| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-100103 | Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented de | CRITICAL | 10.0 | NVD | 2026-10-05 |
| CVE-2026-105484 | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the functio | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-32579 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-39770 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-39773 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-63688 | Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-63692 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-105857 | Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-106102 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getH | CRITICAL | 10.0 | NVD | 2026-10-06 |
| CVE-2026-102255 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2025-70518 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2026-76482 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2026-12260 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST paramete | CRITICAL | 10.0 | NVD | 2026-10-08 |
| CVE-2026-96207 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a | CRITICAL | 10.0 | NVD | 2026-10-08 |
| CVE-2026-94503 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a W | CRITICAL | 10.0 | NVD | 2026-10-09 |
| CVE-2026-42696 | Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions. | CRITICAL | 10.0 | NVD | 2026-10-10 |
| CVE-2026-108576 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the compon | CRITICAL | 10.0 | NVD | 2026-10-11 |
| CVE-2026-61447 | PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets | CRITICAL | 10.0 | GitHub | 2026-10-08 |
| CVE-2026-105857 | Payload Form Builder has an RCE issue | CRITICAL | 10.0 | GitHub | 2026-10-07 |
| CVE-2026-93605 | vm2 contains a sandbox escape vulnerability | CRITICAL | 10.0 | GitHub | 2026-10-07 |
| CVE-2025-32433 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE | CRITICAL | 10.0 | Microsoft | 2025-04-08 |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2026-48567 | Azure HorizonDB Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2017-20230 | Storable versions before 3.05 for Perl has a stack overflow | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32186 | Microsoft Bing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32213 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33105 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33107 | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33819 | Microsoft Bing Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-35431 | Microsoft Entra ID Entitlement Management Spoofing Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32169 | Azure Cloud Shell Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-03-10 |
| CVE-2026-96207 | Microsoft Partner Center Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-02 |
| CVE-2026-62874 | Azure Billing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69399 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69843 | Microsoft Fabric Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69865 | Microsoft Container Registry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-70200 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-83944 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |