"HIGH","score":8.6,"vendor":"Lenovo","product":"Legion Zone Application","kev":false,"epss":0.00264},{"id":"CVE-2026-16755","published":"2026-10-15T23:17:07.584Z","updated":"2026-10-16T14:08:33.634Z","title":"A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user…","severity":"MEDIUM","score":6,"vendor":"Lenovo","product":"Smart Camera C33","kev":false,"epss":0.00157},{"id":"CVE-2026-16754","published":"2026-10-15T23:16:59.545Z","updated":"2026-10-16T14:10:12.796Z","title":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could…","severity":"MEDIUM","score":5.9,"vendor":"Lenovo","product":"Smart Camera C33","kev":false,"epss":0.00074},{"id":"CVE-2026-110914","published":"2026-10-15T22:04:19.515Z","updated":"2026-10-16T03:57:22.914Z","title":"Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00303},{"id":"CVE-2026-110915","published":"2026-10-15T22:04:19.283Z","updated":"2026-10-16T03:57:22.217Z","title":"Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00303},{"id":"CVE-2026-110916","published":"2026-10-15T22:04:19.060Z","updated":"2026-10-16T18:41:56.043Z","title":"Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00363},{"id":"CVE-2026-110920","published":"2026-10-15T22:04:18.838Z","updated":"2026-10-16T03:57:21.534Z","title":"Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00252},{"id":"CVE-2026-110921","published":"2026-10-15T22:04:18.618Z","updated":"2026-10-16T03:57:20.795Z","title":"Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00252},{"id":"CVE-2026-110917","published":"2026-10-15T22:04:18.398Z","updated":"2026-10-16T01:29:36.783Z","title":"Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity:…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202},{"id":"CVE-2026-110918","published":"2026-10-15T22:04:18.074Z","updated":"2026-10-16T01:30:01.616Z","title":"Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202},{"id":"CVE-2026-110919","published":"2026-10-15T22:04:17.867Z","updated":"2026-10-16T03:57:20.114Z","title":"Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00252},{"id":"CVE-2026-110913","published":"2026-10-15T22:04:17.437Z","updated":"2026-10-16T03:57:23.600Z","title":"Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00325},{"id":"CVE-2026-110922","published":"2026-10-15T22:04:17.105Z","updated":"2026-10-16T03:57:19.417Z","title":"Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00384},{"id":"CVE-2026-111369","published":"2026-10-15T21:43:52.330Z","updated":"2026-10-16T17:08:02.709Z","title":"ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes","severity":"HIGH","score":7.1,"vendor":"classroomio","product":"ClassroomIO","kev":false,"epss":0.00246},{"id":"CVE-2026-111368","published":"2026-10-15T21:43:51.616Z","updated":"2026-10-16T14:14:38.123Z","title":"ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes","severity":"MEDIUM","score":6.1,"vendor":"classroomio","product":"ClassroomIO","kev":false,"epss":0.00291},{"id":"CVE-2026-111367","published":"2026-10-15T21:43:50.886Z","updated":"2026-10-21T01:53:10.056Z","title":"BillionMail through 4.9 Forgeable JWTs via Default Signing Key","severity":"MEDIUM","score":6.9,"vendor":"aaPanel","product":"BillionMail","kev":false,"epss":0.00332},{"id":"CVE-2026-111366","published":"2026-10-15T21:43:49.835Z","updated":"2026-10-16T15:53:26.458Z","title":"cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints","severity":"HIGH","score":8.6,"vendor":"cool-team-official","product":"cool-admin-midway","kev":false,"epss":0.00532},{"id":"CVE-2026-111365","published":"2026-10-15T21:43:49.146Z","updated":"2026-10-16T16:32:15.706Z","title":"cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints","severity":"HIGH","score":7,"vendor":"cool-team-official","product":"cool-admin-midway","kev":false,"epss":0.00325},{"id":"CVE-2026-111364","published":"2026-10-15T21:43:48.449Z","updated":"2026-10-16T17:08:10.511Z","title":"MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch","severity":"HIGH","score":7.1,"vendor":"mindoc-org","product":"MinDoc","kev":false,"epss":0.00238},{"id":"CVE-2026-111363","published":"2026-10-15T21:43:47.748Z","updated":"2026-10-16T14:19:20.305Z","title":"BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox","severity":"HIGH","score":7.1,"vendor":"dataelement","product":"bisheng","kev":false,"epss":0.00303},{"id":"CVE-2026-111359","published":"2026-10-15T21:43:47.038Z","updated":"2026-10-21T01:48:22.257Z","title":"CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift","severity":"HIGH","score":7.1,"vendor":"crmeb","product":"CRMEB","kev":false,"epss":0.00251},{"id":"CVE-2026-111358","published":"2026-10-15T21:43:46.335Z","updated":"2026-10-16T15:55:23.157Z","title":"SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form","severity":"MEDIUM","score":5.3,"vendor":"mettle","product":"sendportal-core","kev":false,"epss":0.00319},{"id":"CVE-2026-111356","published":"2026-10-15T21:43:45.212Z","updated":"2026-10-16T16:49:52.059Z","title":"MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force","severity":"CRITICAL","score":9.1,"vendor":"magicblack","product":"MacCMS","kev":false,"epss":0.00448},{"id":"CVE-2026-111355","published":"2026-10-15T21:43:44.503Z","updated":"2026-10-16T17:08:19.434Z","title":"zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints","severity":"MEDIUM","score":5.3,"vendor":"zhontai","product":"Admin.Core","kev":false,"epss":0.00278},{"id":"CVE-2026-111354","published":"2026-10-15T21:43:43.756Z","updated":"2026-10-16T14:21:47.772Z","title":"crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints","severity":"LOW","score":2.3,"vendor":"crmeb","product":"crmeb_java","kev":false,"epss":0.00323},{"id":"CVE-2026-111353","published":"2026-10-15T21:43:43.068Z","updated":"2026-10-21T01:47:26.201Z","title":"Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints","severity":"MEDIUM","score":5.3,"vendor":"Peppermint-Lab","product":"peppermint","kev":false,"epss":0.00299},{"id":"CVE-2026-111352","published":"2026-10-15T21:43:42.341Z","updated":"2026-10-23T19:44:50.275Z","title":"ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API","severity":"HIGH","score":8.7,"vendor":"ThinkCMF","product":"ThinkCMF","kev":false,"epss":0.00458},{"id":"CVE-2026-111351","published":"2026-10-15T21:43:41.617Z","updated":"2026-10-16T16:47:40.069Z","title":"metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API","severity":"LOW","score":2.3,"vendor":"metasfresh","product":"metasfresh","kev":false,"epss":0.0028},{"id":"CVE-2026-111350","published":"2026-10-15T21:43:40.792Z","updated":"2026-10-16T17:08:28.899Z","title":"Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API","severity":"LOW","score":2.3,"vendor":"papermark","product":"Papermark","kev":false,"epss":0.00253},{"id":"CVE-2026-111349","published":"2026-10-15T21:43:40.064Z","updated":"2026-10-16T14:24:29.492Z","title":"Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL","severity":"MEDIUM","score":6.9,"vendor":"puemos","product":"Craftplan","kev":false,"epss":0.00374},{"id":"CVE-2026-111348","published":"2026-10-15T21:43:39.350Z","updated":"2026-10-21T01:46:15.633Z","title":"Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints","severity":"MEDIUM","score":5.3,"vendor":"likeshop","product":"likeshop","kev":false,"epss":0.00273},{"id":"CVE-2026-111347","published":"2026-10-15T21:43:38.664Z","updated":"2026-10-16T18:00:31.558Z","title":"go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd","severity":"HIGH","score":8.2,"vendor":"opsre","product":"go-ldap-admin","kev":false,"epss":0.00497},{"id":"CVE-2026-111346","published":"2026-10-15T21:43:37.962Z","updated":"2026-10-16T16:46:31.490Z","title":"ZenTao PMS through 22.6 Authorization Bypass via action::editComment","severity":"MEDIUM","score":5.3,"vendor":"easysoft","product":"zentaopms","kev":false,"epss":0.00294},{"id":"CVE-2026-111345","published":"2026-10-15T21:43:37.267Z","updated":"2026-10-16T17:08:37.622Z","title":"Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00269},{"id":"CVE-2026-111344","published":"2026-10-15T21:43:36.608Z","updated":"2026-10-16T14:28:05.721Z","title":"APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description","severity":"MEDIUM","score":5.3,"vendor":"apitable","product":"apitable","kev":false,"epss":0.00338},{"id":"CVE-2026-111343","published":"2026-10-15T21:43:35.878Z","updated":"2026-10-21T01:44:35.077Z","title":"pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}","severity":"MEDIUM","score":5.3,"vendor":"pig-mesh","product":"pig","kev":false,"epss":0.00315},{"id":"CVE-2026-111332","published":"2026-10-15T21:43:35.166Z","updated":"2026-10-23T19:46:08.988Z","title":"OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie","severity":"MEDIUM","score":6.3,"vendor":"AtalayaLabs","product":"OxiCloud","kev":false,"epss":0.00349},{"id":"CVE-2026-111331","published":"2026-10-15T21:43:34.445Z","updated":"2026-10-16T16:43:54.752Z","title":"Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router","severity":"MEDIUM","score":5.3,"vendor":"Dokploy","product":"Dokploy","kev":false,"epss":0.00324},{"id":"CVE-2026-111330","published":"2026-10-15T21:43:33.735Z","updated":"2026-10-16T17:08:47.183Z","title":"JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1","severity":"HIGH","score":8.2,"vendor":"juggleim","product":"JuggleIM","kev":false,"epss":0.00222},{"id":"CVE-2026-111329","published":"2026-10-15T21:43:33.035Z","updated":"2026-10-16T14:29:03.954Z","title":"JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console","severity":"CRITICAL","score":9.3,"vendor":"juggleim","product":"JuggleIM","kev":false,"epss":0.00688},{"id":"CVE-2026-111324","published":"2026-10-15T21:43:32.384Z","updated":"2026-10-21T01:43:07.736Z","title":"rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo","severity":"MEDIUM","score":6.9,"vendor":"lejianwen","product":"rustdesk-api","kev":false,"epss":0.00407},{"id":"CVE-2026-111323","published":"2026-10-15T21:43:31.708Z","updated":"2026-10-16T18:02:23.421Z","title":"RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint","severity":"MEDIUM","score":6.9,"vendor":"samugit83","product":"RedAmon","kev":false,"epss":0.00403},{"id":"CVE-2026-111322","published":"2026-10-15T21:43:31.045Z","updated":"2026-10-16T19:41:55.935Z","title":"Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API","severity":"CRITICAL","score":9.3,"vendor":"coleam00","product":"Archon","kev":false,"epss":0.00892},{"id":"CVE-2026-111321","published":"2026-10-15T21:43:30.254Z","updated":"2026-10-16T17:08:55.995Z","title":"TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions","severity":"MEDIUM","score":5.3,"vendor":"TaskingAI","product":"TaskingAI","kev":false,"epss":0.00223},{"id":"CVE-2026-111320","published":"2026-10-15T21:43:29.519Z","updated":"2026-10-16T14:31:07.040Z","title":"ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check","severity":"MEDIUM","score":6.9,"vendor":"ValueCell-ai","product":"ValueCell","kev":false,"epss":0.00385},{"id":"CVE-2026-111313","published":"2026-10-15T21:43:28.822Z","updated":"2026-10-21T01:41:31.540Z","title":"JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch","severity":"HIGH","score":7.1,"vendor":"DaKheera47","product":"JobOps","kev":false,"epss":0.00386},{"id":"CVE-2026-111312","published":"2026-10-15T21:43:28.153Z","updated":"2026-10-23T19:49:35.185Z","title":"OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route","severity":"CRITICAL","score":9.2,"vendor":"OpenHealthForAll","product":"OpenHealth","kev":false,"epss":0.00589},{"id":"CVE-2026-111284","published":"2026-10-15T21:43:27.434Z","updated":"2026-10-16T19:42:44.500Z","title":"Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal","severity":"MEDIUM","score":5.1,"vendor":"Webkul","product":"Aureus ERP","kev":false,"epss":0.00215},{"id":"CVE-2026-111283","published":"2026-10-15T21:43:26.742Z","updated":"2026-10-20T10:46:34.636Z","title":"BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration","severity":"CRITICAL","score":9.5,"vendor":"BMC Helix","product":"BMC Helix Network Management","kev":false,"epss":0.00766},{"id":"CVE-2026-111282","published":"2026-10-15T21:43:26.018Z","updated":"2026-10-16T18:57:41.530Z","title":"iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer","severity":"HIGH","score":8.8,"vendor":"driftregion","product":"iso14229","kev":false,"epss":0.00614},{"id":"CVE-2026-111281","published":"2026-10-15T21:43:25.321Z","updated":"2026-10-21T01:40:14.038Z","title":"Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials","severity":"CRITICAL","score":9.3,"vendor":"Jooan","product":"JA-A12","kev":false,"epss":0.00561},{"id":"CVE-2026-111280","published":"2026-10-15T21:43:24.650Z","updated":"2026-10-29T16:55:58.134Z","title":"snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea","severity":"HIGH","score":8.3,"vendor":"davenardella","product":"snap7","kev":false,"epss":0.0051},{"id":"CVE-2026-111279","published":"2026-10-15T21:43:23.862Z","updated":"2026-10-16T19:43:45.103Z","title":"Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER","severity":"HIGH","score":8.7,"vendor":"dragonflydb","product":"dragonfly","kev":false,"epss":0.00589},{"id":"CVE-2026-111278","published":"2026-10-15T21:43:23.205Z","updated":"2026-10-16T17:09:17.598Z","title":"NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML","severity":"MEDIUM","score":6.9,"vendor":"nivocart","product":"nivocart","kev":false,"epss":0.00321},{"id":"CVE-2026-111277","published":"2026-10-15T21:43:22.473Z","updated":"2026-10-16T14:36:04.161Z","title":"NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download","severity":"HIGH","score":8.7,"vendor":"nivocart","product":"nivocart","kev":false,"epss":0.00478},{"id":"CVE-2026-111275","published":"2026-10-15T21:43:21.786Z","updated":"2026-10-21T01:37:40.421Z","title":"nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nifti_convert_n2hdr2nim","severity":"MEDIUM","score":6.9,"vendor":"NIFTI-Imaging","product":"nifti_clib","kev":false,"epss":0.00196},{"id":"CVE-2026-111274","published":"2026-10-15T21:43:20.415Z","updated":"2026-11-02T02:21:48.872Z","title":"unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields","severity":"MEDIUM","score":6.8,"vendor":"selmf","product":"unarr","kev":false,"epss":0.00196},{"id":"CVE-2026-111273","published":"2026-10-15T21:43:19.717Z","updated":"2026-10-16T19:39:08.849Z","title":"unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name","severity":"MEDIUM","score":6.9,"vendor":"selmf","product":"unarr","kev":false,"epss":0.00209},{"id":"CVE-2026-111272","published":"2026-10-15T21:43:19.039Z","updated":"2026-10-16T17:09:25.683Z","title":"LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo","severity":"MEDIUM","score":6.8,"vendor":"LibRaw","product":"LibRaw","kev":false,"epss":0.00128},{"id":"CVE-2026-111271","published":"2026-10-15T21:43:18.348Z","updated":"2026-10-16T14:39:25.166Z","title":"libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via CSoundFile::ReadAMS2","severity":"MEDIUM","score":6.8,"vendor":"Konstanty Bialkowski","product":"libmodplug","kev":false,"epss":0.00195},{"id":"CVE-2026-111270","published":"2026-10-15T21:43:17.665Z","updated":"2026-10-21T01:33:42.918Z","title":"libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM","severity":"MEDIUM","score":6.9,"vendor":"Konstanty Bialkowski","product":"libmodplug","kev":false,"epss":0.00196},{"id":"CVE-2026-111269","published":"2026-10-15T21:43:16.966Z","updated":"2026-10-26T14:15:58.734Z","title":"libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string","severity":"MEDIUM","score":6.9,"vendor":"libical","product":"libical","kev":false,"epss":0.00244},{"id":"CVE-2024-58397","published":"2026-10-15T21:43:16.269Z","updated":"2026-10-16T19:45:43.877Z","title":"MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters","severity":"MEDIUM","score":6.9,"vendor":"enzo1982","product":"mp4v2","kev":false,"epss":0.00197},{"id":"CVE-2026-94135","published":"2026-10-15T21:40:24.810Z","updated":"2026-10-16T14:46:22.385Z","title":"Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache Airflow SFTP provider","kev":false,"epss":0.0038},{"id":"CVE-2026-96806","published":"2026-10-15T21:40:20.555Z","updated":"2026-10-16T14:50:50.600Z","title":"Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token","severity":"MEDIUM","score":5.8,"vendor":"Apache Software Foundation","product":"Apache Airflow Keycloak provider","kev":false,"epss":0.00373},{"id":"CVE-2026-94134","published":"2026-10-15T21:39:03.081Z","updated":"2026-10-16T14:53:59.032Z","title":"Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Airflow SSH provider","kev":false,"epss":0.006},{"id":"CVE-2026-92228","published":"2026-10-15T21:37:54.612Z","updated":"2026-10-16T14:56:07.947Z","title":"Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Airflow Keycloak provider","kev":false,"epss":0.00258},{"id":"CVE-2026-109468","published":"2026-10-15T20:57:33.441Z","updated":"2026-10-31T18:01:16.234Z","title":"ASP.NET Core Denial of Service Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","kev":false,"epss":0.0095},{"id":"CVE-2026-108455","published":"2026-10-15T20:57:31.802Z","updated":"2026-10-31T18:01:11.444Z","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108454","published":"2026-10-15T20:57:31.358Z","updated":"2026-10-31T18:01:10.860Z","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108453","published":"2026-10-15T20:57:30.741Z","updated":"2026-10-31T18:01:10.251Z","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00756},{"id":"CVE-2026-108452","published":"2026-10-15T20:57:30.172Z","updated":"2026-10-31T18:01:09.662Z","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","kev":false,"epss":0.0082},{"id":"CVE-2026-108451","published":"2026-10-15T20:57:29.634Z","updated":"2026-10-31T18:01:08.449Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108450","published":"2026-10-15T20:57:29.062Z","updated":"2026-10-31T18:01:07.865Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108449","published":"2026-10-15T20:57:28.481Z","updated":"2026-10-31T18:01:07.344Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108448","published":"2026-10-15T20:57:27.955Z","updated":"2026-10-31T18:01:06.813Z","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00477},{"id":"CVE-2026-108447","published":"2026-10-15T20:57:27.523Z","updated":"2026-10-31T18:01:06.294Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108446","published":"2026-10-15T20:57:27.027Z","updated":"2026-10-31T18:01:05.755Z","title":"Microsoft Office Excel Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108445","published":"2026-10-15T20:57:26.447Z","updated":"2026-10-31T18:01:05.156Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108444","published":"2026-10-15T20:57:25.862Z","updated":"2026-10-31T18:01:04.687Z","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108443","published":"2026-10-15T20:57:25.400Z","updated":"2026-10-31T18:01:04.161Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108442","published":"2026-10-15T20:57:24.871Z","updated":"2026-10-31T18:01:03.716Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108441","published":"2026-10-15T20:57:24.439Z","updated":"2026-10-31T18:01:03.127Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108440","published":"2026-10-15T20:57:23.936Z","updated":"2026-10-31T18:01:02.474Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108439","published":"2026-10-15T20:57:23.418Z","updated":"2026-10-31T18:01:01.947Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108438","published":"2026-10-15T20:57:22.905Z","updated":"2026-10-31T18:01:01.362Z","title":"Microsoft Office Word Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108437","published":"2026-10-15T20:57:22.383Z","updated":"2026-10-31T18:01:00.858Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108436","published":"2026-10-15T20:57:21.960Z","updated":"2026-10-31T18:01:00.277Z","title":"Microsoft Office Word Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108435","published":"2026-10-15T20:57:21.375Z","updated":"2026-10-31T18:00:59.753Z","title":"Microsoft Office Word Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108434","published":"2026-10-15T20:57:20.932Z","updated":"2026-10-31T18:00:59.169Z","title":"Microsoft Office Word Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.0074},{"id":"CVE-2026-108433","published":"2026-10-15T20:57:20.351Z","updated":"2026-10-31T18:00:58.598Z","title":"Microsoft Office Word Security Feature Bypass Vulnerability","severity":"HIGH","score":7.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00419},{"id":"CVE-2026-108432","published":"2026-10-15T20:57:19.909Z","updated":"2026-10-31T18:00:58.093Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108431","published":"2026-10-15T20:57:19.406Z","updated":"2026-10-31T18:00:56.732Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108430","published":"2026-10-15T20:57:18.959Z","updated":"2026-10-31T18:00:56.126Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108429","published":"2026-10-15T20:57:18.497Z","updated":"2026-10-31T18:00:55.602Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108428","published":"2026-10-15T20:57:18.040Z","updated":"2026-10-31T18:00:55.021Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00618},{"id":"CVE-2026-108427","published":"2026-10-15T20:57:17.525Z","updated":"2026-10-31T18:00:54.446Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00635},{"id":"CVE-2026-108426","published":"2026-10-15T20:57:16.920Z","updated":"2026-10-31T18:00:54.005Z","title":"Microsoft Office Word Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","kev":false,"epss":0.00605},{"id":"CVE-2026-111357","published":"2026-10-15T20:56:58.045Z","updated":"2026-10-31T03:56:17.842Z","title":"Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root,…","severity":"HIGH","score":7,"vendor":"Ivanti","product":"Connect Secure","kev":true,"epss":0.00533},{"id":"CVE-2026-105040","published":"2026-10-15T20:43:47.669Z","updated":"2026-10-16T19:56:03.407Z","title":"EnergizeLab Eilik User-ID Mass Assignment Account Takeover","severity":"HIGH","score":8.8,"vendor":"EnergizeLab","product":"NestJS auth service","kev":false,"epss":0.00348},{"id":"CVE-2026-105039","published":"2026-10-15T20:43:38.761Z","updated":"2026-10-16T19:55:16.658Z","title":"EnergizeLab Station Middleware Admin APIs Missing Role Checks","severity":"CRITICAL","score":9.6,"vendor":"EnergizeLab","product":"station-middleware","kev":false,"epss":0.00293},{"id":"CVE-2026-105038","published":"2026-10-15T20:43:30.618Z","updated":"2026-10-16T19:54:32.126Z","title":"EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching","severity":"CRITICAL","score":9.8,"vendor":"EnergizeLab","product":"FastAPI AI inference server","kev":false,"epss":0.00646},{"id":"CVE-2026-105037","published":"2026-10-15T20:43:13.599Z","updated":"2026-10-16T19:53:45.885Z","title":"EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read","severity":"CRITICAL","score":9.9,"vendor":"EnergizeLab","product":"station-middleware","kev":false,"epss":0.004},{"id":"CVE-2026-105036","published":"2026-10-15T20:43:04.229Z","updated":"2026-10-16T19:53:00.841Z","title":"EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks","severity":"HIGH","score":7.5,"vendor":"EnergizeLab","product":"Robot firmware (mode 104000)","kev":false,"epss":0.00235},{"id":"CVE-2026-105035","published":"2026-10-15T20:42:53.222Z","updated":"2026-10-16T19:51:58.826Z","title":"EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key","severity":"HIGH","score":7.8,"vendor":"EnergizeLab","product":"FirmwareUpdater","kev":false,"epss":0.00199},{"id":"CVE-2026-105034","published":"2026-10-15T20:42:42.975Z","updated":"2026-10-16T19:50:56.544Z","title":"EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers","severity":"HIGH","score":8.2,"vendor":"EnergizeLab","product":"NestJS auth service","kev":false,"epss":0.00558},{"id":"CVE-2026-105033","published":"2026-10-15T20:42:34.038Z","updated":"2026-10-16T19:50:15.092Z","title":"EnergizeLab AI Station Default Root Credentials with SSH Enabled","severity":"HIGH","score":8.8,"vendor":"EnergizeLab","product":"AI Station firmware (RK3562)","kev":false,"epss":0.00354},{"id":"CVE-2026-105032","published":"2026-10-15T20:42:04.726Z","updated":"2026-10-16T19:48:56.951Z","title":"EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write","severity":"CRITICAL","score":9.1,"vendor":"EnergizeLab","product":"FastAPI AI inference server","kev":false,"epss":0.00902},{"id":"CVE-2026-102764","published":"2026-10-15T20:30:32.240Z","updated":"2026-10-17T03:55:27.214Z","title":"Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support","severity":"CRITICAL","score":9.3,"vendor":"BeyondTrust","product":"Remote Support","kev":true,"epss":0.1895},{"id":"CVE-2026-104198","published":"2026-10-15T19:48:52.831Z","updated":"2026-10-15T20:34:55.708Z","title":"ZoneMinder failed token handling bypasses web authentication","severity":"MEDIUM","score":5.3,"vendor":"ZoneMinder","product":"zoneminder","kev":false,"epss":0.00386},{"id":"CVE-2026-108126","published":"2026-10-15T19:09:30.743Z","updated":"2026-10-16T15:20:20.801Z","title":"temporal-proxy payload decryption is not bound to the request namespace","severity":"MEDIUM","score":6,"vendor":"Temporal Technologies, Inc.","product":"temporal-proxy","kev":false,"epss":0.00356},{"id":"CVE-2026-45165","published":"2026-10-15T19:00:55.521Z","updated":"2026-10-15T20:23:40.239Z","title":"Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API","severity":"HIGH","score":8.6,"vendor":"Palo Alto Networks","product":"Idira Secrets Manager (Self-Hosted)","kev":false,"epss":0.00207},{"id":"CVE-2026-111172","published":"2026-10-15T18:57:56.567Z","updated":"2026-10-16T17:09:34.612Z","title":"@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath","severity":"MEDIUM","score":6,"vendor":"stalniy","product":"@casl/ability","kev":false,"epss":0.00383},{"id":"CVE-2026-111171","published":"2026-10-15T18:57:55.904Z","updated":"2026-10-15T19:29:53.958Z","title":"Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass","severity":"MEDIUM","score":6.3,"vendor":"ethereum","product":"web3.py","kev":false,"epss":0.00341},{"id":"CVE-2026-111170","published":"2026-10-15T18:57:55.295Z","updated":"2026-10-21T01:30:43.369Z","title":"kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name","severity":"HIGH","score":7.1,"vendor":"kedro-org","product":"kedro-datasets","kev":false,"epss":0.00389},{"id":"CVE-2026-111169","published":"2026-10-15T18:57:54.680Z","updated":"2026-10-26T13:55:20.669Z","title":"La Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creation","severity":"LOW","score":2.3,"vendor":"suitenumerique","product":"docs","kev":false,"epss":0.00275},{"id":"CVE-2026-111168","published":"2026-10-15T18:57:54.024Z","updated":"2026-10-15T19:40:44.232Z","title":"LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameter","severity":"MEDIUM","score":5.1,"vendor":"abhinavxd","product":"libredesk","kev":false,"epss":0.00226},{"id":"CVE-2026-111167","published":"2026-10-15T18:57:53.338Z","updated":"2026-10-16T17:09:43.819Z","title":"GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder","severity":"MEDIUM","score":6.9,"vendor":"GNU","product":"LibreDWG","kev":false,"epss":0.00129},{"id":"CVE-2026-111166","published":"2026-10-15T18:57:52.637Z","updated":"2026-10-15T19:31:56.158Z","title":"libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load","severity":"MEDIUM","score":6.8,"vendor":"sezero","product":"libmikmod","kev":false,"epss":0.00195},{"id":"CVE-2026-111165","published":"2026-10-15T18:57:51.926Z","updated":"2026-10-21T01:27:50.397Z","title":"libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count","severity":"MEDIUM","score":6.8,"vendor":"sezero","product":"libmikmod","kev":false,"epss":0.00196},{"id":"CVE-2026-111164","published":"2026-10-15T18:57:51.235Z","updated":"2026-10-26T13:56:54.071Z","title":"UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module","severity":"MEDIUM","score":6.8,"vendor":"UADE","product":"uade","kev":false,"epss":0.0013},{"id":"CVE-2026-111163","published":"2026-10-15T18:57:50.508Z","updated":"2026-10-15T19:41:27.303Z","title":"WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi","severity":"MEDIUM","score":6.8,"vendor":"Mindwerks","product":"WildMIDI","kev":false,"epss":0.00195},{"id":"CVE-2026-111162","published":"2026-10-15T18:57:49.774Z","updated":"2026-10-16T17:09:53.897Z","title":"WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmp","severity":"MEDIUM","score":6.9,"vendor":"Mindwerks","product":"WildMIDI","kev":false,"epss":0.00127},{"id":"CVE-2026-111161","published":"2026-10-15T18:57:49.073Z","updated":"2026-10-15T19:33:17.206Z","title":"libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates","severity":"MEDIUM","score":6.9,"vendor":"Wohlstand","product":"libADLMIDI","kev":false,"epss":0.00198},{"id":"CVE-2026-111160","published":"2026-10-15T18:57:48.390Z","updated":"2026-10-21T01:24:32.515Z","title":"LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization","severity":"HIGH","score":8.7,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00418},{"id":"CVE-2026-111159","published":"2026-10-15T18:57:47.615Z","updated":"2026-10-26T13:57:57.611Z","title":"libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libewf","kev":false,"epss":0.00127},{"id":"CVE-2026-111158","published":"2026-10-15T18:57:46.924Z","updated":"2026-10-15T19:42:14.325Z","title":"EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect","severity":"MEDIUM","score":6.8,"vendor":"EarthScope","product":"libmseed","kev":false,"epss":0.00128},{"id":"CVE-2026-111157","published":"2026-10-15T18:57:46.205Z","updated":"2026-10-16T17:10:07.533Z","title":"SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding","severity":"MEDIUM","score":6.9,"vendor":"SoX","product":"sox","kev":false,"epss":0.00128},{"id":"CVE-2026-111156","published":"2026-10-15T18:57:45.506Z","updated":"2026-10-15T19:35:40.462Z","title":"libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header","severity":"MEDIUM","score":6.9,"vendor":"sezero","product":"libtimidity","kev":false,"epss":0.00128},{"id":"CVE-2026-111155","published":"2026-10-15T18:57:43.192Z","updated":"2026-10-21T01:23:29.143Z","title":"libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c","severity":"MEDIUM","score":6.9,"vendor":"sezero","product":"libtimidity","kev":false,"epss":0.00127},{"id":"CVE-2026-111154","published":"2026-10-15T18:57:42.295Z","updated":"2026-10-26T13:59:28.259Z","title":"libTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFont Loader","severity":"MEDIUM","score":6.9,"vendor":"sezero","product":"libtimidity","kev":false,"epss":0.00128},{"id":"CVE-2026-111153","published":"2026-10-15T18:57:41.639Z","updated":"2026-10-15T19:42:42.818Z","title":"Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_","severity":"MEDIUM","score":6.8,"vendor":"libgme","product":"game-music-emu","kev":false,"epss":0.00128},{"id":"CVE-2026-111152","published":"2026-10-15T18:57:40.875Z","updated":"2026-10-16T17:10:16.844Z","title":"Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader","severity":"MEDIUM","score":6.8,"vendor":"libgme","product":"game-music-emu","kev":false,"epss":0.00128},{"id":"CVE-2026-111151","published":"2026-10-15T18:57:40.179Z","updated":"2026-10-15T19:36:21.172Z","title":"OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder","severity":"MEDIUM","score":6.9,"vendor":"aous72","product":"OpenJPH","kev":false,"epss":0.00128},{"id":"CVE-2026-111150","published":"2026-10-15T18:57:39.493Z","updated":"2026-10-21T01:22:43.222Z","title":"ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk","severity":"MEDIUM","score":6.8,"vendor":"ValleyBell","product":"libvgm","kev":false,"epss":0.0013},{"id":"CVE-2026-111149","published":"2026-10-15T18:57:38.810Z","updated":"2026-10-26T14:01:27.637Z","title":"FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits","severity":"MEDIUM","score":6.9,"vendor":"danoli3","product":"FreeImage","kev":false,"epss":0.00129},{"id":"CVE-2026-111148","published":"2026-10-15T18:57:38.114Z","updated":"2026-10-15T19:39:50.356Z","title":"libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune","severity":"MEDIUM","score":6.8,"vendor":"libsidplayfp","product":"libsidplayfp","kev":false,"epss":0.00128},{"id":"CVE-2026-111147","published":"2026-10-15T18:57:37.431Z","updated":"2026-10-27T01:30:47.266Z","title":"Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libesedb","kev":false,"epss":0.00127},{"id":"CVE-2026-111146","published":"2026-10-15T18:57:36.782Z","updated":"2026-10-15T19:45:21.657Z","title":"ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c","severity":"MEDIUM","score":6.9,"vendor":"Yeraze","product":"ytnef","kev":false,"epss":0.00127},{"id":"CVE-2026-111145","published":"2026-10-15T18:57:36.084Z","updated":"2026-10-21T01:20:26.553Z","title":"ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF","severity":"MEDIUM","score":6.9,"vendor":"Yeraze","product":"ytnef","kev":false,"epss":0.00127},{"id":"CVE-2026-111144","published":"2026-10-15T18:57:35.373Z","updated":"2026-10-26T14:02:41.324Z","title":"libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin","severity":"MEDIUM","score":6.8,"vendor":"ansilove","product":"libansilove","kev":false,"epss":0.00128},{"id":"CVE-2026-111143","published":"2026-10-15T18:57:34.707Z","updated":"2026-10-15T19:44:00.388Z","title":"Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decoding","severity":"MEDIUM","score":6.8,"vendor":"ansilove","product":"libansilove","kev":false,"epss":0.00128},{"id":"CVE-2026-111142","published":"2026-10-15T18:57:33.992Z","updated":"2026-10-16T17:10:35.100Z","title":"Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst","severity":"MEDIUM","score":6.8,"vendor":"gdraheim","product":"zziplib","kev":false,"epss":0.00128},{"id":"CVE-2026-111141","published":"2026-10-15T18:57:33.318Z","updated":"2026-10-15T19:46:48.484Z","title":"zziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsing","severity":"MEDIUM","score":5.7,"vendor":"gdraheim","product":"zziplib","kev":false,"epss":0.00121},{"id":"CVE-2026-111140","published":"2026-10-15T18:57:32.622Z","updated":"2026-10-21T01:19:40.902Z","title":"libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libregf","kev":false,"epss":0.00127},{"id":"CVE-2026-111139","published":"2026-10-15T18:57:31.959Z","updated":"2026-10-26T14:04:23.877Z","title":"NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask","severity":"MEDIUM","score":6.8,"vendor":"NetSurf","product":"libnsbmp","kev":false,"epss":0.00128},{"id":"CVE-2026-111138","published":"2026-10-15T18:57:31.267Z","updated":"2026-10-15T19:44:28.460Z","title":"NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders","severity":"MEDIUM","score":6.8,"vendor":"NetSurf","product":"libnsbmp","kev":false,"epss":0.00128},{"id":"CVE-2026-111137","published":"2026-10-15T18:57:30.581Z","updated":"2026-10-16T17:10:45.000Z","title":"libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL","severity":"MEDIUM","score":6.9,"vendor":"amartin755","product":"libsmi","kev":false,"epss":0.00128},{"id":"CVE-2026-111136","published":"2026-10-15T18:57:29.888Z","updated":"2026-10-15T19:48:10.296Z","title":"libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid","severity":"MEDIUM","score":6.9,"vendor":"swami","product":"libinstpatch","kev":false,"epss":0.00195},{"id":"CVE-2026-111135","published":"2026-10-15T18:57:29.171Z","updated":"2026-10-27T01:30:46.556Z","title":"libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libfwsi","kev":false,"epss":0.00198},{"id":"CVE-2026-111134","published":"2026-10-15T18:57:28.492Z","updated":"2026-10-27T01:30:45.857Z","title":"libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_data","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libfwsi","kev":false,"epss":0.00127},{"id":"CVE-2026-111133","published":"2026-10-15T18:57:27.812Z","updated":"2026-10-15T19:45:11.041Z","title":"libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_data","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libfsapfs","kev":false,"epss":0.00197},{"id":"CVE-2026-111132","published":"2026-10-15T18:57:27.144Z","updated":"2026-10-16T17:10:52.980Z","title":"GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element","severity":"MEDIUM","score":6.9,"vendor":"GNOME","product":"libgxps","kev":false,"epss":0.00127},{"id":"CVE-2026-111131","published":"2026-10-15T18:57:26.487Z","updated":"2026-10-15T19:50:44.959Z","title":"libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker","severity":"MEDIUM","score":6.9,"vendor":"libxmp","product":"libxmp","kev":false,"epss":0.00197},{"id":"CVE-2026-111130","published":"2026-10-15T18:57:25.805Z","updated":"2026-10-21T01:16:55.790Z","title":"OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position","severity":"MEDIUM","score":6.9,"vendor":"OpenSlide","product":"openslide","kev":false,"epss":0.00198},{"id":"CVE-2026-111129","published":"2026-10-15T18:57:25.146Z","updated":"2026-10-26T14:09:58.092Z","title":"Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track","severity":"MEDIUM","score":6.8,"vendor":"assimp","product":"assimp","kev":false,"epss":0.00128},{"id":"CVE-2026-111128","published":"2026-10-15T18:57:24.175Z","updated":"2026-10-15T19:45:45.607Z","title":"Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment","severity":"MEDIUM","score":6.8,"vendor":"assimp","product":"assimp","kev":false,"epss":0.00195},{"id":"CVE-2026-111127","published":"2026-10-15T18:57:23.479Z","updated":"2026-10-16T17:10:59.137Z","title":"catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string","severity":"MEDIUM","score":6.9,"vendor":"catdoc","product":"catdoc","kev":false,"epss":0.00127},{"id":"CVE-2026-111126","published":"2026-10-15T18:57:22.717Z","updated":"2026-10-15T19:54:23.491Z","title":"catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler","severity":"MEDIUM","score":6.9,"vendor":"catdoc","product":"catdoc","kev":false,"epss":0.00197},{"id":"CVE-2026-111125","published":"2026-10-15T18:57:22.035Z","updated":"2026-10-21T01:15:29.785Z","title":"CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble","severity":"MEDIUM","score":6.9,"vendor":"HEASARC","product":"cfitsio","kev":false,"epss":0.00245},{"id":"CVE-2026-111124","published":"2026-10-15T18:57:21.328Z","updated":"2026-10-26T15:02:09.903Z","title":"CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed","severity":"MEDIUM","score":6.9,"vendor":"HEASARC","product":"cfitsio","kev":false,"epss":0.00238},{"id":"CVE-2026-111123","published":"2026-10-15T18:57:20.663Z","updated":"2026-10-15T19:46:31.057Z","title":"FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination","severity":"MEDIUM","score":6.9,"vendor":"FluidSynth","product":"fluidsynth","kev":false,"epss":0.00195},{"id":"CVE-2026-110878","published":"2026-10-15T18:57:19.993Z","updated":"2026-10-16T17:11:07.650Z","title":"Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information","severity":"MEDIUM","score":5.1,"vendor":"aureuserp","product":"aureuserp","kev":false,"epss":0.00226},{"id":"CVE-2026-110877","published":"2026-10-15T18:57:19.302Z","updated":"2026-10-15T19:56:53.161Z","title":"AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load","severity":"MEDIUM","score":6.8,"vendor":"adplug","product":"adplug","kev":false,"epss":0.00128},{"id":"CVE-2026-110876","published":"2026-10-15T18:57:18.619Z","updated":"2026-10-21T01:14:06.812Z","title":"AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files","severity":"MEDIUM","score":6.8,"vendor":"adplug","product":"adplug","kev":false,"epss":0.00128},{"id":"CVE-2026-110875","published":"2026-10-15T18:57:17.940Z","updated":"2026-10-26T15:03:52.332Z","title":"AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp","severity":"MEDIUM","score":6.9,"vendor":"adplug","product":"adplug","kev":false,"epss":0.00141},{"id":"CVE-2026-110874","published":"2026-10-15T18:57:17.250Z","updated":"2026-10-15T19:47:43.498Z","title":"Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()","severity":"HIGH","score":7.5,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.0051},{"id":"CVE-2026-111252","published":"2026-10-15T18:56:18.803Z","updated":"2026-10-16T19:58:01.259Z","title":"OpenNMS denial of service via XML entity expansion","severity":"MEDIUM","score":6.5,"vendor":"The OpenNMS Group","product":"Meridian","kev":false,"epss":0.00249},{"id":"CVE-2026-87029","published":"2026-10-15T18:48:36.902Z","updated":"2026-10-16T19:58:52.997Z","title":"undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.0026},{"id":"CVE-2026-111234","published":"2026-10-15T18:46:33.597Z","updated":"2026-10-16T17:11:14.501Z","title":"SimplePie through 1.9.0 Local File Read via file:// Redirect","severity":"HIGH","score":8.2,"vendor":"SimplePie","product":"simplepie","kev":false,"epss":0.0031},{"id":"CVE-2026-111233","published":"2026-10-15T18:46:32.907Z","updated":"2026-10-15T20:02:04.912Z","title":"Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php","severity":"LOW","score":2.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01064},{"id":"CVE-2026-111232","published":"2026-10-15T18:46:32.161Z","updated":"2026-10-21T01:11:30.708Z","title":"Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color","severity":"MEDIUM","score":4.8,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00999},{"id":"CVE-2026-111231","published":"2026-10-15T18:46:31.461Z","updated":"2026-10-26T15:06:23.532Z","title":"Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00842},{"id":"CVE-2026-111230","published":"2026-10-15T18:46:30.758Z","updated":"2026-10-15T19:48:31.710Z","title":"Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL","severity":"MEDIUM","score":6.9,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00753},{"id":"CVE-2026-111229","published":"2026-10-15T18:46:30.058Z","updated":"2026-10-16T17:11:20.974Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06367},{"id":"CVE-2026-111228","published":"2026-10-15T18:46:29.375Z","updated":"2026-10-15T20:02:39.150Z","title":"Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01841},{"id":"CVE-2026-111227","published":"2026-10-15T18:46:26.531Z","updated":"2026-10-21T01:10:35.133Z","title":"Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php","severity":"MEDIUM","score":5.1,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.01841},{"id":"CVE-2026-111226","published":"2026-10-15T18:46:25.792Z","updated":"2026-10-26T15:07:37.949Z","title":"Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06548},{"id":"CVE-2026-111225","published":"2026-10-15T18:46:25.093Z","updated":"2026-10-15T19:48:58.697Z","title":"Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh","severity":"LOW","score":2.3,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06207},{"id":"CVE-2026-111224","published":"2026-10-15T18:46:24.410Z","updated":"2026-10-16T17:11:27.008Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh","severity":"HIGH","score":7.7,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.05366},{"id":"CVE-2026-111223","published":"2026-10-15T18:46:23.730Z","updated":"2026-10-15T20:04:59.913Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00751},{"id":"CVE-2026-111222","published":"2026-10-15T18:46:23.081Z","updated":"2026-10-21T01:08:42.916Z","title":"Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting","severity":"HIGH","score":7.5,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.0096},{"id":"CVE-2026-111221","published":"2026-10-15T18:46:21.847Z","updated":"2026-10-26T15:08:34.818Z","title":"Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection","severity":"HIGH","score":7.5,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00939},{"id":"CVE-2026-111220","published":"2026-10-15T18:46:21.230Z","updated":"2026-10-15T19:49:22.923Z","title":"Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.00726},{"id":"CVE-2026-111219","published":"2026-10-15T18:46:20.608Z","updated":"2026-10-16T17:11:33.240Z","title":"Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username","severity":"HIGH","score":7.5,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.0087},{"id":"CVE-2026-111218","published":"2026-10-15T18:46:19.971Z","updated":"2026-10-15T20:07:51.202Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.08649},{"id":"CVE-2026-111217","published":"2026-10-15T18:46:19.325Z","updated":"2026-10-21T01:07:02.299Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06959},{"id":"CVE-2026-111216","published":"2026-10-15T18:46:18.645Z","updated":"2026-10-26T15:10:18.183Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.04721},{"id":"CVE-2026-111215","published":"2026-10-15T18:46:17.986Z","updated":"2026-10-15T19:43:31.022Z","title":"Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.06248},{"id":"CVE-2026-111214","published":"2026-10-15T18:46:17.293Z","updated":"2026-10-16T17:11:40.178Z","title":"Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php","severity":"HIGH","score":8.6,"vendor":"Netgate","product":"pfSense CE","kev":false,"epss":0.10826},{"id":"CVE-2026-109131","published":"2026-10-15T18:46:00.768Z","updated":"2026-10-19T15:07:41.889Z","title":"Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","kev":false,"epss":0.00168},{"id":"CVE-2026-111235","published":"2026-10-15T18:45:06.685Z","updated":"2026-10-16T19:59:35.614Z","title":"OpenNMS REST authorization bypass via non-canonical HTTP method","severity":"CRITICAL","score":9.1,"vendor":"The OpenNMS Group","product":"Meridian","kev":false,"epss":0.00376},{"id":"CVE-2026-62322","published":"2026-10-15T18:45:06.452Z","updated":"2026-10-28T19:54:37.324Z","title":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)","severity":"MEDIUM","score":6.5,"vendor":"python-social-auth","product":"social-core","kev":false,"epss":0.00153},{"id":"CVE-2026-108334","published":"2026-10-15T18:44:42.472Z","updated":"2026-10-23T05:03:49.311Z","title":"Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Connectivity Link 1.4","kev":false,"epss":0.00343},{"id":"CVE-2026-109932","published":"2026-10-15T18:44:22.571Z","updated":"2026-10-16T20:00:38.791Z","title":"undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00321},{"id":"CVE-2026-104150","published":"2026-10-15T18:42:54.929Z","updated":"2026-10-15T19:52:22.221Z","title":"AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity","severity":"HIGH","score":8.7,"vendor":"adonisjs","product":"http-server","kev":false,"epss":0.00367},{"id":"CVE-2026-57496","published":"2026-10-15T18:40:16.558Z","updated":"2026-10-21T01:06:14.636Z","title":"NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction","severity":"CRITICAL","score":9.6,"vendor":"Labs64","product":"NetLicensing-MCP","kev":false,"epss":0.00435},{"id":"CVE-2026-87018","published":"2026-10-15T18:38:25.613Z","updated":"2026-10-16T20:01:29.402Z","title":"undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation","severity":"HIGH","score":7.5,"vendor":"undici","product":"undici","kev":false,"epss":0.00187},{"id":"CVE-2026-105660","published":"2026-10-15T18:37:02.485Z","updated":"2026-10-16T20:02:38.784Z","title":"Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit","severity":"MEDIUM","score":6.9,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00618},{"id":"CVE-2026-104828","published":"2026-10-15T18:36:49.613Z","updated":"2026-10-21T01:04:51.279Z","title":"HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode","severity":"HIGH","score":7.2,"vendor":"HtmlUnit","product":"htmlunit-neko","kev":false,"epss":0.00324},{"id":"CVE-2026-92707","published":"2026-10-15T18:35:49.074Z","updated":"2026-10-15T20:12:15.468Z","title":"MessagePack: Nested arrays can blow past buffer length limits","severity":"MEDIUM","score":5.3,"vendor":"MessagePack-CSharp","product":"MessagePack-CSharp","kev":false,"epss":0.00678},{"id":"CVE-2026-109383","published":"2026-10-15T18:34:01.468Z","updated":"2026-10-16T20:03:30.839Z","title":"undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent","severity":"HIGH","score":7.4,"vendor":"undici","product":"undici","kev":false,"epss":0.00184},{"id":"CVE-2026-57183","published":"2026-10-15T18:32:47.861Z","updated":"2026-10-28T19:59:31.742Z","title":"Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs","severity":"MEDIUM","score":6.1,"vendor":"Erudika","product":"scoold","kev":false,"epss":0.00296},{"id":"CVE-2026-55840","published":"2026-10-15T18:31:57.916Z","updated":"2026-10-15T20:16:08.554Z","title":"Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass","severity":"MEDIUM","score":5.4,"vendor":"Erudika","product":"scoold","kev":false,"epss":0.00264},{"id":"CVE-2026-55842","published":"2026-10-15T18:30:57.426Z","updated":"2026-10-16T17:11:47.105Z","title":"Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain","severity":"MEDIUM","score":5.4,"vendor":"Erudika","product":"scoold","kev":false,"epss":0.00115},{"id":"CVE-2026-102946","published":"2026-10-15T18:28:06.913Z","updated":"2026-10-15T19:53:09.069Z","title":"joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json","severity":"CRITICAL","score":9.1,"vendor":"authlib","product":"joserfc","kev":false,"epss":0.00117},{"id":"CVE-2026-109829","published":"2026-10-15T18:28:04.954Z","updated":"2026-10-16T20:04:09.504Z","title":"undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects","severity":"HIGH","score":7.4,"vendor":"undici","product":"undici","kev":false,"epss":0.00149},{"id":"CVE-2026-55872","published":"2026-10-15T18:27:06.595Z","updated":"2026-10-21T01:03:46.364Z","title":"GYM One admin user list is vulnerable to stored cross-site scripting","severity":"HIGH","score":8.7,"vendor":"mayerbalintdev","product":"GYM-One","kev":false,"epss":0.0029},{"id":"CVE-2026-55871","published":"2026-10-15T18:24:55.748Z","updated":"2026-10-15T19:54:37.343Z","title":"GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php","severity":"MEDIUM","score":6.5,"vendor":"mayerbalintdev","product":"GYM-One","kev":false,"epss":0.00342},{"id":"CVE-2026-94621","published":"2026-10-15T18:23:33.174Z","updated":"2026-10-16T17:11:53.157Z","title":"AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction","severity":"MEDIUM","score":6.3,"vendor":"aliasvault","product":"aliasvault","kev":false,"epss":0.00195},{"id":"CVE-2026-109841","published":"2026-10-15T18:22:06.283Z","updated":"2026-10-16T20:04:41.388Z","title":"undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00252},{"id":"CVE-2026-55587","published":"2026-10-15T18:21:53.069Z","updated":"2026-10-28T20:01:30.746Z","title":"AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID","severity":"HIGH","score":8.1,"vendor":"aliasvault","product":"aliasvault","kev":false,"epss":0.00148},{"id":"CVE-2026-110361","published":"2026-10-15T18:21:40.608Z","updated":"2026-10-15T20:17:18.211Z","title":"WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ClikIT","product":"Infinite Uploads","kev":false,"epss":0.0027},{"id":"CVE-2026-110362","published":"2026-10-15T18:21:16.105Z","updated":"2026-10-16T15:09:41.704Z","title":"WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Planet studio","product":"PlanetStudio Payment Gateway","kev":false,"epss":0.00208},{"id":"CVE-2026-104827","published":"2026-10-15T18:19:32.785Z","updated":"2026-10-16T17:11:59.859Z","title":"react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS","severity":"HIGH","score":7.5,"vendor":"reactphp","product":"http","kev":false,"epss":0.00517},{"id":"CVE-2026-109893","published":"2026-10-15T18:18:56.045Z","updated":"2026-10-16T17:12:08.141Z","title":"WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"Presto Player","kev":false,"epss":0.00156},{"id":"CVE-2026-110374","published":"2026-10-15T18:18:13.194Z","updated":"2026-10-15T18:32:12.140Z","title":"WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Hamid Alinia","product":"Login with phone number","kev":false,"epss":0.00185},{"id":"CVE-2026-108499","published":"2026-10-15T18:17:52.974Z","updated":"2026-10-15T20:19:57.344Z","title":"WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WebberZone","product":"Knowledge Base","kev":false,"epss":0.0024},{"id":"CVE-2026-97370","published":"2026-10-15T18:17:26.167Z","updated":"2026-10-16T17:12:14.687Z","title":"Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction","severity":"HIGH","score":7.5,"vendor":"junrar","product":"junrar","kev":false,"epss":0.00402},{"id":"CVE-2026-110364","published":"2026-10-15T18:16:51.303Z","updated":"2026-10-15T20:39:16.095Z","title":"WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Flexible Quantity – Measurement Price Calculator for WooCommerce","kev":false,"epss":0.00208},{"id":"CVE-2026-109924","published":"2026-10-15T18:16:48.452Z","updated":"2026-10-16T20:05:22.386Z","title":"undici vulnerable to Denial of Service via unbounded memory in the EventSource parser","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00321},{"id":"CVE-2026-110375","published":"2026-10-15T18:16:25.737Z","updated":"2026-10-16T17:12:23.090Z","title":"WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Download Monitor","kev":false,"epss":0.00156},{"id":"CVE-2026-47218","published":"2026-10-15T18:16:10.236Z","updated":"2026-10-15T19:55:14.129Z","title":"runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox","severity":"CRITICAL","score":9.3,"vendor":"containerd","product":"runwasi","kev":false,"epss":0.00394},{"id":"CVE-2026-55240","published":"2026-10-15T18:15:12.957Z","updated":"2026-10-28T20:04:59.360Z","title":"Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates","severity":"CRITICAL","score":9.1,"vendor":"msgbyte","product":"tianji","kev":false,"epss":0.00748},{"id":"CVE-2026-109689","published":"2026-10-15T18:14:39.051Z","updated":"2026-10-15T18:33:26.965Z","title":"WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Sunshine","product":"Sunshine Photo Cart","kev":false,"epss":0.00221},{"id":"CVE-2026-55239","published":"2026-10-15T18:14:21.918Z","updated":"2026-10-21T01:02:29.450Z","title":"Tianji: SQL Injection via unsanitized timezone parameter in analytics queries","severity":"HIGH","score":8.8,"vendor":"msgbyte","product":"tianji","kev":false,"epss":0.0034},{"id":"CVE-2026-110360","published":"2026-10-15T18:12:23.561Z","updated":"2026-10-16T15:09:42.011Z","title":"WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPdreams","product":"Ajax Search Lite","kev":false,"epss":0.00221},{"id":"CVE-2026-109897","published":"2026-10-15T18:11:34.153Z","updated":"2026-10-15T19:59:26.898Z","title":"WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.00209},{"id":"CVE-2026-63430","published":"2026-10-15T18:10:35.869Z","updated":"2026-10-15T20:25:49.464Z","title":"ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip","severity":"MEDIUM","score":6.3,"vendor":"rust-ammonia","product":"ammonia","kev":false,"epss":0.00555},{"id":"CVE-2026-109869","published":"2026-10-15T18:08:31.243Z","updated":"2026-10-16T20:06:00.782Z","title":"undici vulnerable to Denial of Service via unhandled error on excessive content-encodings","severity":"HIGH","score":7.5,"vendor":"undici","product":"undici","kev":false,"epss":0.00344},{"id":"CVE-2026-110378","published":"2026-10-15T18:07:26.117Z","updated":"2026-10-19T09:50:41.518Z","title":"WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP E-Signature","product":"Ninja Forms Signature Contract Add-On","kev":false,"epss":0.00221},{"id":"CVE-2026-96449","published":"2026-10-15T18:06:37.312Z","updated":"2026-10-16T15:09:42.195Z","title":"WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPExperts","product":"WP EasyPay","kev":false,"epss":0.00187},{"id":"CVE-2026-106604","published":"2026-10-15T18:01:28.361Z","updated":"2026-10-16T14:39:06.911Z","title":"WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"YITH","product":"YITH WooCommerce Compare","kev":false,"epss":0.00156},{"id":"CVE-2026-103083","published":"2026-10-15T18:00:35.463Z","updated":"2026-10-15T19:59:10.889Z","title":"WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ELEXtensions","product":"ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes","kev":false,"epss":0.00229},{"id":"CVE-2026-108175","published":"2026-10-15T17:48:26.005Z","updated":"2026-10-15T18:01:15.407Z","title":"WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"PluginUs.Net","product":"MDTF","kev":false,"epss":0.00156},{"id":"CVE-2026-110381","published":"2026-10-15T17:48:07.069Z","updated":"2026-10-16T17:12:29.676Z","title":"WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.3,"vendor":"NSquared","product":"Simply Schedule Appointments","kev":false,"epss":0.00201},{"id":"CVE-2026-103350","published":"2026-10-15T17:47:33.578Z","updated":"2026-10-15T18:24:28.555Z","title":"WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Booking and Rental Manager","kev":false,"epss":0.00226},{"id":"CVE-2026-110888","published":"2026-10-15T17:46:50.254Z","updated":"2026-10-16T17:12:38.772Z","title":"WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Meow Apps","product":"AI Engine","kev":false,"epss":0.00185},{"id":"CVE-2026-110891","published":"2026-10-15T17:46:27.380Z","updated":"2026-10-16T15:09:42.376Z","title":"WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WordLift Srl","product":"WordLift","kev":false,"epss":0.00168},{"id":"CVE-2026-110890","published":"2026-10-15T17:45:58.863Z","updated":"2026-10-15T18:24:23.069Z","title":"WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetSmartFilters","kev":false,"epss":0.00156},{"id":"CVE-2026-110367","published":"2026-10-15T17:45:13.071Z","updated":"2026-10-15T18:24:51.313Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00214},{"id":"CVE-2026-110371","published":"2026-10-15T17:43:50.465Z","updated":"2026-10-15T17:59:43.855Z","title":"WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.00197},{"id":"CVE-2026-111105","published":"2026-10-15T17:42:55.996Z","updated":"2026-10-16T03:57:07.814Z","title":"Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability","severity":"HIGH","score":7,"vendor":"Telegram","product":"Telegram","kev":false,"epss":0.00178},{"id":"CVE-2026-55414","published":"2026-10-15T17:33:04.629Z","updated":"2026-10-15T18:26:10.056Z","title":"NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)","severity":"MEDIUM","score":5.3,"vendor":"nl-portal","product":"nl-portal-backend-libraries","kev":false,"epss":0.00437},{"id":"CVE-2026-54683","published":"2026-10-15T17:31:02.449Z","updated":"2026-10-28T20:06:40.341Z","title":"NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)","severity":"MEDIUM","score":6.5,"vendor":"nl-portal","product":"nl-portal-backend-libraries","kev":false,"epss":0.00423},{"id":"CVE-2026-103936","published":"2026-10-15T17:28:32.567Z","updated":"2026-10-16T17:12:49.532Z","title":"libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners","severity":"HIGH","score":7.5,"vendor":"libp2p","product":"js-libp2p","kev":false,"epss":0.00522},{"id":"CVE-2026-102740","published":"2026-10-15T17:25:30.183Z","updated":"2026-10-15T18:27:00.104Z","title":"AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink","severity":"MEDIUM","score":5.8,"vendor":"AsyncHttpClient","product":"async-http-client","kev":false,"epss":0.001},{"id":"CVE-2026-55875","published":"2026-10-15T17:24:00.931Z","updated":"2026-10-15T17:48:20.682Z","title":"Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network","severity":"MEDIUM","score":4.3,"vendor":"HeliumEdu","product":"platform","kev":false,"epss":0.0021},{"id":"CVE-2026-55876","published":"2026-10-15T17:23:07.781Z","updated":"2026-10-21T01:01:03.086Z","title":"Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts","severity":"LOW","score":3.5,"vendor":"HeliumEdu","product":"platform","kev":false,"epss":0.00184},{"id":"CVE-2026-104266","published":"2026-10-15T17:13:26.636Z","updated":"2026-10-21T01:00:05.989Z","title":"tinytag: Infinite loop when parsing certain M4A files containing invalid atoms","severity":"MEDIUM","score":6.5,"vendor":"tinytag","product":"tinytag","kev":false,"epss":0.00332},{"id":"CVE-2026-61702","published":"2026-10-15T17:12:10.695Z","updated":"2026-10-28T20:12:06.853Z","title":"OpenPrinting CUPS: root-side banner file disclosure","severity":"MEDIUM","score":5.3,"vendor":"OpenPrinting","product":"cups","kev":false,"epss":0.00424},{"id":"CVE-2026-55453","published":"2026-10-15T17:11:21.208Z","updated":"2026-10-16T17:12:58.110Z","title":"CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip","severity":"LOW","score":3.3,"vendor":"OpenPrinting","product":"cups","kev":false,"epss":0.00195},{"id":"CVE-2026-84731","published":"2026-10-15T17:10:29.432Z","updated":"2026-10-15T19:14:57.185Z","title":"Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS","severity":"CRITICAL","score":9.3,"vendor":"Nutanix","product":"Acropolis Operating System (AOS)","kev":false,"epss":0.01283},{"id":"CVE-2026-55480","published":"2026-10-15T17:09:33.878Z","updated":"2026-10-20T02:59:10.167Z","title":"CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)","severity":"MEDIUM","score":5.7,"vendor":"OpenPrinting","product":"cups","kev":false,"epss":0.00202},{"id":"CVE-2026-55467","published":"2026-10-15T17:08:24.374Z","updated":"2026-10-15T17:49:26.673Z","title":"CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)","severity":"LOW","score":2.5,"vendor":"OpenPrinting","product":"cups","kev":false,"epss":0.00182},{"id":"CVE-2026-55246","published":"2026-10-15T17:06:59.783Z","updated":"2026-10-15T18:27:40.897Z","title":"bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file","severity":"HIGH","score":7.8,"vendor":"Tatsh","product":"bincookie","kev":false,"epss":0.00222},{"id":"CVE-2026-55103","published":"2026-10-15T17:05:41.414Z","updated":"2026-10-28T20:15:11.416Z","title":"Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening","severity":"HIGH","score":8.6,"vendor":"discourse","product":"discourse-activity-pub","kev":false,"epss":0.002},{"id":"CVE-2026-105065","published":"2026-10-15T17:00:15.222Z","updated":"2026-10-16T14:39:07.063Z","title":"WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"8theme.com","product":"XStore","kev":false,"epss":0.00142},{"id":"CVE-2026-100409","published":"2026-10-15T16:57:50.999Z","updated":"2026-10-15T17:50:33.255Z","title":"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths","severity":"HIGH","score":7.5,"vendor":"opennextjs","product":"opennextjs-cloudflare","kev":false,"epss":0.004},{"id":"CVE-2026-102527","published":"2026-10-15T16:55:23.150Z","updated":"2026-10-16T17:13:07.014Z","title":"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes","severity":"MEDIUM","score":6.9,"vendor":"nuxt-modules","product":"og-image","kev":false,"epss":0.00186},{"id":"CVE-2026-102631","published":"2026-10-15T16:42:19.368Z","updated":"2026-10-16T20:16:49.275Z","title":"authd: Account takeover via username fallback in identity matching after IdP email reassignment","severity":"MEDIUM","score":5.9,"vendor":"Canonical","product":"authd","kev":false,"epss":0.00112},{"id":"CVE-2026-77466","published":"2026-10-15T16:36:58.410Z","updated":"2026-10-15T17:57:21.560Z","title":"Lychee: Webshop payment bypass via unrestricted \"Dummy\" gateway selection","severity":"HIGH","score":8.3,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00439},{"id":"CVE-2026-77470","published":"2026-10-15T16:36:09.597Z","updated":"2026-10-15T18:30:17.464Z","title":"Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request","severity":"HIGH","score":8.3,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00451},{"id":"CVE-2026-77468","published":"2026-10-15T16:35:21.137Z","updated":"2026-10-28T20:16:47.871Z","title":"Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api","severity":"MEDIUM","score":6.9,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00371},{"id":"CVE-2026-77467","published":"2026-10-15T16:34:35.236Z","updated":"2026-10-20T02:50:18.889Z","title":"Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path","severity":"HIGH","score":7.1,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.0034},{"id":"CVE-2026-110812","published":"2026-10-15T16:34:03.381Z","updated":"2026-10-16T18:54:14.092Z","title":"Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune","severity":"CRITICAL","score":9.4,"vendor":"AWS","product":"Amazon Neptune Engine","kev":false,"epss":0.00365},{"id":"CVE-2026-62679","published":"2026-10-15T16:33:43.958Z","updated":"2026-10-16T17:13:13.881Z","title":"Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read","severity":"HIGH","score":8.9,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00353},{"id":"CVE-2026-61838","published":"2026-10-15T16:32:37.392Z","updated":"2026-10-15T18:31:13.925Z","title":"Lychee: Album password bypass in ZIP downloads","severity":"HIGH","score":8.2,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00422},{"id":"CVE-2026-61610","published":"2026-10-15T16:26:16.585Z","updated":"2026-10-20T02:48:31.094Z","title":"Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous","severity":"LOW","score":2.3,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00306},{"id":"CVE-2026-61611","published":"2026-10-15T16:25:24.968Z","updated":"2026-10-29T13:40:09.476Z","title":"Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks","severity":"HIGH","score":7.5,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00454},{"id":"CVE-2026-57569","published":"2026-10-15T16:24:34.652Z","updated":"2026-10-15T17:58:10.062Z","title":"Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation","severity":"LOW","score":2.3,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00241},{"id":"CVE-2026-57568","published":"2026-10-15T16:22:30.323Z","updated":"2026-10-16T17:13:21.565Z","title":"Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery View)","severity":"MEDIUM","score":5.7,"vendor":"LycheeOrg","product":"Lychee","kev":false,"epss":0.00278},{"id":"CVE-2026-85634","published":"2026-10-15T16:08:26.875Z","updated":"2026-10-28T17:51:30.707Z","title":"Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Red Hat Fuse 7","kev":false,"epss":0.00414},{"id":"CVE-2026-100353","published":"2026-10-15T16:03:50.514Z","updated":"2026-10-29T13:41:31.986Z","title":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","severity":"HIGH","score":7.5,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00335},{"id":"CVE-2026-100354","published":"2026-10-15T16:02:00.566Z","updated":"2026-10-15T18:31:51.798Z","title":"kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash","severity":"HIGH","score":7.5,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00435},{"id":"CVE-2026-100352","published":"2026-10-15T15:54:25.834Z","updated":"2026-10-20T02:46:20.849Z","title":"kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path","severity":"HIGH","score":7.5,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00595},{"id":"CVE-2026-100351","published":"2026-10-15T15:52:30.041Z","updated":"2026-10-15T16:09:36.650Z","title":"kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion","severity":"HIGH","score":7.4,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00488},{"id":"CVE-2026-100349","published":"2026-10-15T15:50:37.453Z","updated":"2026-10-16T17:13:28.236Z","title":"kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content","severity":"HIGH","score":8.2,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00472},{"id":"CVE-2026-100350","published":"2026-10-15T15:37:19.077Z","updated":"2026-10-15T18:32:57.402Z","title":"kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression","severity":"MEDIUM","score":5.3,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00451},{"id":"CVE-2026-92982","published":"2026-10-15T15:36:57.191Z","updated":"2026-10-30T03:10:33.755Z","title":"Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection","severity":"HIGH","score":8.5,"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","kev":false,"epss":0.00472},{"id":"CVE-2026-100347","published":"2026-10-15T15:35:43.874Z","updated":"2026-10-15T16:21:33.027Z","title":"kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path","severity":"MEDIUM","score":5.3,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00515},{"id":"CVE-2026-97712","published":"2026-10-15T15:34:40.948Z","updated":"2026-10-16T03:56:56.472Z","title":"Nexus Repository 3 - Privilege Escalation via Role Management","severity":"HIGH","score":8.7,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00265},{"id":"CVE-2026-97667","published":"2026-10-15T15:34:40.548Z","updated":"2026-10-15T16:10:31.406Z","title":"Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI","severity":"MEDIUM","score":5.1,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.003},{"id":"CVE-2026-97666","published":"2026-10-15T15:34:40.295Z","updated":"2026-10-15T16:11:15.158Z","title":"Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint","severity":"MEDIUM","score":6.9,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00621},{"id":"CVE-2026-97665","published":"2026-10-15T15:34:40.047Z","updated":"2026-10-15T16:11:49.937Z","title":"Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload","severity":"HIGH","score":7.1,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00325},{"id":"CVE-2026-100348","published":"2026-10-15T15:31:19.904Z","updated":"2026-10-15T15:44:17.041Z","title":"kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)","severity":"MEDIUM","score":5.3,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00372},{"id":"CVE-2026-110958","published":"2026-10-15T15:30:18.031Z","updated":"2026-10-15T18:34:20.350Z","title":"Wavlink WN530HG4B api.cgi heap-based overflow","severity":"CRITICAL","score":10,"vendor":"Wavlink","product":"WN530HG4B","kev":false,"epss":0.0102},{"id":"CVE-2026-111096","published":"2026-10-15T15:29:54.938Z","updated":"2026-10-15T16:08:36.746Z","title":"In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible","severity":"MEDIUM","score":6.7,"vendor":"JetBrains","product":"TeamCity","kev":false,"epss":0.00184},{"id":"CVE-2026-111095","published":"2026-10-15T15:29:54.427Z","updated":"2026-10-15T16:07:56.652Z","title":"In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible","severity":"HIGH","score":8,"vendor":"JetBrains","product":"TeamCity","kev":false,"epss":0.00169},{"id":"CVE-2026-111094","published":"2026-10-15T15:29:53.832Z","updated":"2026-10-16T03:57:00.108Z","title":"In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible","severity":"HIGH","score":8.1,"vendor":"JetBrains","product":"TeamCity","kev":false,"epss":0.00392},{"id":"CVE-2026-111093","published":"2026-10-15T15:29:53.415Z","updated":"2026-10-15T16:06:41.753Z","title":"In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00373},{"id":"CVE-2026-111092","published":"2026-10-15T15:29:52.973Z","updated":"2026-10-16T03:57:00.836Z","title":"In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands","severity":"MEDIUM","score":6.5,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00275},{"id":"CVE-2026-111091","published":"2026-10-15T15:29:52.373Z","updated":"2026-10-15T16:05:25.428Z","title":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"Junie CLI","kev":false,"epss":0.00135},{"id":"CVE-2026-97394","published":"2026-10-15T15:29:05.238Z","updated":"2026-10-20T02:45:09.805Z","title":"kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items","severity":"HIGH","score":7.5,"vendor":"getkin","product":"kin-openapi","kev":false,"epss":0.00615},{"id":"CVE-2026-105474","published":"2026-10-15T15:27:12.966Z","updated":"2026-10-15T16:04:31.618Z","title":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","severity":"CRITICAL","score":9.4,"vendor":"WebPros","product":"SolusVM 2","kev":false,"epss":0.00491},{"id":"CVE-2026-45452","published":"2026-10-15T15:25:54.445Z","updated":"2026-10-15T17:59:46.210Z","title":"Unitronics - CWE-134 Use of Externally-Controlled format string","severity":"HIGH","score":8.3,"vendor":"Unitronics","product":"Unitronics UniStream Pro/UniLogic","kev":false,"epss":0.00267},{"id":"CVE-2026-71490","published":"2026-10-15T15:24:43.580Z","updated":"2026-10-15T15:45:03.645Z","title":"OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection","severity":"HIGH","score":7.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.0038},{"id":"CVE-2026-45451","published":"2026-10-15T15:23:55.464Z","updated":"2026-10-15T18:00:27.448Z","title":"Unitronics - CWE-287: Improper Authentication","severity":"HIGH","score":8.3,"vendor":"Unitronics","product":"Unitronics UniStream Pro/UniLogic","kev":false,"epss":0.0029},{"id":"CVE-2026-63442","published":"2026-10-15T15:22:16.011Z","updated":"2026-10-16T17:13:35.384Z","title":"OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking","severity":"HIGH","score":8.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.00285},{"id":"CVE-2026-45450","published":"2026-10-15T15:21:41.203Z","updated":"2026-10-15T18:01:17.303Z","title":"Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","severity":"HIGH","score":8.3,"vendor":"Unitronics","product":"Unitronics UniStream Pro/UniLogic","kev":false,"epss":0.00267},{"id":"CVE-2026-58390","published":"2026-10-15T15:21:09.883Z","updated":"2026-10-20T02:44:08.318Z","title":"OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views","severity":"HIGH","score":8,"vendor":"opnsense","product":"core","kev":false,"epss":0.00604},{"id":"CVE-2026-58394","published":"2026-10-15T15:20:15.232Z","updated":"2026-10-15T18:36:57.734Z","title":"OPNsense: Stored XSS in Administration Settings via Certificate Description","severity":"MEDIUM","score":5.2,"vendor":"opnsense","product":"core","kev":false,"epss":0.00239},{"id":"CVE-2026-109449","published":"2026-10-15T15:19:08.663Z","updated":"2026-10-15T18:05:32.422Z","title":"Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process","severity":"HIGH","score":8.7,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00378},{"id":"CVE-2026-45449","published":"2026-10-15T15:18:59.438Z","updated":"2026-10-15T18:06:03.223Z","title":"Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","severity":"HIGH","score":8.3,"vendor":"Unitronics","product":"Unitronics UniStream Pro/UniLogic","kev":false,"epss":0.00821},{"id":"CVE-2026-58392","published":"2026-10-15T15:18:32.003Z","updated":"2026-10-15T15:54:57.730Z","title":"OPNsense: Stored XSS in Services: NTP GPS","severity":"MEDIUM","score":5.4,"vendor":"opnsense","product":"core","kev":false,"epss":0.00274},{"id":"CVE-2026-58395","published":"2026-10-15T15:16:49.985Z","updated":"2026-10-15T18:41:38.423Z","title":"OPNsense: XPath injection in MVC safe-delete","severity":"MEDIUM","score":4.3,"vendor":"opnsense","product":"core","kev":false,"epss":0.00357},{"id":"CVE-2026-58393","published":"2026-10-15T15:15:45.924Z","updated":"2026-10-15T16:07:55.688Z","title":"OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files","severity":"MEDIUM","score":5.9,"vendor":"opnsense","product":"core","kev":false,"epss":0.00433},{"id":"CVE-2026-57155","published":"2026-10-15T15:13:12.343Z","updated":"2026-10-15T15:45:48.529Z","title":"OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer","severity":"CRITICAL","score":9.9,"vendor":"opnsense","product":"core","kev":false,"epss":0.00858},{"id":"CVE-2026-58391","published":"2026-10-15T15:12:08.334Z","updated":"2026-10-20T02:43:10.326Z","title":"OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout","severity":"MEDIUM","score":5.4,"vendor":"opnsense","product":"core","kev":false,"epss":0.00274},{"id":"CVE-2026-53582","published":"2026-10-15T15:08:46.374Z","updated":"2026-10-16T17:13:42.903Z","title":"OPNsense: XPATH Injection can disclose any secret in config.xml","severity":"HIGH","score":7.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.00726},{"id":"CVE-2026-75505","published":"2026-10-15T15:04:02.253Z","updated":"2026-10-16T17:13:50.051Z","title":"EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment","severity":"MEDIUM","score":6,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00293},{"id":"CVE-2026-77460","published":"2026-10-15T14:58:44.457Z","updated":"2026-10-15T15:12:29.848Z","title":"EspoCRM: Mass email template renderer leaks restricted record fields","severity":"MEDIUM","score":6.5,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00231},{"id":"CVE-2026-109413","published":"2026-10-15T14:57:00.211Z","updated":"2026-10-15T18:06:55.183Z","title":"Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process","severity":"HIGH","score":8.7,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00395},{"id":"CVE-2026-63130","published":"2026-10-15T14:56:57.122Z","updated":"2026-10-15T15:51:06.560Z","title":"EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete","severity":"MEDIUM","score":5.5,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00335},{"id":"CVE-2026-79843","published":"2026-10-15T14:53:42.364Z","updated":"2026-10-15T18:07:39.639Z","title":"HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SQL/MX EXE","kev":false,"epss":0.00092},{"id":"CVE-2026-59994","published":"2026-10-15T14:50:04.568Z","updated":"2026-10-20T02:41:44.725Z","title":"EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received","severity":"MEDIUM","score":4.3,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00345},{"id":"CVE-2026-55154","published":"2026-10-15T14:49:15.584Z","updated":"2026-10-16T17:13:56.910Z","title":"EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export","severity":"MEDIUM","score":5.4,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.0021},{"id":"CVE-2026-55184","published":"2026-10-15T14:48:03.852Z","updated":"2026-10-15T15:46:21.365Z","title":"EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled","severity":"LOW","score":3.5,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00202},{"id":"CVE-2026-53575","published":"2026-10-15T14:47:19.494Z","updated":"2026-10-15T15:13:14.043Z","title":"EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user","severity":"LOW","score":2.7,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00225},{"id":"CVE-2026-108082","published":"2026-10-15T14:46:01.594Z","updated":"2026-10-15T18:04:45.913Z","title":"Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header","severity":"HIGH","score":8.7,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.0048},{"id":"CVE-2026-53574","published":"2026-10-15T14:45:52.943Z","updated":"2026-10-15T15:33:36.150Z","title":"EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression","severity":"HIGH","score":7.6,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.0021},{"id":"CVE-2026-110957","published":"2026-10-15T14:45:15.760Z","updated":"2026-10-20T02:40:46.273Z","title":"Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection","severity":"CRITICAL","score":10,"vendor":"Wavlink","product":"WL-WN530BE2-A","kev":false,"epss":0.03066},{"id":"CVE-2026-46691","published":"2026-10-15T14:45:03.879Z","updated":"2026-10-15T15:13:51.068Z","title":"EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users","severity":"MEDIUM","score":6.5,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00231},{"id":"CVE-2026-46708","published":"2026-10-15T14:44:18.391Z","updated":"2026-10-15T15:47:03.869Z","title":"EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record","severity":"MEDIUM","score":4.3,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.0019},{"id":"CVE-2026-79841","published":"2026-10-15T14:43:23.831Z","updated":"2026-10-15T18:03:22.464Z","title":"HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop RDMA SERVICES NSK","kev":false,"epss":0.00092},{"id":"CVE-2026-47168","published":"2026-10-15T14:42:15.975Z","updated":"2026-10-20T02:39:55.590Z","title":"EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params","severity":"CRITICAL","score":9.1,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00423},{"id":"CVE-2026-103509","published":"2026-10-15T14:41:28.829Z","updated":"2026-10-15T17:58:34.271Z","title":"Credential Disclosure in P4 Search Configuration API","severity":"HIGH","score":8.5,"vendor":"Perforce","product":"P4 (Helix core)","kev":false,"epss":0.00229},{"id":"CVE-2026-46694","published":"2026-10-15T14:40:49.258Z","updated":"2026-10-16T17:14:07.344Z","title":"EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes","severity":"MEDIUM","score":6.5,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00231},{"id":"CVE-2026-79840","published":"2026-10-15T14:36:18.512Z","updated":"2026-10-15T18:08:45.467Z","title":"HPE NonStop XABroker - Memory corruption vulnerability","severity":"HIGH","score":7.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop XABroker","kev":false,"epss":0.00094},{"id":"CVE-2026-79839","published":"2026-10-15T14:32:13.723Z","updated":"2026-10-15T18:09:59.904Z","title":"HPE NonStop ODBC/MX Server - Memory corruption vulnerability","severity":"HIGH","score":7.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop ODBC/MX Server","kev":false,"epss":0.00094},{"id":"CVE-2026-79838","published":"2026-10-15T14:24:53.551Z","updated":"2026-10-15T18:10:31.991Z","title":"HPE NonStop ODBC/MX Services - Memory corruption vulnerability","severity":"HIGH","score":7.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop ODBC/MX Services","kev":false,"epss":0.00094},{"id":"CVE-2026-108116","published":"2026-10-15T14:12:52.017Z","updated":"2026-10-15T18:11:50.463Z","title":"MDX and SOAP Injection in Kendo UI for jQuery","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00263},{"id":"CVE-2026-106153","published":"2026-10-15T14:12:05.941Z","updated":"2026-10-15T18:24:48.793Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-106151","published":"2026-10-15T14:11:08.537Z","updated":"2026-10-15T18:12:49.751Z","title":"Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-106150","published":"2026-10-15T14:09:50.330Z","updated":"2026-10-15T18:13:16.731Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00162},{"id":"CVE-2026-106149","published":"2026-10-15T14:08:43.628Z","updated":"2026-10-15T18:13:44.008Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Menu","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-110746","published":"2026-10-15T14:08:27.445Z","updated":"2026-10-15T15:17:16.739Z","title":"CVE-2026-110746","severity":"HIGH","score":7.8,"vendor":"TotalSecurity","product":"TotalAV","kev":false,"epss":0.00212},{"id":"CVE-2026-103508","published":"2026-10-15T14:02:19.129Z","updated":"2026-10-15T18:14:22.594Z","title":"Path traversal via logging configuration in P4Search","severity":"HIGH","score":7.3,"vendor":"Perforce","product":"P4 (Helix core)","kev":false,"epss":0.00424},{"id":"CVE-2026-9703","published":"2026-10-15T14:02:00.146Z","updated":"2026-10-16T18:52:39.623Z","title":"Viewer role can create, modify and delete Loki alerting rules","severity":"HIGH","score":7.1,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00195},{"id":"CVE-2026-110936","published":"2026-10-15T14:01:17.797Z","updated":"2026-10-21T03:56:21.823Z","title":"A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an…","severity":"HIGH","score":8.4,"vendor":"Siemens","product":"Siemens Software Center","kev":true,"epss":0.00967},{"id":"CVE-2026-104024","published":"2026-10-15T13:30:13.885Z","updated":"2026-10-16T18:47:51.852Z","title":"Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation","severity":"MEDIUM","score":4.6,"vendor":"PeaZip","product":"PeaZip","kev":false,"epss":0.00128},{"id":"CVE-2026-93649","published":"2026-10-15T13:28:42.590Z","updated":"2026-10-16T18:46:25.952Z","title":"In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Adoptium Temurin","kev":false,"epss":0.00156},{"id":"CVE-2026-106148","published":"2026-10-15T13:28:22.551Z","updated":"2026-10-15T18:16:24.215Z","title":"Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-106147","published":"2026-10-15T13:27:32.243Z","updated":"2026-10-15T18:08:12.892Z","title":"Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-106161","published":"2026-10-15T13:26:57.635Z","updated":"2026-10-15T18:25:52.553Z","title":"Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178},{"id":"CVE-2026-106160","published":"2026-10-15T13:24:33.068Z","updated":"2026-10-15T18:26:30.515Z","title":"Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00192},{"id":"CVE-2026-106159","published":"2026-10-15T13:23:40.132Z","updated":"2026-10-15T18:26:53.924Z","title":"Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168},{"id":"CVE-2026-106158","published":"2026-10-15T13:22:44.197Z","updated":"2026-10-15T18:29:15.316Z","title":"Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168},{"id":"CVE-2026-106157","published":"2026-10-15T13:21:27.532Z","updated":"2026-10-15T18:29:35.947Z","title":"Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168},{"id":"CVE-2026-106162","published":"2026-10-15T13:20:11.331Z","updated":"2026-10-15T18:30:23.198Z","title":"Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00138},{"id":"CVE-2026-106163","published":"2026-10-15T13:18:53.367Z","updated":"2026-10-15T18:30:45.142Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00181},{"id":"CVE-2026-109686","published":"2026-10-15T13:00:24.207Z","updated":"2026-10-15T15:16:30.523Z","title":"WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Link Whisper INC","product":"Link Whisper Free","kev":false,"epss":0.00304},{"id":"CVE-2026-109685","published":"2026-10-15T13:00:23.963Z","updated":"2026-10-16T14:39:07.227Z","title":"WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Link Whisper INC","product":"Link Whisper Free","kev":false,"epss":0.00142},{"id":"CVE-2026-109892","published":"2026-10-15T13:00:23.774Z","updated":"2026-10-15T13:18:44.529Z","title":"WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Shabti Kaplan","product":"Frontend Admin by DynamiApps","kev":false,"epss":0.00261},{"id":"CVE-2026-102389","published":"2026-10-15T13:00:23.730Z","updated":"2026-10-15T16:41:33.903Z","title":"WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPMU DEV","product":"Broken Link Checker","kev":false,"epss":0.0021},{"id":"CVE-2026-105882","published":"2026-10-15T13:00:23.484Z","updated":"2026-10-15T15:03:59.807Z","title":"WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00127},{"id":"CVE-2026-109688","published":"2026-10-15T13:00:23.246Z","updated":"2026-10-15T14:36:49.884Z","title":"WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Link Whisper INC","product":"Link Whisper Free","kev":false,"epss":0.00229},{"id":"CVE-2026-107416","published":"2026-10-15T13:00:23.199Z","updated":"2026-10-15T13:19:10.932Z","title":"WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability","severity":"HIGH","score":7.5,"vendor":"Webba Plugins","product":"Webba Booking","kev":false,"epss":0.0026},{"id":"CVE-2026-109702","published":"2026-10-15T13:00:23.016Z","updated":"2026-10-15T15:04:14.692Z","title":"WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"maxfoundry","product":"Social Share Buttons","kev":false,"epss":0.00142},{"id":"CVE-2026-88794","published":"2026-10-15T12:24:54.903Z","updated":"2026-10-15T13:13:01.335Z","title":"XML External Entity injection in Sparx Enterprise Architect","severity":"HIGH","score":8.2,"vendor":"Sparx Systems","product":"Enterprise Architect","kev":false,"epss":0.00332},{"id":"CVE-2026-99999","published":"2026-10-15T12:19:22.784Z","updated":"2026-10-24T14:17:15.740Z","title":"ipv4: validate checksum_start before completing checksum","severity":"CRITICAL","score":9.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00788},{"id":"CVE-2026-110723","published":"2026-10-15T12:14:08.140Z","updated":"2026-10-15T13:11:12.574Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00337},{"id":"CVE-2026-110724","published":"2026-10-15T12:11:22.470Z","updated":"2026-10-16T18:43:57.741Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00272},{"id":"CVE-2026-109698","published":"2026-10-15T12:09:05.215Z","updated":"2026-10-15T13:09:25.240Z","title":"WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Kitae Park","product":"Mang Board WP","kev":false,"epss":0.00283},{"id":"CVE-2026-109692","published":"2026-10-15T12:09:05.084Z","updated":"2026-10-15T13:14:03.798Z","title":"WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00162},{"id":"CVE-2026-109693","published":"2026-10-15T12:09:04.952Z","updated":"2026-10-16T15:09:42.546Z","title":"WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00278},{"id":"CVE-2026-98432","published":"2026-10-15T12:08:22.205Z","updated":"2026-10-31T21:04:43.990Z","title":"ipv4: free inet_opt and ireq_opt after an RCU grace period","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00457},{"id":"CVE-2026-79837","published":"2026-10-15T12:07:43.057Z","updated":"2026-10-15T13:12:36.817Z","title":"HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability","severity":"HIGH","score":7.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SQL/MX UDR SERVER","kev":false,"epss":0.00098},{"id":"CVE-2026-104025","published":"2026-10-15T12:00:49.995Z","updated":"2026-10-15T13:11:13.654Z","title":"Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name","severity":"HIGH","score":8.4,"vendor":"PeaZip","product":"PeaZip","kev":false,"epss":0.00159},{"id":"CVE-2026-110726","published":"2026-10-15T11:58:03.903Z","updated":"2026-10-15T15:30:14.212Z","title":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…","severity":"MEDIUM","score":6.5,"vendor":"Eclipse Foundation","product":"Eclipse Connected Services Platform","kev":false,"epss":0.00192},{"id":"CVE-2026-79836","published":"2026-10-15T11:35:44.769Z","updated":"2026-10-15T13:10:48.093Z","title":"HPE NonStop SQL/MX Run-Time Statistics  - Information disclosure and DoS vulnerability","severity":"MEDIUM","score":6.4,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SQL/MX Run-Time Statistics","kev":false,"epss":0.00166},{"id":"CVE-2026-8145","published":"2026-10-15T11:34:32.426Z","updated":"2026-10-15T13:10:27.124Z","title":"WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'","severity":"MEDIUM","score":5.4,"vendor":"wpxpo","product":"WholesaleX – All-in-One B2B Solution with Wholesale Pricing","kev":false,"epss":0.00178},{"id":"CVE-2026-79835","published":"2026-10-15T11:29:04.993Z","updated":"2026-10-15T13:14:52.908Z","title":"HPE Nonstop KMS Server - Buffer overflow vulnerability","severity":"LOW","score":2.8,"vendor":"Hewlett Packard Enterprise","product":"HPE Nonstop KMS Server","kev":false,"epss":0.00092},{"id":"CVE-2026-79834","published":"2026-10-15T11:23:31.413Z","updated":"2026-10-15T13:15:12.540Z","title":"HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability","severity":"HIGH","score":7.4,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SQL/MX SQLCAT","kev":false,"epss":0.00567},{"id":"CVE-2026-79833","published":"2026-10-15T11:04:27.138Z","updated":"2026-10-15T13:15:32.817Z","title":"HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop ANSI SQLUTIL","kev":false,"epss":0.00263},{"id":"CVE-2026-109695","published":"2026-10-15T11:00:13.931Z","updated":"2026-10-15T15:04:25.338Z","title":"WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"WPManageNinja","product":"FluentCart","kev":false,"epss":0.00238},{"id":"CVE-2026-109694","published":"2026-10-15T11:00:13.754Z","updated":"2026-10-15T14:37:51.972Z","title":"WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00261},{"id":"CVE-2026-108491","published":"2026-10-15T11:00:13.399Z","updated":"2026-10-15T13:15:53.077Z","title":"WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Everest Forms","product":"Everest Forms","kev":false,"epss":0.00142},{"id":"CVE-2026-108497","published":"2026-10-15T11:00:13.368Z","updated":"2026-10-16T15:09:42.704Z","title":"WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.00229},{"id":"CVE-2026-108498","published":"2026-10-15T11:00:13.206Z","updated":"2026-10-15T13:14:06.252Z","title":"WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"bannersky","product":"BSK PDF Manager","kev":false,"epss":0.00142},{"id":"CVE-2026-79832","published":"2026-10-15T10:57:50.138Z","updated":"2026-10-15T13:17:22.952Z","title":"HPE NonStop SQL/MX Executor - Buffer overflow vulnerability","severity":"HIGH","score":7.6,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SQL/MX Executor","kev":false,"epss":0.00188},{"id":"CVE-2026-79831","published":"2026-10-15T10:40:13.992Z","updated":"2026-10-15T13:16:58.578Z","title":"HPE NonStop Posix User Threads - Heap buffer overflow vulnerability","severity":"MEDIUM","score":6.6,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Posix User Threads","kev":false,"epss":0.0011},{"id":"CVE-2026-79830","published":"2026-10-15T10:16:11.660Z","updated":"2026-10-15T13:16:30.391Z","title":"HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability","severity":"MEDIUM","score":6.6,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Kernel Level Thread Model Lib","kev":false,"epss":0.0011},{"id":"CVE-2026-17525","published":"2026-10-15T10:09:17.146Z","updated":"2026-10-15T13:14:31.439Z","title":"My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion","severity":"MEDIUM","score":5.1,"vendor":"ABB","product":"My Control System","kev":false,"epss":0.00145},{"id":"CVE-2026-79829","published":"2026-10-15T10:03:58.372Z","updated":"2026-10-15T13:22:44.803Z","title":"HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop HTTP WEBSERVER","kev":false,"epss":0.00282},{"id":"CVE-2026-79828","published":"2026-10-15T09:56:32.215Z","updated":"2026-10-15T13:23:23.409Z","title":"HPE NonStop Debug Utilities - Heap buffer overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Debug Utilities","kev":false,"epss":0.00113},{"id":"CVE-2026-79827","published":"2026-10-15T09:45:35.198Z","updated":"2026-10-15T13:23:41.996Z","title":"HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Inspect Subsystem","kev":false,"epss":0.00112},{"id":"CVE-2026-18659","published":"2026-10-15T09:44:11.148Z","updated":"2026-10-15T13:26:19.435Z","title":"Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-servlet","kev":false,"epss":0.00412},{"id":"CVE-2026-18662","published":"2026-10-15T09:42:40.638Z","updated":"2026-10-15T13:28:30.423Z","title":"In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-servlet","kev":false,"epss":0.00388},{"id":"CVE-2026-19864","published":"2026-10-15T09:41:25.133Z","updated":"2026-10-15T13:29:54.581Z","title":"Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the…","severity":"MEDIUM","score":5.6,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-security","kev":false,"epss":0.00097},{"id":"CVE-2026-19863","published":"2026-10-15T09:39:26.083Z","updated":"2026-10-15T13:30:53.073Z","title":"An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-ethereum","kev":false,"epss":0.00503},{"id":"CVE-2026-79826","published":"2026-10-15T09:38:56.641Z","updated":"2026-10-15T13:22:16.059Z","title":"HPE NonStop OCAX - Heap buffer overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop OCAX","kev":false,"epss":0.00112},{"id":"CVE-2026-50619","published":"2026-10-15T09:38:29.128Z","updated":"2026-10-15T14:12:34.527Z","title":"Unauthenticated remote code execution vulnerability","severity":"CRITICAL","score":9.3,"vendor":"QNAP Systems Inc.","product":"Qsirch","kev":false,"epss":0.00429},{"id":"CVE-2026-47790","published":"2026-10-15T09:38:20.936Z","updated":"2026-10-19T08:06:24.726Z","title":"Privilege Escalation via QuFTP Log-based XSS","severity":"MEDIUM","score":6.3,"vendor":"QNAP Systems Inc.","product":"QuFTP Service","kev":false,"epss":0.0028},{"id":"CVE-2026-47786","published":"2026-10-15T09:38:12.063Z","updated":"2026-10-15T13:21:25.935Z","title":"Pre-Authentication Command Injection","severity":"CRITICAL","score":9.3,"vendor":"QNAP Systems Inc.","product":"HybridDesk Station","kev":false,"epss":0.0107},{"id":"CVE-2026-39997","published":"2026-10-15T09:38:02.291Z","updated":"2026-10-15T13:31:41.953Z","title":"Unauthenticated Remote Input Injection in QNAP HD Station's remotepad","severity":"HIGH","score":8.9,"vendor":"QNAP Systems Inc.","product":"HybridDesk Station","kev":false,"epss":0.00242},{"id":"CVE-2026-18660","published":"2026-10-15T09:38:02.125Z","updated":"2026-10-15T13:32:37.345Z","title":"Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty:jetty-server","kev":false,"epss":0.00315},{"id":"CVE-2026-39991","published":"2026-10-15T09:37:51.830Z","updated":"2026-10-29T07:41:10.166Z","title":"Stored Cross-Site Scripting (XSS) in Note Station file upload functionality","severity":"MEDIUM","score":4.8,"vendor":"QNAP Systems Inc.","product":"Notes Station 3","kev":false,"epss":0.00293},{"id":"CVE-2026-34009","published":"2026-10-15T09:37:38.588Z","updated":"2026-10-15T13:33:33.092Z","title":"**Container Escape** Host user home directory mounted with write access into application container","severity":"HIGH","score":8.4,"vendor":"QNAP Systems Inc.","product":"Notes Station 3","kev":false,"epss":0.00111},{"id":"CVE-2026-34008","published":"2026-10-15T09:37:29.958Z","updated":"2026-10-15T13:33:55.371Z","title":"**Privilege Escalation** World-writable crontab path monitored and executed by root-owned process","severity":"HIGH","score":8.5,"vendor":"QNAP Systems Inc.","product":"Notes Station 3","kev":false,"epss":0.00095},{"id":"CVE-2026-34007","published":"2026-10-15T09:37:20.174Z","updated":"2026-10-15T13:36:35.475Z","title":"**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`","severity":"MEDIUM","score":6.9,"vendor":"QNAP Systems Inc.","product":"Notes Station 3","kev":false,"epss":0.01446},{"id":"CVE-2026-53882","published":"2026-10-15T09:31:51.390Z","updated":"2026-10-15T13:43:56.655Z","title":"Path Traversal in Virtualization Station VM Import","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"Virtualization Station","kev":false,"epss":0.00362},{"id":"CVE-2026-50612","published":"2026-10-15T09:31:41.898Z","updated":"2026-10-15T13:44:26.606Z","title":"Import Symlink Following Remote Code Execution Vulnerability in QuMagie","severity":"CRITICAL","score":9.4,"vendor":"QNAP Systems Inc.","product":"QuMagie","kev":false,"epss":0.00378},{"id":"CVE-2026-44084","published":"2026-10-15T09:31:29.859Z","updated":"2026-10-15T14:13:21.907Z","title":"Access Code Forgery in Video Station leading to unauthorized media access","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00313},{"id":"CVE-2026-41545","published":"2026-10-15T09:31:05.937Z","updated":"2026-10-15T13:45:00.535Z","title":"WebSocket timelapse path traversal and command injection","severity":"HIGH","score":8.6,"vendor":"QNAP Systems Inc.","product":"QuMagie","kev":false,"epss":0.0042},{"id":"CVE-2026-41541","published":"2026-10-15T09:30:51.471Z","updated":"2026-10-15T13:45:21.273Z","title":"Symlink creation in qsyncsrv.cgi","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00378},{"id":"CVE-2026-39989","published":"2026-10-15T09:30:42.076Z","updated":"2026-10-15T13:43:27.205Z","title":"SSRF in QNAP Download Station","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"Download Station","kev":false,"epss":0.00263},{"id":"CVE-2026-34015","published":"2026-10-15T09:30:31.743Z","updated":"2026-10-15T13:39:26.593Z","title":"Remote Code Execution in upload.php of Video Station","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00382},{"id":"CVE-2026-34014","published":"2026-10-15T09:30:12.174Z","updated":"2026-10-15T13:39:02.703Z","title":"ds-move-files.sh is writable and executed as root","severity":"HIGH","score":8.4,"vendor":"QNAP Systems Inc.","product":"Download Station","kev":false,"epss":0.00105},{"id":"CVE-2026-34006","published":"2026-10-15T09:30:03.388Z","updated":"2026-10-15T13:38:37.753Z","title":"Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer","severity":"CRITICAL","score":9.3,"vendor":"QNAP Systems Inc.","product":"sMedio DTCP MOVE","kev":false,"epss":0.00395},{"id":"CVE-2026-26245","published":"2026-10-15T09:29:45.734Z","updated":"2026-10-15T13:37:49.564Z","title":"SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset","severity":"HIGH","score":7.1,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00377},{"id":"CVE-2026-26244","published":"2026-10-15T09:29:36.440Z","updated":"2026-10-15T13:37:06.779Z","title":"SQLi#1 SQL Injection in class_videos.php _getFilters","severity":"HIGH","score":7.1,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00377},{"id":"CVE-2026-26243","published":"2026-10-15T09:29:27.642Z","updated":"2026-10-15T13:37:30.842Z","title":"Arbitrary Folder Deletion in Qsync Central 5.0.0.5","severity":"HIGH","score":7.2,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00419},{"id":"CVE-2026-79825","published":"2026-10-15T09:25:56.645Z","updated":"2026-10-15T13:45:45.120Z","title":"HPE NonStop NDSREST - Heap buffer overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop NDSREST","kev":false,"epss":0.00112},{"id":"CVE-2026-79824","published":"2026-10-15T09:09:17.173Z","updated":"2026-10-15T14:14:59.352Z","title":"HPE NonStop Python 3.x - Directory traversal vulnerability","severity":"HIGH","score":8,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Python 3.x","kev":false,"epss":0.00339},{"id":"CVE-2026-18661","published":"2026-10-15T09:01:28.668Z","updated":"2026-10-15T13:46:37.040Z","title":"In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed…","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"org.eclipse.jetty.ee11:jetty-ee11-annotations","kev":false,"epss":0.00424},{"id":"CVE-2026-79823","published":"2026-10-15T09:01:09.650Z","updated":"2026-10-15T13:46:58.729Z","title":"HPE NonStop EMS Distributor - Buffer Overflow vulnerability","severity":"MEDIUM","score":4,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop EMS Distributor","kev":false,"epss":0.00096},{"id":"CVE-2026-63315","published":"2026-10-15T09:00:45.702Z","updated":"2026-10-15T13:47:26.220Z","title":"Plaintext storage of a password in WebCTI","severity":"HIGH","score":8.2,"vendor":"Slican","product":"IPx","kev":false,"epss":0.00288},{"id":"CVE-2026-63314","published":"2026-10-15T09:00:40.742Z","updated":"2026-10-15T13:47:47.961Z","title":"SQL Injection in WebCTI","severity":"HIGH","score":8.7,"vendor":"Slican","product":"IPx","kev":false,"epss":0.00225},{"id":"CVE-2026-35088","published":"2026-10-15T09:00:35.428Z","updated":"2026-10-15T13:48:28.306Z","title":"Inadequate Encryption Strength in Slican telephone exchanges","severity":"HIGH","score":8.2,"vendor":"Slican","product":"IPx","kev":false,"epss":0.00117},{"id":"CVE-2026-101287","published":"2026-10-15T09:00:07.829Z","updated":"2026-10-15T13:48:56.460Z","title":"Authentication bypass in Stela by Diaple Networking","severity":"CRITICAL","score":9.3,"vendor":"Diaple","product":"Stela","kev":false,"epss":0.00398},{"id":"CVE-2026-101290","published":"2026-10-15T08:53:33.117Z","updated":"2026-10-15T13:49:55.870Z","title":"CVE-2026-101290","severity":"HIGH","score":7.5,"vendor":"SICK AG","product":"Sick_Safetyscanners_Base CPP Driver","kev":false,"epss":0.00453},{"id":"CVE-2026-77711","published":"2026-10-15T08:51:48.066Z","updated":"2026-10-15T13:50:52.566Z","title":"When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.0044},{"id":"CVE-2026-76184","published":"2026-10-15T08:46:54.683Z","updated":"2026-10-15T13:51:45.344Z","title":"In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00388},{"id":"CVE-2026-104618","published":"2026-10-15T08:41:31.842Z","updated":"2026-10-15T13:58:23.634Z","title":"sdbootutil: world-readable debug log","severity":"MEDIUM","score":6.9,"vendor":"SUSE","product":"SUSE Linux Enterprise Server 16.1","kev":false,"epss":0.00114},{"id":"CVE-2026-76182","published":"2026-10-15T08:40:58.439Z","updated":"2026-10-15T13:59:12.521Z","title":"In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the…","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Jetty","kev":false,"epss":0.00345},{"id":"CVE-2026-104617","published":"2026-10-15T08:33:09.363Z","updated":"2026-10-15T14:03:20.369Z","title":"sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline","severity":"MEDIUM","score":5.9,"vendor":"SUSE","product":"SUSE Linux Enterprise Server 16.1","kev":false,"epss":0.00103},{"id":"CVE-2026-16438","published":"2026-10-15T08:31:41.267Z","updated":"2026-10-16T05:41:46.956Z","title":"An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64","severity":"CRITICAL","score":9.4,"vendor":"Mitsubishi Electric Corporation","product":"GENESIS64","kev":false,"epss":0.00253},{"id":"CVE-2026-16437","published":"2026-10-15T08:30:39.094Z","updated":"2026-10-16T05:41:07.264Z","title":"An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz","severity":"HIGH","score":7.1,"vendor":"Mitsubishi Electric Corporation","product":"GENESIS","kev":false,"epss":0.00093},{"id":"CVE-2026-72528","published":"2026-10-15T08:29:55.881Z","updated":"2026-10-15T14:09:44.035Z","title":"\"Handmade Marketplace App - Creema\" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up…","severity":"MEDIUM","score":5.1,"vendor":"CREEMA LTD.","product":"\"Handmade Marketplace App - Creema\" for Android","kev":false,"epss":0.00213},{"id":"CVE-2026-16436","published":"2026-10-15T08:29:44.678Z","updated":"2026-10-16T05:40:07.210Z","title":"An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz","severity":"CRITICAL","score":9.2,"vendor":"Mitsubishi Electric Corporation","product":"GENESIS","kev":false,"epss":0.00322},{"id":"CVE-2026-75559","published":"2026-10-15T08:28:39.457Z","updated":"2026-10-15T14:15:40.048Z","title":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted…","severity":"MEDIUM","score":6.9,"vendor":"Ministry of Land, Infrastructure, Transport and Tourism","product":"Vehicle Inspection Certificate Viewer (for Android)","kev":false,"epss":0.00155},{"id":"CVE-2026-102477","published":"2026-10-15T08:28:25.876Z","updated":"2026-10-15T14:16:51.106Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00318},{"id":"CVE-2026-102464","published":"2026-10-15T08:26:02.688Z","updated":"2026-10-15T14:19:05.000Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00306},{"id":"CVE-2026-96614","published":"2026-10-15T08:25:39.167Z","updated":"2026-10-15T14:19:54.516Z","title":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the…","severity":"MEDIUM","score":5.1,"vendor":"GEO CORPORATION","product":"\"ゲオアプリ\" for Android","kev":false,"epss":0.00192},{"id":"CVE-2026-105271","published":"2026-10-15T08:24:18.191Z","updated":"2026-10-15T18:28:26.549Z","title":"\"ゲオアプリ\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a…","severity":"MEDIUM","score":5.1,"vendor":"GEO CORPORATION","product":"\"ゲオアプリ\" for Android","kev":false,"epss":0.00101},{"id":"CVE-2026-102461","published":"2026-10-15T08:23:54.256Z","updated":"2026-10-16T18:40:19.187Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00391},{"id":"CVE-2023-32198","published":"2026-10-15T08:22:47.085Z","updated":"2026-10-15T19:58:21.837Z","title":"Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks","severity":"HIGH","score":8,"vendor":"SUSE","product":"steve","kev":false,"epss":0.00329},{"id":"CVE-2026-103224","published":"2026-10-15T08:22:18.498Z","updated":"2026-10-16T18:51:17.848Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321},{"id":"CVE-2024-22031","published":"2026-10-15T08:21:02.222Z","updated":"2026-10-16T03:56:35.364Z","title":"Rancher users who can create Projects can gain access to arbitrary projects","severity":"HIGH","score":8.5,"vendor":"SUSE","product":"rancher","kev":false,"epss":0.00435},{"id":"CVE-2026-103223","published":"2026-10-15T08:20:03.749Z","updated":"2026-10-15T14:26:35.477Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321},{"id":"CVE-2025-23390","published":"2026-10-15T08:16:46.096Z","updated":"2026-10-15T14:21:33.655Z","title":"Fleet doesn’t validate a server’s certificate when connecting through SSH","severity":"MEDIUM","score":6.3,"vendor":"SUSE","product":"fleet","kev":false,"epss":0.0019},{"id":"CVE-2026-102466","published":"2026-10-15T08:15:32.883Z","updated":"2026-10-15T14:24:55.316Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.0028},{"id":"CVE-2026-102463","published":"2026-10-15T08:13:41.485Z","updated":"2026-10-15T14:27:43.560Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00306},{"id":"CVE-2026-109855","published":"2026-10-15T08:12:51.245Z","updated":"2026-10-15T14:22:28.644Z","title":"undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake","severity":"HIGH","score":7.5,"vendor":"undici","product":"undici","kev":false,"epss":0.00279},{"id":"CVE-2026-102469","published":"2026-10-15T08:11:33.465Z","updated":"2026-10-15T14:28:47.479Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA…","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00458},{"id":"CVE-2026-102462","published":"2026-10-15T08:09:36.396Z","updated":"2026-10-15T14:33:16.044Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00321},{"id":"CVE-2026-108092","published":"2026-10-15T07:42:37.119Z","updated":"2026-10-15T16:43:39.977Z","title":"Social Media Auto Post & Scheduler <=  9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure","severity":"MEDIUM","score":4.3,"vendor":"pr-gateway","product":"Blog2Social: Social Media Auto Post & Scheduler","kev":false,"epss":0.00251},{"id":"CVE-2026-102465","published":"2026-10-15T07:27:55.055Z","updated":"2026-10-15T14:34:24.521Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a…","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00232},{"id":"CVE-2026-102475","published":"2026-10-15T07:24:09.062Z","updated":"2026-10-15T14:35:42.319Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00258},{"id":"CVE-2026-102467","published":"2026-10-15T07:19:57.248Z","updated":"2026-10-15T14:37:49.556Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00258},{"id":"CVE-2026-101311","published":"2026-10-15T07:18:18.968Z","updated":"2026-10-16T03:56:36.774Z","title":"Multiple vulnerabilities in bhyve device models","severity":"HIGH","score":7,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00117},{"id":"CVE-2026-101310","published":"2026-10-15T07:18:11.464Z","updated":"2026-10-16T03:56:52.868Z","title":"Multiple vulnerabilities in bhyve device models","severity":"HIGH","score":7,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00117},{"id":"CVE-2026-101309","published":"2026-10-15T07:17:50.453Z","updated":"2026-10-16T03:56:52.178Z","title":"Multiple vulnerabilities in bhyve device models","severity":"HIGH","score":7,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00117},{"id":"CVE-2026-101308","published":"2026-10-15T07:08:52.619Z","updated":"2026-10-15T15:40:12.607Z","title":"TOCTOU race between sound(4) buffer resizing and mmap","severity":"MEDIUM","score":5.5,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00074},{"id":"CVE-2026-101307","published":"2026-10-15T07:05:02.295Z","updated":"2026-10-15T16:48:11.023Z","title":"Remotely triggerable buffer overflow in tcp_rack","severity":"HIGH","score":8.2,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00313},{"id":"CVE-2026-19377","published":"2026-10-15T07:02:10.937Z","updated":"2026-10-15T14:22:58.368Z","title":"Improper certificate validation in Cato Client tunnel handshake","severity":"MEDIUM","score":6,"vendor":"Cato Networks","product":"Cato Client for Windows","kev":false,"epss":0.00083},{"id":"CVE-2026-41544","published":"2026-10-15T07:00:14.196Z","updated":"2026-10-19T02:05:29.256Z","title":"Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"QcalAgent","kev":false,"epss":0.00362},{"id":"CVE-2026-39993","published":"2026-10-15T07:00:00.379Z","updated":"2026-10-15T14:48:37.464Z","title":"Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"Download Station","kev":false,"epss":0.00362},{"id":"CVE-2026-24723","published":"2026-10-15T06:59:47.676Z","updated":"2026-10-15T14:50:01.709Z","title":"NULL Pointer Dereference in utilRequest.cgi","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"File Station 5","kev":false,"epss":0.0028},{"id":"CVE-2026-24722","published":"2026-10-15T06:59:35.890Z","updated":"2026-10-15T14:51:37.356Z","title":"Null Pointer Dereference in File Station 5","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"File Station 5","kev":false,"epss":0.0028},{"id":"CVE-2026-24721","published":"2026-10-15T06:59:20.914Z","updated":"2026-10-15T14:51:59.563Z","title":"Null Pointer Dereference in File Station 5","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"File Station 5","kev":false,"epss":0.0028},{"id":"CVE-2026-24718","published":"2026-10-15T06:59:06.849Z","updated":"2026-10-15T14:52:16.569Z","title":"Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00362},{"id":"CVE-2026-101303","published":"2026-10-15T06:58:55.833Z","updated":"2026-10-16T18:36:07.211Z","title":"IPv6 UDP sendto(2) bypasses jail loopback restriction","severity":"HIGH","score":7.5,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00211},{"id":"CVE-2026-24715","published":"2026-10-15T06:58:49.678Z","updated":"2026-10-15T18:27:22.934Z","title":"Lack of Reproducible Vulnerability Evidence in QNAP Report","severity":"MEDIUM","score":5.3,"vendor":"QNAP Systems Inc.","product":"QuRouter","kev":false,"epss":0.00189},{"id":"CVE-2026-22896","published":"2026-10-15T06:58:38.222Z","updated":"2026-10-15T18:25:22.923Z","title":"Stored XSS via Interface Name in Network & Virtual Switch App","severity":"MEDIUM","score":6.2,"vendor":"QNAP Systems Inc.","product":"Network & Virtual Switch","kev":false,"epss":0.0036},{"id":"CVE-2025-68404","published":"2026-10-15T06:58:27.256Z","updated":"2026-10-15T18:32:25.154Z","title":"vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface","severity":"HIGH","score":7.5,"vendor":"QNAP Systems Inc.","product":"QuRouter","kev":false,"epss":0.00151},{"id":"CVE-2025-68403","published":"2026-10-15T06:58:16.820Z","updated":"2026-10-15T18:32:58.755Z","title":"Inadequate Steps to Confirm Vulnerability in QuRouter","severity":"MEDIUM","score":4.6,"vendor":"QNAP Systems Inc.","product":"QuRouter","kev":false,"epss":0.00106},{"id":"CVE-2025-66275","published":"2026-10-15T06:58:02.780Z","updated":"2026-10-15T18:34:15.469Z","title":"Remote code execution via command injection","severity":"HIGH","score":7.7,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00366},{"id":"CVE-2025-66272","published":"2026-10-15T06:57:51.915Z","updated":"2026-10-15T18:37:06.203Z","title":"Arbitrary file deletion and remote code execution","severity":"HIGH","score":7.7,"vendor":"QNAP Systems Inc.","product":"Video Station","kev":false,"epss":0.00366},{"id":"CVE-2025-29897","published":"2026-10-15T06:57:40.652Z","updated":"2026-10-15T18:38:15.386Z","title":"Stack-based Buffer Overflow in qsyncsrv.cgi","severity":"LOW","score":2.3,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00275},{"id":"CVE-2025-29896","published":"2026-10-15T06:57:26.970Z","updated":"2026-10-15T14:44:34.080Z","title":"NULL Pointer Dereference in qsyncsrv.cgi","severity":"LOW","score":2.3,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00275},{"id":"CVE-2025-29895","published":"2026-10-15T06:57:13.702Z","updated":"2026-10-15T14:52:35.865Z","title":"NULL Pointer Dereference in qsyncsrv.cgi","severity":"LOW","score":2.3,"vendor":"QNAP Systems Inc.","product":"Qsync Central","kev":false,"epss":0.00275},{"id":"CVE-2026-79822","published":"2026-10-15T06:54:15.829Z","updated":"2026-10-15T14:53:55.586Z","title":"HPE NonStop TNS/X Native Inspect - Execution flow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop TNS/X Native Inspect","kev":false,"epss":0.0011},{"id":"CVE-2026-101302","published":"2026-10-15T06:53:12.242Z","updated":"2026-10-15T13:55:00.760Z","title":"Remote DoS via receive-side kernel TLS","severity":"MEDIUM","score":6.5,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.0024},{"id":"CVE-2026-110934","published":"2026-10-15T06:51:21.891Z","updated":"2026-10-15T14:54:19.850Z","title":"Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before…","severity":"MEDIUM","score":4.4,"vendor":"Samsung Open Source","product":"Vyond","kev":false,"epss":0.00105},{"id":"CVE-2026-110933","published":"2026-10-15T06:51:04.308Z","updated":"2026-10-15T14:54:46.854Z","title":"Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before…","severity":"MEDIUM","score":4.4,"vendor":"Samsung Open Source","product":"Vyond","kev":false,"epss":0.00105},{"id":"CVE-2026-101306","published":"2026-10-15T06:46:25.804Z","updated":"2026-10-16T18:33:15.815Z","title":"Multiple jail filesystem root escapes","severity":"CRITICAL","score":9.8,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00268},{"id":"CVE-2026-101305","published":"2026-10-15T06:46:16.471Z","updated":"2026-10-16T18:30:32.048Z","title":"Multiple jail filesystem root escapes","severity":"HIGH","score":8.8,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00232},{"id":"CVE-2026-101304","published":"2026-10-15T06:46:03.792Z","updated":"2026-10-20T16:53:31.151Z","title":"Multiple jail filesystem root escapes","severity":"HIGH","score":7.1,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00147},{"id":"CVE-2026-81534","published":"2026-10-15T06:41:59.561Z","updated":"2026-10-15T16:43:40.115Z","title":"Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter","severity":"HIGH","score":8.8,"vendor":"ThemeHigh","product":"Email Customizer for WooCommerce (Pro)","kev":false,"epss":0.00459},{"id":"CVE-2026-11905","published":"2026-10-15T06:41:58.987Z","updated":"2026-10-15T16:43:40.250Z","title":"Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters","severity":"MEDIUM","score":4.3,"vendor":"elemntor","product":"Elementor Website Builder – more than just a page builder","kev":false,"epss":0.00284},{"id":"CVE-2026-92429","published":"2026-10-15T06:41:15.240Z","updated":"2026-10-15T11:01:26.695Z","title":"Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Rede Itaú for WooCommerce","kev":false,"epss":0.00114},{"id":"CVE-2026-92428","published":"2026-10-15T06:41:14.580Z","updated":"2026-10-15T11:01:26.816Z","title":"Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Rede Itaú for WooCommerce","kev":false,"epss":0.00114},{"id":"CVE-2026-103324","published":"2026-10-15T06:41:13.914Z","updated":"2026-10-15T11:01:26.948Z","title":"Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Cardinity Payment Gateway for WooCommerce","kev":false,"epss":0.00125},{"id":"CVE-2026-79821","published":"2026-10-15T06:38:29.824Z","updated":"2026-10-15T14:55:17.631Z","title":"HPE NonStop SOAP 4.0 - Memory corruption","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SOAP 4.0","kev":false,"epss":0.00229},{"id":"CVE-2026-76668","published":"2026-10-15T06:33:10.697Z","updated":"2026-10-15T14:55:59.859Z","title":"HPE NonStop Kernel - Access to unmapped or privileged data","severity":"MEDIUM","score":6.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop Kernel","kev":false,"epss":0.00079},{"id":"CVE-2026-58100","published":"2026-10-15T06:31:27.858Z","updated":"2026-10-19T14:11:08.268Z","title":"Memory safety bugs in kqueue copy-on-fork implementation","severity":"HIGH","score":7,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.001},{"id":"CVE-2026-58099","published":"2026-10-15T06:31:18.042Z","updated":"2026-10-19T14:10:47.179Z","title":"Memory safety bugs in kqueue copy-on-fork implementation","severity":"HIGH","score":7,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.001},{"id":"CVE-2026-58098","published":"2026-10-15T06:15:44.878Z","updated":"2026-10-16T14:16:45.049Z","title":"Heap out-of-bounds access in semop(2)","severity":"HIGH","score":8.4,"vendor":"FreeBSD","product":"FreeBSD","kev":false,"epss":0.00114},{"id":"CVE-2026-96537","published":"2026-10-15T06:00:14.929Z","updated":"2026-10-15T11:01:27.071Z","title":"Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Tutor LMS","kev":false,"epss":0.00208},{"id":"CVE-2026-74920","published":"2026-10-15T06:00:14.246Z","updated":"2026-10-15T11:01:27.195Z","title":"Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Document Gallery","kev":false,"epss":0.00142},{"id":"CVE-2026-109145","published":"2026-10-15T06:00:14.074Z","updated":"2026-10-15T11:01:27.324Z","title":"User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"User Rights Access Manager","kev":false,"epss":0.00277},{"id":"CVE-2026-106031","published":"2026-10-15T06:00:13.895Z","updated":"2026-10-15T11:01:27.444Z","title":"Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Spin Wheel","kev":false,"epss":0.00164},{"id":"CVE-2026-104643","published":"2026-10-15T06:00:13.714Z","updated":"2026-10-15T11:01:27.570Z","title":"Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite","severity":"MEDIUM","score":4.2,"vendor":"Unknown","product":"Easy HTTPS Redirection (SSL)","kev":false,"epss":0.00145},{"id":"CVE-2026-103304","published":"2026-10-15T06:00:13.290Z","updated":"2026-10-15T11:01:27.685Z","title":"eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"eaSYNC Booking","kev":false,"epss":0.00221},{"id":"CVE-2026-78087","published":"2026-10-15T05:30:23.839Z","updated":"2026-10-15T16:43:40.380Z","title":"VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Feature","severity":"MEDIUM","score":6.4,"vendor":"vektor-inc","product":"VK Blocks","kev":false,"epss":0.00184},{"id":"CVE-2026-15090","published":"2026-10-15T05:30:23.488Z","updated":"2026-10-15T16:43:40.515Z","title":"Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter","severity":"HIGH","score":7.5,"vendor":"jackdewey","product":"Link Library","kev":false,"epss":0.00364},{"id":"CVE-2026-15180","published":"2026-10-15T05:30:23.127Z","updated":"2026-10-15T16:43:40.643Z","title":"Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'","severity":"MEDIUM","score":6.1,"vendor":"data443","product":"Tracking Code Manager","kev":false,"epss":0.00205},{"id":"CVE-2026-88043","published":"2026-10-15T05:30:22.767Z","updated":"2026-10-15T16:43:40.774Z","title":"Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter","severity":"HIGH","score":7.2,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.0019},{"id":"CVE-2026-18557","published":"2026-10-15T05:30:22.424Z","updated":"2026-10-15T16:43:40.915Z","title":"Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter","severity":"MEDIUM","score":6.1,"vendor":"10web","product":"Photo Gallery by 10Web – Mobile-Friendly Image Gallery","kev":false,"epss":0.00205},{"id":"CVE-2026-18548","published":"2026-10-15T05:30:22.068Z","updated":"2026-10-15T16:43:41.042Z","title":"Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter","severity":"HIGH","score":7.2,"vendor":"trainingbusinesspros","product":"Groundhogg — CRM, Newsletters, and Marketing Automation","kev":false,"epss":0.00287},{"id":"CVE-2026-18586","published":"2026-10-15T05:30:21.725Z","updated":"2026-10-15T16:43:41.179Z","title":"Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'","severity":"HIGH","score":7.2,"vendor":"codename065","product":"Premium Packages – Sell Digital Products Securely","kev":false,"epss":0.00231},{"id":"CVE-2026-17031","published":"2026-10-15T05:30:21.369Z","updated":"2026-10-15T16:43:41.323Z","title":"Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID","severity":"HIGH","score":8.1,"vendor":"quadlayers","product":"Checkout Field Manager (Checkout Manager) for WooCommerce","kev":false,"epss":0.00291},{"id":"CVE-2026-17001","published":"2026-10-15T05:30:20.983Z","updated":"2026-10-15T16:43:41.456Z","title":"Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields","severity":"MEDIUM","score":6.4,"vendor":"carazo","product":"Import and export users and customers","kev":false,"epss":0.00225},{"id":"CVE-2026-86803","published":"2026-10-15T05:30:20.638Z","updated":"2026-10-15T16:43:41.589Z","title":"Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template","severity":"MEDIUM","score":6.5,"vendor":"oceanwp","product":"Ocean Extra","kev":false,"epss":0.00225},{"id":"CVE-2026-78001","published":"2026-10-15T05:30:20.175Z","updated":"2026-10-15T16:43:41.835Z","title":"Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute","severity":"MEDIUM","score":6.4,"vendor":"boldgrid","product":"Post and Page Builder by BoldGrid – Visual Drag and Drop Editor","kev":false,"epss":0.00152},{"id":"CVE-2026-76667","published":"2026-10-15T04:55:26.545Z","updated":"2026-10-15T15:01:35.163Z","title":"HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability","severity":"MEDIUM","score":5.7,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop EXPAND","kev":false,"epss":0.00092},{"id":"CVE-2026-76666","published":"2026-10-15T04:51:12.600Z","updated":"2026-10-15T15:02:10.773Z","title":"HPE NonStop EXPAND - Out-of-Bounds memory read","severity":"MEDIUM","score":4.7,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop EXPAND","kev":false,"epss":0.00096},{"id":"CVE-2026-76665","published":"2026-10-15T04:45:11.217Z","updated":"2026-10-15T15:02:29.736Z","title":"HPE NonStop EXPAND - Buffer Overflow vulnerability","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop EXPAND","kev":false,"epss":0.00157},{"id":"CVE-2026-14572","published":"2026-10-15T04:26:51.057Z","updated":"2026-10-15T16:43:41.975Z","title":"Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content","severity":"MEDIUM","score":6.4,"vendor":"themeum","product":"Kirki – Freeform Page Builder, Website Builder & Customizer","kev":false,"epss":0.00181},{"id":"CVE-2026-108587","published":"2026-10-15T04:26:50.697Z","updated":"2026-10-15T16:43:42.149Z","title":"10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter","severity":"CRITICAL","score":9.8,"vendor":"10web","product":"10Web Booster – Website speed optimization, Cache & Page Speed optimizer","kev":false,"epss":0.00916},{"id":"CVE-2026-3712","published":"2026-10-15T04:26:50.177Z","updated":"2026-10-15T16:43:45.173Z","title":"PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter","severity":"HIGH","score":7.3,"vendor":"kiboit","product":"PhastPress","kev":false,"epss":0.00243},{"id":"CVE-2026-76664","published":"2026-10-15T04:01:13.505Z","updated":"2026-10-15T15:02:54.725Z","title":"HPE NonStop EXPAND - Out-of-Bounds memory read/write","severity":"MEDIUM","score":6.4,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop EXPAND","kev":false,"epss":0.00145},{"id":"CVE-2026-93484","published":"2026-10-15T03:50:36.324Z","updated":"2026-10-15T15:03:23.472Z","title":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper…","severity":"HIGH","score":8.6,"vendor":"Znuny","product":"Znuny","kev":false,"epss":0.003},{"id":"CVE-2026-93483","published":"2026-10-15T03:43:10.406Z","updated":"2026-10-19T18:42:25.087Z","title":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a…","severity":"CRITICAL","score":9.5,"vendor":"Znuny","product":"Znuny","kev":false,"epss":0.00234},{"id":"CVE-2026-110912","published":"2026-10-15T03:23:47.830Z","updated":"2026-10-16T03:02:31.851Z","title":"In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address…","severity":"HIGH","score":7.1,"vendor":"DragonFlyBSD","product":"DragonFlyBSD","kev":false,"epss":0.00398},{"id":"CVE-2026-110911","published":"2026-10-15T03:03:49.507Z","updated":"2026-10-15T14:04:48.337Z","title":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the…","severity":"CRITICAL","score":9.8,"vendor":"Wheels","product":"Wheels","kev":false,"epss":0.00297},{"id":"CVE-2026-110909","published":"2026-10-15T02:56:38.852Z","updated":"2026-10-20T02:36:26.506Z","title":"Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a…","severity":"MEDIUM","score":5,"vendor":"Wheels","product":"Wheels CLI","kev":false,"epss":0.00134},{"id":"CVE-2026-110908","published":"2026-10-15T02:24:04.171Z","updated":"2026-10-15T15:43:35.834Z","title":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An…","severity":"HIGH","score":8.8,"vendor":"Netgate","product":"pfSense-pkg-frr","kev":false,"epss":0.06084},{"id":"CVE-2026-76663","published":"2026-10-15T02:16:17.282Z","updated":"2026-10-15T15:13:11.086Z","title":"HPE NonStop TELSERV - Memory corruption vulnerability","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop TELSERV","kev":false,"epss":0.00267},{"id":"CVE-2026-76662","published":"2026-10-15T02:11:54.726Z","updated":"2026-10-15T15:17:07.624Z","title":"HPE NonStop TELSERV - Memory corruption vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop TELSERV","kev":false,"epss":0.00226},{"id":"CVE-2026-110907","published":"2026-10-15T02:09:35.758Z","updated":"2026-10-19T18:42:32.640Z","title":"Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name])…","severity":"HIGH","score":7.5,"vendor":"BackdropCMS","product":"Backdrop","kev":false,"epss":0.00335},{"id":"CVE-2026-76661","published":"2026-10-15T01:52:41.540Z","updated":"2026-10-15T15:23:13.191Z","title":"HPE NonStop QIOMON - Memory corruption vulnerability","severity":"HIGH","score":7.6,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop QIOMON","kev":false,"epss":0.00178},{"id":"CVE-2026-76660","published":"2026-10-15T01:43:56.922Z","updated":"2026-10-15T15:23:30.245Z","title":"HPE NonStop CIPSAM - Memory corruption vulnerability","severity":"HIGH","score":8.7,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop CIPSAM","kev":false,"epss":0.00114},{"id":"CVE-2026-76066","published":"2026-10-15T01:39:56.474Z","updated":"2026-10-22T16:32:28.459Z","title":"IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode","severity":"HIGH","score":8.7,"vendor":"crestalnetwork","product":"intentkit","kev":false,"epss":0.00441},{"id":"CVE-2026-76659","published":"2026-10-15T01:31:59.344Z","updated":"2026-10-15T15:23:46.938Z","title":"HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop TCP/IP UTILITIES","kev":false,"epss":0.00305},{"id":"CVE-2026-109430","published":"2026-10-15T01:31:06.896Z","updated":"2026-10-20T02:35:29.262Z","title":"Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection","severity":"HIGH","score":8.7,"vendor":"Ellucian","product":"WebAdvisor","kev":false,"epss":0.00344},{"id":"CVE-2026-76656","published":"2026-10-15T01:26:24.344Z","updated":"2026-10-15T15:24:09.343Z","title":"HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop TCP/IP UTILITIES","kev":false,"epss":0.00159},{"id":"CVE-2026-77931","published":"2026-10-15T01:24:26.265Z","updated":"2026-10-26T15:25:18.338Z","title":"MoviePilot 3.1.5 Command Injection via ExecuteCommandTool","severity":"HIGH","score":8.7,"vendor":"jxxghp","product":"MoviePilot","kev":false,"epss":0.01004},{"id":"CVE-2026-73799","published":"2026-10-15T01:16:43.194Z","updated":"2026-10-15T15:17:40.034Z","title":"HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise","product":"HPE NonStop SNMP Trap Multiplexer","kev":false,"epss":0.00263},{"id":"CVE-2026-110904","published":"2026-10-15T01:15:08.642Z","updated":"2026-10-15T13:24:32.663Z","title":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"ApostropheCMS","kev":false,"epss":0.00302},{"id":"CVE-2026-0993","published":"2026-10-15T00:40:42.822Z","updated":"2026-10-27T01:30:29.027Z","title":"SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser","severity":"HIGH","score":8.7,"vendor":"SODOLA","product":"SL902-SWTGW124AS","kev":false,"epss":0.00391},{"id":"CVE-2026-110810","published":"2026-10-15T00:00:23.829Z","updated":"2026-10-15T15:34:07.846Z","title":"ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds","severity":"LOW","score":2.4,"vendor":"ggml-org","product":"whisper.cpp","kev":false,"epss":0.00116},{"id":"CVE-2026-106708","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-19T18:42:42.174Z","title":"XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00148},{"id":"CVE-2026-106707","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-15T18:39:58.230Z","title":"XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog). An authenticated user who holds…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00168},{"id":"CVE-2026-106706","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-19T18:42:48.393Z","title":"XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor. JobCodeController.save() stores the user-supplied…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00168},{"id":"CVE-2026-106701","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-20T02:34:48.518Z","title":"ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00188},{"id":"CVE-2026-106700","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-16T18:29:12.004Z","title":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00303},{"id":"CVE-2026-104586","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-20T02:33:38.939Z","title":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01526},{"id":"CVE-2026-95180","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-15T17:53:07.193Z","title":"An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0011},{"id":"CVE-2026-95179","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-15T18:50:35.083Z","title":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00417},{"id":"CVE-2026-95155","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-15T19:57:53.490Z","title":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00344},{"id":"CVE-2026-88753","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-20T02:32:28.883Z","title":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.0039},{"id":"CVE-2026-78851","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-15T18:46:40.745Z","title":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.01118},{"id":"CVE-2026-78850","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-26T13:00:40.358Z","title":"An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component. NOTE: the Supplier…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00332},{"id":"CVE-2026-52167","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-26T17:19:43.948Z","title":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB…","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.00133},{"id":"CVE-2026-36436","published":"2026-10-15T00:00:00.000Z","updated":"2026-10-16T15:17:54.852Z","title":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.0034},{"id":"CVE-2026-110809","published":"2026-10-14T23:30:21.130Z","updated":"2026-10-15T15:04:33.724Z","title":"sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service","severity":"MEDIUM","score":5.3,"vendor":"sgl-project","product":"SGLang","kev":false,"epss":0.00324},{"id":"CVE-2026-110807","published":"2026-10-14T23:00:19.976Z","updated":"2026-10-15T13:26:17.848Z","title":"sgl-project SGLang generate Endpoint io_struct.py denial of service","severity":"MEDIUM","score":5.3,"vendor":"sgl-project","product":"SGLang","kev":false,"epss":0.0033},{"id":"CVE-2026-110873","published":"2026-10-14T22:53:01.452Z","updated":"2026-10-16T17:14:18.802Z","title":"Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field","severity":"HIGH","score":7.1,"vendor":"heymrun","product":"heym","kev":false,"epss":0.00213},{"id":"CVE-2026-110872","published":"2026-10-14T22:53:00.625Z","updated":"2026-10-15T13:30:56.785Z","title":"Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing","severity":"HIGH","score":8.2,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00355},{"id":"CVE-2026-110871","published":"2026-10-14T22:52:59.681Z","updated":"2026-10-20T02:28:10.449Z","title":"Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service","severity":"HIGH","score":7.1,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00381},{"id":"CVE-2026-110870","published":"2026-10-14T22:52:58.787Z","updated":"2026-10-26T15:20:53.532Z","title":"Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments","severity":"MEDIUM","score":6.9,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00266},{"id":"CVE-2026-110869","published":"2026-10-14T22:52:57.866Z","updated":"2026-10-15T15:35:29.075Z","title":"Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes","severity":"HIGH","score":8.7,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00367},{"id":"CVE-2026-110868","published":"2026-10-14T22:52:56.896Z","updated":"2026-10-16T17:14:25.676Z","title":"Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources","severity":"HIGH","score":8.4,"vendor":"renovatebot","product":"renovate","kev":false,"epss":0.00178},{"id":"CVE-2026-110867","published":"2026-10-14T22:52:55.043Z","updated":"2026-10-15T13:31:59.164Z","title":"Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset","severity":"CRITICAL","score":9,"vendor":"renovatebot","product":"renovate","kev":false,"epss":0.00277},{"id":"CVE-2026-110866","published":"2026-10-14T22:52:53.970Z","updated":"2026-10-20T02:27:10.660Z","title":"Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request","severity":"MEDIUM","score":5.3,"vendor":"renovatebot","product":"renovate","kev":false,"epss":0.00209},{"id":"CVE-2026-110865","published":"2026-10-14T22:52:52.525Z","updated":"2026-10-26T15:22:16.486Z","title":"Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets","severity":"HIGH","score":7.1,"vendor":"renovatebot","product":"renovate","kev":false,"epss":0.00185},{"id":"CVE-2026-110864","published":"2026-10-14T22:52:51.393Z","updated":"2026-10-15T15:36:16.330Z","title":"Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy","severity":"CRITICAL","score":9.1,"vendor":"better-auth","product":"better-auth","kev":false,"epss":0.00288},{"id":"CVE-2026-110863","published":"2026-10-14T22:52:50.378Z","updated":"2026-10-16T17:14:33.345Z","title":"Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers","severity":"HIGH","score":8.6,"vendor":"better-auth","product":"sso","kev":false,"epss":0.00269},{"id":"CVE-2026-110862","published":"2026-10-14T22:52:46.811Z","updated":"2026-10-15T13:34:05.213Z","title":"Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link","severity":"CRITICAL","score":9.3,"vendor":"better-auth","product":"better-auth","kev":false,"epss":0.00321},{"id":"CVE-2026-110861","published":"2026-10-14T22:52:45.713Z","updated":"2026-10-20T02:26:30.363Z","title":"Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition","severity":"MEDIUM","score":6.3,"vendor":"better-auth","product":"drizzle-adapter","kev":false,"epss":0.00217},{"id":"CVE-2026-110860","published":"2026-10-14T22:52:44.690Z","updated":"2026-10-26T15:27:14.246Z","title":"GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()","severity":"MEDIUM","score":6.9,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00188},{"id":"CVE-2026-110859","published":"2026-10-14T22:52:43.585Z","updated":"2026-10-15T15:40:26.986Z","title":"GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00387},{"id":"CVE-2026-110858","published":"2026-10-14T22:52:42.217Z","updated":"2026-10-16T17:14:41.140Z","title":"GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec","severity":"CRITICAL","score":9.2,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00465},{"id":"CVE-2026-110857","published":"2026-10-14T22:52:40.373Z","updated":"2026-10-15T13:36:14.066Z","title":"GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs","severity":"HIGH","score":7.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00417},{"id":"CVE-2026-110856","published":"2026-10-14T22:52:38.541Z","updated":"2026-10-20T02:25:27.631Z","title":"GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00337},{"id":"CVE-2026-110855","published":"2026-10-14T22:52:34.854Z","updated":"2026-10-15T18:15:45.736Z","title":"GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name","severity":"HIGH","score":7.1,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.0029},{"id":"CVE-2026-110854","published":"2026-10-14T22:52:32.604Z","updated":"2026-10-15T15:40:57.411Z","title":"Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error","severity":"HIGH","score":8.2,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00263},{"id":"CVE-2026-110853","published":"2026-10-14T22:52:29.991Z","updated":"2026-10-16T17:14:50.047Z","title":"n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON","severity":"HIGH","score":7.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00228},{"id":"CVE-2026-110852","published":"2026-10-14T22:52:28.462Z","updated":"2026-10-15T13:42:40.945Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution","severity":"MEDIUM","score":6.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00355},{"id":"CVE-2026-110851","published":"2026-10-14T22:52:27.451Z","updated":"2026-10-20T02:24:35.205Z","title":"n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint","severity":"MEDIUM","score":6.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00228},{"id":"CVE-2026-110850","published":"2026-10-14T22:52:26.290Z","updated":"2026-10-15T18:14:09.774Z","title":"n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters","severity":"HIGH","score":7.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00215},{"id":"CVE-2026-110849","published":"2026-10-14T22:52:24.876Z","updated":"2026-10-15T15:41:35.418Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview","severity":"HIGH","score":7.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00243},{"id":"CVE-2026-110848","published":"2026-10-14T22:52:23.952Z","updated":"2026-10-16T17:14:56.072Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge","severity":"MEDIUM","score":6,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00312},{"id":"CVE-2026-110847","published":"2026-10-14T22:52:22.958Z","updated":"2026-10-15T13:43:58.755Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter","severity":"HIGH","score":7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00367},{"id":"CVE-2026-110846","published":"2026-10-14T22:52:21.869Z","updated":"2026-10-20T02:22:42.103Z","title":"n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook","severity":"HIGH","score":7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00511},{"id":"CVE-2026-110845","published":"2026-10-14T22:52:20.658Z","updated":"2026-10-26T16:03:50.986Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation","severity":"HIGH","score":7.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00336},{"id":"CVE-2026-110844","published":"2026-10-14T22:52:19.623Z","updated":"2026-10-15T15:42:13.075Z","title":"n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows","severity":"HIGH","score":7.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00282},{"id":"CVE-2026-110843","published":"2026-10-14T22:52:18.571Z","updated":"2026-10-16T17:15:05.495Z","title":"n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint","severity":"HIGH","score":8.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00291},{"id":"CVE-2026-110842","published":"2026-10-14T22:52:17.341Z","updated":"2026-10-15T13:44:50.036Z","title":"n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter","severity":"HIGH","score":7.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00312},{"id":"CVE-2026-110841","published":"2026-10-14T22:52:16.473Z","updated":"2026-10-20T02:21:47.592Z","title":"n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval","severity":"MEDIUM","score":6.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00282},{"id":"CVE-2026-110840","published":"2026-10-14T22:52:15.513Z","updated":"2026-10-15T18:18:14.437Z","title":"n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field","severity":"HIGH","score":7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00292},{"id":"CVE-2026-110839","published":"2026-10-14T22:52:14.540Z","updated":"2026-10-15T15:33:06.233Z","title":"FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00272},{"id":"CVE-2026-110838","published":"2026-10-14T22:52:13.434Z","updated":"2026-10-16T17:15:12.757Z","title":"FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00326},{"id":"CVE-2026-110837","published":"2026-10-14T22:52:12.464Z","updated":"2026-10-15T13:47:43.486Z","title":"FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding","severity":"MEDIUM","score":6.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00373},{"id":"CVE-2026-110836","published":"2026-10-14T22:52:11.374Z","updated":"2026-10-20T02:17:21.565Z","title":"FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00312},{"id":"CVE-2026-110835","published":"2026-10-14T22:52:10.348Z","updated":"2026-10-18T12:10:18.505Z","title":"FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token","severity":"MEDIUM","score":6.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00261},{"id":"CVE-2026-110834","published":"2026-10-14T22:52:09.349Z","updated":"2026-10-15T15:31:51.095Z","title":"FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00312},{"id":"CVE-2026-110833","published":"2026-10-14T22:52:08.294Z","updated":"2026-10-16T17:15:19.859Z","title":"FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00319},{"id":"CVE-2026-110832","published":"2026-10-14T22:52:07.345Z","updated":"2026-10-15T13:48:39.359Z","title":"FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00314},{"id":"CVE-2026-110831","published":"2026-10-14T22:52:06.410Z","updated":"2026-10-20T02:15:59.346Z","title":"FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00281},{"id":"CVE-2026-110830","published":"2026-10-14T22:52:05.434Z","updated":"2026-10-15T18:12:12.919Z","title":"FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00319},{"id":"CVE-2026-110829","published":"2026-10-14T22:52:04.455Z","updated":"2026-10-15T15:25:00.133Z","title":"FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00312},{"id":"CVE-2026-107795","published":"2026-10-14T22:26:50.061Z","updated":"2026-10-16T03:56:39.558Z","title":"Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API","severity":"HIGH","score":7.5,"vendor":"TP-Link Systems Inc.","product":"Omada Software Controller","kev":false,"epss":0.00227},{"id":"CVE-2026-110816","published":"2026-10-14T22:05:24.015Z","updated":"2026-10-16T20:17:48.588Z","title":"qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string","severity":"MEDIUM","score":6.3,"vendor":"ljharb","product":"qs","kev":false,"epss":0.00368},{"id":"CVE-2026-102298","published":"2026-10-14T21:55:10.360Z","updated":"2026-10-16T14:18:49.902Z","title":"Insufficient Authorization and User Boundary Validation in Omada Controller MSP","severity":"HIGH","score":7.5,"vendor":"TP-Link System Inc.","product":"Omada Software Controller (Windows)","kev":false,"epss":0.00437},{"id":"CVE-2026-110698","published":"2026-10-14T21:45:09.762Z","updated":"2026-10-20T02:15:11.452Z","title":"Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Praat","kev":false,"epss":0.00324},{"id":"CVE-2026-108337","published":"2026-10-14T21:43:08.247Z","updated":"2026-10-16T20:18:39.031Z","title":"Password Reset Code Accessible in User Listing API","severity":"HIGH","score":7.4,"vendor":"Hitachi Vantara","product":"Remot Ops Agent","kev":false,"epss":0.00282},{"id":"CVE-2026-108336","published":"2026-10-14T21:41:40.417Z","updated":"2026-10-16T18:26:15.816Z","title":"Token Signing Key Allows Unauthenticated Administrative Access","severity":"CRITICAL","score":9.1,"vendor":"Hitachi Vantara","product":"Remot Ops Agent","kev":false,"epss":0.00223},{"id":"CVE-2026-108335","published":"2026-10-14T21:39:17.470Z","updated":"2026-10-15T15:25:31.546Z","title":"Password Reset Functionality Missing Brute-Force Protection","severity":"CRITICAL","score":9.1,"vendor":"Hitachi Vantara","product":"Remote Ops Agent","kev":false,"epss":0.00239},{"id":"CVE-2026-110696","published":"2026-10-14T21:30:11.205Z","updated":"2026-10-15T15:26:03.856Z","title":"itsmeravitejak Online-Examination-System dbtables.sql information disclosure","severity":"MEDIUM","score":6.9,"vendor":"itsmeravitejak","product":"Online-Examination-System","kev":false,"epss":0.00414},{"id":"CVE-2026-110695","published":"2026-10-14T21:15:09.917Z","updated":"2026-10-15T15:04:39.797Z","title":"turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow","severity":"MEDIUM","score":5.3,"vendor":"turboderp","product":"ExLlamaV2","kev":false,"epss":0.00362},{"id":"CVE-2026-110694","published":"2026-10-14T21:00:21.446Z","updated":"2026-10-15T13:50:10.321Z","title":"OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds","severity":"MEDIUM","score":5.3,"vendor":"OAID","product":"Tengine","kev":false,"epss":0.00254},{"id":"CVE-2026-110689","published":"2026-10-14T20:45:21.381Z","updated":"2026-10-20T02:14:18.062Z","title":"OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism","severity":"MEDIUM","score":4.8,"vendor":"OpenClaw","product":"ClawScan","kev":false,"epss":0.00127},{"id":"CVE-2026-104109","published":"2026-10-14T20:44:29.439Z","updated":"2026-10-29T13:43:27.067Z","title":"FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root","severity":"MEDIUM","score":6.8,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00384},{"id":"CVE-2026-104107","published":"2026-10-14T20:42:08.900Z","updated":"2026-10-15T15:31:09.179Z","title":"FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs","severity":"MEDIUM","score":6.5,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00364},{"id":"CVE-2026-104110","published":"2026-10-14T20:40:15.899Z","updated":"2026-10-15T15:37:43.913Z","title":"FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php","severity":"MEDIUM","score":5.3,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00306},{"id":"CVE-2026-104108","published":"2026-10-14T20:39:27.691Z","updated":"2026-10-20T02:11:28.127Z","title":"FileRise OIDC login can bind an attacker identity to an existing local account","severity":"HIGH","score":8.1,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00218},{"id":"CVE-2026-103977","published":"2026-10-14T20:38:39.485Z","updated":"2026-10-20T02:10:25.191Z","title":"FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts","severity":"HIGH","score":8.1,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00375},{"id":"CVE-2026-104105","published":"2026-10-14T20:37:44.884Z","updated":"2026-10-15T13:52:38.802Z","title":"FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)","severity":"MEDIUM","score":6.4,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00266},{"id":"CVE-2026-104106","published":"2026-10-14T20:36:27.436Z","updated":"2026-10-15T15:04:46.143Z","title":"FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification","severity":"MEDIUM","score":6.5,"vendor":"error311","product":"FileRise","kev":false,"epss":0.0026},{"id":"CVE-2026-103988","published":"2026-10-14T20:35:46.563Z","updated":"2026-10-15T15:07:34.533Z","title":"FileRise renameFolder omits destination-parent authorization","severity":"MEDIUM","score":5.4,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00229},{"id":"CVE-2026-69193","published":"2026-10-14T20:34:13.021Z","updated":"2026-10-15T15:04:52.742Z","title":"FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying","severity":"MEDIUM","score":6.5,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00369},{"id":"CVE-2026-69191","published":"2026-10-14T20:33:33.368Z","updated":"2026-10-15T13:53:32.825Z","title":"FileRise: Login Method Restriction Bypass via Direct API Access","severity":"MEDIUM","score":5.4,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00219},{"id":"CVE-2026-77427","published":"2026-10-14T20:32:55.815Z","updated":"2026-10-20T02:09:06.968Z","title":"FileRise: Insecure default cryptographic key fallback in manual installs","severity":"MEDIUM","score":5.9,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00349},{"id":"CVE-2026-69194","published":"2026-10-14T20:32:01.344Z","updated":"2026-10-15T15:30:30.030Z","title":"FileRise: Unsanitized footerHtml in Public Site Config","severity":"MEDIUM","score":4.8,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00227},{"id":"CVE-2026-110679","published":"2026-10-14T20:30:20.592Z","updated":"2026-10-15T15:27:12.475Z","title":"OpenSIPS rtpproxy rtpproxy_answer out-of-bounds","severity":"MEDIUM","score":6.9,"vendor":null,"product":"OpenSIPS","kev":false,"epss":0.00307},{"id":"CVE-2026-0311","published":"2026-10-14T20:29:19.297Z","updated":"2026-10-15T16:43:45.351Z","title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability","severity":"LOW","score":1.1,"vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","kev":false,"epss":0.00107},{"id":"CVE-2026-0312","published":"2026-10-14T20:28:18.276Z","updated":"2026-10-15T18:40:29.605Z","title":"Checkov by Prisma Cloud: Path Traversal Vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","kev":false,"epss":0.00141},{"id":"CVE-2026-0313","published":"2026-10-14T20:27:19.112Z","updated":"2026-10-16T03:56:57.198Z","title":"Cortex XSOAR: OS Command Injection Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"Palo Alto Networks","product":"Cortex XSOAR OS Query","kev":false,"epss":0.00833},{"id":"CVE-2026-64856","published":"2026-10-14T20:25:37.654Z","updated":"2026-10-15T15:29:45.965Z","title":"FileRise: Missing Authentication Guard on File Snippet Preview Endpoint","severity":"LOW","score":3.7,"vendor":"error311","product":"FileRise","kev":false,"epss":0.0023},{"id":"CVE-2026-0314","published":"2026-10-14T20:25:32.075Z","updated":"2026-10-15T18:41:54.691Z","title":"GlobalProtect App: Local Denial of Service (DoS) on Windows","severity":"MEDIUM","score":4.3,"vendor":"Palo Alto Networks","product":"GlobalProtect App","kev":false,"epss":0.00099},{"id":"CVE-2026-62664","published":"2026-10-14T20:24:50.163Z","updated":"2026-10-15T15:04:59.848Z","title":"FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root","severity":"MEDIUM","score":5.4,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00286},{"id":"CVE-2026-0315","published":"2026-10-14T20:24:21.191Z","updated":"2026-10-16T03:56:58.518Z","title":"GlobalProtect App: Local Privilege Escalation Vulnerability on macOS","severity":"MEDIUM","score":5.9,"vendor":"Palo Alto Networks","product":"GlobalProtect App","kev":false,"epss":0.00105},{"id":"CVE-2026-61844","published":"2026-10-14T20:23:53.321Z","updated":"2026-10-15T13:55:51.328Z","title":"FileRise: Folder Metadata Filename Collisions Bypass \"read_own\" Isolation","severity":"HIGH","score":7.1,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00324},{"id":"CVE-2026-0316","published":"2026-10-14T20:23:03.075Z","updated":"2026-10-15T18:42:26.375Z","title":"PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability","severity":"LOW","score":1.1,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00265},{"id":"CVE-2026-61843","published":"2026-10-14T20:22:57.741Z","updated":"2026-10-15T15:05:44.030Z","title":"FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares","severity":"HIGH","score":8.2,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00372},{"id":"CVE-2026-57493","published":"2026-10-14T20:22:06.735Z","updated":"2026-10-20T02:08:08.010Z","title":"FileRise: Remember-me auto-login uses stale admin role from token instead of current role","severity":"MEDIUM","score":6.8,"vendor":"error311","product":"FileRise","kev":false,"epss":0.003},{"id":"CVE-2026-0317","published":"2026-10-14T20:21:21.338Z","updated":"2026-10-15T18:47:53.957Z","title":"PAN-OS: Denial of Service Vulnerability","severity":"LOW","score":1.2,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00298},{"id":"CVE-2026-57492","published":"2026-10-14T20:21:15.070Z","updated":"2026-10-15T15:29:11.267Z","title":"FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation","severity":"HIGH","score":7.4,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00349},{"id":"CVE-2026-57490","published":"2026-10-14T20:20:23.954Z","updated":"2026-10-15T15:35:20.923Z","title":"FileRise: WebDAV authentication bypasses TOTP/MFA entirely","severity":"HIGH","score":8.1,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00522},{"id":"CVE-2026-0318","published":"2026-10-14T20:19:28.773Z","updated":"2026-10-15T18:48:22.858Z","title":"PAN-OS: Denial of Service (DoS) on Panorama","severity":"MEDIUM","score":4.6,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00317},{"id":"CVE-2026-57491","published":"2026-10-14T20:17:04.140Z","updated":"2026-10-15T18:52:12.800Z","title":"FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist","severity":"MEDIUM","score":6.5,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00349},{"id":"CVE-2026-57489","published":"2026-10-14T20:16:00.021Z","updated":"2026-10-20T02:07:03.653Z","title":"FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass","severity":"HIGH","score":8.1,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00647},{"id":"CVE-2026-0319","published":"2026-10-14T20:15:32.174Z","updated":"2026-10-15T18:53:43.155Z","title":"PAN-OS: Improper Input Handling Vulnerability","severity":"MEDIUM","score":4.9,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00279},{"id":"CVE-2026-110670","published":"2026-10-14T20:15:15.237Z","updated":"2026-10-15T15:05:11.401Z","title":"cemtan sar2html Archive Processing sar2html.py updateDb sql injection","severity":"MEDIUM","score":6.9,"vendor":"cemtan","product":"sar2html","kev":false,"epss":0.00275},{"id":"CVE-2026-0320","published":"2026-10-14T20:09:49.697Z","updated":"2026-10-16T03:56:59.391Z","title":"PAN-OS: Authenticated Admin Command Injection Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00842},{"id":"CVE-2026-100232","published":"2026-10-14T20:08:36.497Z","updated":"2026-10-15T16:19:26.757Z","title":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the…","severity":"HIGH","score":7.2,"vendor":"SonicWall","product":"Network Security Manager (NSM)","kev":false,"epss":0.01151},{"id":"CVE-2026-96540","published":"2026-10-14T20:06:24.523Z","updated":"2026-10-15T16:20:16.482Z","title":"An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a…","severity":"HIGH","score":8.8,"vendor":"SonicWall","product":"Network Security Manager (NSM)","kev":false,"epss":0.00311},{"id":"CVE-2026-71854","published":"2026-10-14T20:05:05.232Z","updated":"2026-10-15T15:05:19.156Z","title":"OpenAEV has unauthenticated access and missing object-level authorization on player lessons API","severity":"HIGH","score":8.2,"vendor":"OpenAEV-Platform","product":"openaev","kev":false,"epss":0.00245},{"id":"CVE-2026-0321","published":"2026-10-14T19:58:55.823Z","updated":"2026-10-15T19:31:16.341Z","title":"PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services","severity":"MEDIUM","score":6.6,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":false,"epss":0.00326},{"id":"CVE-2026-55498","published":"2026-10-14T19:57:05.711Z","updated":"2026-10-15T15:28:30.570Z","title":"FileRise Shared Folder Symlink Escape","severity":"MEDIUM","score":4.8,"vendor":"error311","product":"FileRise","kev":false,"epss":0.00331},{"id":"CVE-2026-55684","published":"2026-10-14T19:46:49.898Z","updated":"2026-10-15T15:05:28.769Z","title":"WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php","severity":"CRITICAL","score":9.8,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00474},{"id":"CVE-2026-55682","published":"2026-10-14T19:46:00.294Z","updated":"2026-10-15T13:58:06.066Z","title":"WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php","severity":"HIGH","score":8.1,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00435},{"id":"CVE-2026-110669","published":"2026-10-14T19:45:14.711Z","updated":"2026-10-14T19:45:14.711Z","title":"cemtan sar2html sar2html.py deleteAll missing authentication","severity":"MEDIUM","score":6.9,"vendor":"cemtan","product":"sar2html","kev":false,"epss":0.00594},{"id":"CVE-2026-55681","published":"2026-10-14T19:44:57.437Z","updated":"2026-10-15T15:14:31.444Z","title":"WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter","severity":"HIGH","score":8.8,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00569},{"id":"CVE-2026-55679","published":"2026-10-14T19:44:02.494Z","updated":"2026-10-20T02:06:11.939Z","title":"WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection","severity":"MEDIUM","score":6.5,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00521},{"id":"CVE-2026-55680","published":"2026-10-14T19:42:22.402Z","updated":"2026-10-15T15:05:34.259Z","title":"WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via \"codigo\" parameter","severity":"CRITICAL","score":9.8,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00492},{"id":"CVE-2026-55683","published":"2026-10-14T19:41:34.395Z","updated":"2026-10-15T15:27:49.777Z","title":"WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php","severity":"CRITICAL","score":9.8,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00592},{"id":"CVE-2026-110310","published":"2026-10-14T19:37:48.420Z","updated":"2026-10-14T19:46:28.634Z","title":"RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET","severity":"MEDIUM","score":6,"vendor":"Amazon","product":"Amazon.Extensions.S3.Encryption","kev":false,"epss":0.00508},{"id":"CVE-2026-102980","published":"2026-10-14T19:33:07.916Z","updated":"2026-10-15T14:14:43.959Z","title":"Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scope","severity":"MEDIUM","score":6.5,"vendor":"makeplane","product":"plane","kev":false,"epss":0.00386},{"id":"CVE-2026-102985","published":"2026-10-14T19:31:13.476Z","updated":"2026-10-20T02:05:06.225Z","title":"Plane: Any project member can modify (deactivate) other members' records","severity":"MEDIUM","score":6.5,"vendor":"makeplane","product":"plane","kev":false,"epss":0.00337},{"id":"CVE-2026-110668","published":"2026-10-14T19:30:14.467Z","updated":"2026-10-20T02:04:08.159Z","title":"cemtan sar2html sar2html.py index sql injection","severity":"MEDIUM","score":6.9,"vendor":"cemtan","product":"sar2html","kev":false,"epss":0.00343},{"id":"CVE-2026-102986","published":"2026-10-14T19:29:04.449Z","updated":"2026-10-15T16:30:42.901Z","title":"Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/","severity":"HIGH","score":8.1,"vendor":"makeplane","product":"plane","kev":false,"epss":0.00513},{"id":"CVE-2026-55382","published":"2026-10-14T19:27:00.216Z","updated":"2026-10-15T15:05:40.789Z","title":"InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)","severity":"HIGH","score":7.6,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00382},{"id":"CVE-2026-55385","published":"2026-10-14T19:25:32.410Z","updated":"2026-10-20T02:02:13.638Z","title":"InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration","severity":"MEDIUM","score":6.8,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00576},{"id":"CVE-2026-55381","published":"2026-10-14T19:24:20.102Z","updated":"2026-10-15T14:17:15.000Z","title":"InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates","severity":"HIGH","score":7.1,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00364},{"id":"CVE-2026-55383","published":"2026-10-14T19:23:33.527Z","updated":"2026-10-14T19:43:41.543Z","title":"InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure","severity":"HIGH","score":8.2,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00423},{"id":"CVE-2026-55387","published":"2026-10-14T19:21:49.520Z","updated":"2026-10-15T15:56:54.563Z","title":"InvoiceShelf bulk deletion lacks company scoping","severity":"HIGH","score":7.2,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00433},{"id":"CVE-2026-55386","published":"2026-10-14T19:18:57.322Z","updated":"2026-10-14T19:44:29.460Z","title":"InvoiceShelf ORDER BY SQL injection through orderByField","severity":"HIGH","score":7.1,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00363},{"id":"CVE-2026-55384","published":"2026-10-14T19:17:25.099Z","updated":"2026-10-15T15:05:50.446Z","title":"InvoiceShelf trusts client-supplied document totals","severity":"MEDIUM","score":5.3,"vendor":"InvoiceShelf","product":"InvoiceShelf","kev":false,"epss":0.00279},{"id":"CVE-2026-54702","published":"2026-10-14T19:13:58.946Z","updated":"2026-10-15T16:24:10.781Z","title":"Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler","severity":"HIGH","score":7.3,"vendor":"shd101wyy","product":"vscode-markdown-preview-enhanced","kev":false,"epss":0.00312},{"id":"CVE-2026-54701","published":"2026-10-14T19:11:51.712Z","updated":"2026-10-20T02:01:15.836Z","title":"Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview","severity":"MEDIUM","score":6.9,"vendor":"shd101wyy","product":"vscode-markdown-preview-enhanced","kev":false,"epss":0.00297},{"id":"CVE-2026-54703","published":"2026-10-14T19:09:50.323Z","updated":"2026-10-15T14:21:40.113Z","title":"Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation","severity":"MEDIUM","score":5.8,"vendor":"shd101wyy","product":"vscode-markdown-preview-enhanced","kev":false,"epss":0.00304},{"id":"CVE-2026-54566","published":"2026-10-14T19:08:43.663Z","updated":"2026-10-14T19:45:22.736Z","title":"Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`","severity":"HIGH","score":8.5,"vendor":"shd101wyy","product":"vscode-markdown-preview-enhanced","kev":false,"epss":0.00296},{"id":"CVE-2026-54525","published":"2026-10-14T19:06:59.440Z","updated":"2026-10-15T15:05:57.227Z","title":"Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows","severity":"HIGH","score":8.8,"vendor":"shd101wyy","product":"vscode-markdown-preview-enhanced","kev":false,"epss":0.00429},{"id":"CVE-2026-110667","published":"2026-10-14T19:00:18.273Z","updated":"2026-10-14T19:37:44.471Z","title":"cemtan sar2html sar2html.py hard-coded credentials","severity":"MEDIUM","score":6.9,"vendor":"cemtan","product":"sar2html","kev":false,"epss":0.00307},{"id":"CVE-2026-102354","published":"2026-10-14T19:00:13.518Z","updated":"2026-10-15T16:19:56.322Z","title":"BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker","severity":"MEDIUM","score":6.8,"vendor":"alam00000","product":"bentopdf","kev":false,"epss":0.002},{"id":"CVE-2026-102899","published":"2026-10-14T18:57:50.768Z","updated":"2026-10-15T14:23:19.741Z","title":"Sentry: Improper authentication on SAML SSO process allows user identity linking","severity":"HIGH","score":7.6,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00364},{"id":"CVE-2026-102471","published":"2026-10-14T18:50:21.647Z","updated":"2026-10-14T19:49:35.803Z","title":"CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.0031},{"id":"CVE-2026-82402","published":"2026-10-14T18:49:19.768Z","updated":"2026-10-20T01:58:51.683Z","title":"Gogs: Open Redirect in /redirect endpoint via backslash bypass in `IsSameSite`","severity":"MEDIUM","score":5.3,"vendor":"gogs","product":"gogs","kev":false,"epss":0.00435},{"id":"CVE-2026-110775","published":"2026-10-14T18:48:05.425Z","updated":"2026-10-16T17:15:27.094Z","title":"Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access","severity":"HIGH","score":7.1,"vendor":"ModelEngine-Group","product":"nexent","kev":false,"epss":0.00249},{"id":"CVE-2026-110774","published":"2026-10-14T18:48:03.347Z","updated":"2026-10-15T14:26:13.543Z","title":"Blinko through 1.8.8 Private Attachment Read via /api/file Route","severity":"MEDIUM","score":6,"vendor":"blinkospace","product":"blinko","kev":false,"epss":0.00237},{"id":"CVE-2026-110773","published":"2026-10-14T18:48:01.395Z","updated":"2026-10-20T01:57:25.985Z","title":"GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint","severity":"MEDIUM","score":5.3,"vendor":"growchief","product":"growchief","kev":false,"epss":0.00208},{"id":"CVE-2026-110772","published":"2026-10-14T18:47:59.219Z","updated":"2026-10-14T20:30:41.451Z","title":"Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update","severity":"MEDIUM","score":5.3,"vendor":"we-promise","product":"sure","kev":false,"epss":0.00266},{"id":"CVE-2026-110771","published":"2026-10-14T18:47:57.175Z","updated":"2026-10-14T19:38:16.664Z","title":"Shopizer through 3.2.5 Authorization Bypass via Product Review customerId","severity":"MEDIUM","score":5.3,"vendor":"Shopizer","product":"Shopizer","kev":false,"epss":0.00223},{"id":"CVE-2026-110770","published":"2026-10-14T18:47:54.543Z","updated":"2026-10-14T18:47:54.543Z","title":"Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force","severity":"CRITICAL","score":9.2,"vendor":"databasus","product":"databasus","kev":false,"epss":0.00495},{"id":"CVE-2026-110769","published":"2026-10-14T18:47:52.880Z","updated":"2026-10-15T14:32:00.969Z","title":"holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors","severity":"HIGH","score":8.3,"vendor":"holaboss-ai","product":"holaOS","kev":false,"epss":0.00292},{"id":"CVE-2026-110768","published":"2026-10-14T18:47:50.568Z","updated":"2026-10-20T01:56:39.029Z","title":"holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist","severity":"MEDIUM","score":6.3,"vendor":"holaboss-ai","product":"holaOS","kev":false,"epss":0.0022},{"id":"CVE-2026-110767","published":"2026-10-14T18:47:44.779Z","updated":"2026-10-15T18:17:02.284Z","title":"Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion","severity":"HIGH","score":8.7,"vendor":"coderamp-labs","product":"gitingest","kev":false,"epss":0.00407},{"id":"CVE-2026-110766","published":"2026-10-14T18:47:43.182Z","updated":"2026-10-14T19:38:51.634Z","title":"Colanode Server through 0.4.7 Path Traversal via Avatar Download Route","severity":"MEDIUM","score":5.3,"vendor":"colanode","product":"colanode","kev":false,"epss":0.00286},{"id":"CVE-2026-110765","published":"2026-10-14T18:47:41.613Z","updated":"2026-10-14T18:47:41.613Z","title":"FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass","severity":"HIGH","score":8.2,"vendor":"flexprice","product":"flexprice","kev":false,"epss":0.00225},{"id":"CVE-2026-110764","published":"2026-10-14T18:47:40.054Z","updated":"2026-10-15T14:35:55.977Z","title":"AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download","severity":"MEDIUM","score":6,"vendor":"iflytek","product":"astron-rpa","kev":false,"epss":0.00237},{"id":"CVE-2026-110763","published":"2026-10-14T18:47:39.046Z","updated":"2026-10-20T01:55:41.647Z","title":"lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany","severity":"MEDIUM","score":5.3,"vendor":"zuihou","product":"lamp-boot","kev":false,"epss":0.00208},{"id":"CVE-2026-110762","published":"2026-10-14T18:47:38.054Z","updated":"2026-10-14T20:23:55.323Z","title":"bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream","severity":"MEDIUM","score":6.3,"vendor":"bbPress","product":"bbPress","kev":false,"epss":0.00224},{"id":"CVE-2026-110761","published":"2026-10-14T18:47:35.995Z","updated":"2026-10-14T19:39:51.874Z","title":"ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import","severity":"HIGH","score":8.7,"vendor":"ILIAS-eLearning e.V.","product":"ILIAS","kev":false,"epss":0.0057},{"id":"CVE-2026-102755","published":"2026-10-14T18:45:25.350Z","updated":"2026-10-14T19:40:35.484Z","title":"DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"dataease","product":"dataease","kev":false,"epss":0.00351},{"id":"CVE-2026-110666","published":"2026-10-14T18:45:13.058Z","updated":"2026-10-15T15:06:09.740Z","title":"cemtan sar2html File Upload sar2html.py updateDb path traversal","severity":"MEDIUM","score":6.9,"vendor":"cemtan","product":"sar2html","kev":false,"epss":0.005},{"id":"CVE-2026-102756","published":"2026-10-14T18:44:42.811Z","updated":"2026-10-20T01:53:42.428Z","title":"DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting","severity":"MEDIUM","score":5.1,"vendor":"dataease","product":"dataease","kev":false,"epss":0.00351},{"id":"CVE-2026-102479","published":"2026-10-14T18:43:54.623Z","updated":"2026-10-28T21:06:12.367Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers,…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00335},{"id":"CVE-2026-104143","published":"2026-10-14T18:43:34.275Z","updated":"2026-10-15T15:06:18.660Z","title":"DataEase: Stored SQL Injection via dateFormat field templates","severity":"HIGH","score":8.7,"vendor":"dataease","product":"dataease","kev":false,"epss":0.00264},{"id":"CVE-2026-104142","published":"2026-10-14T18:42:36.214Z","updated":"2026-10-15T14:37:10.357Z","title":"DataEase: Stored SQL Injection in group-field binning bounds","severity":"HIGH","score":8.7,"vendor":"dataease","product":"dataease","kev":false,"epss":0.00351},{"id":"CVE-2026-104141","published":"2026-10-14T18:41:06.878Z","updated":"2026-10-15T16:28:55.752Z","title":"DataEase: SQL Injection in datasource metadata identifiers","severity":"HIGH","score":8.7,"vendor":"dataease","product":"dataease","kev":false,"epss":0.00351},{"id":"CVE-2026-82153","published":"2026-10-14T18:40:15.996Z","updated":"2026-10-14T19:42:58.701Z","title":"Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical…","severity":"LOW","score":2.2,"vendor":"Dell","product":"OS Recovery Tool","kev":false,"epss":0.00115},{"id":"CVE-2026-53999","published":"2026-10-14T18:39:25.344Z","updated":"2026-10-14T19:42:38.965Z","title":"Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)","severity":"HIGH","score":7.7,"vendor":"radius-project","product":"radius","kev":false,"epss":0.0034},{"id":"CVE-2026-102460","published":"2026-10-14T18:36:41.358Z","updated":"2026-10-19T14:14:48.527Z","title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's…","severity":"HIGH","score":8.6,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00272},{"id":"CVE-2026-110248","published":"2026-10-14T18:34:16.902Z","updated":"2026-10-15T19:33:04.359Z","title":"Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py","severity":"MEDIUM","score":6,"vendor":"AWS","product":"SageMaker Python SDK","kev":false,"epss":0.00531},{"id":"CVE-2026-102748","published":"2026-10-14T18:34:15.971Z","updated":"2026-10-15T15:06:27.332Z","title":"Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","severity":"CRITICAL","score":9.2,"vendor":"dgraph-io","product":"dgraph","kev":false,"epss":0.00615},{"id":"CVE-2026-109506","published":"2026-10-14T18:31:37.228Z","updated":"2026-10-15T19:33:44.764Z","title":"Improper Authentication in Multiple TP-Link WiFi Repeaters","severity":"MEDIUM","score":5.9,"vendor":"TP-Link Systems Inc.","product":"RE190 v5","kev":false,"epss":0.00346},{"id":"CVE-2026-102682","published":"2026-10-14T18:30:07.020Z","updated":"2026-10-29T13:44:39.699Z","title":"Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation","severity":"MEDIUM","score":5.6,"vendor":"pipecat-ai","product":"pipecat","kev":false,"epss":0.00234},{"id":"CVE-2026-100406","published":"2026-10-14T18:27:24.863Z","updated":"2026-10-20T01:51:20.549Z","title":"dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`","severity":"HIGH","score":8.2,"vendor":"dbt-labs","product":"dbt-core","kev":false,"epss":0.00423},{"id":"CVE-2026-63626","published":"2026-10-14T18:26:16.830Z","updated":"2026-10-15T15:06:33.386Z","title":"Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)","severity":"HIGH","score":8.8,"vendor":"cesanta","product":"mongoose","kev":false,"epss":0.00239},{"id":"CVE-2026-73261","published":"2026-10-14T18:25:41.102Z","updated":"2026-10-29T13:46:18.474Z","title":"Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection","severity":"HIGH","score":7.5,"vendor":"cesanta","product":"mongoose","kev":false,"epss":0.00417},{"id":"CVE-2026-73260","published":"2026-10-14T18:25:00.518Z","updated":"2026-10-20T01:50:00.898Z","title":"Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser","severity":"HIGH","score":7.5,"vendor":"cesanta","product":"mongoose","kev":false,"epss":0.0023},{"id":"CVE-2026-73252","published":"2026-10-14T18:24:16.659Z","updated":"2026-10-14T19:41:57.801Z","title":"Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX","severity":"HIGH","score":7.5,"vendor":"cesanta","product":"mongoose","kev":false,"epss":0.00376},{"id":"CVE-2026-55167","published":"2026-10-14T18:23:26.148Z","updated":"2026-10-20T01:48:49.540Z","title":"LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session","severity":"MEDIUM","score":4.2,"vendor":"LDAPAccountManager","product":"lam","kev":false,"epss":0.00206},{"id":"CVE-2026-85714","published":"2026-10-14T18:22:21.191Z","updated":"2026-10-15T18:53:52.190Z","title":"Stirling-PDF: Remote Code Execution via H2","severity":"CRITICAL","score":9.1,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.03406},{"id":"CVE-2026-103930","published":"2026-10-14T18:19:38.256Z","updated":"2026-10-15T15:06:40.241Z","title":"cpp-httplib open_stream serializes CRLF in request target into HTTP request line","severity":"LOW","score":3.7,"vendor":"yhirose","product":"cpp-httplib","kev":false,"epss":0.00366},{"id":"CVE-2026-102944","published":"2026-10-14T18:18:21.598Z","updated":"2026-10-15T14:48:03.087Z","title":"cpp-httplib: Cookie header leaked on cross-origin redirect","severity":"HIGH","score":7.5,"vendor":"yhirose","product":"cpp-httplib","kev":false,"epss":0.00434},{"id":"CVE-2026-103974","published":"2026-10-14T18:17:13.770Z","updated":"2026-10-14T19:41:15.577Z","title":"lichess.org: Stored HTML Injection via PGN Annotator Tag in Studies","severity":"MEDIUM","score":5.4,"vendor":"lichess-org","product":"lila","kev":false,"epss":0.00214},{"id":"CVE-2026-110536","published":"2026-10-14T18:15:11.641Z","updated":"2026-10-15T14:51:51.651Z","title":"D-Link DIR-868L HNAP CGI cgibin system os command injection","severity":"CRITICAL","score":10,"vendor":"D-Link","product":"DIR-868L","kev":false,"epss":0.02934},{"id":"CVE-2026-55786","published":"2026-10-14T18:14:39.210Z","updated":"2026-10-29T13:49:14.344Z","title":"Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`","severity":"HIGH","score":8.4,"vendor":"flytohub","product":"flyto-core","kev":false,"epss":0.0041},{"id":"CVE-2026-55787","published":"2026-10-14T18:13:52.454Z","updated":"2026-10-15T14:55:23.673Z","title":"Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf","severity":"HIGH","score":7.1,"vendor":"flytohub","product":"flyto-core","kev":false,"epss":0.00292},{"id":"CVE-2026-55573","published":"2026-10-14T18:12:58.640Z","updated":"2026-10-15T15:01:54.402Z","title":"e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain","severity":"CRITICAL","score":9.8,"vendor":"e107inc","product":"e107","kev":false,"epss":0.00704},{"id":"CVE-2026-55572","published":"2026-10-14T18:12:10.984Z","updated":"2026-10-29T13:50:36.643Z","title":"e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username","severity":"CRITICAL","score":10,"vendor":"e107inc","product":"e107","kev":false,"epss":0.00515},{"id":"CVE-2026-102476","published":"2026-10-14T18:11:45.277Z","updated":"2026-10-16T18:20:31.341Z","title":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key…","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00226},{"id":"CVE-2026-103975","published":"2026-10-14T18:10:26.398Z","updated":"2026-10-15T15:05:50.270Z","title":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction","severity":"MEDIUM","score":6.5,"vendor":"appium","product":"appium","kev":false,"epss":0.0064},{"id":"CVE-2026-108480","published":"2026-10-14T18:09:35.829Z","updated":"2026-10-15T16:43:45.485Z","title":"WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability","severity":"HIGH","score":8.2,"vendor":"Skydropx","product":"Skydropx","kev":false,"epss":0.00248},{"id":"CVE-2026-108484","published":"2026-10-14T18:09:35.659Z","updated":"2026-10-15T16:43:45.622Z","title":"WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WPManageNinja","product":"Best Payments Plugin for WP","kev":false,"epss":0.00186},{"id":"CVE-2026-108483","published":"2026-10-14T18:09:35.358Z","updated":"2026-10-16T18:42:02.176Z","title":"WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"hippooo","product":"Hippoo Mobile App for WooCommerce","kev":false,"epss":0.00186},{"id":"CVE-2026-105066","published":"2026-10-14T18:09:35.203Z","updated":"2026-10-14T19:36:41.666Z","title":"WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"SimplyRETS","product":"SimplyRETS Real Estate IDX","kev":false,"epss":0.00244},{"id":"CVE-2026-108151","published":"2026-10-14T18:09:34.882Z","updated":"2026-10-15T16:43:45.890Z","title":"WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability","severity":"MEDIUM","score":5.3,"vendor":"PluginUs.Net","product":"MDTF","kev":false,"epss":0.00244},{"id":"CVE-2026-103081","published":"2026-10-14T18:09:34.742Z","updated":"2026-10-15T16:43:46.026Z","title":"WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability","severity":"HIGH","score":7.5,"vendor":"VillaTheme","product":"Salevo","kev":false,"epss":0.00307},{"id":"CVE-2026-104103","published":"2026-10-14T18:09:23.015Z","updated":"2026-10-15T15:06:47.154Z","title":"Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members","severity":"HIGH","score":8.1,"vendor":"ludwig-ai","product":"ludwig","kev":false,"epss":0.00492},{"id":"CVE-2026-110777","published":"2026-10-14T18:08:36.828Z","updated":"2026-10-16T09:47:27.217Z","title":"Evolution-data-server: local file disclosure via attach file:// uris","severity":"MEDIUM","score":5.7,"vendor":"GNOME","product":"evolution-data-server","kev":false,"epss":0.00381},{"id":"CVE-2026-54554","published":"2026-10-14T18:08:03.179Z","updated":"2026-10-20T01:47:46.473Z","title":"FOG adInfo endpoint is reported to disclose the Active Directory join password","severity":"HIGH","score":7.5,"vendor":"FOGProject","product":"fogproject","kev":false,"epss":0.00583},{"id":"CVE-2026-100413","published":"2026-10-14T18:03:12.709Z","updated":"2026-10-29T13:52:32.572Z","title":"SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments","severity":"HIGH","score":7,"vendor":"seaweedfs","product":"seaweedfs","kev":false,"epss":0.00368},{"id":"CVE-2026-77371","published":"2026-10-14T18:02:07.208Z","updated":"2026-10-14T19:36:16.578Z","title":"Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access","severity":"CRITICAL","score":9.3,"vendor":"getredash","product":"redash","kev":false,"epss":0.00525},{"id":"CVE-2026-79957","published":"2026-10-14T18:01:51.493Z","updated":"2026-10-16T20:15:51.180Z","title":"ServiceNext Insecure Direct Object Reference via GetUsarios","severity":"HIGH","score":8.1,"vendor":"ServiceNext","product":"SerTec","kev":false,"epss":0.00308},{"id":"CVE-2026-76083","published":"2026-10-14T18:01:19.372Z","updated":"2026-10-15T15:07:05.020Z","title":"Redash: JSON data source query URL can bypass base URL restriction","severity":"MEDIUM","score":4.9,"vendor":"getredash","product":"redash","kev":false,"epss":0.00414},{"id":"CVE-2026-42093","published":"2026-10-14T18:00:03.513Z","updated":"2026-10-14T19:35:27.040Z","title":"Redash: SQL Injection via Query Results parameterized query substitution","severity":"HIGH","score":8.7,"vendor":"getredash","product":"redash","kev":false,"epss":0.00684},{"id":"CVE-2026-109527","published":"2026-10-14T17:52:35.943Z","updated":"2026-10-20T01:46:47.584Z","title":"Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies","severity":"HIGH","score":7.5,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.007},{"id":"CVE-2026-86849","published":"2026-10-14T17:52:15.802Z","updated":"2026-10-15T15:09:27.236Z","title":"Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.0013},{"id":"CVE-2026-86856","published":"2026-10-14T17:52:14.805Z","updated":"2026-10-15T14:45:25.726Z","title":"Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00165},{"id":"CVE-2026-86847","published":"2026-10-14T17:52:12.797Z","updated":"2026-10-20T01:44:20.866Z","title":"Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00186},{"id":"CVE-2026-86846","published":"2026-10-14T17:52:07.604Z","updated":"2026-10-15T15:07:13.735Z","title":"Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.0018},{"id":"CVE-2026-86845","published":"2026-10-14T17:52:06.749Z","updated":"2026-10-15T14:50:01.364Z","title":"Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00165},{"id":"CVE-2026-86566","published":"2026-10-14T17:52:01.224Z","updated":"2026-10-14T19:34:42.540Z","title":"Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00165},{"id":"CVE-2026-86848","published":"2026-10-14T17:50:08.022Z","updated":"2026-10-14T19:34:22.093Z","title":"Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00098},{"id":"CVE-2026-88164","published":"2026-10-14T17:50:07.799Z","updated":"2026-10-31T18:10:49.343Z","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","kev":false,"epss":0.00839},{"id":"CVE-2026-86567","published":"2026-10-14T17:50:03.467Z","updated":"2026-11-02T06:37:26.819Z","title":"Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00147},{"id":"CVE-2026-106465","published":"2026-10-14T17:47:11.013Z","updated":"2026-10-16T20:14:45.833Z","title":"The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00307},{"id":"CVE-2026-108395","published":"2026-10-14T17:46:23.760Z","updated":"2026-10-14T19:29:00.613Z","title":"Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies","severity":"HIGH","score":7.5,"vendor":"modelcontextprotocol","product":"io.modelcontextprotocol.sdk:mcp","kev":false,"epss":0.00608},{"id":"CVE-2026-106464","published":"2026-10-14T17:41:43.585Z","updated":"2026-10-16T20:13:45.214Z","title":"`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A…","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00173},{"id":"CVE-2026-103415","published":"2026-10-14T17:36:17.620Z","updated":"2026-10-16T20:12:39.252Z","title":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the…","severity":"CRITICAL","score":9.3,"vendor":"Eclipse Foundation","product":"NetX Duo","kev":false,"epss":0.00284},{"id":"CVE-2026-107350","published":"2026-10-14T17:34:39.009Z","updated":"2026-10-16T14:18:50.053Z","title":"Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer","severity":"HIGH","score":8.8,"vendor":null,"product":"PgBouncer","kev":false,"epss":0.00369},{"id":"CVE-2026-107349","published":"2026-10-14T17:34:33.785Z","updated":"2026-10-16T20:19:16.649Z","title":"Infinite loop on empty option name in startup options parameter in PgBouncer","severity":"HIGH","score":7.5,"vendor":null,"product":"PgBouncer","kev":false,"epss":0.00404},{"id":"CVE-2026-107348","published":"2026-10-14T17:34:29.838Z","updated":"2026-10-16T20:11:22.132Z","title":"Integer overflow causes an infinite loop in message buffer growth in PgBouncer","severity":"MEDIUM","score":5.9,"vendor":null,"product":"PgBouncer","kev":false,"epss":0.00392},{"id":"CVE-2026-103414","published":"2026-10-14T17:32:12.095Z","updated":"2026-10-16T20:10:44.107Z","title":"The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor…","severity":"HIGH","score":8.4,"vendor":"Eclipse Foundation","product":"GUIX","kev":false,"epss":0.0016},{"id":"CVE-2026-86461","published":"2026-10-14T17:29:14.024Z","updated":"2026-10-14T17:49:59.907Z","title":"FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter","severity":"HIGH","score":8.8,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00718},{"id":"CVE-2026-0322","published":"2026-10-14T17:26:52.448Z","updated":"2026-10-15T03:57:17.169Z","title":"PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface","severity":"HIGH","score":8.6,"vendor":"Palo Alto Networks","product":"Cloud NGFW","kev":true,"epss":0.0174},{"id":"CVE-2026-101954","published":"2026-10-14T17:22:07.086Z","updated":"2026-10-16T14:18:50.214Z","title":"Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00477},{"id":"CVE-2026-101952","published":"2026-10-14T17:21:17.618Z","updated":"2026-10-19T14:14:00.546Z","title":"Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00358},{"id":"CVE-2026-101949","published":"2026-10-14T17:20:52.444Z","updated":"2026-10-14T20:26:07.463Z","title":"Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00446},{"id":"CVE-2026-92160","published":"2026-10-14T17:20:36.334Z","updated":"2026-10-15T15:07:20.709Z","title":"F´: SendPartial Integer Overflow Leading to Assertion DoS","severity":"MEDIUM","score":6.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00339},{"id":"CVE-2026-101964","published":"2026-10-14T17:20:21.025Z","updated":"2026-10-14T20:26:07.589Z","title":"Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00251},{"id":"CVE-2026-101963","published":"2026-10-14T17:19:56.268Z","updated":"2026-10-14T20:26:07.714Z","title":"Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00445},{"id":"CVE-2026-101962","published":"2026-10-14T17:19:36.170Z","updated":"2026-10-14T20:26:07.845Z","title":"Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00381},{"id":"CVE-2026-92155","published":"2026-10-14T17:19:20.560Z","updated":"2026-10-15T15:07:29.420Z","title":"F´: FileUplink Unknown Packet Type Assertion DoS","severity":"HIGH","score":7.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00366},{"id":"CVE-2026-101961","published":"2026-10-14T17:19:09.875Z","updated":"2026-10-14T20:26:07.967Z","title":"Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-101959","published":"2026-10-14T17:18:36.783Z","updated":"2026-10-14T20:26:08.115Z","title":"Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0025},{"id":"CVE-2026-92150","published":"2026-10-14T17:18:29.342Z","updated":"2026-10-20T01:43:37.467Z","title":"F´: GenericHub Malformed Buffer Assertion DoS","severity":"HIGH","score":7.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00556},{"id":"CVE-2026-101983","published":"2026-10-14T17:17:37.940Z","updated":"2026-10-15T03:57:21.541Z","title":"Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0054},{"id":"CVE-2026-108390","published":"2026-10-14T17:17:24.180Z","updated":"2026-10-14T17:54:41.782Z","title":"HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking","severity":"CRITICAL","score":9.9,"vendor":"hestiacp","product":"hestiacp","kev":false,"epss":0.00675},{"id":"CVE-2026-92154","published":"2026-10-14T17:17:20.331Z","updated":"2026-10-15T18:55:39.170Z","title":"F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation","severity":"HIGH","score":8.1,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00614},{"id":"CVE-2026-101982","published":"2026-10-14T17:17:16.756Z","updated":"2026-10-16T14:18:50.374Z","title":"Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00568},{"id":"CVE-2026-101981","published":"2026-10-14T17:16:50.194Z","updated":"2026-10-16T14:18:50.553Z","title":"Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00245},{"id":"CVE-2026-101979","published":"2026-10-14T17:16:31.055Z","updated":"2026-10-15T03:57:16.446Z","title":"Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00447},{"id":"CVE-2026-101976","published":"2026-10-14T17:16:04.312Z","updated":"2026-10-14T19:05:05.956Z","title":"Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-101975","published":"2026-10-14T17:15:38.593Z","updated":"2026-10-14T20:26:08.414Z","title":"Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00185},{"id":"CVE-2026-101972","published":"2026-10-14T17:15:00.396Z","updated":"2026-10-14T20:26:08.545Z","title":"Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-92158","published":"2026-10-14T17:14:17.994Z","updated":"2026-10-29T13:54:17.108Z","title":"F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write","severity":"HIGH","score":7.2,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00857},{"id":"CVE-2026-102077","published":"2026-10-14T17:14:01.511Z","updated":"2026-10-14T20:26:08.665Z","title":"Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00339},{"id":"CVE-2026-92159","published":"2026-10-14T17:12:47.065Z","updated":"2026-10-15T18:56:42.827Z","title":"F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry","severity":"MEDIUM","score":6.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00445},{"id":"CVE-2026-92156","published":"2026-10-14T17:10:13.076Z","updated":"2026-10-14T17:52:06.724Z","title":"F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge","severity":"MEDIUM","score":6.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.0054},{"id":"CVE-2026-92157","published":"2026-10-14T17:09:20.199Z","updated":"2026-10-20T01:42:27.964Z","title":"F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion","severity":"MEDIUM","score":6.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00584},{"id":"CVE-2026-92152","published":"2026-10-14T17:08:25.371Z","updated":"2026-10-29T13:55:58.353Z","title":"F´: Unvalidated Port Index in GenericHub","severity":"CRITICAL","score":9.3,"vendor":"nasa","product":"fprime","kev":false,"epss":0.0067},{"id":"CVE-2026-33798","published":"2026-10-14T16:59:34.788Z","updated":"2026-10-15T03:57:05.245Z","title":"Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00352},{"id":"CVE-2026-33796","published":"2026-10-14T16:59:22.998Z","updated":"2026-10-15T03:57:05.927Z","title":"Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00558},{"id":"CVE-2026-33795","published":"2026-10-14T16:59:11.351Z","updated":"2026-10-14T19:05:06.371Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-33792","published":"2026-10-14T16:58:58.356Z","updated":"2026-10-15T03:57:06.628Z","title":"Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00611},{"id":"CVE-2026-33789","published":"2026-10-14T16:58:41.306Z","updated":"2026-10-15T03:57:07.361Z","title":"Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00688},{"id":"CVE-2026-102185","published":"2026-10-14T16:58:27.510Z","updated":"2026-10-14T19:05:06.748Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-102184","published":"2026-10-14T16:58:15.676Z","updated":"2026-10-14T19:05:06.870Z","title":"Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0046},{"id":"CVE-2026-102183","published":"2026-10-14T16:58:04.080Z","updated":"2026-10-14T19:05:07.015Z","title":"Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102182","published":"2026-10-14T16:57:50.508Z","updated":"2026-10-20T20:30:29.536Z","title":"Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00411},{"id":"CVE-2026-102180","published":"2026-10-14T16:57:35.797Z","updated":"2026-10-14T19:05:07.362Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00372},{"id":"CVE-2026-102179","published":"2026-10-14T16:57:23.853Z","updated":"2026-10-14T20:26:08.786Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-102178","published":"2026-10-14T16:57:10.816Z","updated":"2026-10-16T16:35:40.657Z","title":"Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00455},{"id":"CVE-2026-102177","published":"2026-10-14T16:56:54.480Z","updated":"2026-10-14T20:26:08.915Z","title":"Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used","severity":"HIGH","score":7.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0027},{"id":"CVE-2026-102176","published":"2026-10-14T16:56:42.641Z","updated":"2026-10-16T16:36:09.763Z","title":"Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00298},{"id":"CVE-2026-102175","published":"2026-10-14T16:56:24.022Z","updated":"2026-10-16T14:18:50.703Z","title":"Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00734},{"id":"CVE-2026-96596","published":"2026-10-14T16:56:18.530Z","updated":"2026-10-22T07:08:09.364Z","title":"erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole","severity":"MEDIUM","score":5.9,"vendor":"erlang","product":"rebar3","kev":false,"epss":0.00213},{"id":"CVE-2026-102174","published":"2026-10-14T16:56:11.847Z","updated":"2026-10-16T14:18:50.859Z","title":"Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0059},{"id":"CVE-2026-102061","published":"2026-10-14T16:55:57.961Z","updated":"2026-10-16T14:18:51.008Z","title":"Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0034},{"id":"CVE-2026-105236","published":"2026-10-14T16:55:51.495Z","updated":"2026-10-16T20:09:49.566Z","title":"TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries","severity":"MEDIUM","score":6.3,"vendor":"Erlang","product":"OTP","kev":false,"epss":0.00357},{"id":"CVE-2026-102060","published":"2026-10-14T16:55:43.515Z","updated":"2026-10-14T20:26:09.037Z","title":"Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00251},{"id":"CVE-2026-102059","published":"2026-10-14T16:55:31.828Z","updated":"2026-10-16T14:18:51.180Z","title":"Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.03898},{"id":"CVE-2026-94200","published":"2026-10-14T16:55:23.328Z","updated":"2026-10-16T20:09:04.559Z","title":"TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl","severity":"HIGH","score":8.2,"vendor":"Erlang","product":"OTP","kev":false,"epss":0.00461},{"id":"CVE-2026-102058","published":"2026-10-14T16:55:20.349Z","updated":"2026-10-14T19:05:07.702Z","title":"Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00257},{"id":"CVE-2026-102057","published":"2026-10-14T16:55:05.633Z","updated":"2026-10-14T20:26:09.155Z","title":"Junos OS: An attacker causes DHCP service disruption during DHCP client operation","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00372},{"id":"CVE-2026-102056","published":"2026-10-14T16:54:54.027Z","updated":"2026-10-16T16:36:37.757Z","title":"Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00265},{"id":"CVE-2026-105659","published":"2026-10-14T16:54:46.484Z","updated":"2026-10-16T20:07:01.914Z","title":"HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00616},{"id":"CVE-2026-102055","published":"2026-10-14T16:54:39.325Z","updated":"2026-10-16T14:18:51.365Z","title":"Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00325},{"id":"CVE-2026-102054","published":"2026-10-14T16:54:26.740Z","updated":"2026-10-14T19:05:07.828Z","title":"Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00223},{"id":"CVE-2026-102053","published":"2026-10-14T16:54:15.022Z","updated":"2026-10-16T16:37:09.850Z","title":"Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used","severity":"MEDIUM","score":6.9,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00327},{"id":"CVE-2026-102052","published":"2026-10-14T16:54:01.160Z","updated":"2026-10-16T14:18:51.520Z","title":"Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0034},{"id":"CVE-2026-102051","published":"2026-10-14T16:53:49.981Z","updated":"2026-10-14T20:26:09.286Z","title":"Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00268},{"id":"CVE-2026-102050","published":"2026-10-14T16:53:37.753Z","updated":"2026-10-16T16:37:41.386Z","title":"Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00298},{"id":"CVE-2026-102049","published":"2026-10-14T16:53:24.749Z","updated":"2026-10-16T14:18:51.669Z","title":"Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0034},{"id":"CVE-2026-102048","published":"2026-10-14T16:53:12.252Z","updated":"2026-10-14T20:26:09.423Z","title":"Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00268},{"id":"CVE-2026-102047","published":"2026-10-14T16:53:00.947Z","updated":"2026-10-14T20:26:09.547Z","title":"Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102046","published":"2026-10-14T16:52:48.507Z","updated":"2026-10-14T20:26:09.670Z","title":"Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0048},{"id":"CVE-2026-102045","published":"2026-10-14T16:52:36.942Z","updated":"2026-10-14T20:26:09.789Z","title":"Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS Evolved","kev":false,"epss":0.00269},{"id":"CVE-2026-102044","published":"2026-10-14T16:52:23.433Z","updated":"2026-10-14T20:26:09.909Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102043","published":"2026-10-14T16:52:11.938Z","updated":"2026-10-14T20:26:10.031Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102042","published":"2026-10-14T16:51:59.992Z","updated":"2026-10-14T20:26:10.159Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102041","published":"2026-10-14T16:51:47.688Z","updated":"2026-10-14T20:26:10.291Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102040","published":"2026-10-14T16:51:33.643Z","updated":"2026-10-14T20:26:10.417Z","title":"Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00281},{"id":"CVE-2026-102039","published":"2026-10-14T16:51:20.511Z","updated":"2026-10-14T20:26:10.539Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102037","published":"2026-10-14T16:51:08.141Z","updated":"2026-10-16T16:38:07.655Z","title":"Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00482},{"id":"CVE-2026-102036","published":"2026-10-14T16:50:56.034Z","updated":"2026-10-14T20:26:10.664Z","title":"Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0046},{"id":"CVE-2026-102035","published":"2026-10-14T16:50:44.469Z","updated":"2026-10-14T20:15:52.347Z","title":"Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102034","published":"2026-10-14T16:50:30.932Z","updated":"2026-10-14T20:15:52.210Z","title":"Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102033","published":"2026-10-14T16:50:18.448Z","updated":"2026-10-14T20:15:52.086Z","title":"Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102032","published":"2026-10-14T16:50:04.136Z","updated":"2026-10-14T20:15:51.948Z","title":"Junos OS and Junos OS Evolved: Unintended  l2ald memory allocation causes a denial of service when static MAC IP configurations are present","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00308},{"id":"CVE-2026-102031","published":"2026-10-14T16:49:50.342Z","updated":"2026-10-16T14:18:51.822Z","title":"Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS Evolved","kev":false,"epss":0.02101},{"id":"CVE-2026-102030","published":"2026-10-14T16:49:36.373Z","updated":"2026-10-16T16:38:35.805Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102029","published":"2026-10-14T16:49:19.421Z","updated":"2026-10-16T16:39:06.156Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102028","published":"2026-10-14T16:49:05.291Z","updated":"2026-10-16T16:39:33.559Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00549},{"id":"CVE-2026-102027","published":"2026-10-14T16:48:00.722Z","updated":"2026-10-16T16:35:06.948Z","title":"Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0046},{"id":"CVE-2026-102026","published":"2026-10-14T16:47:48.992Z","updated":"2026-10-16T16:40:00.641Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102025","published":"2026-10-14T16:47:35.582Z","updated":"2026-10-16T16:40:28.688Z","title":"Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102024","published":"2026-10-14T16:47:24.285Z","updated":"2026-10-16T16:42:13.376Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102023","published":"2026-10-14T16:47:11.923Z","updated":"2026-10-16T16:41:47.659Z","title":"Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS Evolved","kev":false,"epss":0.00461},{"id":"CVE-2026-102022","published":"2026-10-14T16:46:59.552Z","updated":"2026-10-16T16:41:26.000Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102021","published":"2026-10-14T16:46:44.538Z","updated":"2026-10-14T20:15:52.468Z","title":"Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102020","published":"2026-10-14T16:46:31.910Z","updated":"2026-10-16T16:40:58.801Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102019","published":"2026-10-14T16:46:20.071Z","updated":"2026-10-14T20:15:52.596Z","title":"Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102018","published":"2026-10-14T16:46:07.117Z","updated":"2026-10-14T20:15:52.720Z","title":"Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-75085","published":"2026-10-14T16:46:02.993Z","updated":"2026-10-16T15:31:45.899Z","title":"Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driver","severity":"MEDIUM","score":4.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00205},{"id":"CVE-2026-75084","published":"2026-10-14T16:46:01.701Z","updated":"2026-10-16T15:31:46.056Z","title":"Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet length","severity":"MEDIUM","score":6.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00286},{"id":"CVE-2026-19673","published":"2026-10-14T16:45:57.967Z","updated":"2026-10-16T15:31:46.383Z","title":"Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header","severity":"HIGH","score":7.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00339},{"id":"CVE-2026-75083","published":"2026-10-14T16:45:56.541Z","updated":"2026-10-16T15:31:46.531Z","title":"Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver","severity":"MEDIUM","score":5.9,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00229},{"id":"CVE-2026-102017","published":"2026-10-14T16:45:49.564Z","updated":"2026-10-14T20:15:52.849Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00281},{"id":"CVE-2026-109439","published":"2026-10-14T16:45:49.338Z","updated":"2026-10-16T17:15:34.637Z","title":"Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718","severity":"CRITICAL","score":9.3,"vendor":"LANTRONIX","product":"XPress-DR","kev":false,"epss":0.00618},{"id":"CVE-2026-102016","published":"2026-10-14T16:45:37.419Z","updated":"2026-10-16T15:31:47.973Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-102015","published":"2026-10-14T16:45:25.661Z","updated":"2026-10-16T14:18:51.978Z","title":"Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00349},{"id":"CVE-2026-102014","published":"2026-10-14T16:45:13.316Z","updated":"2026-10-16T14:18:52.121Z","title":"Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.0035},{"id":"CVE-2026-102013","published":"2026-10-14T16:44:59.275Z","updated":"2026-10-14T20:15:52.982Z","title":"Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used","severity":"MEDIUM","score":6.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00155},{"id":"CVE-2026-102012","published":"2026-10-14T16:44:46.159Z","updated":"2026-10-16T15:31:48.456Z","title":"Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS Evolved","kev":false,"epss":0.00574},{"id":"CVE-2026-102011","published":"2026-10-14T16:44:33.507Z","updated":"2026-10-14T20:15:53.120Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-102000","published":"2026-10-14T16:44:21.024Z","updated":"2026-10-14T20:15:53.372Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00281},{"id":"CVE-2026-101999","published":"2026-10-14T16:44:07.623Z","updated":"2026-10-14T20:15:53.806Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101971","published":"2026-10-14T16:43:52.308Z","updated":"2026-10-14T20:15:53.949Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101970","published":"2026-10-14T16:43:32.527Z","updated":"2026-10-14T20:15:54.079Z","title":"Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101969","published":"2026-10-14T16:43:20.105Z","updated":"2026-10-14T20:15:54.214Z","title":"Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101968","published":"2026-10-14T16:43:07.660Z","updated":"2026-10-16T15:31:48.596Z","title":"Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00245},{"id":"CVE-2026-101946","published":"2026-10-14T16:42:54.291Z","updated":"2026-10-16T15:31:48.909Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00241},{"id":"CVE-2026-101945","published":"2026-10-14T16:42:42.154Z","updated":"2026-10-16T15:31:49.063Z","title":"Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00549},{"id":"CVE-2026-101944","published":"2026-10-14T16:42:29.551Z","updated":"2026-10-16T15:31:49.980Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-101943","published":"2026-10-14T16:42:15.164Z","updated":"2026-10-18T13:54:08.400Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00461},{"id":"CVE-2026-101942","published":"2026-10-14T16:42:01.425Z","updated":"2026-10-18T13:54:08.555Z","title":"Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00441},{"id":"CVE-2026-101941","published":"2026-10-14T16:41:47.756Z","updated":"2026-10-18T13:54:08.705Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00441},{"id":"CVE-2026-101940","published":"2026-10-14T16:41:35.328Z","updated":"2026-10-18T13:54:08.858Z","title":"Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00441},{"id":"CVE-2026-101939","published":"2026-10-14T16:41:20.501Z","updated":"2026-10-16T15:31:50.135Z","title":"Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00441},{"id":"CVE-2026-101938","published":"2026-10-14T16:41:03.656Z","updated":"2026-10-14T20:15:54.363Z","title":"Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00245},{"id":"CVE-2026-101937","published":"2026-10-14T16:40:47.885Z","updated":"2026-10-14T20:15:54.489Z","title":"Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00234},{"id":"CVE-2026-101936","published":"2026-10-14T16:40:32.630Z","updated":"2026-10-14T20:15:54.622Z","title":"Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00271},{"id":"CVE-2026-101934","published":"2026-10-14T16:40:13.275Z","updated":"2026-10-14T20:15:54.759Z","title":"Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd","severity":"MEDIUM","score":6.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00151},{"id":"CVE-2026-101927","published":"2026-10-14T16:39:11.939Z","updated":"2026-10-16T14:18:52.264Z","title":"Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation","severity":"HIGH","score":8.6,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00144},{"id":"CVE-2026-101984","published":"2026-10-14T16:33:33.431Z","updated":"2026-10-14T20:15:54.892Z","title":"Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-100236","published":"2026-10-14T16:33:25.792Z","updated":"2026-10-20T01:41:29.598Z","title":"Dpdk: dpdk: heap out-of-bounds read/write in gso header copy","severity":"HIGH","score":8.6,"vendor":"Red Hat","product":"Fast Datapath for RHEL 10","kev":false,"epss":0.00321},{"id":"CVE-2026-101987","published":"2026-10-14T16:33:12.658Z","updated":"2026-10-29T20:09:32.566Z","title":"Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101988","published":"2026-10-14T16:32:46.370Z","updated":"2026-10-14T20:15:55.196Z","title":"Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101989","published":"2026-10-14T16:32:32.631Z","updated":"2026-10-14T20:15:55.340Z","title":"Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101990","published":"2026-10-14T16:31:48.632Z","updated":"2026-10-16T14:18:52.418Z","title":"Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00568},{"id":"CVE-2026-101992","published":"2026-10-14T16:31:06.374Z","updated":"2026-10-14T20:15:55.482Z","title":"Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101993","published":"2026-10-14T16:30:49.051Z","updated":"2026-10-14T20:26:05.067Z","title":"Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101994","published":"2026-10-14T16:30:33.161Z","updated":"2026-10-16T15:31:50.485Z","title":"Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00278},{"id":"CVE-2026-101996","published":"2026-10-14T16:30:19.794Z","updated":"2026-10-14T20:26:05.195Z","title":"Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2016-15060","published":"2026-10-14T16:30:08.738Z","updated":"2026-10-20T01:40:54.990Z","title":"PCMan FTP Server PORT buffer overflow","severity":"MEDIUM","score":6.9,"vendor":"PCMan","product":"FTP Server","kev":false,"epss":0.00516},{"id":"CVE-2026-102064","published":"2026-10-14T16:30:03.282Z","updated":"2026-10-16T15:31:50.630Z","title":"Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-102066","published":"2026-10-14T16:29:50.624Z","updated":"2026-10-19T14:15:40.515Z","title":"Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00273},{"id":"CVE-2026-15102","published":"2026-10-14T16:29:10.707Z","updated":"2026-10-16T15:31:50.944Z","title":"Cleartext Transmission of Sensitive Information in ADP Desktop SDK","severity":"HIGH","score":7.5,"vendor":"Autodesk","product":"ADP Desktop SDK","kev":false,"epss":0.001},{"id":"CVE-2026-102071","published":"2026-10-14T16:29:08.504Z","updated":"2026-10-14T20:26:05.547Z","title":"Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00269},{"id":"CVE-2026-101950","published":"2026-10-14T16:28:57.210Z","updated":"2026-10-17T03:55:42.685Z","title":"Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled","severity":"CRITICAL","score":9.3,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00468},{"id":"CVE-2026-101955","published":"2026-10-14T16:28:41.014Z","updated":"2026-10-16T14:18:52.564Z","title":"Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00529},{"id":"CVE-2026-101997","published":"2026-10-14T16:28:24.401Z","updated":"2026-10-16T14:18:52.710Z","title":"Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00392},{"id":"CVE-2026-92153","published":"2026-10-14T16:28:18.673Z","updated":"2026-10-15T15:07:36.971Z","title":"F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath","severity":"HIGH","score":7.1,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00437},{"id":"CVE-2026-102062","published":"2026-10-14T16:28:10.504Z","updated":"2026-10-15T10:31:14.000Z","title":"Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00408},{"id":"CVE-2026-102078","published":"2026-10-14T16:27:24.894Z","updated":"2026-10-14T20:26:05.668Z","title":"Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash","severity":"HIGH","score":8.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00329},{"id":"CVE-2026-102079","published":"2026-10-14T16:27:10.120Z","updated":"2026-10-15T10:31:14.233Z","title":"Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection","severity":"HIGH","score":8.5,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00659},{"id":"CVE-2026-102080","published":"2026-10-14T16:26:30.073Z","updated":"2026-10-14T20:26:05.796Z","title":"Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover","severity":"MEDIUM","score":6,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00183},{"id":"CVE-2026-102081","published":"2026-10-14T16:26:14.921Z","updated":"2026-10-14T20:46:19.992Z","title":"Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic","severity":"HIGH","score":8.7,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00374},{"id":"CVE-2026-92151","published":"2026-10-14T16:26:08.976Z","updated":"2026-10-15T18:57:20.236Z","title":"F´: SpacePacketDeframer Small Packet Assertion DoS","severity":"HIGH","score":7.5,"vendor":"nasa","product":"fprime","kev":false,"epss":0.00542},{"id":"CVE-2026-102082","published":"2026-10-14T16:26:01.170Z","updated":"2026-10-14T20:26:05.922Z","title":"Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs","severity":"HIGH","score":8.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00342},{"id":"CVE-2026-93637","published":"2026-10-14T16:25:23.436Z","updated":"2026-10-16T15:31:51.432Z","title":"Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting","severity":"LOW","score":3.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00325},{"id":"CVE-2026-102083","published":"2026-10-14T16:24:53.885Z","updated":"2026-10-14T20:26:06.046Z","title":"Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash","severity":"HIGH","score":8.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00313},{"id":"CVE-2026-102084","published":"2026-10-14T16:24:40.299Z","updated":"2026-10-15T03:57:23.677Z","title":"Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00509},{"id":"CVE-2026-93635","published":"2026-10-14T16:24:33.121Z","updated":"2026-10-16T15:31:51.597Z","title":"Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00242},{"id":"CVE-2026-102085","published":"2026-10-14T16:24:26.289Z","updated":"2026-10-14T20:46:20.247Z","title":"Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker","severity":"MEDIUM","score":6.9,"vendor":"Juniper Networks","product":"Junos OS Evolved","kev":false,"epss":0.00287},{"id":"CVE-2026-102086","published":"2026-10-14T16:24:12.356Z","updated":"2026-10-14T20:26:06.177Z","title":"Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash","severity":"HIGH","score":8.2,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00367},{"id":"CVE-2026-102087","published":"2026-10-14T16:23:55.281Z","updated":"2026-10-14T20:26:06.313Z","title":"Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00251},{"id":"CVE-2026-103993","published":"2026-10-14T16:23:40.799Z","updated":"2026-10-14T20:26:06.440Z","title":"Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes","severity":"MEDIUM","score":6.9,"vendor":"Juniper Networks","product":"Junos OS","kev":false,"epss":0.00243},{"id":"CVE-2026-59951","published":"2026-10-14T16:22:31.653Z","updated":"2026-10-15T15:07:43.737Z","title":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","severity":"MEDIUM","score":6.9,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00458}]}