CVE-2026-108905 | High | 7.5 | 2026-10-11 | pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass… |
CVE-2026-108904 | Medium | 6.5 | 2026-10-11 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data becau… |
CVE-2026-108903 | Medium | 5.3 | 2026-10-11 | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by suppl… |
CVE-2026-108902 | High | 8.1 | 2026-10-11 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated m… |
CVE-2026-108684 | Medium | 6.3 | 2026-10-11 | A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFor… |
CVE-2026-108891 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated use… |
CVE-2026-108888 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated user to e… |
CVE-2026-108887 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated user to expo… |
CVE-2026-108886 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername handler that allows any authenticated u… |
CVE-2026-108885 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated user… |
CVE-2026-108884 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to… |
CVE-2026-108883 | Medium | 6.5 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-par… |
CVE-2026-108882 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition handler that allows any authenticated us… |
CVE-2026-108881 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any authenticated user to read other tenant… |
CVE-2026-108880 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated user to m… |
CVE-2026-108879 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read other user… |
CVE-2026-108878 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated use… |
CVE-2026-108877 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authenticated user to delete AI prompt templat… |
CVE-2026-108876 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to ca… |
CVE-2026-108875 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated user to m… |
CVE-2026-108874 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /… |
CVE-2026-108873 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /… |
CVE-2026-108872 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any authenticated user to… |
CVE-2026-108871 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleController that lets low-privileged authenti… |
CVE-2026-108870 | Medium | 5.4 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated u… |
CVE-2026-108869 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by calling P… |
CVE-2026-108868 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements via POST /s… |
CVE-2026-108867 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById handler that allows any authenticated user… |
CVE-2026-108866 | Medium | 4.3 | 2026-10-11 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any account's permissions via the queryUserAuths… |
CVE-2026-108683 | Medium | 4.3 | 2026-10-11 | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handle… |
CVE-2026-108865 | High | 8.2 | 2026-10-11 | AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAu… |
CVE-2026-108864 | Medium | 4.2 | 2026-10-11 | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applicatio… |
CVE-2026-108863 | High | 7.5 | 2026-10-11 | Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface… |
CVE-2026-108862 | Medium | 5.3 | 2026-10-11 | APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials b… |
CVE-2026-108861 | Medium | 4.3 | 2026-10-11 | Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_met… |
CVE-2026-108860 | Critical | 9.1 | 2026-10-11 | BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded… |
CVE-2026-108859 | High | 7.5 | 2026-10-11 | mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memor… |
CVE-2026-108858 | Medium | 5.5 | 2026-10-11 | Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bo… |
CVE-2026-108857 | Low | 3.3 | 2026-10-11 | Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because the router's Args s… |
CVE-2026-108856 | Medium | 4.2 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers v… |
CVE-2026-108855 | Medium | 5.4 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbit… |
CVE-2026-108854 | Medium | 5.4 | 2026-10-11 | Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys… |
CVE-2026-108853 | High | 8.1 | 2026-10-11 | UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants'… |
CVE-2026-108852 | Medium | 4.7 | 2026-10-11 | Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disa… |
CVE-2026-108851 | Low | 3.3 | 2026-10-11 | phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read restricted FAQs becaus… |
CVE-2026-108850 | Medium | 5.3 | 2026-10-11 | Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by… |
CVE-2026-108839 | Medium | 4.2 | 2026-10-11 | thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside th… |
CVE-2026-108699 | Medium | 6.5 | 2026-10-11 | hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_ve… |
CVE-2026-108698 | Medium | 6.5 | 2026-10-11 | hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separate… |
CVE-2026-108697 | Medium | 4.3 | 2026-10-11 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources becau… |
CVE-2026-108681 | Medium | 4.3 | 2026-10-11 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component W… |
CVE-2026-108682 | Medium | 5.4 | 2026-10-11 | A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. Th… |
CVE-2026-108760 | High | 7.6 | 2026-10-11 | LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI si… |
CVE-2026-108759 | Medium | 6.8 | 2026-10-11 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outs… |
CVE-2026-108758 | High | 8.2 | 2026-10-11 | Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::register() that allows unauthenticated attackers to modify any appoi… |
CVE-2026-108757 | Medium | 6.5 | 2026-10-11 | Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check… |
CVE-2026-108756 | Medium | 5.4 | 2026-10-11 | Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-on… |
CVE-2026-108755 | Medium | 5.3 | 2026-10-11 | Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS in… |
CVE-2026-108754 | Low | 3.3 | 2026-10-11 | GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query strin… |
CVE-2026-108753 | Critical | 9.4 | 2026-10-11 | Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public J… |
CVE-2026-108752 | Medium | 4.2 | 2026-10-11 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client b… |
CVE-2026-108751 | Medium | 4.4 | 2026-10-11 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite fi… |
CVE-2026-108750 | Medium | 4.3 | 2026-10-11 | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office d… |
CVE-2026-108749 | Low | 3.7 | 2026-10-11 | docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/me… |
CVE-2026-108748 | Medium | 5.3 | 2026-10-11 | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows una… |
CVE-2026-108747 | Medium | 4.2 | 2026-10-11 | Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access… |
CVE-2026-108746 | High | 8.8 | 2026-10-11 | Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege l… |
CVE-2026-108745 | Low | 3.1 | 2026-10-11 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB ex… |
CVE-2026-108744 | High | 7.0 | 2026-10-11 | pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pbip paths to cmd /c start when reopening… |
CVE-2026-108742 | Medium | 4.3 | 2026-10-11 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members per… |
CVE-2026-108741 | Low | 3.1 | 2026-10-11 | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a… |
CVE-2026-108740 | High | 8.3 | 2026-10-11 | GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify prote… |
CVE-2026-108739 | High | 7.5 | 2026-10-11 | OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all worksp… |
CVE-2026-108738 | Medium | 4.2 | 2026-10-11 | Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because t… |
CVE-2026-108737 | Medium | 6.8 | 2026-10-11 | Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because Toke… |
CVE-2026-108736 | Low | 3.7 | 2026-10-11 | Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus… |
CVE-2026-108735 | Medium | 4.3 | 2026-10-11 | Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed… |
CVE-2026-108734 | Medium | 4.3 | 2026-10-11 | Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated users to r… |
CVE-2026-108733 | Medium | 4.3 | 2026-10-11 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted expire… |
CVE-2026-108732 | Medium | 4.3 | 2026-10-11 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get_ac… |
CVE-2026-108731 | Medium | 5.4 | 2026-10-11 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the… |
CVE-2026-108730 | Medium | 4.3 | 2026-10-11 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership che… |
CVE-2026-108729 | Medium | 5.9 | 2026-10-11 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unauthenticated attackers to download p… |
CVE-2026-108728 | Medium | 6.5 | 2026-10-11 | Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container… |
CVE-2026-108727 | Medium | 4.3 | 2026-10-11 | EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass… |
CVE-2026-108726 | Medium | 4.3 | 2026-10-11 | GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cann… |
CVE-2026-108725 | Medium | 5.4 | 2026-10-11 | Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML f… |
CVE-2026-108724 | Medium | 5.3 | 2026-10-11 | Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmoderated and rejected product reviews beca… |
CVE-2026-108723 | Low | 2.5 | 2026-10-11 | answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text with… |
CVE-2026-108722 | Medium | 4.2 | 2026-10-11 | open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which wri… |
CVE-2026-108721 | Medium | 5.3 | 2026-10-11 | Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-mana… |
CVE-2026-108720 | Medium | 4.3 | 2026-10-11 | phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses bec… |
CVE-2026-108719 | Medium | 5.0 | 2026-10-11 | LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generati… |
CVE-2026-108718 | High | 8.1 | 2026-10-11 | Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered c… |
CVE-2026-108717 | Medium | 6.3 | 2026-10-11 | Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass prof… |
CVE-2026-108716 | Medium | 5.3 | 2026-10-11 | mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens withou… |
CVE-2026-108715 | Medium | 4.3 | 2026-10-11 | LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instea… |
CVE-2026-108714 | High | 7.5 | 2026-10-11 | MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application… |
CVE-2026-108713 | Medium | 4.3 | 2026-10-11 | SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketi… |
CVE-2026-108712 | Medium | 4.3 | 2026-10-11 | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users t… |