Patch Tuesday — October 2026

2026-10-13 · 989 CVEs

CVEs published or modified the week of 2026-10-13, partitioned by vendor.

Microsoft (1 CVE)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62316High8.8—2026-08-21Microsoft UFO open-source framework for intelligent automation across devices and platforms.

Other vendors (988 CVEs across 363 vendors)

Unattributed · 86 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77366Critical9.9—2026-10-12obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
CVE-2026-66086Critical9.8—2026-10-12In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages.
CVE-2026-76070Critical9.8—2026-08-24Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handle…
CVE-2026-7808Critical9.8—2026-08-23justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting.
CVE-2026-5388Critical9.8—2026-08-23justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge ca…
CVE-2026-32555Critical9.3—2026-08-24Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
CVE-2026-78357Critical9.1—2026-10-12Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time…
CVE-2026-84317High8.8—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84316High8.8—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-77363High8.8—2026-10-12obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
CVE-2026-53527High8.8—2026-08-21LeafWiki is a self-hosted wiki.
CVE-2026-18537High8.7—2026-10-12IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.
CVE-2026-18529High8.7—2026-10-12IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
CVE-2026-84319High8.3—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84360High8.1—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-109422High8.1—2026-10-12NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExec…
CVE-2026-18517High7.7—2026-10-12IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPol…
CVE-2026-78673High7.5—2026-10-12IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
CVE-2026-75881High7.5—2026-10-12IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
CVE-2026-105052High7.5—2026-10-12IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system.
CVE-2026-66585High7.5—2026-08-24Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.
CVE-2026-4671High7.5—2026-08-23justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification.
CVE-2026-109423High7.4—2026-10-12NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to vali…
CVE-2026-18513High7.2—2026-10-12IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
CVE-2026-109567High7.2—2026-10-12Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role.
CVE-2026-103522High7.2—2026-10-12In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types.
CVE-2026-103521High7.2—2026-10-12In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation.
CVE-2026-77115High7.1—2026-08-23Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.
CVE-2026-18533Medium6.5—2026-10-12IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template.
CVE-2026-109427Medium6.5—2026-10-12Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat messages by forging unsigned, unauthenticated stream IDs decoded via encode_string/d…
CVE-2026-109351Medium6.5—2026-10-12Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header object count.
CVE-2026-109350Medium6.5—2026-10-12Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries.
CVE-2026-72704Medium6.3—2026-08-24The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport.
CVE-2026-109565Medium6.1—2026-10-12Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display names.
CVE-2025-27902Medium6.1—2026-10-12IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site.
CVE-2025-27896Medium6.1—2026-10-12IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.
CVE-2025-27895Medium6.1—2026-10-12IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.
CVE-2026-5751Medium6.1—2026-08-23justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces (e.g., drop_foreign_namespaces=False with allo…
CVE-2026-5389Medium6.1—2026-08-23justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content.
CVE-2026-107432Medium5.4—2026-10-12Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1.
CVE-2026-48211Medium5.4—2026-10-12An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack.
CVE-2026-78279Medium5.4—2026-08-24Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78204Medium5.4—2026-08-24Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints.
CVE-2026-19853Medium5.3—2026-08-24NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability.
CVE-2026-48212Medium4.8—2026-10-12An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users accessing that page.
CVE-2026-109571Medium4.3—2026-10-12Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37).
CVE-2026-108931Medium4.3—2026-10-12A vulnerability was found in Netcore NR268 1.7.121109.
CVE-2026-84166Medium4.3—2026-10-12The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing attackers to trick a logged-in administrator into creating, deleting, or modifying arbitrary booking…
CVE-2026-78435Low3.8—2026-08-24A vulnerability has been found in Faveo Helpdesk up to 2.0.3.
CVE-2026-103526Low3.7—2026-10-12In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthenticated attackers to enumerate valid administrator accounts.
CVE-2026-92682———2026-10-12In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some.
CVE-2026-103524———2026-10-12Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface.
CVE-2026-21139———2026-10-12Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.
CVE-2026-21138———2026-10-12Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
CVE-2026-21137———2026-10-12Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
CVE-2026-21136———2026-10-12Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
CVE-2026-21135———2026-10-12Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
CVE-2026-21134———2026-10-12Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
CVE-2026-21133———2026-10-12Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
CVE-2026-21132———2026-10-12Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script.
CVE-2026-21131———2026-10-12Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
CVE-2026-21130———2026-10-12Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
CVE-2026-21129———2026-10-12Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
CVE-2026-21128———2026-10-12Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
CVE-2026-21127———2026-10-12Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
CVE-2026-21126———2026-10-12Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21125———2026-10-12Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2026-21124———2026-10-12Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2026-21123———2026-10-12Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.
CVE-2026-21122———2026-10-12Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
CVE-2026-21121———2026-10-12Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
CVE-2026-21120———2026-10-12Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
CVE-2026-21119———2026-10-12Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
CVE-2026-21118———2026-10-12Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
CVE-2026-21117———2026-10-12Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21116———2026-10-12Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21115———2026-10-12Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21114———2026-10-12Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
CVE-2026-12555———2026-08-24Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.
CVE-2026-12554———2026-08-24Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.
CVE-2026-66917———2026-08-22Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.
CVE-2026-48106———2026-08-21Arc is an open, SQL-native time-series database for telemetry.
CVE-2026-48105———2026-08-21Arc is an open, SQL-native time-series database for telemetry.
CVE-2026-47735———2026-08-21Arc is an open, SQL-native time-series database for telemetry.
CVE-2026-53531———2026-08-21RaTeX is a KaTeX-compatible math rendering engine written in Rust.
CVE-2026-53529———2026-08-21LeafWiki is a self-hosted wiki.

Progress Software Corporation · 31 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85955Critical9.9—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which c…
CVE-2026-85948Critical9.9—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.
CVE-2026-85947Critical9.9—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations.
CVE-2026-9191Critical9.6—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state.
CVE-2026-85956Critical9.6—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized databa…
CVE-2026-85954High8.6—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege es…
CVE-2026-85953High8.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values.
CVE-2026-85952High8.5—2026-10-12Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, po…
CVE-2026-85951High8.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially re…
CVE-2026-85950High8.4—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-…
CVE-2026-85949High8.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations.
CVE-2026-85965High8.0—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instabil…
CVE-2026-85966High7.7—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information.
CVE-2026-85964High7.7—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary s…
CVE-2026-85975High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default.
CVE-2026-85963High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticated remote attacker to make unauthorized requests to interna…
CVE-2026-85962High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.
CVE-2026-85961High7.5—2026-10-12On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations.
CVE-2026-85960High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console.
CVE-2026-85959High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized ac…
CVE-2026-85958High7.5—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could…
CVE-2026-85957High7.5—2026-10-12Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.
CVE-2026-85974High7.4—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.
CVE-2026-85973High7.4—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.
CVE-2026-85972High7.4—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations.
CVE-2026-85971High7.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data.
CVE-2026-85970High7.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of l…
CVE-2026-85969High7.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.
CVE-2026-85968High7.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.
CVE-2026-85967Medium6.1—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser sessi…
CVE-2026-85976Medium5.4—2026-10-12Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-s…

Getgrav · 29 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56710Critical9.8—2026-08-25Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler.
CVE-2026-109321Critical9.1—2026-10-12Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disa…
CVE-2026-75574High8.8—2026-08-25The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates.
CVE-2026-72696High8.4—2026-08-25Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable tem…
CVE-2026-109313High8.1—2026-10-12Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration.
CVE-2026-109312High8.1—2026-10-12Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized.
CVE-2026-72695High8.1—2026-08-25Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile() that allows authenticated users with media management permissions to delete arbitrary files by supplying filenames with directory traversal sequen…
CVE-2026-56707High7.7—2026-08-25Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks.
CVE-2026-109326High7.5—2026-10-12Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root.
CVE-2026-109325High7.5—2026-10-12Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values.
CVE-2026-76846High7.5—2026-08-25Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets.
CVE-2026-72700High7.5—2026-08-25The getgrav/grav-plugin-login Composer plugin before 3.9.1 (used by Grav) compares password reset and account activation tokens using a non-constant-time === string comparison instead of hash_equals() in classes/Controller.php (taskReset()…
CVE-2026-56709High7.5—2026-08-25Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail() function when constructing token-bearing invitation links.
CVE-2026-109314High7.3—2026-10-12Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.
CVE-2026-109317High7.2—2026-10-12Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants.
CVE-2026-109324Medium6.5—2026-10-12Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images.
CVE-2026-109316Medium6.5—2026-10-12Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration.
CVE-2026-109315Medium6.5—2026-10-12Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token.
CVE-2026-76839Medium6.5—2026-08-25Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet() and offsetexists() methods that lack field filtering.
CVE-2026-72698Medium6.5—2026-08-25Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing content editors to read sensitive configuration values.
CVE-2026-72697Medium6.5—2026-08-25Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope.
CVE-2026-109322Medium6.1—2026-10-12Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery.
CVE-2026-109320Medium5.4—2026-10-12The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state.
CVE-2026-72702Medium5.4—2026-08-25Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer() and Pages::referrerRoute() methods, which validate the Referer header using an unanchored string prefix match (str_starts_with($referrer, $base)) with no tr…
CVE-2026-109323Medium5.3—2026-10-12Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access and readonly enforcement.
CVE-2026-72699Medium5.3—2026-08-25The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration.
CVE-2026-56708Medium5.3—2026-08-25Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding.
CVE-2026-109319Medium4.3—2026-10-12Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll.
CVE-2026-72701Low3.7—2026-08-25Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison with the === operator instead of hash_equals() for CSRF nonce validation.

Imagemagick · 26 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109276Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input.
CVE-2026-109273Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded.
CVE-2026-109269Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input.
CVE-2026-109267Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion.
CVE-2026-109266Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output.
CVE-2026-109265Medium5.3—2026-10-12ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles.
CVE-2026-109262Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images.
CVE-2026-109259Medium5.3—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents.
CVE-2026-109275Medium4.8—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used.
CVE-2026-109281Medium4.4—2026-10-12ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations.
CVE-2026-109278Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired.
CVE-2026-109272Low3.7—2026-10-12ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached.
CVE-2026-109271Low3.7—2026-10-12ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding.
CVE-2026-109268Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression.
CVE-2026-109264Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack.
CVE-2026-109263Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails.
CVE-2026-109261Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding.
CVE-2026-109260Low3.7—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails.
CVE-2026-105081Low3.6—2026-10-12ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed.
CVE-2026-109277Low3.3—2026-10-12ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling.
CVE-2026-109270Low3.3—2026-10-12ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments.
CVE-2026-109282Low2.5—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format.
CVE-2026-109280Low2.5—2026-10-12ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation.
CVE-2026-109279Low2.5—2026-10-12ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer o…
CVE-2026-109274Low2.5—2026-10-12ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script.
CVE-2026-109258Low2.5—2026-10-12ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails.

Red Hat · 26 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66788Critical9.9—2026-08-20A flaw was found in Lighthouse.
CVE-2026-107935Critical9.3—2026-10-09A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package.
CVE-2026-87744Critical9.1—2026-10-12A flaw was found in Quarkus REST Data Panache.
CVE-2026-96275High8.8—2026-09-23A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data().
CVE-2026-108094High7.8—2026-10-12A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path.
CVE-2026-86320High7.8—2026-09-17A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.
CVE-2026-79992High7.8—2026-08-25A flaw was found in Emacs TRAMP.
CVE-2026-75888High7.7—2026-10-12A flaw was found in the OpenShift console.
CVE-2026-96280High7.5—2026-09-27The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, le…
CVE-2026-85234High7.5—2026-09-15A flaw was found in tftp-hpa.
CVE-2026-17615High7.5—2026-08-31A flaw was found in RESTEasy's SourceProvider.
CVE-2026-78002High7.5—2026-08-27A flaw was found in rsyslog.
CVE-2026-83535High7.4—2026-10-12A flaw was found in openstack-network-exporter.
CVE-2026-85013High7.3—2026-09-15A flaw was found in environment-modules.
CVE-2026-109082Medium6.8—2026-10-12A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.
CVE-2026-94451Medium6.5—2026-10-12Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.
CVE-2026-107193Medium6.5—2026-10-12A flaw has been found in **permission filters** in the **foreman** package.
CVE-2026-93579Medium6.5—2026-09-18A flaw was found in Netty's HTTP/2 stack.
CVE-2026-85471Medium6.4—2026-10-12A flaw was found in Quay.
CVE-2026-109194Medium6.4—2026-10-12A flaw was found in Red Hat Quay.
CVE-2026-108119Medium6.3—2026-10-09A flaw was found in busybox.
CVE-2026-17113Medium6.0—2026-08-24A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed by `setupContainerEnvironmentAndWorkdir` in `server/container_create.go`).
CVE-2026-107203Medium5.4—2026-10-12An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package.
CVE-2026-83536Medium5.3—2026-10-12A flaw was found in openstack-network-exporter.
CVE-2026-107655Medium4.0—2026-10-09A flaw was found in CUPS.
CVE-2026-109195Low3.1—2026-10-12A flaw was found in Quay.

N/a · 21 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52490Critical9.8—2026-08-24An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c
CVE-2026-75464High8.1—2026-08-24OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
CVE-2026-52492High7.8—2026-08-24An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF i…
CVE-2026-75368High7.5—2026-08-24A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying a crafted ECSS TC message.
CVE-2026-56135High7.4—2026-08-24In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS ima…
CVE-2026-108836High7.3—2026-10-12A vulnerability has been found in Ollama up to 0.34.1.
CVE-2026-108826High7.3—2026-10-12A vulnerability was found in Zen Cart up to 2.2.2.
CVE-2026-75369High7.1—2026-08-24An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying a crafted CAN message.
CVE-2026-108812Medium6.5—2026-10-12A security vulnerability has been detected in SEMCMS up to 5.0.
CVE-2026-108824Medium6.3—2026-10-12A flaw has been found in DataEase up to 3.0.0.
CVE-2026-108814Medium6.3—2026-10-12A flaw has been found in SEMCMS up to 5.0.
CVE-2026-108813Medium6.3—2026-10-12A vulnerability was detected in SEMCMS up to 5.0.
CVE-2026-95165Medium6.1—2026-10-05Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
CVE-2026-95166Medium5.4—2026-10-05In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.
CVE-2026-108822Medium5.3—2026-10-12A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.
CVE-2026-108829Medium4.7—2026-10-12A security flaw has been discovered in Zen Cart up to 2.2.2.
CVE-2026-56136Medium4.7—2026-08-24In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image.
CVE-2026-108811Medium4.3—2026-10-12A weakness has been identified in WMCMS 4.446.1257.
CVE-2026-108828Medium4.1—2026-10-12A vulnerability was identified in Zen Cart 2.2.2.
CVE-2026-108827Medium4.1—2026-10-12A vulnerability was determined in Zen Cart up to 2.2.2.
CVE-2026-108815Low3.5—2026-10-12A vulnerability has been found in idcCMS 1.70.

Unknown · 20 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13598Critical9.8—2026-08-23The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, lead…
CVE-2026-77002Critical9.8—2026-08-22The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrato…
CVE-2026-77001Critical9.8—2026-08-22The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated atta…
CVE-2026-77000Critical9.8—2026-08-22The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing us…
CVE-2026-76789High8.8—2026-08-22The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated…
CVE-2026-76793High8.1—2026-08-22The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to l…
CVE-2026-18052High8.1—2026-08-22The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link…
CVE-2026-19221High7.2—2026-08-22The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire netw…
CVE-2026-19093Medium6.8—2026-08-22The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root.
CVE-2026-16260Medium6.8—2026-08-22The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contribu…
CVE-2026-19222Medium6.6—2026-08-22The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator rol…
CVE-2026-107791Medium6.5—2026-10-12The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated users with minimal permissions, such as subscribers, to perman…
CVE-2026-16738Medium5.3—2026-08-22The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticat…
CVE-2026-16612Medium5.3—2026-08-22The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and thei…
CVE-2026-84167Medium4.3—2026-10-12The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to read other customers' booking details, including their name, em…
CVE-2026-77116Medium4.3—2026-08-23Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5.
CVE-2026-14853Medium4.3—2026-08-23The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to crea…
CVE-2025-15703Low3.5—2026-10-12The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's…
CVE-2026-77003Low2.7—2026-08-23The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the pub…
CVE-2026-14187Low2.7—2026-08-22The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors.

Freerdp · 18 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109242High7.1—2026-10-12FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.
CVE-2026-109255Medium6.8—2026-10-12FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients.
CVE-2026-109245Medium6.8—2026-10-12FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshakes without verifying the server certificate chain.
CVE-2026-109250Medium6.6—2026-10-12FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array during PKCS#11 key enumeration.
CVE-2026-109244Medium6.6—2026-10-12FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes.
CVE-2026-109248Medium6.5—2026-10-12FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which scans a server-controlled FILEDESCRIPTORW cFileName with unbounded _wcschr() and count_special_cha…
CVE-2026-109246Medium6.5—2026-10-12FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadow_encoder_infligh…
CVE-2026-109257Medium5.9—2026-10-12FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure.
CVE-2026-109254Medium5.9—2026-10-12FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining play_thread.
CVE-2026-109249Medium5.5—2026-10-12FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted Connect…
CVE-2026-109256Medium5.3—2026-10-12FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure.
CVE-2026-109253Medium5.3—2026-10-12FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding.
CVE-2026-109252Medium5.3—2026-10-12FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB_RPC_INTERNAL_NAME data.
CVE-2026-109251Medium5.3—2026-10-12FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wraps in 32-bit arithmetic and is skipped.
CVE-2026-109243Medium4.4—2026-10-12FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-only permissions.
CVE-2026-109247Low3.1—2026-10-12FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard d…
CVE-2026-109241Low3.1—2026-10-12FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages.
CVE-2026-109240Low3.1—2026-10-12FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values.

Open-webui · 18 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109286High8.1—2026-10-12Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages.
CVE-2026-109291High7.3—2026-10-12Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims' sessions by storing javascript: URLs in citation embed_url fields.
CVE-2026-109290High7.3—2026-10-12Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments.
CVE-2026-109292Medium6.8—2026-10-12Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections.
CVE-2026-109299Medium6.5—2026-10-12Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules.
CVE-2026-109298Medium6.5—2026-10-12Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result.
CVE-2026-109297Medium6.5—2026-10-12Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it.
CVE-2026-109295Medium6.5—2026-10-12Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns.
CVE-2026-109294Medium6.5—2026-10-12Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages.
CVE-2026-109293Medium6.5—2026-10-12Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only.
CVE-2026-109288Medium6.4—2026-10-12Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme.
CVE-2026-109289Medium6.3—2026-10-12Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket.
CVE-2026-109283Medium5.4—2026-10-12Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found…
CVE-2026-109285Medium5.0—2026-10-12Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access via stale cached knowledge base references.
CVE-2026-109300Medium4.6—2026-10-12Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled ifra…
CVE-2026-109296Medium4.3—2026-10-12Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index.
CVE-2026-109287Medium4.3—2026-10-12Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base.
CVE-2026-109284Medium4.3—2026-10-12Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access.

Fabrikar.com · 17 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77992———2026-08-22Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
CVE-2026-77027———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.
CVE-2026-76609———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
CVE-2026-76608———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.
CVE-2026-76607———2026-08-22Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.
CVE-2026-76606———2026-08-22Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.
CVE-2026-76605———2026-08-22Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.
CVE-2026-76604———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.
CVE-2026-76603———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.
CVE-2026-76602———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.
CVE-2026-76601———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks.
CVE-2026-76600———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks.
CVE-2026-76599———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings of arbitrary database tables including columns.
CVE-2026-76598———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.
CVE-2026-76597———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.
CVE-2026-76596———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table
CVE-2026-76571———2026-08-22Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery().

Combodo · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-30864High8.9—2026-08-24Combodo iTop is a web-based IT service management tool.
CVE-2026-33240High8.8—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-31936High8.8—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-40877High8.7—2026-08-24Combodo iTop is a web-based IT service management tool.
CVE-2026-34741High8.6—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-31880High8.0—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-31803High8.0—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-30890High8.0—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-30826High8.0—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-34948High7.7—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-30865High7.1—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-34949Medium6.5—2026-08-21Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions.
CVE-2026-34836Medium6.5—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-33047Medium4.3—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-33333Low3.5—2026-08-21Combodo iTop is a web based IT service management tool.
CVE-2026-39975———2026-08-24Combodo iTop is a web-based IT service management tool.

Ibm · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-96012Critical9.9—2026-10-12IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation.
CVE-2026-105465High8.8—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance.
CVE-2026-105464High8.8—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-96266High8.2—2026-10-12IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.
CVE-2026-96265High8.2—2026-10-12IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.
CVE-2026-96264High8.2—2026-10-12IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.
CVE-2026-96263High8.2—2026-10-12IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path.
CVE-2026-96262High8.2—2026-10-12IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.
CVE-2026-18166High7.7—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CRE…
CVE-2026-96261High7.3—2026-10-12IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.
CVE-2026-78404Medium6.5—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility.
CVE-2026-105466Medium6.5—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.
CVE-2025-27897Medium6.1—2026-10-12IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.
CVE-2026-104332Medium5.5—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
CVE-2026-16678Medium4.5—2026-10-12IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denial of service by exhausting connection resources due to imprope…
CVE-2026-104364Low3.3—2026-10-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.

Esri · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69236Medium6.1—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser.
CVE-2026-69235Medium6.1—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser.
CVE-2026-69234Medium6.1—2026-08-21There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary Ja…
CVE-2026-69225Medium5.9—2026-08-21There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.
CVE-2026-69224Medium5.9—2026-08-21There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http re…
CVE-2026-69233Medium5.5—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s br…
CVE-2026-69232Medium5.5—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser.
CVE-2026-69231Medium5.5—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser.
CVE-2026-69230Medium5.5—2026-08-21There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s br…
CVE-2026-69229Medium5.4—2026-08-21There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application.
CVE-2026-69228Medium5.3—2026-08-21There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenti…
CVE-2026-69237Low3.8—2026-08-21There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML into an administrative API.
CVE-2026-69238Low3.5—2026-08-21There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application.

Sourcecodester · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78248High7.3—2026-08-24A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0.
CVE-2026-78247High7.3—2026-08-24A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0.
CVE-2026-78199High7.3—2026-08-24A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0.
CVE-2026-78198High7.3—2026-08-24A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0.
CVE-2026-78197High7.3—2026-08-24A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0.
CVE-2026-78115Medium5.4—2026-08-23A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-108920Medium4.3—2026-10-12A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.
CVE-2026-108919Medium4.3—2026-10-12A weakness has been identified in SourceCodester Drug Recommendation System 1.0.
CVE-2026-78060Medium4.3—2026-08-23A vulnerability was found in SourceCodester Stock Management System 1.0.
CVE-2026-78059Medium4.3—2026-08-23A vulnerability has been found in SourceCodester Stock Management System 1.0.
CVE-2026-78055Medium4.3—2026-08-23A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-78054Medium4.3—2026-08-23A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0.

Jishenghua · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109186High8.8—2026-10-12jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password.
CVE-2026-109185High8.8—2026-10-12jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary roles to any user.
CVE-2026-109187Medium6.5—2026-10-12jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-wide configuration secrets via the getInfoByKey handler of PlatformConfigController.
CVE-2026-109178Medium5.4—2026-10-12jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete audit log entries.
CVE-2026-109188Medium4.3—2026-10-12jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to create tenant-wide master data via add and import endpoints lacking role checks.
CVE-2026-109184Medium4.3—2026-10-12jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to read any settlement account ledger by supplying an arbitrary accountId.
CVE-2026-109183Medium4.3—2026-10-12jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POST /depotHead/addDepotHeadAndDetail requests.
CVE-2026-109182Medium4.3—2026-10-12jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list.
CVE-2026-109181Medium4.3—2026-10-12jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or department data to list other users' bills by adding a purchaseStatus value.
CVE-2026-109180Medium4.3—2026-10-12jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds request parameters.
CVE-2026-109179Medium4.3—2026-10-12jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log.

Surrealdb · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109343High8.1—2026-10-12SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQL USE statement switches a session to any namespace/database without checking that the caller's authenticated level covers it.
CVE-2026-109334High8.1—2026-10-12SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access.
CVE-2026-109341High7.1—2026-10-12SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record.
CVE-2026-109338Medium6.5—2026-10-12SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript.
CVE-2026-109335Medium6.5—2026-10-12SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read values hidden by field-level SELECT permissions through COMPUTED fields.
CVE-2026-109333Medium6.5—2026-10-12SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespaces or databases by resolving record ids through FETCH.
CVE-2026-109342Medium5.4—2026-10-12SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated callers to invalidate other users' refresh tokens without proof of possession.
CVE-2026-109340Medium5.4—2026-10-12SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE.
CVE-2026-109339Medium4.9—2026-10-12SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit.
CVE-2026-109337Medium4.3—2026-10-12SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHERE predicates over $before or $after.
CVE-2026-109336Medium4.3—2026-10-12SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projections.

Vrana · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56705Critical9.8—2026-08-25Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons.
CVE-2026-56702High8.8—2026-08-25Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist.
CVE-2026-34968High8.1—2026-08-25Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion.
CVE-2026-109347High7.2—2026-10-12Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark.
CVE-2026-56703High7.2—2026-08-25Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions.
CVE-2026-56706Medium6.8—2026-08-25Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing anyone who observes a single CSRF token (e.g., via network sniffing, log files, Re…
CVE-2026-56704Medium6.1—2026-08-25Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation.
CVE-2026-34964Medium5.8—2026-08-25Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values.
CVE-2026-34967Medium5.4—2026-08-25Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php.
CVE-2026-34959Medium4.7—2026-08-25Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no trusted-proxy check and no validation of the prefix value.
CVE-2026-16434———2026-08-25Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability (GHSA-8478-xrj3-h9c2).

Logicaldoc · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109199High8.8—2026-10-12LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields.
CVE-2026-109201High8.3—2026-10-12LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents.
CVE-2026-109205High7.5—2026-10-12LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session.
CVE-2026-109203Medium6.5—2026-10-12LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents.
CVE-2026-109202Medium6.5—2026-10-12LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter.
CVE-2026-109170Medium6.5—2026-10-12LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidated indexed parameter.
CVE-2026-109169Medium6.5—2026-10-12LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServlet.
CVE-2026-109200Medium6.4—2026-10-12LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting.
CVE-2026-109204Medium6.3—2026-10-12LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user.
CVE-2026-109206Medium5.3—2026-10-12LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/avatar) performs no session validation.

Hexpm · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-96618———2026-10-12Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine running mix deps.get, mix deps.update, mix hex.package fetch…
CVE-2026-96612———2026-10-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a malicious package publisher to delete a directory outside the project's deps directory and extract package files into it whe…
CVE-2026-81856———2026-10-12Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks.
CVE-2026-105668———2026-10-12Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over the owner's account, to get a newly published release past the release-age cooldown.
CVE-2026-105280———2026-10-12Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - writes to standard output.
CVE-2026-103503———2026-10-12Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set c…
CVE-2026-103502———2026-10-12Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or API server to programs that use hex_core's default HTTP ad…
CVE-2026-75554———2026-08-24Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages.
CVE-2026-75542———2026-08-24Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages.

Itsourcecode · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78246High7.3—2026-08-24A vulnerability has been found in itsourcecode Online Clinic Management System 1.0.
CVE-2026-78245High7.3—2026-08-24A flaw has been found in itsourcecode Online Pharmacy System 1.0.
CVE-2026-78244High7.3—2026-08-24A vulnerability was detected in itsourcecode Real Estate Management System 1.0.
CVE-2026-78171High7.3—2026-08-24A vulnerability has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-108928Medium6.3—2026-10-12A security vulnerability has been detected in itsourcecode Online Admission System 1.0.
CVE-2026-108927Medium6.3—2026-10-12A weakness has been identified in itsourcecode Baptism Information Management System 1.0.
CVE-2026-108926Medium6.3—2026-10-12A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0.
CVE-2026-78185Medium6.3—2026-08-24A vulnerability was detected in itsourcecode Sales and Inventory System 1.0.
CVE-2026-78112Medium6.3—2026-08-23A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0.

Thelia · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109397High7.2—2026-10-12Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailing space to filenames.
CVE-2026-109396Medium4.2—2026-10-12Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields.
CVE-2026-107248———2026-10-12Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates, which are then compiled and exe…
CVE-2026-103537———2026-10-12Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution.
CVE-2026-103535———2026-10-12Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution.
CVE-2026-103529———2026-10-12Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code.
CVE-2026-103528———2026-10-12Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions.
CVE-2026-103527———2026-10-12Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting (XSS) when an authenticated user visits the malicious link conta…
CVE-2026-103523———2026-10-12Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow.

Academysoftwarefoundation · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68516Medium6.5—2026-08-24OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-55373Medium6.2—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-55059Medium6.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59183Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-55371———2026-08-25OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry.
CVE-2026-54920Unrated——2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-53532———2026-08-24OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

Apache · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78329Critical9.8—2026-08-24Improper input validation vulnerability in Apache Camel Undertow component.
CVE-2026-71300Critical9.8—2026-08-24Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.
CVE-2026-66906Critical9.1—2026-08-24Relative path traversal vulnerability in Apache Camel Azure Storage Blob component.
CVE-2026-59230Medium6.5—2026-08-24Improper input validation vulnerability in Apache Camel.
CVE-2026-60093Medium5.5—2026-08-24Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
CVE-2026-75099Medium5.3—2026-08-24Unauthenticated REST disclosure of certain content items in Apache Allura.
CVE-2026-63621Medium5.3—2026-08-24Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent at…

Erzhongxmu · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108782Medium6.3—2026-10-12A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108781Medium6.3—2026-10-12A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108779Medium6.3—2026-10-12A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108778Medium6.3—2026-10-12A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108777Medium6.3—2026-10-12A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108775Medium6.3—2026-10-12A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.
CVE-2026-108774Medium6.3—2026-10-12A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.

Wwbn · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59808High8.8—2026-08-22AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId() returns video_id_hash credentials for any video by encoder_queue_id without ownership verification, and useVideoHashOrLogin(…
CVE-2026-59256High7.5—2026-08-22WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken() creates tokens without binding to user identity or purpose, and plugin/Gallery/view/sections.php issues valid tokens to unauthenticated vis…
CVE-2026-58003High7.1—2026-08-22WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpoint that lacks authenticity checks and accepts GET requests.
CVE-2026-58002Medium6.5—2026-08-22WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authenticated users to forge two-party consent records by supply…
CVE-2026-58001Medium5.7—2026-08-22WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests.
CVE-2026-57944Medium5.4—2026-08-22AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configuration by performing unauthorized writes to plugin data.
CVE-2026-56380Medium5.3—2026-08-22AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter.

0xjacky · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84318High8.8—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84313High8.8—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84315High8.3—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84320Medium6.3—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84321Medium5.4—2026-10-12Nginx UI is a web user interface for the Nginx web server.
CVE-2026-84314———2026-10-12Nginx UI is a web user interface for the Nginx web server.

Craftcms · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109308High8.8—2026-10-12Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCacheUpdates to UpdatesModel without Component::cleanseConfig(), allowing behavior and event-handler injection.
CVE-2026-109305High8.8—2026-10-12Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators.
CVE-2026-109306Medium5.9—2026-10-12Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition() that lets any authenticated user change the installed edition.
CVE-2026-109304Medium4.9—2026-10-12Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arbitrary file read vulnerability because the Twig create() class blocklist does not cover DOMDocument.
CVE-2026-109307Medium4.7—2026-10-12Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA verification flow, where a user-controlled returnUrl accepting javascript: URLs is used in client-side navigation.
CVE-2026-78416———2026-08-24Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling.

Dassault Systèmes · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-105407High8.8—2026-10-12An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-105410High8.7—2026-10-12A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105409High8.7—2026-10-12A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105408High8.7—2026-10-12A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105411High8.1—2026-10-12An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the tr…
CVE-2026-105412High7.1—2026-10-12An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.

Librenms · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109357High8.1—2026-10-12LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence.
CVE-2026-109353High7.1—2026-10-12LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php.
CVE-2026-109355Medium6.1—2026-10-12LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped.
CVE-2026-109352Medium6.1—2026-10-12LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into H…
CVE-2026-109356Medium4.3—2026-10-12LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete ports without delete privileges.
CVE-2026-109354Medium4.3—2026-10-12LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter.

Netcore · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108907Critical10.0—2026-10-12A vulnerability was determined in Netcore NR268 1.7.121109.
CVE-2026-108929Critical9.9—2026-10-12A flaw has been found in Netcore NR268 1.7.121109.
CVE-2026-108906High7.2—2026-10-12A vulnerability has been found in Netcore NR268 1.7.121109.
CVE-2026-108909Medium4.3—2026-10-12A security flaw has been discovered in Netcore NR268 1.7.121109.
CVE-2026-108930Low2.7—2026-10-12A vulnerability has been found in Netcore NR268 1.7.121109.
CVE-2026-108908Low2.4—2026-10-12A vulnerability was identified in Netcore NR268 1.7.121109.

Otrs Gmbh (Former Otrs Ag) · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-93582Critical9.4—2026-10-12The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request hea…
CVE-2026-78355High8.7—2026-10-12A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.
CVE-2026-93581Medium6.1—2026-10-12User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, ma…
CVE-2026-78359Medium5.4—2026-10-12OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LDAP, are configured, the uniqueness check for customer user ema…
CVE-2026-78356Medium5.3—2026-10-12The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend.
CVE-2026-78358Medium4.3—2026-10-12Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticated user. In particular, the DBUpdateLogCleanUp action can be triggered through a GET request without validating a C…

Siyuan-note · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-60084High8.7—2026-08-22SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll.
CVE-2026-62204Medium6.6—2026-08-22SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints.
CVE-2026-109310Medium6.5—2026-10-12SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion.
CVE-2026-109309Medium6.5—2026-10-12SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation.
CVE-2026-60083Medium4.9—2026-08-22SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API.
CVE-2026-59809Medium4.9—2026-08-22SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, allowing attackers to exfiltrate stored secrets.

Agno-agi · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108819High7.3—2026-10-12A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1.
CVE-2026-108818High7.3—2026-10-12A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.
CVE-2026-108820Medium6.3—2026-10-12A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.
CVE-2026-108816Medium6.3—2026-10-12A vulnerability was found in agno-agi agno up to 3.0.6.
CVE-2026-108817Medium5.5—2026-10-12A vulnerability was determined in agno-agi agno up to 3.0.9.

Autodesk · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7455High7.8—2026-08-24A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.
CVE-2026-19568High7.8—2026-08-24A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.
CVE-2026-16783High7.8—2026-08-24A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.
CVE-2026-16781Medium5.5—2026-08-24A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability.
CVE-2026-16782Medium5.3—2026-08-24A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability.

Edimax · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108918Critical10.0—2026-10-12A vulnerability was identified in Edimax BR-6208AC 1.32.
CVE-2026-108917Critical10.0—2026-10-12A vulnerability was determined in Edimax BR-6208AC 1.32.
CVE-2026-108915Critical9.9—2026-10-12A vulnerability has been found in Edimax BR-6208AC 1.32.
CVE-2026-108914Critical9.9—2026-10-12A flaw has been found in Edimax BR-6208AC 1.32.
CVE-2026-108916High8.3—2026-10-12A vulnerability was found in Edimax BR-6208AC 1.32.

Emilstenstrom · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8445Critical9.8—2026-08-23justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown().
CVE-2026-9769High7.5—2026-08-23justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service.
CVE-2026-77088Medium6.1—2026-08-23justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as block boundaries.
CVE-2026-74793Medium6.1—2026-08-23justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections.
CVE-2026-6827Medium6.1—2026-08-23justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling.

Gitpython-developers · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78676Critical9.8—2026-08-25GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath.
CVE-2026-78675High8.4—2026-08-25GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via [include] directives.
CVE-2026-78677High7.5—2026-08-25GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.
CVE-2026-78679Medium6.5—2026-08-25GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard.
CVE-2026-78678Medium6.5—2026-08-25GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame().

Hclsoftware · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21752High7.5—2026-08-24HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws.
CVE-2026-21751High7.4—2026-08-24HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached.
CVE-2026-21756High7.2—2026-08-24HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
CVE-2026-21755Medium5.3—2026-08-24HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service.
CVE-2026-21759Medium4.3—2026-08-24HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated…

Linksys · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108892Critical10.0—2026-10-12A vulnerability was determined in Linksys E1700 1.0.0.4.003.
CVE-2026-108896Critical9.9—2026-10-12A vulnerability was found in Linksys E1700 1.0.0.4.003.
CVE-2026-108895Critical9.9—2026-10-12A weakness has been identified in Linksys E1700 1.0.0.4.003.
CVE-2026-108894Critical9.9—2026-10-12A security flaw has been discovered in Linksys E1700 1.0.0.4.003.
CVE-2026-108893Critical9.9—2026-10-12A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003.

Sgl-project · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109229High7.5—2026-10-12SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor.
CVE-2026-109228High7.5—2026-10-12SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_tokens_per_frame and max_image_tokens in the video_url object.
CVE-2026-109227High7.5—2026-10-12SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits.
CVE-2026-109226High7.5—2026-10-12SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits.
CVE-2026-109225High7.5—2026-10-12SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions.

Zephyrproject · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13212High8.8—2026-08-24The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring.
CVE-2026-9728Medium6.4—2026-08-24The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspa…
CVE-2026-13213Medium5.3—2026-08-24The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT_CONN_CB_DEFINE, so security_changed() runs for every connection that establishes security even before th…
CVE-2026-13343Medium5.3—2026-08-24The UMP Stream responder library in lib/midi2/ump_stream_responder.c builds reply packets in a 16-byte struct midi_ump (uint32_t data[4]).
CVE-2026-12999Medium5.3—2026-08-22The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet.

Zkteco · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108798High7.3—2026-10-12A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206.
CVE-2026-108794Medium6.3—2026-10-12A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206.
CVE-2026-108797Medium4.3—2026-10-12A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206.
CVE-2026-108796Medium4.3—2026-10-12A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206.
CVE-2026-108795Medium4.3—2026-10-12A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206.

Zscaler · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59568Critical9.1—2026-08-24Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
CVE-2026-59564Critical9.1—2026-08-24An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
CVE-2026-59567High8.8—2026-08-24Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.
CVE-2026-59565High8.8—2026-08-24A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.
CVE-2026-59566High8.4—2026-08-24A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.

Apache Software Foundation · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-92120———2026-10-12OAuth1 Request Replay Attack vulnerability in Apache Allura.
CVE-2026-92119———2026-10-12REST API Mass Assignment vulnerability in Apache Allura.
CVE-2026-92116———2026-10-12OAuth1 callback validation vulnerability in Apache Allura.
CVE-2026-85499———2026-10-12Improper Authorization vulnerability in Apache SkyWalking BanyanDB.

Corazawaf · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-41510High7.2—2026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.
CVE-2026-41508Medium5.8—2026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.
CVE-2026-41504Medium5.8—2026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.
CVE-2026-104774Medium5.8—2026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.

Dolibarr · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71511Medium6.5—2026-08-24Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints.
CVE-2026-71510Medium6.5—2026-08-24Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses withou…
CVE-2026-78160Medium6.3—2026-08-24A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3.
CVE-2026-77923Medium4.3—2026-08-24Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check within the clonetasks mass action handler in htdocs/core/actions_massactions.inc.p…

Moxi624 · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109174Medium6.5—2026-10-12MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read system credentials via the getSystemConfig endpoint.
CVE-2026-109176Medium5.4—2026-10-12MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkDisk/deleteFile and batchDeleteFile.
CVE-2026-109177Medium4.3—2026-10-12MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files by supplying their file paths.
CVE-2026-109175Medium4.3—2026-10-12MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST /networkDisk/getFileList.

Netweblogic · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14280Medium6.6—2026-08-25The Events Manager – Calendar, Bookings, Tickets, and more!
CVE-2026-15023Medium6.5—2026-08-25The Events Manager – Calendar, Bookings, Tickets, and more!
CVE-2026-17089Medium6.1—2026-08-25The Events Manager – Calendar, Bookings, Tickets, and more!
CVE-2026-10627Medium5.3—2026-08-25The Events Manager – Calendar, Bookings, Tickets, and more!

Nltk · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78683Critical9.6—2026-08-25NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py).
CVE-2026-78680High7.8—2026-08-25NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, allowing attackers to execute arbitrary code by placing a malicious dot binary in…
CVE-2026-78682High7.5—2026-08-25NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is configured.
CVE-2026-78681High7.5—2026-08-25NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs.

Tianma-if · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109559High8.7—2026-10-12EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching.
CVE-2026-109558High8.7—2026-10-12EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization.
CVE-2026-109557High8.7—2026-10-12EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles.
CVE-2026-109556High8.0—2026-10-12EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable.

Trendnet · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108804Critical10.0—2026-10-12A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03.
CVE-2026-77946Critical10.0—2026-08-22A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05.
CVE-2026-77945High7.4—2026-08-22A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05.
CVE-2026-77988Medium6.6—2026-08-22A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01.

Videowhisper.com · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107430Medium5.4—2026-10-12Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper…
CVE-2026-108476Medium5.0—2026-10-12Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7…
CVE-2026-108475Medium4.3—2026-10-12Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a…
CVE-2026-107429Medium4.3—2026-10-12Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.

Wp Manageninja Llc · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78270High7.6—2026-08-24Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78272Medium5.4—2026-08-24Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78278Medium5.3—2026-08-24Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-78277Medium4.9—2026-08-24Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

Zcashfoundation · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109363High7.5—2026-10-12ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the res…
CVE-2026-109364Medium5.3—2026-10-12Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses.
CVE-2026-109366Low3.7—2026-10-12Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty.
CVE-2026-109365Low3.7—2026-10-12Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes.

Zitadel · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109372High8.7—2026-10-12ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using the provider named in the request URL but resolves the user from…
CVE-2026-109371High8.2—2026-10-12ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-username handler acts on the account bound to a login flow before any factor is verified.
CVE-2026-109373High8.1—2026-10-12ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies.
CVE-2026-109374Medium5.5—2026-10-12ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerability in OIDC token exchange that allows end-user impersonators to impersonate administrators including IAM_OWNER by bypassing the admin.impersonation check.

Admidio · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109329Medium6.5—2026-10-12Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.
CVE-2026-109328Medium6.1—2026-10-12Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute.
CVE-2026-109327Medium6.1—2026-10-12Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/redirect.php that allows unauthenticated attackers to inject JavaScript via the url GET parameter, due to an incomplete…

Cakephp · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77337———2026-08-24CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications.
CVE-2026-77635———2026-08-24CakePHP is a rapid development framework for PHP.
CVE-2026-77634———2026-08-24CakePHP is a rapid development framework for PHP.

Code-projects · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78143High7.3—2026-08-23A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0.
CVE-2026-78144Medium6.3—2026-08-23A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0.
CVE-2026-78142Medium6.3—2026-08-23A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0.

Deltaww · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78317High8.8—2026-08-24SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78316High8.8—2026-08-24SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78315High8.8—2026-08-24SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

Dromara · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109168Medium6.5—2026-10-12lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects' file attachments by supplying an arbitrary bizId to the listFileByBizId endpoint.
CVE-2026-109166Medium6.5—2026-10-12lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids.
CVE-2026-78140Medium4.7—2026-08-23A flaw has been found in Dromara UJCMS up to 10.1.3.

Guchengwuyue · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109173Medium4.3—2026-10-12yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices via POST /admin-api/crm/invoice/check.
CVE-2026-109172Medium4.3—2026-10-12yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject receivables records by calling POST /admin-api/crm/contract-receivables/check.
CVE-2026-109171Medium4.3—2026-10-12yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts by calling POST /admin-api/crm/contract/check.

Jovancoding · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109331High7.4—2026-10-12Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field.
CVE-2026-109330Medium4.3—2026-10-12Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation.
CVE-2026-109332Low3.1—2026-10-12Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface.

Jsonata-js · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77415———2026-08-21JSONata is a JSON query and transformation language.
CVE-2026-77414———2026-08-21JSONata is a JSON query and transformation language.
CVE-2026-77413———2026-08-21JSONata is a JSON query and transformation language.

Krupalshah · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108807High7.3—2026-10-12A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.
CVE-2026-108806High7.3—2026-10-12A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.
CVE-2026-108805High7.3—2026-10-12A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.

Parse-community · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109301Medium5.9—2026-10-12Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery, causing an uncaught exception that terminates the process.
CVE-2026-109303Medium4.3—2026-10-12Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not enforce identity-scoped protectedFields (authenticated, role, or per-user groups) on count queries using the $relatedTo operator, exposing the size of protected Relation…
CVE-2026-109302Low3.7—2026-10-12Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cach…

Progress · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-93695High7.4—2026-10-12In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment.
CVE-2026-93693Medium6.5—2026-10-12In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remot…
CVE-2026-93694Medium4.0—2026-10-12In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService…

Ransomlook · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78555———2026-08-24RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page.
CVE-2026-78553———2026-08-24RansomLook created its Flask session-signing key without explicitly restricting the file permissions.
CVE-2026-78551———2026-08-24RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker r…

Rocq-prover · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72714Medium6.3—2026-08-24Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed.
CVE-2026-72705Medium6.3—2026-08-24The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments.
CVE-2026-72703Medium6.3—2026-08-24The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint.

Smartertools · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-104084High8.8—2026-10-09SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/au…
CVE-2026-104082High7.2—2026-10-09SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain w…
CVE-2026-104083Medium6.1—2026-10-09SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a <style> element nested within MathML foreign content (<math><…

Tduckcloud · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109164High7.1—2026-10-12TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arbitrary submission ids.
CVE-2026-109167Medium4.3—2026-10-12TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users to overwrite other users' form themes.
CVE-2026-109165Medium4.3—2026-10-12TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/create.

Tp-link Systems Inc. · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78541———2026-08-24A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1.
CVE-2026-16348———2026-08-24An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection.  …
CVE-2026-15469———2026-08-24The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6.  A shared RSA-512 mesh group private key is present in the affected firmware and is used by…

Unclecode · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109238High8.6—2026-10-12Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_config on /crawl requests.
CVE-2026-109237High8.1—2026-10-12Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers.
CVE-2026-109239Medium5.3—2026-10-12Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets unauthenticated attackers bypass Docker server egress controls.

4mosan Security Technology · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78211Critical9.8—2026-08-244MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability.
CVE-2026-78212High7.5—2026-08-244MOSAn developed by 4MOSAn Security Technology Co., Ltd.

Arraytics · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107418Medium5.4—2026-10-12Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.
CVE-2026-108477Medium5.3—2026-10-12Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.

Black Duck · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76055———2026-08-24Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating sys…
CVE-2026-76054———2026-08-24Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process…

C4illin · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59977High8.1—2026-10-12ConvertX is a self-hosted file conversion service.
CVE-2026-59976High8.1—2026-10-12ConvertX is a self-hosted file conversion service.

Containerd · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-95837High7.8—2026-10-12containerd is an open-source container runtime.
CVE-2026-95838———2026-10-12containerd is an open-source container runtime.

Continuedev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109560High7.5—2026-10-12Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules.
CVE-2026-76072High7.4—2026-08-24The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended.

Crocoblock · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107866Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2…
CVE-2026-107865Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5.

Cure53 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109345Medium6.1—2026-10-12DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because IN_PLACE mode returns a force-removed style element whose text content still carries markup.
CVE-2026-109344Medium6.1—2026-10-12DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutralize subtrees detached by afterSanitizeElements or afterSanitizeAttributes hooks.

Deepseek-ai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108789Medium5.5—2026-10-12A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2.
CVE-2026-108788Medium5.3—2026-10-12A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2.

Dell · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61419High7.8—2026-08-24Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.
CVE-2026-63693Medium6.6—2026-08-24Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

Dji · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78306———2026-08-24DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless…
CVE-2026-77812———2026-08-21DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption.

Edgelesssys · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109358High7.8—2026-10-12Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666).
CVE-2026-109359High7.7—2026-10-12Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation.

Efm · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78167Critical10.0—2026-08-24A weakness has been identified in EFM ipTIME T16000M 14.20.2.
CVE-2026-78168Critical9.8—2026-08-24A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0.

Elated-themes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66671High8.1—2026-08-24Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVE-2026-66670High8.1—2026-08-24Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

Eleveo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108809Low3.5—2026-10-12A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0.
CVE-2026-108808Low2.6—2026-10-12A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0.

Erlang · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-105274———2026-10-12Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core.
CVE-2026-103060———2026-10-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's _build directory and extract package files into…

Frappe · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109377Medium4.3—2026-10-12ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods.
CVE-2026-109376Medium4.3—2026-10-12ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that lets authenticated portal users view project Timesheets.

Getkin · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76905High7.5—2026-08-21kin-openapi is a Go project for handling OpenAPI files.
CVE-2026-77354———2026-08-21kin-openapi is a Go project for handling OpenAPI files.

Ggml-org · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78147High7.3—2026-08-23A vulnerability was found in ggml-org llama.cpp bec4772f6.
CVE-2026-78148Medium5.3—2026-08-24A vulnerability was determined in ggml-org llama.cpp bec4772f6.

Gitoxidelabs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109349Medium6.5—2026-10-12gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but a release-enabled assert_eq!
CVE-2026-109348Medium4.3—2026-10-12Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes.

Houtini-ai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108787Medium6.3—2026-10-12A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1.
CVE-2026-108786Medium6.3—2026-10-12A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5.

Kusalkasilva · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108921High7.3—2026-10-12A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.
CVE-2026-108922Medium6.3—2026-10-12A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.

Liquidthemes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32561High8.8—2026-08-24Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
CVE-2026-32560High8.8—2026-08-24Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.

Macrozheng · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108784Medium6.5—2026-10-12A vulnerability was detected in macrozheng mall up to 1.0.3.
CVE-2026-108785Medium6.3—2026-10-12A flaw has been found in macrozheng mall up to 1.0.3.

Meetecho · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108831Medium6.3—2026-10-12A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2.
CVE-2026-108830Medium4.2—2026-10-12A weakness has been identified in meetecho janus-gateway up to 1.4.2.

Mervinpraison · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57118Critical9.8—2026-10-12PraisonAI is a multi-agent teams system.
CVE-2026-57143High8.8—2026-10-12PraisonAI is a multi-agent teams system.

Metaphorcreations · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4244Medium4.3—2026-08-22The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `duplicate_post()` function in all versions up to, and including, 3.0.11.
CVE-2026-4245Medium4.3—2026-08-22The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11.

Ministry Of Justice General Directorate Of Information Technology · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12613High8.8—2026-10-12Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection.
CVE-2026-18390High7.8—2026-10-12Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows OS Command Injection.

Nexcess · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78265Critical9.8—2026-08-24Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-78263High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.

Obsidian · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-104078High7.8—2026-10-08Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing…
CVE-2026-104077High7.8—2026-10-08Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify an…

Patreon · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108479High8.1—2026-10-12Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17.
CVE-2026-108481High7.4—2026-10-12Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0.

Privasys · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108362———2026-10-12Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.
CVE-2026-108361———2026-10-12Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.

Project-monai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109360High7.5—2026-10-12MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP.
CVE-2026-109361High7.3—2026-10-12MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory.

Rapid7 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19200High8.9—2026-08-24The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues.
CVE-2026-87690High8.8—2026-10-12The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).

Roskus · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78365———2026-08-24Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own compan…
CVE-2026-78337———2026-08-24Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in…

Roxnor · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76063Medium6.4—2026-08-25The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitiza…
CVE-2026-75930Medium4.3—2026-08-25The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1.

Rubengc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76074Medium4.3—2026-08-22The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4.
CVE-2026-76057Medium4.3—2026-08-22The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4.

Sambitraj · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78057Medium6.3—2026-08-23A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5.
CVE-2026-78056Medium6.3—2026-08-23A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5.

Select-themes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28152High8.1—2026-08-24Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.
CVE-2026-28151High8.1—2026-08-24Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

Temporal Technologies, Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89140———2026-10-12Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace.
CVE-2026-104355———2026-10-12A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them.

Tenda · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78141High7.4—2026-08-23A vulnerability has been found in Tenda CH22 1.0.0.1.
CVE-2026-78063High7.4—2026-08-23A security flaw has been discovered in Tenda CH22 1.0.0.1.

Themebing · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32471High8.5—2026-08-24Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
CVE-2026-28190High7.1—2026-08-24Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.

Tim Solutions · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-39915High8.1—2026-08-24TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter…
CVE-2026-39914Medium6.5—2026-08-24TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only.

Unisoc (Shanghai) Technologies Co., Ltd. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87765Medium5.5—2026-10-12In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index.
CVE-2026-66085Medium5.5—2026-10-12In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps.

Utt · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78169Critical9.9—2026-08-24A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535.
CVE-2026-78170High8.8—2026-08-24A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306.

Vas3k · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78062High7.3—2026-08-23A vulnerability was identified in vas3k TaxHacker up to 0.8.2.
CVE-2026-78061Medium6.3—2026-08-23A vulnerability was determined in vas3k TaxHacker up to 0.8.2.

Villatheme · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-103356Medium5.4—2026-10-12Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15.
CVE-2026-103080Medium5.3—2026-10-12External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0.

Webkul · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109393Medium6.3—2026-10-12QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProductsController and AdminAddHotelController that skip htl_acces…
CVE-2026-97062Medium5.4—2026-09-24Aureus ERP through 1.6.0, fixed in commit 53ad76d, stores uploaded SVG files on its public disk and serves them from the application origin, allowing authenticated users to upload malicious SVG files containing JavaScript.

Westboy · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108790Medium4.7—2026-10-12A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab.
CVE-2026-108791Medium4.3—2026-10-12A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab.

Wp Desk · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-106605Medium5.3—2026-10-12Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Input Data Manipulation.This…
CVE-2026-107869Medium4.3—2026-10-12Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Subscriptions: from n/a through 1.8.4.

Xorbitsai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61539Critical10.0—2026-08-21Xinference is an inference API for running open-source, speech, and multimodal models.
CVE-2026-76841High8.8—2026-08-24Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it.

Y_project · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108803Medium6.3—2026-10-12A security vulnerability has been detected in y_project RuoYi up to 4.8.3.
CVE-2026-108802Low3.5—2026-10-12A weakness has been identified in y_project RuoYi up to 4.8.3.

Yangzongzhuan · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108825Medium5.4—2026-10-12A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3.
CVE-2026-108800Medium4.3—2026-10-12A vulnerability was identified in yangzongzhuan RuoYi 4.8.3.

Yungengxin · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108889Medium4.4—2026-10-12A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11.
CVE-2026-108835Medium4.4—2026-10-12A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9.

1024-lab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108923Medium6.3—2026-10-12A vulnerability was determined in 1024-lab smart-admin up to 3.30.0.

4xmen · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49849Critical9.1—2026-08-21xShop is an open-source shop developed in Laravel.

9001 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-104102———2026-10-12copyparty is a portable file server.

@Backstage · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-106495Medium4.3—2026-10-12Backstage is an open framework for building developer portals.

A Cpt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32563Critical9.8—2026-08-24Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

Aaif-goose · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109561Medium4.2—2026-10-12goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by update_goose_mode.

Achorein · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78196Medium4.4—2026-08-24A security flaw has been discovered in achorein expo-share-intent up to 8.0.0.

Alexta69 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78051Medium5.3—2026-08-23A vulnerability was determined in alexta69 MeTube up to 2026.06.10.

Alibaba-fusion · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78180High7.3—2026-08-24A security flaw has been discovered in alibaba-fusion next up to 1.27.34.

Amplebyte Pvt Limited · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32476High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

Analogwp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27364Medium6.5—2026-08-24Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.

Anydesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109390Critical9.8—2026-10-12AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control.

Ash-project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-105283———2026-10-12Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder ha…

Asynchttpclient · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107226Medium6.8—2026-10-12The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses.

Authlib · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75509Medium6.5—2026-08-24joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.

Aws · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77810Critical9.9—2026-08-21In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector.

Ayuhito · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109380High7.5—2026-10-12modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal().

Basekick-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48050———2026-08-21Arc is an open, SQL-native time-series database for telemetry.

Bdthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108478Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: fro…

Better-auth · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109346High8.1—2026-10-12better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope.

Blackbelttechnology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108890Medium6.3—2026-10-12A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0.

Blinko · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108980High8.8—2026-10-12Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin.

Bookstackapp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67204Medium5.4—2026-08-24BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in…

Buildwps · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-0551High8.8—2026-08-23The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input from the 'post_protection_roles' vulnerable parameter.

Bytebot-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78250Medium4.3—2026-08-24A vulnerability was identified in bytebot-ai bytebot 0.0.1.

Cairo-dock · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108834Medium4.3—2026-10-12A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0.

Cenodude · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53497Medium5.3—2026-08-21CrossWatch (CW) is a synchronization engine.

Cfdude · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108953High7.8—2026-10-12mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments.

Chirpmyradio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78136High7.8—2026-08-23chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data.

Cockpit-hq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109379Medium5.3—2026-10-12Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/check.

Code For Recovery · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66584High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.

Codection · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107863Medium5.3—2026-10-12Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users f…

Comfast · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78050Critical9.9—2026-08-23A vulnerability was found in Comfast CF-N1-S 2.6.0.1.

Containers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44517Medium6.3—2026-08-21Buildah is a tool that facilitates building OCI images.

Cool Plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-97301Medium6.5—2026-09-30Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

Cozmoslabs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78267Critical9.8—2026-08-24Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

Cozy Vision Technologies Pvt. Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-95594High8.1—2026-10-06Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt.

Cozythemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75019Medium6.4—2026-08-25The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including…

Cthackers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76845Medium6.5—2026-08-24adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination.

Cybertutor · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19852Medium6.1—2026-08-24NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability.

Datarecce · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49360———2026-08-21Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review.

Denji · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108981Low3.6—2026-10-12ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account.

Devolutions · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78417Medium4.3—2026-08-24Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic…

Digidoc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-103902High7.5—2026-10-12Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS.

Divinext · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32551Critical9.3—2026-08-24Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection.

Dlx Plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108168Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.6…

Dotstore · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81774High7.5—2026-09-02Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Product Attac…

Dvankooten · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4561Medium6.4—2026-08-22The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields (e.g., 'text_subscribed', 'text_error') in all versions up to, and including, 4.12.0 due to…

Eclipse Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-92877———2026-10-12The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution.

Erweixin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53530———2026-08-21RaTeX is a KaTeX-compatible math rendering engine written in Rust.

Etruel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19883High8.8—2026-08-22The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to…

Exponent · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108900High7.3—2026-10-12A vulnerability has been found in Exponent CMS up to 3.0.2patch2.

Expresstech · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107862Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2…

Extend Themes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78268High7.5—2026-08-24Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

Facebookresearch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68508High7.8—2026-08-21Hydra is a framework for elegantly configuring complex applications.

Fasterxml · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77310Medium5.3—2026-08-24jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

Faveo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78434Medium6.5—2026-08-24A flaw has been found in Faveo Helpdesk up to 2.0.3.

Filamentphp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77567High8.1—2026-08-24Filament is a collection of full-stack components for accelerated Laravel development.

Fire-boltt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109570Medium4.3—2026-10-12Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic.

Flairnlp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76843High7.8—2026-08-24The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model fi…

Flock · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109080Medium6.5—2026-10-12SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value.

Franky · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28162High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions.

Geovision Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107437Medium6.2—2026-10-12GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component.

Get-convex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-97691Medium4.3—2026-10-12Convex is an open-source reactive database for application developers.

Getkirby · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108924Medium4.3—2026-10-12A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3.

Ghostmanager · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78203High7.1—2026-08-24Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports.

Gin-quin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2021-48012High8.2—2026-10-12fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing __proto__, constructor or prototype key segments.

Gleam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-103061———2026-10-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a pro…

Gnu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77219High7.1—2026-08-21GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index.

Gohugo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10618Medium5.4—2026-08-24Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them.

Gohugoio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10582High7.4—2026-08-24Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone.

Goodlayers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28166High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

Google Cloud · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12710———2026-08-22A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data.

Grafana · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17033Medium6.8—2026-08-24An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL.

Gruntwork-io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45099———2026-08-21Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale.

Gumlet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109398High7.5—2026-10-12Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits.

H2o · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45271Medium5.5—2026-08-21Picotls is a TLS protocol library that allows users select different crypto backends based on their use case.

Handlebars-lang · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-106445———2026-10-06Handlebars provides the power necessary to let users build semantic templates.

Haproxy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109575Critical9.8—2026-10-12In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types.

Hashicorp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5006Medium6.8—2026-08-24A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths.

Hashthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78280Medium4.3—2026-08-24Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.

Hepta Platforms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78213High8.7—2026-08-24Heptabase developed by Hepta Platforms, Inc.

Heymrun · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109362Medium5.4—2026-10-12Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal.

Hieventsdev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76838High8.5—2026-08-24Hi.Events validates a webhook destination only when it is registered, never when it is used.

Holoviz · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-58389Medium6.1—2026-10-12HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter.

Hookandhook · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10630Medium4.3—2026-08-25The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' para…

Horde · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65053Medium6.1—2026-08-24Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it.

Hp Inc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12556———2026-08-24Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.

Humansignal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76073High8.8—2026-08-24Label Studio does not scope the annotation detail endpoint to the requesting user's organization.

Idrix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108982———2026-10-12VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.

Igor Funa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107864Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18.

Infused Addons · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19892High8.8—2026-08-25The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17.

Inisev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66623High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions.

Jackq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108799High7.3—2026-10-12A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.

Jeemok · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57998High7.8—2026-08-22better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then pass…

Jegstudio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19943Medium6.4—2026-08-25The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titleTag' Block Attribute in all versions up to, and including, 4.0.2 due to insufficient input sanitizati…

Joomgalleryfriends.net · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66916———2026-08-22Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view.

Karuppiah7890 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2020-37279High8.1—2026-10-12easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, destination path, or maxHeap option.

Kedacore · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53572Medium5.9—2026-08-21KEDA is a Kubernetes-based Event Driven Autoscaling component.

Kepano · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61824High8.2—2026-08-21Defuddle cleans up HTML pages.

Keystonejs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63421High7.5—2026-08-21Keystone is a content management system for Node.js.

Kite-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53487Medium4.3—2026-08-21Kite is a Kubernetes dashboard.

Konami · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19874Critical9.1—2026-08-24A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players.

Kong · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-1907———2026-10-12A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode.

Kornelski · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-93748High7.5—2026-09-18http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users.

Lavalite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108951Medium6.5—2026-10-12LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow() check.

Le-yan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78685High8.8—2026-08-25Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability.

Leanprover · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72711Medium6.3—2026-08-24The Lean 4 kernel does not check that the body of an opaque declaration is closed.

Leapworx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108482Medium6.5—2026-10-12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: fro…

Learnhouse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109564Low3.1—2026-10-12LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by get_playground.

Lepture · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76098High7.5—2026-08-24Mistune is a Python Markdown parser with renderers and plugins.

Libp2p · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77384High7.5—2026-08-24libp2p is a JavaScript implementation of the libp2p networking stack.

Libvnc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50538High8.8—2026-08-21LibVNCClient is a library for easy implementation of a VNC client.

Linux · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-98385———2026-10-12In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched_cache_stat lives in the mm str…

Liquid Web / Stellarwp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66599High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

Lukejacksonn · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2021-48011High7.5—2026-10-12Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments.

Maartenbelmans · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-2996High7.5—2026-08-22The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21.

Magepeople Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78258Medium5.3—2026-08-24Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.

Mailgun · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78003Critical9.8—2026-08-22The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0.

Manageiq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52903High8.8—2026-10-12A deserialization of untrusted data vulnerability was found in ManageIQ.

Marc4 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16149High8.8—2026-08-23The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4.

Marceauka · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109568High7.1—2026-10-12Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks.

Mher · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2022-51020Medium5.9—2026-10-12Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite.

Michaelrsweet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77220Medium6.5—2026-08-21PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value.

Microchip · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18349———2026-08-24Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.

Micromatch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-93687High7.5—2026-09-18braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards.

Mikrotik · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-103903High8.8—2026-10-12An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy…

Miniflux · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55185———2026-08-21Miniflux 2 is an open source feed reader.

Miniorange.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77995———2026-08-24Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes <…

Mra13 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78282High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.

Mvpthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66648Critical9.8—2026-08-24Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.

Nektos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76847High8.8—2026-08-24act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4.

Neo4j · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-92681———2026-10-12In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher.

Netease · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109424Medium5.9—2026-10-12NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB ke…

Netherman · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53997High7.4—2026-10-12Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in its password-recovery flow at the POST /password/create-access and POST /password/email endpoints, allowing unauthentica…

Netis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108898Low3.5—2026-10-12A vulnerability was detected in Netis WF2409E 3.3.42541.

Netis Systems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76071Critical9.8—2026-08-24Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod a…
CVESeverityCVSSKEVPublishedSummary
CVE-2026-96515———2026-09-24This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality.

Netty · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76816Low3.5—2026-08-24Netty is an asynchronous, event-driven network application framework.

Network Optix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78414High8.0—2026-08-24Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticate…

Nezhahq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62283Critical9.9—2026-08-21Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.

Nicmx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53499———2026-08-21FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data.

Notification Master · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28153High7.5—2026-08-24Unauthenticated Broken Access Control in Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More <= 1.7.1 versions.

Nous Ouvert Utile Et Simple · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107427Medium6.5—2026-10-12Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1…

Ondata · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53509Medium5.7—2026-08-21CKAN MCP Server is a tool for querying CKAN open data portals.

Ongres · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78155Critical9.9—2026-08-23privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

Open-telemetry · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45404———2026-08-24OpenTelemetry-Go is the Go implementation of OpenTelemetry.

Openlistteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-102663Medium4.3—2026-10-12OpenList is a file list program that supports multiple storage backends.

Opensource-socialnetwork · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108950Medium5.3—2026-10-12Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover.

Openwrt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62381Medium6.6—2026-08-22luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key.

Pelioniot · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2020-37280High7.5—2026-10-12cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input.

Perber · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53528High8.8—2026-08-21LeafWiki is a self-hosted wiki.

Pglombardo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62382———2026-08-22PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic.

Phalcon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59989———2026-08-21Phalcon is a high-performance, full-stack PHP framework.

Phpcsstandards · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65954High8.6—2026-10-12PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer.

Pimcore · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109392Medium5.4—2026-10-12Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage fields.

Pixelite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-42689Low3.7—2026-10-12Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7.

Pixelyoursite Professional · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32556High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.

Pluggabl Llc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2023-25996Medium6.5—2026-10-12Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC.

Postgresql · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109448Medium5.9—2026-10-12Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory.

Prasathmani · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108801Medium6.3—2026-10-12A security flaw has been discovered in prasathmani TinyFileManager up to 2.6.

Properfraction · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3424Medium5.3—2026-08-22The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3.

Provectus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78166Medium6.3—2026-08-24A security flaw has been discovered in provectus kafka-ui up to 0.7.2.

Prvtpro · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108783High7.3—2026-10-12A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2.

Puemos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76876Medium5.9—2026-08-21Craftplan before 0.5.1 contains a broken access control vulnerability that allows unauthenticated attackers to read sensitive credentials by exploiting an unconditional authorization policy on the Settings resource.

Quarkus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12894High8.8—2026-08-31A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails.

Ractivejs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78181High7.3—2026-08-24A weakness has been identified in ractivejs ractive up to 1.4.4.

Radiustheme, Llc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32477High8.6—2026-08-24Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

Rdfjs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109563High7.5—2026-10-12N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs.

Redefiningtheweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32558Critical9.8—2026-08-24Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.

Rexrainbow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78179Medium6.3—2026-08-24A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17.

Rocketchat · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75575Medium5.3—2026-08-25Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes.

Rocketgeek · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61994Medium5.4—2026-10-12Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7.

Royalnavneet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-105059Medium6.5—2026-10-06Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress…

Rt-thread · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108952Medium4.6—2026-10-12RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable().

Ruben Garcia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78266Medium6.5—2026-08-24Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.

Runatlantis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64679High8.1—2026-08-21Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks.

Rvc-boss · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-71429Critical9.8—2026-10-12GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths.

Sahlberg · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108985High7.1—2026-10-12ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array().

Sakura Editor Development Community · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59561High7.8—2026-08-24Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability.

Sap_se · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66766High7.5—2026-08-25SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability.

Sbabic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109399High8.1—2026-10-12SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building.

Semtech · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6232———2026-10-12An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past…

Shenzhen Gongji Technology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78182High7.3—2026-08-24A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300.

Shenzhen Hcc Technology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108901Low3.5—2026-10-12A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N.

Site Building With Toolset · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78264High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.

Smart Media4u Technology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108897Medium5.3—2026-10-12A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android.

Snapotter-hq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109562Medium5.4—2026-10-12SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks.

Spip · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109378Medium4.3—2026-10-12SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with valider_url_distante().

Spring · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59295Medium5.9—2026-08-24It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak.

Square · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109391High8.1—2026-10-12Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolication endpoint.

Stylemix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78284High8.6—2026-08-24Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.

Sworddut · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78430Medium5.3—2026-08-24A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1.

Systerel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78049Low3.7—2026-08-22A vulnerability has been found in Systerel S2OPC up to 1.7.3.

Tammersoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78269Medium6.4—2026-08-24Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.

Tanstack · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78177Medium4.5—2026-08-24A vulnerability was found in TanStack devtools-vite 0.7.0.

Tecnativa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78122High7.4—2026-08-22docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set.

Tencent · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108821Medium6.3—2026-10-12A security vulnerability has been detected in Tencent WeKnora up to 0.8.1.

Th0rgal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109569High8.8—2026-10-12sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root.

The-40-thieves · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77364Medium6.5—2026-10-12obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

Thembay · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66610High7.1—2026-08-24Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

Theme-rex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66650Critical9.8—2026-08-24Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.

Themegrill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78290Medium6.5—2026-08-24Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.

Themeisle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-97302Medium5.3—2026-09-30Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.

Themifyme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75027Medium5.3—2026-08-22The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.0.

Thimpress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75982Medium4.4—2026-08-25The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpress_create_page AJAX action.

Thirty Bees · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109394High7.4—2026-10-12Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens.

Tink-crypto · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109425Medium5.3—2026-10-12Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate() step before constructing a keyset.Handle, allowing malforme…

Tobychui · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108899High7.3—2026-10-12A flaw has been found in tobychui zoraxy up to 3.3.4.

Tophive · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32559Critical9.9—2026-08-24Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

Trilbymedia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109318High8.8—2026-10-12Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields.

Tsi-coop · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108810Medium5.3—2026-10-12A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2.

Turboderp-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84286———2026-10-12ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds.

Unitedover, Llc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28165Critical9.8—2026-08-24Unauthenticated Privilege Escalation in Digits <= 9.2 versions.

Vanquish · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28171High8.6—2026-08-24Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.

Vercel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109375Medium6.1—2026-10-12Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs.

Vllm-project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109311Medium6.5—2026-10-12vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow.

Voxel51 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53656Medium6.3—2026-08-21FiftyOne is an open-source platform for refining high-quality datasets and visual AI models.

Wagtail · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55468Medium4.3—2026-08-24Wagtail is an open source content management system built on Django.

Warmcat · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78161High7.3—2026-08-24A vulnerability was found in warmcat libwebsockets 4.5.0.

Wbw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32554Critical9.3—2026-08-24Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

Webful Creations · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78291Medium5.3—2026-08-24Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

Webpack · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76844High7.4—2026-08-24zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer.

Webtoffee · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18027Medium6.5—2026-08-23The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the get_image_src_in_base64 function.

Wedevs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78262Critical9.8—2026-08-24Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.

Wedevs Pte. Ltd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32478High8.5—2026-08-24Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

Weebzone · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109426High7.5—2026-10-12Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only…

Westguard · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4703Critical9.8—2026-08-22The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-78259High7.3—2026-08-24Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

Wp User Manager · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-107423Medium4.3—2026-10-12Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22.

Wpcafe · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66587Critical9.8—2026-08-24Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

Wpchill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4559Medium6.4—2026-08-22The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output e…

Wpdevteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19801Medium4.3—2026-08-25The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0.

Wpmu Dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-108486Medium5.3—2026-10-12Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0.

Wpsoul · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5093Medium4.3—2026-08-22The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9.

Zenitram · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-43980Medium6.3—2026-08-21Malla is a web analyzer for Meshtastic networks based on MQTT data.

Zofe · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-109566Critical9.8—2026-10-12Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin.