| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-102255 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2025-70518 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2026-76482 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License | CRITICAL | 10.0 | NVD | 2026-10-07 |
| CVE-2026-12260 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST paramete | CRITICAL | 10.0 | NVD | 2026-10-08 |
| CVE-2026-96207 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a | CRITICAL | 10.0 | NVD | 2026-10-08 |
| CVE-2026-94503 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a W | CRITICAL | 10.0 | NVD | 2026-10-09 |
| CVE-2026-42696 | Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Mi | CRITICAL | 10.0 | NVD | 2026-10-10 |
| CVE-2026-108576 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the compon | CRITICAL | 10.0 | NVD | 2026-10-11 |
| CVE-2026-89111 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-97229 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 1 | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-65162 | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2024-34323 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogi | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-55675 | The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-94603 | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carr | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-103849 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-110130 | Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-48382 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-48383 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-90532 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-105899 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrar | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-106622 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-106624 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i | CRITICAL | 10.0 | NVD | 2026-10-13 |
| CVE-2026-61447 | PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets | CRITICAL | 10.0 | GitHub | 2026-10-08 |
| CVE-2026-105857 | Payload Form Builder has an RCE issue | CRITICAL | 10.0 | GitHub | 2026-10-07 |
| CVE-2026-93605 | vm2 contains a sandbox escape vulnerability | CRITICAL | 10.0 | GitHub | 2026-10-07 |
| CVE-2026-96207 | Microsoft Partner Center Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-62874 | Azure Billing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69399 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69843 | Microsoft Fabric Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-69865 | Microsoft Container Registry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-70200 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-83944 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-85889 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65801 | Microsoft Exchange Online Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |