CVE-2026-108864 | Medium | 4.2 | 2026-10-11 | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applicatio… |
CVE-2026-108862 | Medium | 5.3 | 2026-10-11 | APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials b… |
CVE-2026-108861 | Medium | 4.3 | 2026-10-11 | Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_met… |
CVE-2026-108858 | Medium | 5.5 | 2026-10-11 | Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bo… |
CVE-2026-108856 | Medium | 4.2 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers v… |
CVE-2026-108855 | Medium | 5.4 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbit… |
CVE-2026-108854 | Medium | 5.4 | 2026-10-11 | Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys… |
CVE-2026-108852 | Medium | 4.7 | 2026-10-11 | Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disa… |
CVE-2026-108850 | Medium | 5.3 | 2026-10-11 | Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by… |
CVE-2026-108839 | Medium | 4.2 | 2026-10-11 | thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside th… |
CVE-2026-108699 | Medium | 6.5 | 2026-10-11 | hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_ve… |
CVE-2026-108698 | Medium | 6.5 | 2026-10-11 | hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separate… |
CVE-2026-108697 | Medium | 4.3 | 2026-10-11 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources becau… |
CVE-2026-108759 | Medium | 6.8 | 2026-10-11 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outs… |
CVE-2026-108757 | Medium | 6.5 | 2026-10-11 | Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check… |
CVE-2026-108756 | Medium | 5.4 | 2026-10-11 | Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-on… |
CVE-2026-108755 | Medium | 5.3 | 2026-10-11 | Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS in… |
CVE-2026-108752 | Medium | 4.2 | 2026-10-11 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client b… |
CVE-2026-108751 | Medium | 4.4 | 2026-10-11 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite fi… |
CVE-2026-108750 | Medium | 4.3 | 2026-10-11 | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office d… |
CVE-2026-108748 | Medium | 5.3 | 2026-10-11 | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows una… |
CVE-2026-108747 | Medium | 4.2 | 2026-10-11 | Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access… |
CVE-2026-108742 | Medium | 4.3 | 2026-10-11 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members per… |
CVE-2026-108738 | Medium | 4.2 | 2026-10-11 | Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because t… |
CVE-2026-108737 | Medium | 6.8 | 2026-10-11 | Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because Toke… |
CVE-2026-108735 | Medium | 4.3 | 2026-10-11 | Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed… |
CVE-2026-108734 | Medium | 4.3 | 2026-10-11 | Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated users to r… |
CVE-2026-108733 | Medium | 4.3 | 2026-10-11 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted expire… |
CVE-2026-108732 | Medium | 4.3 | 2026-10-11 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get_ac… |
CVE-2026-108731 | Medium | 5.4 | 2026-10-11 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the… |
CVE-2026-108730 | Medium | 4.3 | 2026-10-11 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership che… |
CVE-2026-108729 | Medium | 5.9 | 2026-10-11 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unauthenticated attackers to download p… |
CVE-2026-108728 | Medium | 6.5 | 2026-10-11 | Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container… |
CVE-2026-108727 | Medium | 4.3 | 2026-10-11 | EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass… |
CVE-2026-108726 | Medium | 4.3 | 2026-10-11 | GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cann… |
CVE-2026-108725 | Medium | 5.4 | 2026-10-11 | Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML f… |
CVE-2026-108724 | Medium | 5.3 | 2026-10-11 | Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmoderated and rejected product reviews beca… |
CVE-2026-108722 | Medium | 4.2 | 2026-10-11 | open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which wri… |
CVE-2026-108721 | Medium | 5.3 | 2026-10-11 | Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-mana… |
CVE-2026-108720 | Medium | 4.3 | 2026-10-11 | phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses bec… |
CVE-2026-108719 | Medium | 5.0 | 2026-10-11 | LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generati… |
CVE-2026-108717 | Medium | 6.3 | 2026-10-11 | Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass prof… |
CVE-2026-108716 | Medium | 5.3 | 2026-10-11 | mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens withou… |
CVE-2026-108715 | Medium | 4.3 | 2026-10-11 | LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instea… |
CVE-2026-108713 | Medium | 4.3 | 2026-10-11 | SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketi… |
CVE-2026-108712 | Medium | 4.3 | 2026-10-11 | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users t… |
CVE-2026-108711 | Medium | 4.3 | 2026-10-11 | Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data… |
CVE-2026-108710 | Medium | 6.5 | 2026-10-11 | NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb… |
CVE-2026-108584 | Medium | 5.3 | 2026-10-11 | A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performin… |
CVE-2026-108578 | Medium | 5.3 | 2026-10-11 | A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such m… |
CVE-2026-108577 | Medium | 4.3 | 2026-10-11 | A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of… |
CVE-2026-108681 | Medium | 4.3 | 2026-10-11 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component W… |
CVE-2026-108575 | Medium | 6.3 | 2026-10-11 | A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secre… |
CVE-2026-108574 | Medium | 4.3 | 2026-10-11 | A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracki… |
CVE-2026-108573 | Medium | 5.5 | 2026-10-11 | A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of th… |
CVE-2026-108572 | Medium | 4.3 | 2026-10-11 | A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the c… |
CVE-2026-108570 | Medium | 6.3 | 2026-10-11 | A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engin… |
CVE-2026-108569 | Medium | 6.3 | 2026-10-11 | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templa… |
CVE-2026-108568 | Medium | 4.3 | 2026-10-11 | A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billi… |
CVE-2026-108567 | Medium | 4.3 | 2026-10-11 | A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file system/fields/image.php of the component Im… |
CVE-2026-108544 | Medium | 6.3 | 2026-10-11 | A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.re… |
CVE-2026-108543 | Medium | 6.3 | 2026-10-11 | A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulatio… |
CVE-2026-108542 | Medium | 6.3 | 2026-10-11 | A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the compo… |
CVE-2026-97183 | Medium | 4.3 | 2026-10-11 | The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated user, such as a S… |
CVE-2026-94235 | Medium | 4.3 | 2026-10-11 | The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, allowing any authenticated user, such a… |
CVE-2026-93550 | Medium | 4.3 | 2026-10-11 | The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installation process or validate the URL it is giv… |
CVE-2026-89305 | Medium | 6.5 | 2026-10-11 | The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to… |
CVE-2026-89304 | Medium | 6.5 | 2026-10-11 | The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to… |
CVE-2026-88785 | Medium | 4.7 | 2026-10-11 | The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an op… |
CVE-2026-81156 | Medium | 6.8 | 2026-10-11 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, al… |
CVE-2026-81155 | Medium | 6.8 | 2026-10-11 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the… |
CVE-2026-81154 | Medium | 6.8 | 2026-10-11 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users… |
CVE-2026-81153 | Medium | 6.8 | 2026-10-11 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing user… |
CVE-2026-12980 | Medium | 6.8 | 2026-10-11 | The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users wit… |
CVE-2026-108541 | Medium | 6.3 | 2026-10-11 | A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. Th… |
CVE-2026-108539 | Medium | 6.3 | 2026-10-11 | A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Perform… |
CVE-2026-108538 | Medium | 6.3 | 2026-10-11 | A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component M… |
CVE-2026-108523 | Medium | 4.3 | 2026-10-11 | A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git… |
CVE-2026-108521 | Medium | 4.7 | 2026-10-11 | A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/vali… |
CVE-2026-108706 | Medium | 4.3 | 2026-10-11 | eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve s… |
CVE-2026-108705 | Medium | 4.3 | 2026-10-11 | CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint that allows authenticated users to import… |
CVE-2026-108704 | Medium | 4.3 | 2026-10-11 | CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to skip permission checks by setting the… |
CVE-2026-108703 | Medium | 5.4 | 2026-10-11 | CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authenticated users to submit any resource f… |
CVE-2026-108702 | Medium | 4.3 | 2026-10-11 | 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger ser… |
CVE-2026-108701 | Medium | 4.3 | 2026-10-11 | 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule handler for POST /contract/sort, which la… |
CVE-2026-108700 | Medium | 6.5 | 2026-10-11 | 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list business titles by calling POST /field… |
CVE-2026-108696 | Medium | 4.3 | 2026-10-11 | CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated customers to act on other customers' ord… |
CVE-2026-108694 | Medium | 6.5 | 2026-10-11 | ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts inv… |
CVE-2026-108692 | Medium | 6.5 | 2026-10-11 | 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints… |
CVE-2026-108691 | Medium | 5.4 | 2026-10-11 | mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through… |
CVE-2026-108690 | Medium | 4.3 | 2026-10-11 | mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items due to an operator p… |
CVE-2026-108689 | Medium | 5.4 | 2026-10-11 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by sup… |
CVE-2026-108688 | Medium | 4.3 | 2026-10-11 | Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated… |
CVE-2026-108680 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/a… |
CVE-2026-108679 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated… |
CVE-2026-108678 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read… |
CVE-2026-108677 | Medium | 6.5 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve… |
CVE-2026-108676 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows low-privileged authen… |
CVE-2026-108675 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authentica… |
CVE-2026-108674 | Medium | 4.3 | 2026-10-10 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that allows low-privileged authenticated user… |