| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-78162 | Deserialization of Untrusted Data vulnerability in Apache Camel.
This issue affects Apache Camel: from 4.0.0 before 4 | CRITICAL | 10.0 | NVD | 2026-10-19 |
| CVE-2026-111057 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, | CRITICAL | 10.0 | NVD | 2026-10-19 |
| CVE-2026-101809 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported v | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-81212 | IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Red | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-87337 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-91216 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-91221 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-91231 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions tha | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-91299 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator | CRITICAL | 10.0 | NVD | 2026-10-20 |
| CVE-2026-111832 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web | CRITICAL | 10.0 | NVD | 2026-10-21 |
| CVE-2026-105944 | Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, | CRITICAL | 10.0 | NVD | 2026-10-21 |
| CVE-2026-111813 | Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments | CRITICAL | 10.0 | NVD | 2026-10-21 |
| CVE-2026-110264 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-102785 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s pu | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79844 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79846 | Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote at | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79847 | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79848 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injecti | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79849 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injecti | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79850 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing aut | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-79851 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-110063 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-83938 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-97785 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. | CRITICAL | 10.0 | NVD | 2026-10-22 |
| CVE-2026-110063 | VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-83938 | Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-96207 | Microsoft Partner Center Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-97785 | AAD App Proxy Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-94603 | Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation | CRITICAL | 10.0 | Microsoft | 2026-10-13 |
| CVE-2026-32169 | Azure Cloud Shell Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-03-10 |
| CVE-2017-20230 | Storable versions before 3.05 for Perl has a stack overflow | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32186 | Microsoft Bing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32213 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33105 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33107 | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33819 | Microsoft Bing Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-35431 | Microsoft Entra ID Entitlement Management Spoofing Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2025-32433 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE | CRITICAL | 10.0 | Microsoft | 2025-04-08 |
| CVE-2025-53767 | Azure OpenAI Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-08-12 |
| CVE-2022-49043 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. | CRITICAL | 10.0 | Microsoft | 2025-01-14 |