← Back to feed Patch nowZero-days

📅 New This Week

Vulnerabilities published in the last 7 days (2026-10-26 → 2026-11-02). Updated every 4 hours.

3822
Total new CVEs
269
Critical
1085
High
7
Actively exploited
4
Public PoC
CVE / IDTitleSeverityCVSSEPSSWhy urgentSourceDate
CVE-2026-93680IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authCRITICAL9.882%PoC EPSS 82%ileNVD2026-10-29
CVE-2026-120195A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the functCRITICAL9.381%EPSS 81%ileNVD2026-11-01
CVE-2026-120198A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the fCRITICAL9.381%EPSS 81%ileNVD2026-11-01
CVE-2026-90868An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on WindCRITICAL9.974%EPSS 74%ileNVD2026-10-29
CVE-2026-97854Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. ArbitraCRITICAL9.372%EPSS 72%ileNVD2026-10-29
CVE-2025-31704A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafCRITICAL9.872%EPSS 72%ileNVD2026-10-30
CVE-2026-120189A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of thCRITICAL9.371%EPSS 71%ileNVD2026-11-01
CVE-2026-112352Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attCRITICAL9.171%EPSS 71%ileNVD2026-10-27
CVE-2026-104353Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS CoCRITICAL9.970%EPSS 70%ileNVD2026-10-27
CVE-2026-110879jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its geneCRITICAL9.868%EPSS 68%ileNVD2026-10-28
CVE-2026-90865An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on WindCRITICAL9.067%EPSS 67%ileNVD2026-10-29
CVE-2026-82119OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HCRITICAL9.864%EPSS 64%ileNVD2026-10-27
CVE-2026-119706InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remotCRITICAL9.364%EPSS 64%ileNVD2026-10-30
CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionCRITICAL9.962%EPSS 62%ileGitHub2026-10-28
CVE-2026-86400Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7CRITICAL9.860%EPSS 60%ileNVD2026-10-28
CVE-2026-114278The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespaCRITICAL9.860%EPSS 60%ileNVD2026-10-28
CVE-2026-35002Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`CRITICAL9.858%EPSS 58%ileGitHub2026-10-27
CVE-2026-107328IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improCRITICAL9.958%EPSS 58%ileNVD2026-10-29
CVE-2026-107329IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improCRITICAL9.958%EPSS 58%ileNVD2026-10-29
CVE-2026-103780Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7CRITICAL9.858%EPSS 58%ileNVD2026-10-28
CVE-2026-103882The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitraCRITICAL9.156%EPSS 56%ileNVD2026-10-31
CVE-2026-78845Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light BCRITICAL9.856%EPSS 56%ileNVD2026-10-27
CVE-2026-120338Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno CRITICAL10.056%EPSS 56%ileNVD2026-11-01
CVE-2026-119145Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handlCRITICAL9.455%EPSS 55%ileNVD2026-10-29
CVE-2026-61991Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.CRITICAL10.055%EPSS 55%ileNVD2026-10-29
CVE-2026-104339IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralizaCRITICAL9.855%EPSS 55%ileNVD2026-10-29
CVE-2026-115904Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.241CRITICAL9.655%EPSS 55%ileNVD2026-10-28
CVE-2026-118235The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerableCRITICAL9.855%EPSS 55%ileNVD2026-10-31
CVE-2026-90866A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows couCRITICAL9.154%EPSS 54%ileNVD2026-10-29
CVE-2026-110799Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to versionCRITICAL9.854%EPSS 54%ileNVD2026-10-30
CVE-2026-116692MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.CRITICAL9.853%EPSS 53%ileNVD2026-10-27
CVE-2026-44179XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 unCRITICAL9.953%EPSS 53%ileNVD2026-10-28
CVE-2026-118690Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackeCRITICAL9.353%EPSS 53%ileNVD2026-10-28
CVE-2026-66088In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating syCRITICAL9.453%EPSS 53%ileNVD2026-10-29
CVE-2026-117532REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin thaCRITICAL9.352%EPSS 52%ileNVD2026-10-27
CVE-2026-107327IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missiCRITICAL9.952%EPSS 52%ileNVD2026-10-29
CVE-2026-90863Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and CRITICAL9.151%EPSS 51%ileNVD2026-10-29
CVE-2026-76938Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job ManCRITICAL9.851%EPSS 51%ileNVD2026-10-27
CVE-2026-82117Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 beforeCRITICAL9.851%EPSS 51%ileNVD2026-10-27
CVE-2026-109218The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.CRITICAL9.851%EPSS 51%ileNVD2026-10-28
CVE-2026-116747Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forgeCRITICAL9.250%EPSS 50%ileNVD2026-10-26
CVE-2026-110186IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control ofCRITICAL9.850%EPSS 50%ileNVD2026-10-29
CVE-2026-103688The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its aCRITICAL9.849%EPSS 49%ileNVD2026-10-28
CVE-2026-116508A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function suCRITICAL9.349%EPSS 49%ileNVD2026-10-26
CVE-2026-82116Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from CRITICAL9.849%EPSS 49%ileNVD2026-10-27
CVE-2026-104350Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could explCRITICAL9.349%EPSS 49%ileNVD2026-10-27
CVE-2026-120201Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gaiCRITICAL9.349%EPSS 49%ileNVD2026-10-31
CVE-2026-117564nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge aCRITICAL9.349%EPSS 49%ileNVD2026-10-27
CVE-2026-118633A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM CRITICAL9.248%EPSS 48%ileNVD2026-10-28
CVE-2026-116852Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.CRITICAL9.148%EPSS 48%ileNVD2026-10-30
CVE-2026-116512The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress iCRITICAL9.848%EPSS 48%ileNVD2026-10-31
CVE-2026-109516The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account TakeoCRITICAL9.848%EPSS 48%ileNVD2026-10-29
CVE-2026-78403Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows OveCRITICAL9.348%EPSS 48%ileNVD2026-10-30
CVE-2026-118636**UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObjectCRITICAL9.847%EPSS 47%ileNVD2026-10-31
CVE-2026-58256GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an adminisCRITICAL9.147%EPSS 47%ileNVD2026-10-27
CVE-2026-104351Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability tCRITICAL9.947%EPSS 47%ileNVD2026-10-27
CVE-2026-61738SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,CRITICAL10.046%EPSS 46%ileNVD2026-10-30
CVE-2026-93857A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execCRITICAL9.246%EPSS 46%ileNVD2026-10-27
CVE-2026-119717pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute PCRITICAL9.246%EPSS 46%ileNVD2026-10-30
CVE-2026-84295Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could alloCRITICAL10.046%EPSS 46%ileNVD2026-10-29
CVE-2026-106013The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler inCRITICAL9.846%EPSS 46%ileNVD2026-10-28
CVE-2026-99153In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a RejCRITICAL9.846%EPSS 46%ileNVD2026-10-28
CVE-2026-63190FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, fCRITICAL9.446%EPSS 46%ileNVD2026-10-28
CVE-2026-120209AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens CRITICAL9.346%EPSS 46%ileNVD2026-10-31
CVE-2026-61564AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.pCRITICAL10.045%EPSS 45%ileNVD2026-10-28
CVE-2026-42922A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially CRITICAL9.845%EPSS 45%ileNVD2026-10-29
CVE-2026-120308A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path CRITICAL9.945%EPSS 45%ileNVD2026-11-01
CVE-2026-65145NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulCRITICAL10.045%EPSS 45%ileNVD2026-10-27
CVE-2026-54859Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.CRITICAL9.845%EPSS 45%ileNVD2026-10-29
CVE-2026-61567AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an aCRITICAL10.044%EPSS 44%ileNVD2026-10-28
CVE-2023-22793A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the VeeamCRITICAL9.344%EPSS 44%ileNVD2026-10-29
CVE-2026-109220The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object InjectCRITICAL9.844%EPSS 44%ileNVD2026-10-31
CVE-2026-119660MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admiCRITICAL9.344%EPSS 44%ileNVD2026-10-30
CVE-2026-105781Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL CRITICAL10.044%EPSS 44%ileNVD2026-10-27
CVE-2026-76934Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JoCRITICAL9.844%EPSS 44%ileNVD2026-10-27
CVE-2026-76939Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JobCRITICAL9.844%EPSS 44%ileNVD2026-10-27
CVE-2026-82118Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-1CRITICAL9.844%EPSS 44%ileNVD2026-10-27
CVE-2026-86574Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.CRITICAL9.844%EPSS 44%ileNVD2026-10-27
CVE-2026-105420Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripCRITICAL9.444%EPSS 44%ileNVD2026-10-28
CVE-2026-103406An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in JunipeCRITICAL9.844%EPSS 44%ileNVD2026-10-28
CVE-2026-99154In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from pCRITICAL9.844%EPSS 44%ileNVD2026-10-28
CVE-2026-61997Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.CRITICAL9.844%EPSS 44%ileNVD2026-10-29
CVE-2026-62002Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.CRITICAL9.844%EPSS 44%ileNVD2026-10-29
CVE-2026-93866An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal alCRITICAL9.244%EPSS 44%ileNVD2026-10-27
CVE-2026-103039The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2CRITICAL9.843%EPSS 43%ileNVD2026-10-30
CVE-2026-61737ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret pCRITICAL9.843%EPSS 43%ileNVD2026-10-30
CVE-2026-114595In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocatCRITICAL9.343%EPSS 43%ileNVD2026-10-27
CVE-2026-114358This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the CRITICAL9.343%EPSS 43%ileNVD2026-10-29
CVE-2026-107015Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anotCRITICAL9.143%EPSS 43%ileNVD2026-10-29
CVE-2026-107032Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an eCRITICAL9.143%EPSS 43%ileNVD2026-10-29
CVE-2026-62849ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDenginCRITICAL9.143%EPSS 43%ileNVD2026-10-30
CVE-2026-104354Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL CRITICAL9.142%EPSS 42%ileNVD2026-10-27
CVE-2026-112905Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to versionCRITICAL9.042%EPSS 42%ileNVD2026-10-30
CVE-2026-54856Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.CRITICAL9.842%EPSS 42%ileNVD2026-10-29
CVE-2026-54857Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.CRITICAL9.842%EPSS 42%ileNVD2026-10-29
CVE-2026-54858Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.CRITICAL9.842%EPSS 42%ileNVD2026-10-29
CVE-2026-54860Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.CRITICAL9.842%EPSS 42%ileNVD2026-10-29
CVE-2026-105780Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary codeCRITICAL9.942%EPSS 42%ileNVD2026-10-27
CVE-2026-107058An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another usCRITICAL9.842%EPSS 42%ileNVD2026-10-29
CVE-2026-120307The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant'sCRITICAL9.942%EPSS 42%ileNVD2026-11-01
CVE-2026-84999The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and CRITICAL9.842%EPSS 42%ileNVD2026-10-28
CVE-2026-119418CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidatCRITICAL9.241%EPSS 41%ileNVD2026-10-30
CVE-2026-90864A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows couCRITICAL9.141%EPSS 41%ileNVD2026-10-29
CVE-2026-105489Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL CRITICAL9.941%EPSS 41%ileNVD2026-10-27
CVE-2026-61998Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.CRITICAL9.841%EPSS 41%ileNVD2026-10-29
CVE-2026-62001Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.CRITICAL9.841%EPSS 41%ileNVD2026-10-29
CVE-2026-86384Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7CRITICAL9.841%EPSS 41%ileNVD2026-10-28
CVE-2026-103693The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unaCRITICAL9.041%EPSS 41%ileNVD2026-10-29
CVE-2026-119096The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and incCRITICAL9.840%EPSS 40%ileNVD2026-10-31
CVE-2026-93865A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthentiCRITICAL9.240%EPSS 40%ileNVD2026-10-27
CVE-2026-115245The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoCRITICAL9.840%EPSS 40%ileNVD2026-10-29
CVE-2026-61728SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapCRITICAL9.940%EPSS 40%ileNVD2026-10-30
CVE-2026-102649Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhooCRITICAL9.940%EPSS 40%ileNVD2026-10-26
CVE-2026-67074HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the prCRITICAL9.140%EPSS 40%ileNVD2026-10-28
CVE-2026-86577Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00CRITICAL9.440%EPSS 40%ileNVD2026-10-27
CVE-2026-76932Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JoCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-76933Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JobCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-76936Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-76937Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JoCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-82122Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-1CRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-86575Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: frCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-86576Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: froCRITICAL9.439%EPSS 39%ileNVD2026-10-27
CVE-2026-62013Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.CRITICAL9.839%EPSS 39%ileNVD2026-10-29
CVE-2026-62018Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.CRITICAL9.839%EPSS 39%ileNVD2026-10-29
CVE-2026-48360Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resulCRITICAL9.639%EPSS 39%ileNVD2026-10-27
CVE-2026-10757There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allCRITICAL9.839%EPSS 39%ileNVD2026-10-26
CVE-2026-96760Authlib: empty signatures validation in JWS JSON deserializationCRITICAL9.138%EPSS 38%ileGitHub2026-10-27
CVE-2026-103594A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attackerCRITICAL9.538%EPSS 38%ileNVD2026-10-27
CVE-2026-103093ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerCRITICAL9.437%EPSS 37%ileNVD2026-10-29
CVE-2026-119050Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitraryCRITICAL9.237%EPSS 37%ileNVD2026-10-29
CVE-2026-118264Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a clienCRITICAL9.137%EPSS 37%ileNVD2026-10-28
CVE-2026-62009Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.CRITICAL9.837%EPSS 37%ileNVD2026-10-29
CVE-2026-62014Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.CRITICAL9.837%EPSS 37%ileNVD2026-10-29
CVE-2026-112709A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or CRITICAL9.236%EPSS 36%ileNVD2026-10-27
CVE-2026-112710A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who contrCRITICAL9.236%EPSS 36%ileNVD2026-10-27
CVE-2026-114607better-auth: OAuth state can be used as a Magic Link to sign in as another userCRITICAL9.136%EPSS 36%ileGitHub2026-10-27
CVE-2026-62006Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.CRITICAL9.836%EPSS 36%ileNVD2026-10-29
CVE-2026-62008Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.CRITICAL9.836%EPSS 36%ileNVD2026-10-29
CVE-2026-62012Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.CRITICAL9.836%EPSS 36%ileNVD2026-10-29
CVE-2026-62017Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.CRITICAL9.836%EPSS 36%ileNVD2026-10-29
CVE-2026-61645Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulCRITICAL9.135%EPSS 35%ileNVD2026-10-29
CVE-2026-115968Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object InjectiCRITICAL9.835%EPSS 35%ileNVD2026-10-28
CVE-2026-119526Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects RoyCRITICAL9.835%EPSS 35%ileNVD2026-10-30
CVE-2026-39738Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object InjCRITICAL9.835%EPSS 35%ileNVD2026-10-30
CVE-2026-62853ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-sCRITICAL9.935%EPSS 35%ileNVD2026-10-30
CVE-2026-119568vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated atCRITICAL9.135%EPSS 35%ileNVD2026-10-30
CVE-2026-111732P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVenCRITICAL9.335%EPSS 35%ileNVD2026-10-29
CVE-2026-116238In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit coulCRITICAL9.235%EPSS 35%ileNVD2026-10-30
CVE-2026-18450The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to cCRITICAL9.834%EPSS 34%ileNVD2026-10-27
CVE-2026-108142A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.CRITICAL9.134%EPSS 34%ileNVD2026-10-27
CVE-2026-63377TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural languageCRITICAL9.834%EPSS 34%ileNVD2026-10-30
CVE-2026-62003Unauthenticated PHP Object Injection in Mission <= 1.22 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62004Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62005Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62010Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62011Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62015Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-62016Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.CRITICAL9.834%EPSS 34%ileNVD2026-10-29
CVE-2026-116366An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user wiCRITICAL9.534%EPSS 34%ileNVD2026-10-30
CVE-2026-107249Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allowsCRITICAL9.834%EPSS 34%ileNVD2026-10-30
CVE-2026-93327A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versioCRITICAL9.434%EPSS 34%ileNVD2026-10-30
CVE-2026-119419CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidatCRITICAL9.234%EPSS 34%ileNVD2026-10-30
CVE-2026-89270The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to auCRITICAL9.134%EPSS 34%ileNVD2026-10-31
CVE-2026-61620HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other aCRITICAL9.833%EPSS 33%ileNVD2026-10-30
CVE-2026-82104In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 thrCRITICAL9.433%EPSS 33%ileNVD2026-10-30
CVE-2026-61992Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.CRITICAL9.833%EPSS 33%ileNVD2026-10-29
CVE-2026-102788Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the CRITICAL9.333%EPSS 33%ileNVD2026-10-27
CVE-2026-112197Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An aCRITICAL9.432%EPSS 32%ileNVD2026-10-28
CVE-2026-61729SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,CRITICAL9.432%EPSS 32%ileNVD2026-10-30
CVE-2026-119597OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to CRITICAL9.331%EPSS 31%ileNVD2026-10-30
CVE-2026-119716pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exeCRITICAL9.231%EPSS 31%ileNVD2026-10-30
CVE-2026-103792Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions CRITICAL9.631%EPSS 31%ileNVD2026-10-28
CVE-2026-61730SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deplCRITICAL9.331%EPSS 31%ileNVD2026-10-30
CVE-2026-118305Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute aCRITICAL9.631%EPSS 31%ileNVD2026-10-27
CVE-2026-118306Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially executeCRITICAL9.631%EPSS 31%ileNVD2026-10-27
CVE-2026-118375llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() fCRITICAL9.231%EPSS 31%ileNVD2026-10-28
CVE-2026-92885The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versiCRITICAL9.831%EPSS 31%ileNVD2026-10-27
CVE-2026-104383Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premiseCRITICAL9.430%EPSS 30%ileNVD2026-10-28
CVE-2026-107034Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read anoCRITICAL9.130%EPSS 30%ileNVD2026-10-29
CVE-2026-51863DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_vCRITICAL9.130%EPSS 30%ileNVD2026-10-29
CVE-2026-106076A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of thCRITICAL9.030%EPSS 30%ileNVD2026-10-27
CVE-2026-110720Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rCRITICAL9.930%EPSS 30%ileNVD2026-10-26
CVE-2026-118769Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size conCRITICAL9.230%EPSS 30%ileNVD2026-10-29
CVE-2026-112362@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when CRITICAL9.130%EPSS 30%ileNVD2026-10-27
CVE-2026-82120Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12CRITICAL9.830%EPSS 30%ileNVD2026-10-27
CVE-2026-120306Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on tCRITICAL9.930%EPSS 30%ileNVD2026-11-01
CVE-2026-61850Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authoriCRITICAL9.330%EPSS 30%ileNVD2026-10-30
CVE-2026-118321Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potCRITICAL9.629%EPSS 29%ileNVD2026-10-27
CVE-2026-118340Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitCRITICAL9.629%EPSS 29%ileNVD2026-10-27
CVE-2026-116386Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.CRITICAL9.829%EPSS 29%ileNVD2026-10-30
CVE-2026-116557The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to CRITICAL9.128%EPSS 28%ileNVD2026-10-31
CVE-2026-103409A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenCRITICAL9.828%EPSS 28%ileNVD2026-10-28
CVE-2026-113617The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before uCRITICAL9.928%EPSS 28%ileNVD2026-10-29
CVE-2026-113616The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved accouCRITICAL9.828%EPSS 28%ileNVD2026-10-29
CVE-2026-111411Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit AutCRITICAL9.328%EPSS 28%ileNVD2026-10-28
CVE-2026-62048Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellCRITICAL9.328%EPSS 28%ileNVD2026-11-01
CVE-2026-107017Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers tCRITICAL9.128%EPSS 28%ileNVD2026-10-29
CVE-2026-107028Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exportCRITICAL9.128%EPSS 28%ileNVD2026-10-29
CVE-2026-103799Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions CRITICAL9.628%EPSS 28%ileNVD2026-10-28
CVE-2026-86397Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7CRITICAL9.827%EPSS 27%ileNVD2026-10-28
CVE-2026-76935Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic JCRITICAL9.426%EPSS 26%ileNVD2026-10-27
CVE-2026-55598PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user canCRITICAL9.126%EPSS 26%ileNVD2026-10-30
CVE-2026-116241pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the queCRITICAL9.425%EPSS 25%ileNVD2026-10-30
CVE-2026-115964Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes MotCRITICAL9.325%EPSS 25%ileNVD2026-10-29
CVE-2026-39732Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.CRITICAL9.325%EPSS 25%ileNVD2026-10-30
CVE-2026-90888Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.CRITICAL9.825%EPSS 25%ileNVD2026-10-30
CVE-2026-118762Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml woCRITICAL9.325%EPSS 25%ileNVD2026-10-29
CVE-2026-115905zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to ArCRITICAL—25%EPSS 25%ileGitHub2026-10-28
CVE-2026-119978Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by CRITICAL9.025%EPSS 25%ileNVD2026-10-30
CVE-2026-102789Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorConCRITICAL9.324%EPSS 24%ileNVD2026-10-27
CVE-2026-62131Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.CRITICAL9.824%EPSS 24%ileNVD2026-10-29
CVE-2026-62863MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its CRITICAL9.624%EPSS 24%ileNVD2026-10-30
CVE-2026-118308Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitraryCRITICAL9.624%EPSS 24%ileNVD2026-10-27
CVE-2026-118309Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potenCRITICAL9.624%EPSS 24%ileNVD2026-10-27
CVE-2026-118310Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to poCRITICAL9.624%EPSS 24%ileNVD2026-10-27
CVE-2026-118312Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbiCRITICAL9.624%EPSS 24%ileNVD2026-10-27
CVE-2026-112816Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11CRITICAL10.023%EPSS 23%ileNVD2026-10-30
CVE-2026-118316Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially executeCRITICAL9.622%EPSS 22%ileNVD2026-10-27
CVE-2026-118332Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiallCRITICAL9.622%EPSS 22%ileNVD2026-10-27
CVE-2026-118342Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute CRITICAL9.622%EPSS 22%ileNVD2026-10-27
CVE-2026-118355Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exCRITICAL9.622%EPSS 22%ileNVD2026-10-27
CVE-2026-105779Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL CRITICAL9.122%EPSS 22%ileNVD2026-10-27
CVE-2026-119128ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticatCRITICAL9.121%EPSS 21%ileNVD2026-10-29
CVE-2026-119261Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execuCRITICAL9.621%EPSS 21%ileNVD2026-10-30
CVE-2026-107060Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anothCRITICAL9.120%EPSS 20%ileNVD2026-10-29
CVE-2026-118697In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider CRITICAL9.020%EPSS 20%ileNVD2026-10-30
CVE-2026-119263Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially CRITICAL9.619%EPSS 19%ileNVD2026-10-30
CVE-2026-61826Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/aCRITICAL10.018%EPSS 18%ileNVD2026-10-30
CVE-2026-14571A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation aCRITICAL9.116%EPSS 16%ileNVD2026-10-28
CVE-2026-112256Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allowCRITICAL9.216%EPSS 16%ileNVD2026-10-29
CVE-2026-90465A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster iCRITICAL9.415%EPSS 15%ileNVD2026-10-27
CVE-2026-115607Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXPCRITICAL9.315%EPSS 15%ileNVD2026-10-28
CVE-2026-117574A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by suCRITICAL9.115%EPSS 15%ileNVD2026-10-28
CVE-2026-115216In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacCRITICAL9.115%EPSS 15%ileNVD2026-10-27
CVE-2026-61707SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,CRITICAL9.014%EPSS 14%ileNVD2026-10-29
CVE-2026-90717Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions CRITICAL9.114%EPSS 14%ileNVD2026-10-28
CVE-2026-64618Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache FineCRITICAL9.814%EPSS 14%ileNVD2026-10-30
CVE-2026-117656Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth ACRITICAL9.314%EPSS 14%ileNVD2026-10-31
CVE-2026-118333Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin poCRITICAL9.310%EPSS 10%ileNVD2026-10-27
CVE-2026-118337Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin CRITICAL9.310%EPSS 10%ileNVD2026-10-27
CVE-2026-117603Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows maliCRITICAL9.39%EPSS 9%ileNVD2026-10-27
CVE-2026-117666Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary CRITICAL9.19%EPSS 9%ileNVD2026-10-30
CVE-2026-116863Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site ReqCRITICAL9.67%EPSS 7%ileNVD2026-10-27
CVE-2026-117601Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing maCRITICAL9.37%EPSS 7%ileNVD2026-10-27
CVE-2026-107014Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read noCRITICAL9.15%EPSS 5%ileNVD2026-10-29
CVE-2026-108014Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.comCRITICAL9.12%EPSS 2%ileNVD2026-10-27
CVE-2026-108015Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.comCRITICAL9.12%EPSS 2%ileNVD2026-10-27
GHSA-hff9-5pqw-6w9fimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code executionCRITICAL9.8——GitHub2026-10-30
GHSA-4xm8-rg9h-jhq2Signal K resources API path traversal can disclose the JWT signing secret and enable remote code executionCRITICAL9.8——GitHub2026-10-30
CVE-2025-11969The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to exCRITICAL9.4——NVD2026-11-02
CVE-2026-120276A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 oCRITICAL9.3——NVD2026-11-02
CVE-2026-120277A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1CRITICAL9.3——NVD2026-11-02
CVE-2026-120279A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.cCRITICAL9.3——NVD2026-11-02
CVE-2026-120280A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group hCRITICAL9.3——NVD2026-11-02
CVE-2026-120281A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of tCRITICAL9.3——NVD2026-11-02
CVE-2026-120283A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/CRITICAL9.3——NVD2026-11-02
CVE-2026-120344A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the fiCRITICAL9.3——NVD2026-11-02
CVE-2026-120345A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the filCRITICAL9.3——NVD2026-11-02
CVE-2026-116606An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated rCRITICAL9.3——NVD2026-11-02
CVE-2026-120442ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forCRITICAL9.3——NVD2026-11-02
CVE-2026-73696Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user paneCRITICAL9.3——NVD2026-11-02
CVE-2026-77876Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_dirCRITICAL9.3——NVD2026-11-02
CVE-2026-105769kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-coCRITICAL9.3——NVD2026-11-02
CVE-2026-48705MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)CRITICAL9.3——GitHub2026-10-27
CVE-2026-120447HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose theCRITICAL9.2——NVD2026-11-02
CVE-2026-120213@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In vCRITICAL9.1——NVD2026-11-02
CVE-2026-120459python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forgeCRITICAL9.1——NVD2026-11-02
CVE-2026-94290SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent oCRITICAL9.1——NVD2026-11-02
CVE-2026-88811Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloudCRITICAL9.1——NVD2026-11-02
CVE-2026-109618PHP Memory Corruption VulnerabilityHIGH—100%KEV PoC EPSS 100%ileCISA-KEV2026-10-26
CVE-2026-109619PHP Stale Internal Request-State VulnerabilityHIGH—100%KEV PoC EPSS 100%ileCISA-KEV2026-10-26
CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityHIGH—99%KEV PoC EPSS 99%ileCISA-KEV2026-10-27
CVE-2026-120229A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the fileHIGH8.587%EPSS 87%ileNVD2026-11-01
CVE-2026-86379Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions HIGH7.287%EPSS 87%ileNVD2026-10-28
CVE-2026-101210Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH7.287%EPSS 87%ileNVD2026-10-30
CVE-2026-101214Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH7.287%EPSS 87%ileNVD2026-10-30
CVE-2026-116505A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the fileHIGH8.586%EPSS 86%ileNVD2026-10-26
CVE-2026-112351Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allowHIGH8.786%EPSS 86%ileNVD2026-10-27
CVE-2026-91913Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH8.886%EPSS 86%ileNVD2026-10-30
CVE-2026-119409OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: FirmwHIGH8.685%EPSS 85%ileNVD2026-10-30
CVE-2026-120227A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file statHIGH8.683%EPSS 83%ileNVD2026-11-01
CVE-2026-120230A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web BHIGH8.683%EPSS 83%ileNVD2026-11-01
CVE-2026-86395Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.HIGH7.282%EPSS 82%ileNVD2026-10-28
CVE-2026-86399Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.282%EPSS 82%ileNVD2026-10-28
CVE-2026-86394Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.282%EPSS 82%ileNVD2026-10-28
CVE-2026-86396Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH8.882%EPSS 82%ileNVD2026-10-28
CVE-2013-20007Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to exHIGH8.681%EPSS 81%ileNVD2026-10-28
CVE-2026-116506A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the fileHIGH8.679%EPSS 79%ileNVD2026-10-26
CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.279%EPSS 79%ileNVD2026-10-28
CVE-2026-120196A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wHIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120197A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapHIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120231A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of thHIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120238A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/HIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120239A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the HIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120240A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the filHIGH8.677%EPSS 77%ileNVD2026-11-01
CVE-2026-120228A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the fileHIGH8.676%EPSS 76%ileNVD2026-11-01
CVE-2026-116504A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW ofHIGH8.675%EPSS 75%ileNVD2026-10-26
CVE-2026-118238The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature dueHIGH7.275%EPSS 75%ileNVD2026-10-30
CVE-2026-111505Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH8.873%EPSS 73%ileNVD2026-10-30
CVE-2026-119025open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell codeHIGH7.773%EPSS 73%ileNVD2026-10-29
CVE-2026-118755Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticateHIGH8.673%EPSS 73%ileNVD2026-10-28
CVE-2026-111461An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enablHIGH7.572%EPSS 72%ileNVD2026-10-27
CVE-2026-116748Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposHIGH8.769%EPSS 69%ileNVD2026-10-26
CVE-2026-103403An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManHIGH8.868%EPSS 68%ileNVD2026-10-28
CVE-2026-106079An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManHIGH8.868%EPSS 68%ileNVD2026-10-28
CVE-2026-59177ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the `Home AssHIGH8.867%EPSS 67%ileNVD2026-10-28
CVE-2026-118477The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command InjectionHIGH8.766%EPSS 66%ileNVD2026-10-28
CVE-2026-33924Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient vaHIGH7.566%EPSS 66%ileNVD2026-10-29
CVE-2026-78674The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted HIGH8.863%EPSS 63%ileNVD2026-10-28
CVE-2026-112350Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauHIGH8.761%EPSS 61%ileNVD2026-10-27
CVE-2026-116755Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of SofHIGH7.461%EPSS 61%ileNVD2026-10-31
CVE-2026-57200Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.559%EPSS 59%ileNVD2026-10-27
CVE-2026-16521An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command pHIGH7.259%EPSS 59%ileNVD2026-10-27
CVE-2026-15323The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in allHIGH7.558%EPSS 58%ileNVD2026-10-28
CVE-2026-119586SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits aHIGH8.558%EPSS 58%ileNVD2026-10-30
CVE-2026-76012The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code ExecHIGH7.558%EPSS 58%ileNVD2026-10-30
CVE-2026-76418A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareHIGH8.657%KEV EPSS 57%ileNVD2026-10-28
CVE-2026-119713Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders HIGH8.756%EPSS 56%ileNVD2026-10-30
CVE-2026-118579A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmarkHIGH8.956%EPSS 56%ileNVD2026-10-28
CVE-2026-9086Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypassHIGH7.356%EPSS 56%ileGitHub2026-10-29
CVE-2026-110193IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to causeHIGH8.856%EPSS 56%ileNVD2026-10-29
CVE-2026-62331praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission ControHIGH8.256%EPSS 56%ileNVD2026-10-30
CVE-2026-76010The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code ExecHIGH8.856%EPSS 56%ileNVD2026-10-31
CVE-2026-83831Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.HIGH8.856%EPSS 56%ileNVD2026-10-27
CVE-2026-85898Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized HIGH8.856%EPSS 56%ileNVD2026-10-27
CVE-2026-96196Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secuHIGH8.856%EPSS 56%ileNVD2026-10-29
CVE-2026-112438A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiaHIGH8.854%EPSS 54%ileNVD2026-10-26
CVE-2026-120225A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function conHIGH8.554%EPSS 54%ileNVD2026-11-01
CVE-2026-109384The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions uHIGH8.854%EPSS 54%ileNVD2026-10-28
CVE-2026-116738VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigHIGH8.754%EPSS 54%ileNVD2026-10-26
CVE-2014-125137C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file incHIGH7.154%EPSS 54%ileNVD2026-10-28
CVE-2026-101288IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improHIGH8.853%EPSS 53%ileNVD2026-10-29
CVE-2026-104328IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improHIGH8.853%EPSS 53%ileNVD2026-10-29
CVE-2026-107326IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improHIGH8.853%EPSS 53%ileNVD2026-10-29
CVE-2026-117573hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell coHIGH8.553%EPSS 53%ileNVD2026-10-27
CVE-2026-57201Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.553%EPSS 53%ileNVD2026-10-27
CVE-2026-117558The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to exeHIGH8.553%EPSS 53%ileNVD2026-10-27
CVE-2026-112427An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A rHIGH8.153%EPSS 53%ileNVD2026-10-26
CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityHIGH—53%KEV EPSS 53%ileCISA-KEV2026-10-28
CVE-2026-117607Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users withHIGH8.653%EPSS 53%ileNVD2026-10-28
CVE-2026-117559DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command aHIGH8.553%EPSS 53%ileNVD2026-10-27
CVE-2026-104016ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and thHIGH7.552%EPSS 52%ileNVD2026-10-28
CVE-2026-57190Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.052%EPSS 52%ileNVD2026-10-27
CVE-2026-117569Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_sHIGH8.552%EPSS 52%ileNVD2026-10-27
CVE-2026-104324IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserHIGH8.852%EPSS 52%ileNVD2026-10-29
CVE-2026-115915vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlHIGH8.152%EPSS 52%ileNVD2026-10-26
CVE-2026-115346The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in veHIGH8.152%EPSS 52%ileNVD2026-10-30
CVE-2026-86929An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, mHIGH8.851%EPSS 51%ileNVD2026-10-26
CVE-2026-117560ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackerHIGH8.551%EPSS 51%ileNVD2026-10-27
CVE-2026-117561Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell comHIGH8.551%EPSS 51%ileNVD2026-10-27
CVE-2026-117567esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary comHIGH8.551%EPSS 51%ileNVD2026-10-27
CVE-2026-9800Keycloak vulnerable to authorization bypass via incorrect uri comparisonHIGH8.151%EPSS 51%ileGitHub2026-10-29
CVE-2026-107239A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RHIGH8.851%EPSS 51%ileNVD2026-10-29
CVE-2026-109411An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated HIGH8.151%EPSS 51%ileNVD2026-10-28
CVE-2026-110244IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due toHIGH8.851%EPSS 51%ileNVD2026-10-29
CVE-2026-59978AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?scripHIGH7.551%EPSS 51%ileNVD2026-10-30
CVE-2026-111422In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` paraHIGH8.851%EPSS 51%ileNVD2026-10-27
CVE-2026-85899Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.HIGH8.151%EPSS 51%ileNVD2026-10-29
CVE-2026-88077Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges HIGH8.851%EPSS 51%ileNVD2026-10-29
CVE-2026-112688A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, HIGH8.850%EPSS 50%ileNVD2026-10-26
CVE-2026-119408n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecaHIGH8.750%EPSS 50%ileNVD2026-10-30
CVE-2026-120241A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)HIGH7.750%EPSS 50%ileNVD2026-11-01
CVE-2026-119052llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthentiHIGH8.749%EPSS 49%ileNVD2026-10-29
CVE-2026-110305The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versionHIGH7.549%EPSS 49%ileNVD2026-10-30
CVE-2026-118147Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.HIGH7.449%EPSS 49%ileNVD2026-10-31
CVE-2026-57186Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10HIGH7.549%EPSS 49%ileNVD2026-10-27
CVE-2026-119977WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accHIGH8.149%EPSS 49%ileNVD2026-10-31
CVE-2026-117568mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by sHIGH7.348%EPSS 48%ileNVD2026-10-27
CVE-2026-112655A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andHIGH8.848%EPSS 48%ileNVD2026-10-26
CVE-2026-57191Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH8.248%EPSS 48%ileNVD2026-10-27
CVE-2026-104317IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrHIGH8.148%EPSS 48%ileNVD2026-10-29
CVE-2026-27975Ajenti has potential Remote Code ExecutionHIGH9.848%EPSS 48%ileGitHub2026-10-27
CVE-2026-85890Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.HIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-85897Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netHIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-96198Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netHIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-96199Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netHIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-96203Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.HIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-118692CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackersHIGH7.148%EPSS 48%ileNVD2026-10-28
CVE-2026-85268A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase AHIGH8.748%EPSS 48%ileNVD2026-10-30
CVE-2026-112626A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andHIGH8.848%EPSS 48%ileNVD2026-10-26
CVE-2026-110309IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to iHIGH8.848%EPSS 48%ileNVD2026-10-29
CVE-2026-107020An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers HIGH7.548%EPSS 48%ileNVD2026-10-29
CVE-2026-57195Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.547%EPSS 47%ileNVD2026-10-27
CVE-2026-96192Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.HIGH8.847%EPSS 47%ileNVD2026-10-29
CVE-2026-97638The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure DHIGH7.547%EPSS 47%ileNVD2026-10-30
CVE-2026-116690MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.HIGH7.547%EPSS 47%ileNVD2026-10-27
CVE-2026-118485Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename afterHIGH7.047%EPSS 47%ileNVD2026-10-28
CVE-2026-118779Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theHIGH7.546%EPSS 46%ileNVD2026-10-29
CVE-2026-112659A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iHIGH8.846%EPSS 46%ileNVD2026-10-26
CVE-2010-20125DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated aHIGH8.746%EPSS 46%ileNVD2026-10-30
CVE-2026-120135Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0.HIGH8.246%EPSS 46%ileNVD2026-10-31
CVE-2026-119578MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows aHIGH8.546%EPSS 46%ileNVD2026-10-30
CVE-2026-63414Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticateHIGH7.646%EPSS 46%ileNVD2026-10-30
CVE-2026-112637A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iHIGH8.846%EPSS 46%ileNVD2026-10-26
CVE-2026-114613MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failureHIGH7.546%EPSS 46%ileGitHub2026-10-27
CVE-2026-112623A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andHIGH8.845%EPSS 45%ileNVD2026-10-26
CVE-2026-112651A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andHIGH8.845%EPSS 45%ileNVD2026-10-26
CVE-2026-1928The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in HIGH8.845%EPSS 45%ileNVD2026-10-28
CVE-2026-118619Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote aHIGH8.845%EPSS 45%ileNVD2026-10-28
CVE-2026-116682FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handHIGH8.645%EPSS 45%ileNVD2026-10-27
CVE-2026-86389Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.245%EPSS 45%ileNVD2026-10-28
CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityHIGH—45%KEV EPSS 45%ileCISA-KEV2026-10-30
CVE-2026-57197Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.745%EPSS 45%ileNVD2026-10-27
CVE-2026-94346PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.HIGH7.245%EPSS 45%ileNVD2026-10-27
CVE-2026-112365The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vuHIGH7.245%EPSS 45%ileNVD2026-10-30
CVE-2026-119195pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeHIGH7.545%EPSS 45%ileNVD2026-10-29
CVE-2026-62334OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x linHIGH8.744%EPSS 44%ileNVD2026-10-30
CVE-2026-118758Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, theHIGH7.544%EPSS 44%ileNVD2026-10-29
CVE-2026-99152In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a manageHIGH7.544%EPSS 44%ileNVD2026-10-28
CVE-2026-57188Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.144%EPSS 44%ileNVD2026-10-27
CVE-2026-111255The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to ArbitraryHIGH7.544%EPSS 44%ileNVD2026-10-28
CVE-2026-113947This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a mHIGH8.844%EPSS 44%ileNVD2026-10-26
CVE-2026-96187Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized HIGH7.444%EPSS 44%ileNVD2026-10-29
CVE-2026-118689OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unautheHIGH8.744%EPSS 44%ileNVD2026-10-28
CVE-2026-115642In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possHIGH8.344%EPSS 44%ileNVD2026-10-30
CVE-2026-107630The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorizHIGH7.544%EPSS 44%ileNVD2026-10-30
CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledHIGH7.544%EPSS 44%ileGitHub2026-10-28
CVE-2026-119762Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial ofHIGH8.743%EPSS 43%ileNVD2026-10-30
CVE-2026-62284OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfiHIGH8.643%EPSS 43%ileNVD2026-10-30
CVE-2026-59158Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, `src/module.ts` unHIGH7.543%EPSS 43%ileNVD2026-10-27
CVE-2026-119654DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate pHIGH8.743%EPSS 43%ileNVD2026-10-30
CVE-2026-63393OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 uHIGH8.743%EPSS 43%ileNVD2026-10-30
CVE-2026-116634OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to HIGH8.243%EPSS 43%ileNVD2026-10-26
CVE-2026-116688CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the enHIGH8.143%EPSS 43%ileNVD2026-10-27
CVE-2026-108329Tanium addressed an unauthorized code execution vulnerability in Threat Response.HIGH8.842%EPSS 42%ileNVD2026-10-27
CVE-2026-117553Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackeHIGH7.742%EPSS 42%ileNVD2026-10-27
CVE-2026-118761Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, theHIGH7.542%EPSS 42%ileNVD2026-10-29
CVE-2026-116811OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member HIGH8.742%EPSS 42%ileNVD2026-10-27
CVE-2026-116078Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit aHIGH8.742%EPSS 42%ileNVD2026-10-28
CVE-2026-119557n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticateHIGH8.242%EPSS 42%ileNVD2026-10-30
CVE-2026-107039Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080HIGH7.542%EPSS 42%ileNVD2026-10-29
CVE-2026-118683MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a HIGH8.642%EPSS 42%ileNVD2026-10-28
CVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of serviceHIGH7.542%EPSS 42%ileGitHub2026-10-28
CVE-2026-57187Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.142%EPSS 42%ileNVD2026-10-26
CVE-2026-118938In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "ValHIGH8.841%EPSS 41%ileNVD2026-10-30
CVE-2026-119760sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthentHIGH8.741%EPSS 41%ileNVD2026-10-30
CVE-2026-96228SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,HIGH8.141%EPSS 41%ileNVD2026-10-29
CVE-2026-114422The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored mHIGH7.541%EPSS 41%ileNVD2026-10-30
CVE-2026-120194A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when giHIGH7.541%EPSS 41%ileNVD2026-10-31
CVE-2026-118205The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to PrivileHIGH7.441%EPSS 41%ileNVD2026-10-30
CVE-2026-111504Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a ComHIGH7.241%EPSS 41%ileNVD2026-10-30
CVE-2026-116778FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1,HIGH8.840%EPSS 40%ileNVD2026-10-28
CVE-2026-116588Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfusHIGH8.740%EPSS 40%ileNVD2026-10-26
CVE-2026-103779Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH8.340%EPSS 40%ileNVD2026-10-28
CVE-2026-104594libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allowHIGH7.540%EPSS 40%ileNVD2026-10-26
CVE-2026-118772joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.stHIGH7.540%EPSS 40%ileNVD2026-10-29
CVE-2026-116676Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0HIGH8.840%EPSS 40%ileNVD2026-10-27
CVE-2026-114605dnspython dns.name.from_wire_parser() excessive CPU useHIGH7.540%EPSS 40%ileGitHub2026-10-27
CVE-2026-58257GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the databaHIGH7.240%EPSS 40%ileNVD2026-10-27
CVE-2026-110196IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypasHIGH8.840%EPSS 40%ileNVD2026-10-29
CVE-2026-116795RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching. From 2.2.0 until 2.HIGH7.540%EPSS 40%ileNVD2026-10-28
CVE-2026-62302MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls `reHIGH8.740%EPSS 40%ileNVD2026-10-30
CVE-2026-114053vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionHIGH8.140%EPSS 40%ileGitHub2026-10-27
CVE-2026-115909zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionHIGH7.540%EPSS 40%ileGitHub2026-10-29
CVE-2026-86380Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.240%EPSS 40%ileNVD2026-10-28
CVE-2026-39734Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.HIGH7.540%EPSS 40%ileNVD2026-10-30
CVE-2026-93434An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticatedHIGH8.740%EPSS 40%ileNVD2026-10-27
CVE-2026-93904The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic SHIGH7.540%EPSS 40%ileNVD2026-10-29
CVE-2026-107026Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwriHIGH7.540%EPSS 40%ileNVD2026-10-29
CVE-2026-16760In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the likely_HIGH8.840%EPSS 40%ileNVD2026-10-30
CVE-2026-119290Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reporHIGH7.540%EPSS 40%ileNVD2026-10-30
CVE-2026-65219A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP messHIGH7.439%EPSS 39%ileNVD2026-10-27
CVE-2026-118694python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by subHIGH8.739%EPSS 39%ileNVD2026-10-28
CVE-2026-104591libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows HIGH7.539%EPSS 39%ileNVD2026-10-26
CVE-2026-62264PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1,HIGH7.539%EPSS 39%ileNVD2026-10-30
CVE-2026-105608HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. ThiHIGH8.839%EPSS 39%ileNVD2026-10-26
CVE-2026-64759An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iHIGH8.839%EPSS 39%ileNVD2026-10-26
CVE-2026-116581Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. PHIGH7.539%EPSS 39%ileNVD2026-10-26
CVE-2026-99131In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user reported HIGH8.239%EPSS 39%ileNVD2026-10-28
CVE-2026-116693dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QUHIGH8.739%EPSS 39%ileNVD2026-10-27
CVE-2026-107238A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account HIGH8.739%EPSS 39%ileNVD2026-10-29
CVE-2026-61576Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhookHIGH8.339%EPSS 39%ileNVD2026-10-29
CVE-2026-33521There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthHIGH7.539%EPSS 39%ileNVD2026-10-26
CVE-2026-116868Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.HIGH8.839%EPSS 39%ileNVD2026-10-29
CVE-2026-118090Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.HIGH8.839%EPSS 39%ileNVD2026-10-30
CVE-2026-118370libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attHIGH8.238%EPSS 38%ileNVD2026-10-28
CVE-2026-109997The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vHIGH7.238%EPSS 38%ileNVD2026-10-31
CVE-2026-56828Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain autHIGH8.838%EPSS 38%ileNVD2026-10-28
CVE-2026-57202Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH8.138%EPSS 38%ileNVD2026-10-27
CVE-2026-103898The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versiHIGH8.138%EPSS 38%ileNVD2026-10-31
CVE-2026-119549Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecurHIGH7.138%EPSS 38%ileNVD2026-10-30
CVE-2026-62765Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized HIGH7.538%EPSS 38%ileNVD2026-10-27
CVE-2026-54453OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior tHIGH7.238%EPSS 38%ileNVD2026-10-28
CVE-2026-111418A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion serviceHIGH7.538%EPSS 38%ileNVD2026-10-29
CVE-2026-107037Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attacHIGH7.538%EPSS 38%ileNVD2026-10-29
CVE-2026-107047Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the apHIGH7.538%EPSS 38%ileNVD2026-10-29
CVE-2026-116843Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by definiHIGH8.738%EPSS 38%ileNVD2026-10-27
CVE-2026-118251Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns creHIGH8.438%EPSS 38%ileNVD2026-10-28
CVE-2026-109197The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versHIGH7.538%EPSS 38%ileNVD2026-10-31
CVE-2026-115908zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexicaHIGH7.438%EPSS 38%ileGitHub2026-10-29
CVE-2026-63201Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected verHIGH7.138%EPSS 38%ileNVD2026-10-30
CVE-2026-109381The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 THIGH7.237%EPSS 37%ileNVD2026-10-28
CVE-2026-119662Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to auHIGH8.737%EPSS 37%ileNVD2026-10-30
CVE-2026-116818OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers tHIGH8.837%EPSS 37%ileNVD2026-10-27
CVE-2026-105626HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthentHIGH7.537%EPSS 37%ileNVD2026-10-26
CVE-2026-119191Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theHIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-62968Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled inputHIGH8.737%EPSS 37%ileNVD2026-10-30
CVE-2026-92372An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to HIGH8.837%EPSS 37%ileNVD2026-10-27
CVE-2026-104384Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions throughHIGH8.737%EPSS 37%ileNVD2026-10-28
CVE-2026-62966ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to vHIGH7.537%EPSS 37%ileNVD2026-10-30
CVE-2026-117610libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparHIGH8.237%EPSS 37%ileNVD2026-10-28
CVE-2026-119194pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decodedHIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-119196pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copiHIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-119197pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at HIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-93757The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account BindiHIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-110184The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, aHIGH7.537%EPSS 37%ileNVD2026-10-29
CVE-2026-119710PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only thHIGH7.137%EPSS 37%ileNVD2026-10-30
CVE-2014-125138C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted HIGH8.737%EPSS 37%ileNVD2026-10-28
CVE-2024-58400llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal tHIGH8.836%EPSS 36%ileNVD2026-10-27
CVE-2026-119028oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplHIGH8.736%EPSS 36%ileNVD2026-10-29
CVE-2019-25781Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows rHIGH8.736%EPSS 36%ileNVD2026-10-29
CVE-2026-119286GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a HIGH7.536%EPSS 36%ileNVD2026-10-29
CVE-2026-115301The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its foHIGH7.236%EPSS 36%ileNVD2026-10-29
CVE-2026-118254Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination lHIGH8.636%EPSS 36%ileNVD2026-10-28
CVE-2026-118252Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidHIGH8.436%EPSS 36%ileNVD2026-10-28
CVE-2026-118253Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode parHIGH8.436%EPSS 36%ileNVD2026-10-28
CVE-2026-119120Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodHIGH7.736%EPSS 36%ileNVD2026-10-29
CVE-2026-96767The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting viHIGH7.236%EPSS 36%ileNVD2026-10-29
CVE-2026-119553Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversHIGH7.136%EPSS 36%ileNVD2026-10-30
CVE-2026-62160Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` pasHIGH8.736%EPSS 36%ileNVD2026-10-30
CVE-2026-116638The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controlsHIGH7.536%EPSS 36%ileNVD2026-10-26
CVE-2026-58255Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administratHIGH8.836%EPSS 36%ileNVD2026-10-27
CVE-2026-119187Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theHIGH7.536%EPSS 36%ileNVD2026-10-29
CVE-2026-112200P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejecteHIGH8.736%EPSS 36%ileNVD2026-10-29
CVE-2014-125136C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information dHIGH8.236%EPSS 36%ileNVD2026-10-28
CVE-2026-118615Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attaHIGH7.836%EPSS 36%ileNVD2026-10-28
CVE-2026-93855The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameteHIGH7.535%EPSS 35%ileNVD2026-10-29
CVE-2026-119188Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theHIGH7.535%EPSS 35%ileNVD2026-10-29
CVE-2026-119202@hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an unanchored pHIGH7.535%EPSS 35%ileNVD2026-10-29
CVE-2026-62301MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access HIGH7.135%EPSS 35%ileNVD2026-10-30
CVE-2026-63184Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet toHIGH7.135%EPSS 35%ileNVD2026-10-30
CVE-2026-120114The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site HIGH7.235%EPSS 35%ileNVD2026-10-31
CVE-2026-116741Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeeHIGH8.335%EPSS 35%ileNVD2026-10-26
CVE-2026-103092IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due HIGH8.535%EPSS 35%ileNVD2026-10-29
CVE-2026-118660Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy DHIGH8.635%EPSS 35%ileNVD2026-10-28
CVE-2026-90867Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.HIGH8.135%EPSS 35%ileNVD2026-10-29
CVE-2026-111731P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (wHIGH8.734%EPSS 34%ileNVD2026-10-29
CVE-2026-118328Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exeHIGH8.834%EPSS 34%ileNVD2026-10-27
CVE-2026-107743The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, HIGH7.234%EPSS 34%ileNVD2026-10-29
CVE-2026-119979LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that HIGH8.734%EPSS 34%ileNVD2026-10-30
CVE-2026-61708SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,HIGH8.534%EPSS 34%ileNVD2026-10-30
CVE-2026-72754When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL filHIGH7.534%EPSS 34%ileNVD2026-10-26
CVE-2026-72756Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as HIGH7.534%EPSS 34%ileNVD2026-10-26
CVE-2026-72758When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the rangeHIGH7.534%EPSS 34%ileNVD2026-10-26
CVE-2026-111733P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID HIGH8.734%EPSS 34%ileNVD2026-10-29
CVE-2026-111736P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request withouHIGH8.734%EPSS 34%ileNVD2026-10-29
CVE-2026-115793P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or objeHIGH8.734%EPSS 34%ileNVD2026-10-29
CVE-2026-72753When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, poHIGH8.234%EPSS 34%ileNVD2026-10-26
CVE-2026-118650Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an enHIGH7.534%EPSS 34%ileNVD2026-10-28
CVE-2026-62333OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x linHIGH8.734%EPSS 34%ileNVD2026-10-30
CVE-2026-119420Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain seHIGH8.734%EPSS 34%ileNVD2026-10-30
CVE-2026-119027oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplHIGH7.734%EPSS 34%ileNVD2026-10-29
CVE-2026-115924Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlledHIGH8.634%EPSS 34%ileNVD2026-10-26
CVE-2026-89435The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulHIGH8.833%EPSS 33%ileNVD2026-10-30
CVE-2026-118073Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.HIGH8.833%EPSS 33%ileNVD2026-10-29
CVE-2026-73186Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.HIGH8.833%EPSS 33%ileNVD2026-10-30
CVE-2026-59179OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated HIGH8.333%EPSS 33%ileNVD2026-10-28
CVE-2026-118089Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.HIGH7.233%EPSS 33%ileNVD2026-10-30
CVE-2026-104596libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/HIGH7.533%EPSS 33%ileNVD2026-10-26
CVE-2026-118659Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the HapHIGH7.533%EPSS 33%ileNVD2026-10-28
CVE-2026-116239In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an HIGH8.933%EPSS 33%ileNVD2026-10-30
CVE-2026-102800Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article HIGH8.733%EPSS 33%ileNVD2026-10-27
CVE-2026-118329Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentHIGH8.833%EPSS 33%ileNVD2026-10-27
CVE-2026-118665GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GrHIGH8.233%EPSS 33%ileNVD2026-10-28
CVE-2026-110747ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlledHIGH7.533%EPSS 33%ileNVD2026-10-28
CVE-2026-119645ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated usHIGH7.133%EPSS 33%ileNVD2026-10-30
CVE-2026-61845Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass conveHIGH8.933%EPSS 33%ileNVD2026-10-30
CVE-2026-119049FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another usHIGH7.233%EPSS 33%ileNVD2026-10-29
CVE-2026-116808OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant dataHIGH8.632%EPSS 32%ileNVD2026-10-27
CVE-2026-109234The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress replyHIGH7.232%EPSS 32%ileNVD2026-10-31
CVE-2026-116520The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment / sHIGH7.232%EPSS 32%ileNVD2026-10-31
CVE-2026-120224A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/runHIGH8.632%EPSS 32%ileNVD2026-11-01
CVE-2026-51905TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in suHIGH8.832%EPSS 32%ileNVD2026-10-29
CVE-2026-61996Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.HIGH8.532%EPSS 32%ileNVD2026-10-29
CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26HIGH7.132%EPSS 32%ileNVD2026-10-26
CVE-2026-118984OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admHIGH7.032%EPSS 32%ileNVD2026-10-29
CVE-2026-116838A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) HIGH8.832%EPSS 32%ileNVD2026-10-27
CVE-2026-61654Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhookHIGH8.332%EPSS 32%ileNVD2026-10-29
CVE-2026-104895The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input toHIGH7.532%EPSS 32%ileNVD2026-10-28
CVE-2026-116683CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored HIGH7.132%EPSS 32%ileNVD2026-10-27
CVE-2023-7357A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulHIGH8.632%EPSS 32%ileNVD2026-10-29
CVE-2026-116656Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.HIGH7.532%EPSS 32%ileNVD2026-10-27
CVE-2026-116662Tanium addressed a compression bomb vulnerability in Enforce.HIGH7.532%EPSS 32%ileNVD2026-10-27
CVE-2026-87086Tanium addressed a denial of service vulnerability in Provision.HIGH7.532%EPSS 32%ileNVD2026-10-27
CVE-2026-118036In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,HIGH7.532%EPSS 32%ileNVD2026-10-28
CVE-2026-116391Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slider allows Object Injection.ThisHIGH8.831%EPSS 31%ileNVD2026-10-28
CVE-2026-116867Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.HIGH8.831%EPSS 31%ileNVD2026-10-29
CVE-2026-118075Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.HIGH8.831%EPSS 31%ileNVD2026-10-29
CVE-2026-118076Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.HIGH8.831%EPSS 31%ileNVD2026-10-29
CVE-2026-118080Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.HIGH8.831%EPSS 31%ileNVD2026-10-29
CVE-2026-118081Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.HIGH8.831%EPSS 31%ileNVD2026-10-29
CVE-2026-78527Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.HIGH8.831%EPSS 31%ileNVD2026-10-30
CVE-2026-61739SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,HIGH7.531%EPSS 31%ileNVD2026-10-30
CVE-2026-96894The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Stored Cross-SiHIGH7.231%EPSS 31%ileNVD2026-10-30
CVE-2026-118260Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies HIGH8.231%EPSS 31%ileNVD2026-10-28
CVE-2026-118261Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in Decompress middleware exposes a gzip-decoded requeHIGH8.231%EPSS 31%ileNVD2026-10-28
CVE-2026-108106snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengthaHIGH7.531%EPSS 31%ileGitHub2026-10-27
CVE-2026-86385Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped PriviHIGH8.831%EPSS 31%ileNVD2026-10-28
CVE-2026-42701Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.HIGH7.231%EPSS 31%ileNVD2026-10-29
CVE-2026-118668langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypHIGH8.631%EPSS 31%ileNVD2026-10-28
CVE-2026-62967ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authentiHIGH8.131%EPSS 31%ileNVD2026-10-30
CVE-2026-118803Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymousHIGH7.531%EPSS 31%ileNVD2026-10-28
CVE-2026-86378Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH8.831%EPSS 31%ileNVD2026-10-28
CVE-2026-62162Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deHIGH8.231%EPSS 31%ileNVD2026-10-30
CVE-2026-116871Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescrHIGH8.730%EPSS 30%ileNVD2026-10-27
CVE-2025-8574The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and includingHIGH8.730%EPSS 30%ileNVD2026-10-30
CVE-2026-116587Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including supHIGH7.530%EPSS 30%ileNVD2026-10-26
CVE-2026-77167Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. ThHIGH7.530%EPSS 30%ileNVD2026-10-27
CVE-2026-116878Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonyHIGH8.730%EPSS 30%ileNVD2026-10-27
CVE-2026-120208libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::procesHIGH7.730%EPSS 30%ileNVD2026-10-31
CVE-2026-116584Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. FHIGH7.530%EPSS 30%ileNVD2026-10-26
CVE-2026-110245IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authHIGH7.530%EPSS 30%ileNVD2026-10-29
CVE-2026-63341Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth orHIGH7.530%EPSS 30%ileNVD2026-10-30
CVE-2026-90464An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, HIGH7.230%EPSS 30%ileNVD2026-10-27
CVE-2026-114510Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe fHIGH7.130%EPSS 30%ileGitHub2026-10-27
CVE-2026-119649Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderHIGH7.130%EPSS 30%ileNVD2026-10-30
CVE-2026-118249Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data colHIGH7.230%EPSS 30%ileNVD2026-10-28
CVE-2026-118250Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follHIGH7.230%EPSS 30%ileNVD2026-10-28
CVE-2026-63378TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural languageHIGH8.830%EPSS 30%ileNVD2026-10-30
CVE-2026-118082Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.HIGH8.830%EPSS 30%ileNVD2026-10-29
CVE-2026-118086Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.HIGH8.830%EPSS 30%ileNVD2026-10-30
CVE-2026-102814An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivableHIGH8.730%EPSS 30%ileNVD2026-10-27
CVE-2026-119119Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() failsHIGH8.730%EPSS 30%ileNVD2026-10-29
CVE-2026-118358Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute aHIGH8.830%EPSS 30%ileNVD2026-10-27
CVE-2026-61586Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory doeHIGH8.230%EPSS 30%ileNVD2026-10-30
CVE-2026-90869A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress SHIGH7.529%EPSS 29%ileNVD2026-10-29
CVE-2026-111107A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticatHIGH8.729%EPSS 29%ileNVD2026-10-27
CVE-2026-49142OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allHIGH8.729%EPSS 29%ileNVD2026-10-29
CVE-2026-62979jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handlHIGH8.429%EPSS 29%ileNVD2026-10-30
CVE-2026-114148Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.HIGH7.829%EPSS 29%ileNVD2026-10-29
CVE-2026-107042Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or HIGH7.529%EPSS 29%ileNVD2026-10-29
CVE-2026-107052Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackHIGH7.529%EPSS 29%ileNVD2026-10-29
CVE-2026-115967Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication HIGH8.829%EPSS 29%ileNVD2026-10-29
CVE-2026-116872Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_comHIGH8.729%EPSS 29%ileNVD2026-10-27
CVE-2026-117540svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedlHIGH8.729%EPSS 29%ileNVD2026-10-27
CVE-2026-104189The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file HIGH7.529%EPSS 29%ileNVD2026-10-27
CVE-2026-45145Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc/lib/career.lib.php` and `publHIGH7.529%EPSS 29%ileNVD2026-10-30
CVE-2026-84294Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20HIGH7.729%EPSS 29%ileNVD2026-10-29
CVE-2026-112457A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS HIGH7.129%EPSS 29%ileNVD2026-10-26
CVE-2026-120203ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users HIGH8.729%EPSS 29%ileNVD2026-10-31
CVE-2026-102554Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationHIGH5.929%EPSS 29%ileGitHub2026-10-27
CVE-2026-63344Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in theHIGH8.629%EPSS 29%ileNVD2026-10-30
CVE-2026-63345Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object kHIGH8.629%EPSS 29%ileNVD2026-10-30
CVE-2026-63346Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter namHIGH8.629%EPSS 29%ileNVD2026-10-30
CVE-2026-115907zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeHIGH7.529%EPSS 29%ileGitHub2026-10-29
CVE-2026-118008Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.HIGH8.829%EPSS 29%ileNVD2026-10-27
CVE-2026-117609rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackerHIGH7.129%EPSS 29%ileNVD2026-10-28
CVE-2026-116675TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates HIGH8.528%EPSS 28%ileNVD2026-10-27
CVE-2026-118255Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.hreHIGH8.428%EPSS 28%ileNVD2026-10-28
CVE-2026-104368The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up HIGH8.828%EPSS 28%ileNVD2026-10-30
CVE-2026-118686EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction HIGH8.728%EPSS 28%ileNVD2026-10-28
CVE-2026-107671A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabHIGH8.528%EPSS 28%ileNVD2026-10-27
CVE-2026-111419A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains thiHIGH8.628%EPSS 28%ileNVD2026-10-29
CVE-2026-111417A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the uHIGH7.528%EPSS 28%ileNVD2026-10-29
CVE-2026-86398Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH8.828%EPSS 28%ileNVD2026-10-28
CVE-2026-103401An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handleHIGH8.828%EPSS 28%ileNVD2026-10-28
CVE-2026-116827YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() fHIGH8.228%EPSS 28%ileNVD2026-10-27
CVE-2026-119682An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SHIGH7.928%EPSS 28%ileNVD2026-10-30
CVE-2026-84725when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarsHIGH8.128%EPSS 28%ileNVD2026-10-28
CVE-2026-116580Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. PHIGH7.328%EPSS 28%ileNVD2026-10-26
CVE-2026-118331Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exHIGH8.828%EPSS 28%ileNVD2026-10-27
CVE-2026-118344Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insHIGH8.828%EPSS 28%ileNVD2026-10-27
CVE-2026-118348Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execuHIGH8.828%EPSS 28%ileNVD2026-10-27
CVE-2026-119421Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that HIGH8.228%EPSS 28%ileNVD2026-10-30
CVE-2026-18449The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to cHIGH7.527%EPSS 27%ileNVD2026-10-27
CVE-2026-111577The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuHIGH7.227%EPSS 27%ileNVD2026-10-28
CVE-2026-106972Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackHIGH7.527%EPSS 27%ileNVD2026-10-28
CVE-2026-103963A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, theHIGH7.527%EPSS 27%ileNVD2026-10-30
CVE-2026-62297ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediationHIGH7.527%EPSS 27%ileNVD2026-10-30
CVE-2026-62864Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-paraHIGH7.527%EPSS 27%ileNVD2026-10-30
CVE-2026-118606Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allHIGH8.827%EPSS 27%ileNVD2026-10-28
CVE-2026-118245Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConHIGH8.627%EPSS 27%ileNVD2026-10-28
CVE-2026-118246Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts apHIGH8.427%EPSS 27%ileNVD2026-10-28
CVE-2026-114488A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security iHIGH7.427%EPSS 27%ileNVD2026-10-29
CVE-2026-116796Highcharts JS is a JavaScript charting library based on SVG. From 10.3.2 until 11.4.9, 12.6.2, and 13.1.1, Highcharts acHIGH7.227%EPSS 27%ileNVD2026-10-28
CVE-2026-118244Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back HIGH7.227%EPSS 27%ileNVD2026-10-28
CVE-2026-107672A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post PrHIGH8.827%EPSS 27%ileNVD2026-10-27
CVE-2026-119655CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpointHIGH8.727%EPSS 27%ileNVD2026-10-30
CVE-2026-119656CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPagHIGH8.727%EPSS 27%ileNVD2026-10-30
CVE-2026-116964A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within theHIGH8.427%EPSS 27%ileNVD2026-10-31
CVE-2026-63224OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV crHIGH7.227%EPSS 27%ileNVD2026-10-30
CVE-2026-118610Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabilityHIGH8.827%EPSS 27%ileNVD2026-10-28
CVE-2026-118759Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, theHIGH7.527%EPSS 27%ileNVD2026-10-29
CVE-2026-115591Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-sHIGH7.527%EPSS 27%ileNVD2026-10-28
CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found iHIGH7.527%EPSS 27%ileNVD2026-10-29
CVE-2026-116861Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.HIGH7.527%EPSS 27%ileNVD2026-10-30
CVE-2026-119337RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chaHIGH7.127%EPSS 27%ileNVD2026-10-30
CVE-2026-62965SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py`HIGH7.027%EPSS 27%ileNVD2026-10-30
CVE-2026-118330Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbHIGH8.827%EPSS 27%ileNVD2026-10-27
CVE-2026-86393Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.227%EPSS 27%ileNVD2026-10-28
CVE-2026-116591compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can paHIGH8.726%EPSS 26%ileNVD2026-10-26
CVE-2026-45049Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CHIGH8.326%EPSS 26%ileNVD2026-10-29
CVE-2026-118307Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitraHIGH8.826%EPSS 26%ileNVD2026-10-27
CVE-2026-116877Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-pHIGH8.726%EPSS 26%ileNVD2026-10-27
CVE-2026-116589Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentatiHIGH8.226%EPSS 26%ileNVD2026-10-26
CVE-2026-116740libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attaHIGH7.126%EPSS 26%ileNVD2026-10-26
CVE-2026-4337Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user tHIGH8.826%EPSS 26%ileNVD2026-10-27
CVE-2026-116243pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In serverHIGH7.725%EPSS 25%ileNVD2026-10-30
CVE-2026-103410An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauHIGH7.525%EPSS 25%ileNVD2026-10-28
CVE-2026-59185identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `HIGH8.525%EPSS 25%ileNVD2026-10-28
CVE-2026-102212Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console servHIGH8.425%EPSS 25%ileNVD2026-10-31
CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyHIGH9.925%EPSS 25%ileGitHub2026-10-27
CVE-2026-119051flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to crHIGH8.225%EPSS 25%ileNVD2026-10-29
CVE-2026-119551Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allowsHIGH7.125%EPSS 25%ileNVD2026-10-30
CVE-2026-118664decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in indHIGH8.225%EPSS 25%ileNVD2026-10-28
CVE-2026-105894The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to PHIGH8.825%EPSS 25%ileNVD2026-10-30
CVE-2026-116393Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly ConHIGH7.525%EPSS 25%ileNVD2026-10-28
CVE-2026-114193Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly ConfiguredHIGH7.525%EPSS 25%ileNVD2026-10-29
CVE-2026-115599Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access CHIGH7.525%EPSS 25%ileNVD2026-10-29
CVE-2026-116401Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.HIGH7.525%EPSS 25%ileNVD2026-10-30
CVE-2026-116862Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.HIGH7.525%EPSS 25%ileNVD2026-10-30
CVE-2026-118317Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitHIGH8.825%EPSS 25%ileNVD2026-10-27
CVE-2026-118320Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitraHIGH8.825%EPSS 25%ileNVD2026-10-27
CVE-2026-118336Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially eHIGH8.825%EPSS 25%ileNVD2026-10-27
CVE-2026-118339Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code HIGH8.825%EPSS 25%ileNVD2026-10-27
CVE-2026-119764Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling taHIGH7.425%EPSS 25%ileNVD2026-10-30
CVE-2026-65211This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby exeHIGH7.225%EPSS 25%ileNVD2026-10-27
CVE-2026-116797Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderersHIGH8.524%EPSS 24%ileNVD2026-10-28
CVE-2026-110540Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions HIGH7.124%EPSS 24%ileNVD2026-10-28
CVE-2026-111120The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versHIGH8.824%EPSS 24%ileNVD2026-10-28
CVE-2026-115829In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfulHIGH8.724%EPSS 24%ileNVD2026-10-30
CVE-2026-118669OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentialsHIGH8.424%EPSS 24%ileNVD2026-10-28
CVE-2026-107044Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily maniHIGH7.524%EPSS 24%ileNVD2026-10-29
CVE-2026-107049An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplyHIGH7.524%EPSS 24%ileNVD2026-10-29
CVE-2026-116086A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information HIGH8.824%EPSS 24%ileNVD2026-10-31
CVE-2026-63396Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.HIGH8.724%EPSS 24%ileNVD2026-10-30
CVE-2026-61438PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxHIGH7.324%EPSS 24%ileGitHub2026-10-29
CVE-2026-109822Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive inHIGH7.124%EPSS 24%ileNVD2026-10-29
CVE-2026-103408A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticaHIGH8.824%EPSS 24%ileNVD2026-10-28
CVE-2026-8822A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A spHIGH7.524%EPSS 24%ileNVD2026-10-29
CVE-2026-8824A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s)HIGH7.524%EPSS 24%ileNVD2026-10-29
CVE-2026-9536A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (veHIGH7.524%EPSS 24%ileNVD2026-10-29
CVE-2026-117604Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that alloHIGH8.724%EPSS 24%ileNVD2026-10-27
CVE-2026-61542Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem,HIGH8.624%EPSS 24%ileNVD2026-10-28
CVE-2026-110662The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-HIGH7.224%EPSS 24%ileNVD2026-10-28
CVE-2026-111254The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all HIGH7.224%EPSS 24%ileNVD2026-10-31
CVE-2026-119707SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routHIGH7.124%EPSS 24%ileNVD2026-10-30
CVE-2026-75891The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, andHIGH8.823%EPSS 23%ileNVD2026-10-27
CVE-2026-119144Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability becauseHIGH8.723%EPSS 23%ileNVD2026-10-29
CVE-2026-118242Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elHIGH8.523%EPSS 23%ileNVD2026-10-28
CVE-2026-39736Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngiHIGH8.523%EPSS 23%ileNVD2026-10-29
CVE-2026-76031Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insiHIGH8.823%EPSS 23%ileNVD2026-10-30
CVE-2026-119163The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulneHIGH7.523%EPSS 23%ileNVD2026-10-31
CVE-2026-119203pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while openingHIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-119204pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsiHIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-119205pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning HIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-119206pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve pageHIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-119207pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strictHIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-119208pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory whHIGH7.123%EPSS 23%ileNVD2026-10-29
CVE-2026-76025Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary codeHIGH8.823%EPSS 23%ileNVD2026-10-30
CVE-2026-116819OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtainHIGH8.423%EPSS 23%ileNVD2026-10-27
CVE-2026-86377Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7HIGH7.623%EPSS 23%ileNVD2026-10-28
CVE-2026-120070The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend PostHIGH8.823%EPSS 23%ileNVD2026-10-31
CVE-2026-100164Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. AHIGH7.523%EPSS 23%ileNVD2026-10-27
CVE-2026-118083Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.HIGH7.523%EPSS 23%ileNVD2026-10-29
CVE-2026-118262Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy gorouHIGH8.223%EPSS 23%ileNVD2026-10-28
CVE-2026-111460A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthHIGH7.723%EPSS 23%ileNVD2026-10-27
CVE-2026-96669The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'seHIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-115821The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_laHIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-118763sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/regisHIGH7.423%EPSS 23%ileNVD2026-10-29
CVE-2026-116392Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue aHIGH7.223%EPSS 23%ileNVD2026-10-28
CVE-2026-115590Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects DoHIGH7.223%EPSS 23%ileNVD2026-10-28
CVE-2026-116390Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything&nbsp;— WordPress &amp; WooCommerce FilterHIGH7.223%EPSS 23%ileNVD2026-10-28
CVE-2026-116864Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-116865Editor PHP Object Injection in Zippy <= 1.7.0 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-116869Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-118074Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-118077Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-118078Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-118079Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.HIGH7.223%EPSS 23%ileNVD2026-10-29
CVE-2026-92546Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows AuthHIGH7.523%EPSS 23%ileNVD2026-10-27
CVE-2026-114616Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)HIGH7.423%EPSS 23%ileGitHub2026-10-27
CVE-2026-114597In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can HIGH8.722%EPSS 22%ileNVD2026-10-27
CVE-2026-114598In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can HIGH8.722%EPSS 22%ileNVD2026-10-27
CVE-2026-111578The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape sevHIGH7.522%EPSS 22%ileNVD2026-10-30
CVE-2026-84243The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries HIGH7.022%EPSS 22%ileNVD2026-10-30
CVE-2026-93451snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methodsHIGH7.522%EPSS 22%ileGitHub2026-10-27
CVE-2026-96666The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content viaHIGH7.222%EPSS 22%ileNVD2026-10-29
CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-nameHIGH7.122%EPSS 22%ileNVD2026-10-30
CVE-2026-115830In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive HIGH8.722%EPSS 22%ileNVD2026-10-30
CVE-2026-59979YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapsHIGH8.322%EPSS 22%ileNVD2026-10-28
CVE-2026-94347PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.HIGH7.222%EPSS 22%ileNVD2026-10-27
CVE-2026-14467An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorisedHIGH8.222%EPSS 22%ileNVD2026-10-30
CVE-2026-118678n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged usersHIGH7.122%EPSS 22%ileNVD2026-10-28
CVE-2026-118035In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient alHIGH7.522%EPSS 22%ileNVD2026-10-28
CVE-2026-109999The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media &HIGH7.222%EPSS 22%ileNVD2026-10-28
CVE-2026-52729Xibo is an open source digital signage platform with a web content management system and Windows display player softwareHIGH7.122%EPSS 22%ileNVD2026-10-28
CVE-2026-105972The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data beforeHIGH7.522%EPSS 22%ileNVD2026-10-28
CVE-2026-100105A user with permission to edit contact points but not their protected fields can change protected settings, such as a coHIGH7.722%EPSS 22%ileNVD2026-10-28
CVE-2026-88967A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controHIGH7.722%EPSS 22%ileNVD2026-10-28
CVE-2026-115965Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPrHIGH8.522%EPSS 22%ileNVD2026-10-29
CVE-2026-119559OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackersHIGH8.222%EPSS 22%ileNVD2026-10-30
CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabilHIGH7.822%EPSS 22%ileNVD2026-10-29
CVE-2026-111585An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and RHIGH8.821%EPSS 21%ileNVD2026-10-27
CVE-2026-116389Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object InjeHIGH8.821%EPSS 21%ileNVD2026-10-28
CVE-2026-116866Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.HIGH8.821%EPSS 21%ileNVD2026-10-29
CVE-2026-113387The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secreHIGH8.621%EPSS 21%ileNVD2026-10-29
CVE-2026-58205GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` paraHIGH8.121%EPSS 21%ileNVD2026-10-27
CVE-2026-85749MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, inHIGH8.121%EPSS 21%ileNVD2026-10-28
CVE-2026-120202Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide maliHIGH7.121%EPSS 21%ileNVD2026-10-31
CVE-2026-111739The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress plugin before 5.5.0 HIGH7.521%EPSS 21%ileNVD2026-10-29
CVE-2026-118185The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that HIGH7.521%EPSS 21%ileNVD2026-10-31
CVE-2026-61804myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`HIGH8.121%EPSS 21%ileNVD2026-10-30
CVE-2026-119577ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access throHIGH7.621%EPSS 21%ileNVD2026-10-30
CVE-2026-102790Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16HIGH8.621%EPSS 21%ileNVD2026-10-28
CVE-2026-119129ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability in Login V2 that allHIGH8.621%EPSS 21%ileNVD2026-10-29
CVE-2026-117493Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScriptHIGH8.321%EPSS 21%ileNVD2026-10-27
CVE-2026-117494Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:iHIGH8.321%EPSS 21%ileNVD2026-10-27
CVE-2026-119574Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackerHIGH8.221%EPSS 21%ileNVD2026-10-30
CVE-2026-119426phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbHIGH7.721%EPSS 21%ileNVD2026-10-30
CVE-2026-118357Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arHIGH8.821%EPSS 21%ileNVD2026-10-27
CVE-2026-118359Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitraHIGH8.821%EPSS 21%ileNVD2026-10-27
CVE-2026-118510A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the abHIGH7.721%EPSS 21%ileNVD2026-10-28
CVE-2026-106174A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attHIGH7.521%EPSS 21%ileNVD2026-10-27
CVE-2026-61569AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passeHIGH7.521%EPSS 21%ileNVD2026-10-28
CVE-2026-112347Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST APIHIGH7.221%EPSS 21%ileNVD2026-10-30
CVE-2026-104744The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' pHIGH7.221%EPSS 21%ileNVD2026-10-30
CVE-2026-120040The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, aHIGH7.521%EPSS 21%ileNVD2026-10-31
CVE-2026-119262Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially executeHIGH8.821%EPSS 21%ileNVD2026-10-30
CVE-2026-104012The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege EsHIGH8.821%EPSS 21%ileNVD2026-10-31
CVE-2026-111503Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH7.121%EPSS 21%ileNVD2026-10-30
CVE-2025-14260Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resoHIGH8.320%EPSS 20%ileNVD2026-10-28
CVE-2026-61571AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control HIGH7.320%EPSS 20%ileNVD2026-10-28
CVE-2026-107653The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & PaymentHIGH7.220%EPSS 20%ileNVD2026-10-31
CVE-2026-62989Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/LiHIGH8.120%EPSS 20%ileNVD2026-10-30
CVE-2026-109855undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshakeHIGH7.520%EPSS 20%ileGitHub2026-10-27
CVE-2026-93570Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafHIGH8.220%EPSS 20%ileNVD2026-10-29
CVE-2026-41216An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A HIGH7.520%EPSS 20%ileNVD2026-10-29
CVE-2026-42057An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. AHIGH7.520%EPSS 20%ileNVD2026-10-29
CVE-2026-116821YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SHIGH7.120%EPSS 20%ileNVD2026-10-27
CVE-2026-119127ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticateHIGH8.620%EPSS 20%ileNVD2026-10-29
CVE-2026-116244When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME froHIGH7.120%EPSS 20%ileNVD2026-10-30
CVE-2026-65874This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) aHIGH8.820%EPSS 20%ileNVD2026-10-30
CVE-2026-116613The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and inclHIGH7.520%EPSS 20%ileNVD2026-10-28
CVE-2026-116814OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email temHIGH7.120%EPSS 20%ileNVD2026-10-27
CVE-2026-86794The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public evHIGH8.820%EPSS 20%ileNVD2026-10-29
CVE-2026-117571The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape tracking data derHIGH8.820%EPSS 20%ileNVD2026-10-30
CVE-2026-118304Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially executHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-118311Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbiHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-118313Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insiHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-118314Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potenHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-118327Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbiHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-118037In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,HIGH7.520%EPSS 20%ileNVD2026-10-28
CVE-2026-116672Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientCHIGH8.820%EPSS 20%ileNVD2026-10-27
CVE-2026-89216The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statHIGH8.620%EPSS 20%ileNVD2026-10-29
CVE-2026-118696In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2HIGH8.020%EPSS 20%ileNVD2026-10-30
CVE-2026-110732The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing AuthorizatioHIGH7.520%EPSS 20%ileNVD2026-10-30
CVE-2026-118257Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-HIGH7.220%EPSS 20%ileNVD2026-10-28
CVE-2026-107759The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'SubjeHIGH7.220%EPSS 20%ileNVD2026-10-31
CVE-2026-118682KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attHIGH7.719%EPSS 19%ileNVD2026-10-28
CVE-2026-118649n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner projecHIGH8.719%EPSS 19%ileNVD2026-10-28
CVE-2026-103506An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required HIGH8.919%EPSS 19%ileNVD2026-10-28
CVE-2026-112355The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthHIGH8.719%EPSS 19%ileNVD2026-10-27
CVE-2026-66090In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user HIGH7.119%EPSS 19%ileNVD2026-10-29
CVE-2026-103094ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. ThiHIGH7.119%EPSS 19%ileNVD2026-10-29
CVE-2026-118039In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulneHIGH7.519%EPSS 19%ileNVD2026-10-28
CVE-2026-119209pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while openiHIGH7.119%EPSS 19%ileNVD2026-10-29
CVE-2026-63339IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticaHIGH8.819%EPSS 19%ileNVD2026-10-30
CVE-2026-93851Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the AgeHIGH8.019%EPSS 19%ileNVD2026-10-28
CVE-2026-116807OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping HIGH7.019%EPSS 19%ileNVD2026-10-27
CVE-2026-118315Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially executHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118334Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary coHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118335Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to poteHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118338Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118341Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary HIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118343Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiallHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118345Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118346Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute aHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118347Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary codeHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118349Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary codHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118350Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code iHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118351Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118353Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insiHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118352Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbiHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118354Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execuHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-118356Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insideHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-91917Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privilegHIGH8.018%EPSS 18%ileNVD2026-10-30
CVE-2026-118617Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabHIGH7.818%EPSS 18%ileNVD2026-10-28
CVE-2026-11587SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon databaseHIGH7.218%EPSS 18%ileNVD2026-10-29
CVE-2026-120205Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows uHIGH7.418%EPSS 18%ileNVD2026-10-31
CVE-2026-116240In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which buildsHIGH7.118%EPSS 18%ileNVD2026-10-30
CVE-2026-114596In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigHIGH8.818%EPSS 18%ileNVD2026-10-27
CVE-2026-63338IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticaHIGH8.318%EPSS 18%ileNVD2026-10-30
CVE-2026-118648n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability beHIGH8.418%EPSS 18%ileNVD2026-10-28
CVE-2026-107750The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via tHIGH7.218%EPSS 18%ileNVD2026-10-31
CVE-2026-9535A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A HIGH8.218%EPSS 18%ileNVD2026-10-29
CVE-2026-109089A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious HIGH7.518%EPSS 18%ileNVD2026-10-27
CVE-2026-109090A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi beforeHIGH7.518%EPSS 18%ileNVD2026-10-27
CVE-2026-65220A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate HIGH8.817%EPSS 17%ileNVD2026-10-27
CVE-2026-92744Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as HIGH8.717%EPSS 17%ileNVD2026-10-29
CVE-2026-119575ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authenticated usersHIGH7.117%EPSS 17%ileNVD2026-10-30
CVE-2026-116252pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treHIGH7.117%EPSS 17%ileNVD2026-10-30
CVE-2026-107055Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to HIGH7.517%EPSS 17%ileNVD2026-10-29
CVE-2026-85299A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute HIGH8.317%EPSS 17%ileNVD2026-10-27
CVE-2026-115709Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unHIGH8.217%EPSS 17%ileNVD2026-10-29
CVE-2026-108303Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.HIGH8.817%EPSS 17%ileNVD2026-10-27
CVE-2026-61572AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/funcHIGH8.617%EPSS 17%ileNVD2026-10-28
CVE-2026-118638The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writHIGH7.517%EPSS 17%ileNVD2026-10-31
CVE-2026-65327A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mHIGH8.417%EPSS 17%ileNVD2026-10-26
CVE-2026-119270Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentialHIGH8.817%EPSS 17%ileNVD2026-10-30
CVE-2026-118038In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the HIGH7.117%EPSS 17%ileNVD2026-10-28
CVE-2013-20008Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administraHIGH7.017%EPSS 17%ileNVD2026-10-28
CVE-2026-91914Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unaHIGH7.116%EPSS 16%ileNVD2026-10-30
CVE-2026-118804Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to HIGH7.516%EPSS 16%ileNVD2026-10-28
CVE-2026-110176The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a fHIGH8.716%EPSS 16%ileNVD2026-10-31
CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenHIGH7.116%EPSS 16%ileNVD2026-10-28
CVE-2026-106087TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to readHIGH8.716%EPSS 16%ileNVD2026-10-27
CVE-2026-119336Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From HIGH7.816%EPSS 16%ileNVD2026-10-30
CVE-2026-54455OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior tHIGH7.616%EPSS 16%ileNVD2026-10-28
CVE-2026-116522The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parHIGH7.216%EPSS 16%ileNVD2026-10-31
CVE-2026-119190Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nodHIGH7.416%EPSS 16%ileNVD2026-10-29
CVE-2025-62839An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid BacHIGH8.716%EPSS 16%ileNVD2026-10-29
CVE-2025-62841An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid BacHIGH8.716%EPSS 16%ileNVD2026-10-29
CVE-2026-62990Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1HIGH8.716%EPSS 16%ileNVD2026-10-30
CVE-2026-61854VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report HIGH8.216%EPSS 16%ileNVD2026-10-30
CVE-2026-84627A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS HIGH7.816%EPSS 16%ileNVD2026-10-26
CVE-2026-117183A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape theHIGH7.516%EPSS 16%ileNVD2026-10-30
CVE-2026-90442A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with accesHIGH8.616%EPSS 16%ileNVD2026-10-27
CVE-2026-116647Tanium addressed an improper output sanitization vulnerability in Comply.HIGH7.116%EPSS 16%ileNVD2026-10-27
CVE-2026-42692Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.HIGH7.116%EPSS 16%ileNVD2026-10-29
CVE-2026-54866Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.HIGH7.116%EPSS 16%ileNVD2026-10-29
CVE-2026-118688wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to HIGH8.815%EPSS 15%ileNVD2026-10-28
CVE-2026-119260Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119264Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119265Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbiHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119266Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitraHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119267Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119268Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119269Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insiHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119271Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insidHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-76026Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary codHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-76028Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary codeHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-76029Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-76030Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially executeHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-119332Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::clHIGH8.815%EPSS 15%ileNVD2026-10-30
CVE-2026-116826YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allHIGH8.215%EPSS 15%ileNVD2026-10-27
CVE-2026-84604A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, maHIGH7.815%EPSS 15%ileNVD2026-10-26
CVE-2026-118613Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows HIGH7.815%EPSS 15%ileNVD2026-10-28
CVE-2026-119325Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_poHIGH7.515%EPSS 15%ileNVD2026-10-29
CVE-2026-111314The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored CrHIGH7.215%EPSS 15%ileNVD2026-10-28
CVE-2026-111111The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable HIGH7.215%EPSS 15%ileNVD2026-10-28
CVE-2026-116622The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theHIGH7.215%EPSS 15%ileNVD2026-10-30
CVE-2026-115840The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pHIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-116548The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oHIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-118070The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all HIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-119065The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-119162The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored HIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-118057The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerablHIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-110530The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 20HIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-119680A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to iHIGH8.515%EPSS 15%ileNVD2026-10-30
CVE-2026-22110The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brutHIGH8.715%EPSS 15%ileNVD2026-10-30
CVE-2026-92092A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory anHIGH7.415%EPSS 15%ileNVD2026-10-29
CVE-2026-118043The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a filHIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-111820The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-SitHIGH7.215%EPSS 15%ileNVD2026-10-27
CVE-2026-117611Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stHIGH7.115%EPSS 15%ileNVD2026-10-29
CVE-2026-112827Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshippingHIGH7.115%EPSS 15%ileNVD2026-10-29
CVE-2026-115963Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allHIGH7.115%EPSS 15%ileNVD2026-10-29
CVE-2026-119422Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers HIGH8.215%EPSS 15%ileNVD2026-10-30
CVE-2026-118603Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allowsHIGH8.015%EPSS 15%ileNVD2026-10-28
CVE-2026-118605Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnHIGH8.015%EPSS 15%ileNVD2026-10-28
CVE-2026-61719WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in `saudHIGH8.915%EPSS 15%ileNVD2026-10-29
CVE-2026-105765HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's serviHIGH7.515%EPSS 15%ileNVD2026-10-26
CVE-2026-109995The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-SiteHIGH7.215%EPSS 15%ileNVD2026-10-27
CVE-2026-97019The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlinHIGH7.215%EPSS 15%ileNVD2026-10-28
CVE-2026-96741The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via OuHIGH7.215%EPSS 15%ileNVD2026-10-29
CVE-2026-119089The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulneraHIGH7.215%EPSS 15%ileNVD2026-10-31
CVE-2026-61988Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.HIGH7.115%EPSS 15%ileNVD2026-10-29
CVE-2026-104597libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a rHIGH7.514%EPSS 14%ileNVD2026-10-26
CVE-2026-104598libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remHIGH7.514%EPSS 14%ileNVD2026-10-26
CVE-2026-116876Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editorsHIGH7.114%EPSS 14%ileNVD2026-10-27
CVE-2026-116812OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows prHIGH7.114%EPSS 14%ileNVD2026-10-27
CVE-2026-116813OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-reHIGH7.114%EPSS 14%ileNVD2026-10-27
CVE-2026-59387The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ enHIGH8.814%EPSS 14%ileNVD2026-10-30
CVE-2026-116242pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, soHIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-118992CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configurHIGH8.414%EPSS 14%ileNVD2026-10-30
CVE-2026-120232A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the functiHIGH8.514%EPSS 14%ileNVD2026-11-01
CVE-2026-118645n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick HIGH7.014%EPSS 14%ileNVD2026-10-28
CVE-2026-103407An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks SessiHIGH8.814%EPSS 14%ileNVD2026-10-28
CVE-2026-45144Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is anonymously HIGH8.914%EPSS 14%ileNVD2026-10-30
CVE-2026-117466In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full sHIGH8.614%EPSS 14%ileNVD2026-10-27
CVE-2026-106077A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on thHIGH8.314%EPSS 14%ileNVD2026-10-27
CVE-2026-119283joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standarHIGH7.514%EPSS 14%ileNVD2026-10-29
CVE-2026-120075The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includiHIGH7.214%EPSS 14%ileNVD2026-10-31
CVE-2026-61993Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.HIGH7.114%EPSS 14%ileNVD2026-10-29
CVE-2026-61995Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.HIGH7.114%EPSS 14%ileNVD2026-10-29
CVE-2026-105077Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions.HIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-54855Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.HIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-58412Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the uploHIGH8.214%EPSS 14%ileNVD2026-10-30
CVE-2026-119335Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. PriorHIGH7.814%EPSS 14%ileNVD2026-10-30
CVE-2026-28160Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCaHIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-39786Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.HIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-48201Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.HIGH7.114%EPSS 14%ileNVD2026-10-30
CVE-2026-41020Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to capHIGH7.513%EPSS 13%ileNVD2026-10-27
CVE-2026-33923A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validHIGH7.513%EPSS 13%ileNVD2026-10-29
CVE-2026-116870In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in HIGH8.713%EPSS 13%ileNVD2026-10-27
CVE-2026-117341In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. WhHIGH7.713%EPSS 13%ileNVD2026-10-27
CVE-2026-62374SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and eHIGH7.113%EPSS 13%ileNVD2026-10-29
CVE-2026-116825YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validateHIGH8.313%EPSS 13%ileNVD2026-10-27
CVE-2026-87102Sensitive information disclosure and manipulation due to improper token validation. The following products are affected:HIGH7.413%EPSS 13%ileNVD2026-10-28
CVE-2026-87103Sensitive information disclosure and manipulation due to improper token validation. The following products are affected:HIGH7.413%EPSS 13%ileNVD2026-10-28
CVE-2026-67073HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow anHIGH8.613%EPSS 13%ileNVD2026-10-28
CVE-2026-104593osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This alloHIGH7.513%EPSS 13%ileNVD2026-10-26
CVE-2026-119287Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry modeHIGH8.013%EPSS 13%ileNVD2026-10-30
CVE-2026-116896REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any databaseHIGH7.713%EPSS 13%ileNVD2026-10-27
CVE-2026-13303HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential storeHIGH8.713%EPSS 13%ileNVD2026-10-29
CVE-2026-104615A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12HIGH7.913%EPSS 13%ileNVD2026-10-30
CVE-2026-118618Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers tHIGH7.813%EPSS 13%ileNVD2026-10-28
CVE-2026-117619Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, includHIGH8.113%EPSS 13%ileNVD2026-10-28
CVE-2026-99185In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transacHIGH8.812%EPSS 12%ileNVD2026-10-28
CVE-2026-116837A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in HIGH8.812%EPSS 12%ileNVD2026-10-27
CVE-2026-114615Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysHIGH7.412%EPSS 12%ileGitHub2026-10-27
CVE-2026-104062Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allowHIGH8.512%EPSS 12%ileNVD2026-10-30
CVE-2026-104064Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attaHIGH8.512%EPSS 12%ileNVD2026-10-30
CVE-2026-104066Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when uHIGH8.512%EPSS 12%ileNVD2026-10-30
CVE-2026-13451A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources HIGH7.712%EPSS 12%ileNVD2026-10-28
CVE-2026-6647In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for iHIGH7.412%EPSS 12%ileNVD2026-10-28
CVE-2025-30414Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect ClHIGH7.112%EPSS 12%ileNVD2026-10-28
CVE-2026-117616Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validatinHIGH8.811%EPSS 11%ileNVD2026-10-28
CVE-2026-118374LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhHIGH8.211%EPSS 11%ileNVD2026-10-28
CVE-2026-59176Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP toolHIGH7.811%EPSS 11%ileNVD2026-10-28
CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launcHIGH7.211%EPSS 11%ileNVD2026-10-28
CVE-2026-111850Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPrHIGH8.511%EPSS 11%ileNVD2026-10-28
CVE-2026-115603Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH HIGH8.511%EPSS 11%ileNVD2026-10-28
CVE-2026-112484This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.HIGH7.811%EPSS 11%ileNVD2026-10-26
CVE-2026-116897REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history HIGH7.111%EPSS 11%ileNVD2026-10-27
CVE-2026-62958libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the hostHIGH7.910%EPSS 10%ileNVD2026-10-30
CVE-2026-82121Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01HIGH7.510%EPSS 10%ileNVD2026-10-27
CVE-2026-110972Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backenHIGH8.610%EPSS 10%ileNVD2026-10-30
CVE-2025-68393ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization oHIGH8.410%EPSS 10%ileNVD2026-10-30
CVE-2025-68394ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization oHIGH8.410%EPSS 10%ileNVD2026-10-30
CVE-2026-86916A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iHIGH7.810%EPSS 10%ileNVD2026-10-26
CVE-2026-120207Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to deleHIGH7.010%EPSS 10%ileNVD2026-10-31
CVE-2026-118614Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attacHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-118616Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers tHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93518An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients iHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93519A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland bHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93520A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X HIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93521A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 cHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93522A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and HIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-93523A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server bHIGH7.810%EPSS 10%ileNVD2026-10-28
CVE-2026-116649Tanium addressed an improper output sanitization vulnerability in Enforce.HIGH7.110%EPSS 10%ileNVD2026-10-27
CVE-2026-115596Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommercHIGH7.110%EPSS 10%ileNVD2026-10-28
CVE-2026-115612Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.mihai SliceWPHIGH7.110%EPSS 10%ileNVD2026-10-28
CVE-2026-66570Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPressHIGH7.110%EPSS 10%ileNVD2026-11-01
CVE-2026-59164NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-HIGH7.110%EPSS 10%ileNVD2026-10-28
CVE-2026-117618In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not chHIGH8.110%EPSS 10%ileNVD2026-10-28
CVE-2026-103402An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and SesHIGH8.89%EPSS 9%ileNVD2026-10-28
CVE-2026-104061Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses uncheHIGH8.59%EPSS 9%ileNVD2026-10-30
CVE-2026-104065Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an HIGH8.59%EPSS 9%ileNVD2026-10-30
CVE-2026-104067Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify HIGH8.59%EPSS 9%ileNVD2026-10-30
CVE-2026-119718Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in pHIGH8.59%EPSS 9%ileNVD2026-10-30
CVE-2026-116836A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site ScrHIGH8.89%EPSS 9%ileNVD2026-10-27
CVE-2026-117624Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objectHIGH8.89%EPSS 9%ileNVD2026-10-28
CVE-2026-103665The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link LibrariHIGH8.49%EPSS 9%ileNVD2026-10-29
CVE-2026-112677An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS HIGH7.89%EPSS 9%ileNVD2026-10-26
CVE-2026-93517A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.HIGH8.59%EPSS 9%ileNVD2026-10-28
CVE-2026-97860YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who hHIGH8.49%EPSS 9%ileNVD2026-10-29
CVE-2026-111583Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.8HIGH7.39%EPSS 9%ileNVD2026-10-27
CVE-2026-111021The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameteHIGH7.19%EPSS 9%ileNVD2026-10-28
CVE-2026-117612Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by thHIGH8.89%EPSS 9%ileNVD2026-10-28
CVE-2026-117620Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in HIGH8.89%EPSS 9%ileNVD2026-10-28
CVE-2026-22105Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the devHIGH8.79%EPSS 9%ileNVD2026-10-30
CVE-2026-117617Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only beforHIGH8.19%EPSS 9%ileNVD2026-10-28
CVE-2026-114443The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the accoHIGH7.59%EPSS 9%ileNVD2026-10-30
CVE-2026-90437The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom FieldHIGH7.29%EPSS 9%ileNVD2026-10-30
CVE-2026-97645The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up toHIGH7.29%EPSS 9%ileNVD2026-10-30
CVE-2026-115593Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited ElementsHIGH7.19%EPSS 9%ileNVD2026-10-28
CVE-2026-115592Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP ocHIGH7.19%EPSS 9%ileNVD2026-10-29
CVE-2026-115611Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableHIGH7.19%EPSS 9%ileNVD2026-10-29
CVE-2026-116409Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell OHIGH7.19%EPSS 9%ileNVD2026-10-29
CVE-2026-108494Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.HIGH7.19%EPSS 9%ileNVD2026-10-29
CVE-2026-116405Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.HIGH7.19%EPSS 9%ileNVD2026-10-30
CVE-2026-116847Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.HIGH7.19%EPSS 9%ileNVD2026-10-30
CVE-2026-116851Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.HIGH7.19%EPSS 9%ileNVD2026-10-30
CVE-2026-116246To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrotHIGH7.09%EPSS 9%ileNVD2026-10-30
CVE-2026-84599The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iHIGH7.88%EPSS 8%ileNVD2026-10-26
CVE-2026-119572Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX prHIGH7.08%EPSS 8%ileNVD2026-10-30
CVE-2026-48379Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exeHIGH7.88%EPSS 8%ileNVD2026-10-27
CVE-2026-87018undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiationHIGH7.58%EPSS 8%ileGitHub2026-10-27
CVE-2026-119118Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interceHIGH8.38%EPSS 8%ileNVD2026-10-29
CVE-2026-88812A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached HIGH7.88%EPSS 8%ileNVD2026-10-27
CVE-2026-62848Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 202HIGH7.38%EPSS 8%ileNVD2026-10-30
CVE-2026-119288Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved WinHIGH7.08%EPSS 8%ileNVD2026-10-30
CVE-2026-118687Coder before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 before 2.37.4 does nHIGH8.38%EPSS 8%ileNVD2026-10-28
CVE-2026-119528A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copyingHIGH7.88%EPSS 8%ileNVD2026-10-30
CVE-2026-119777A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or streamHIGH7.88%EPSS 8%ileNVD2026-10-30
CVE-2026-119561phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionRespoHIGH7.68%EPSS 8%ileNVD2026-10-30
CVE-2026-46560Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opHIGH7.58%EPSS 8%ileNVD2026-10-30
CVE-2026-111730P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The receHIGH7.28%EPSS 8%ileNVD2026-10-29
CVE-2026-118684MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns THIGH8.28%EPSS 8%ileNVD2026-10-28
CVE-2026-13162An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbiHIGH7.78%EPSS 8%ileNVD2026-10-27
CVE-2026-119374SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to wrHIGH8.58%EPSS 8%ileNVD2026-10-30
CVE-2026-119379SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_HIGH8.58%EPSS 8%ileNVD2026-10-30
CVE-2026-63398Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolvHIGH7.48%EPSS 8%ileNVD2026-10-30
CVE-2026-109383undici vulnerable to TLS certificate validation bypass via dropped tls options in AgentHIGH7.48%EPSS 8%ileGitHub2026-10-27
CVE-2026-94175Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.HIGH7.18%EPSS 8%ileNVD2026-10-30
CVE-2026-116249In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relatHIGH7.28%EPSS 8%ileNVD2026-10-30
CVE-2026-119331Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheetHIGH7.18%EPSS 8%ileNVD2026-10-30
CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skipHIGH8.58%EPSS 8%ileNVD2026-10-30
CVE-2026-65151NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploHIGH8.48%EPSS 8%ileNVD2026-10-27
CVE-2026-61546AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard appliHIGH8.88%EPSS 8%ileNVD2026-10-28
CVE-2026-41021Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CHIGH7.58%EPSS 8%ileNVD2026-10-27
CVE-2026-116899REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices iHIGH7.18%EPSS 8%ileNVD2026-10-27
CVE-2026-118377mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthenticaHIGH8.78%EPSS 8%ileNVD2026-10-28
CVE-2026-10756TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access sHIGH7.78%EPSS 8%ileNVD2026-10-27
CVE-2026-118085Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.HIGH7.18%EPSS 8%ileNVD2026-10-29
CVE-2026-54864Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.HIGH7.18%EPSS 8%ileNVD2026-10-29
CVE-2026-116776USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB HIGH7.07%EPSS 7%ileNVD2026-10-28
CVE-2026-119289Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...)HIGH7.17%EPSS 7%ileNVD2026-10-30
CVE-2026-103411An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker witHIGH7.17%EPSS 7%ileNVD2026-10-28
CVE-2026-27394Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.HIGH7.17%EPSS 7%ileNVD2026-10-29
CVE-2026-61989Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions.HIGH7.17%EPSS 7%ileNVD2026-10-29
CVE-2026-119148Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWSHIGH8.27%EPSS 7%ileNVD2026-10-30
CVE-2026-111459An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditiHIGH7.67%EPSS 7%ileNVD2026-10-27
CVE-2026-102636A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, canHIGH7.16%EPSS 6%ileNVD2026-10-27
CVE-2026-102637A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoHIGH7.16%EPSS 6%ileNVD2026-10-27
CVE-2026-102638A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the LibrarHIGH7.16%EPSS 6%ileNVD2026-10-27
CVE-2026-110971Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decodHIGH7.76%EPSS 6%ileNVD2026-10-30
CVE-2026-119115Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)HIGH8.46%EPSS 6%ileNVD2026-10-29
CVE-2026-113775A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposHIGH7.86%EPSS 6%ileNVD2026-10-27
CVE-2026-116898REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target HIGH7.16%EPSS 6%ileNVD2026-10-27
CVE-2026-115805Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local useHIGH7.86%EPSS 6%ileNVD2026-10-29
CVE-2026-107019Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthoriHIGH8.86%EPSS 6%ileNVD2026-10-29
CVE-2026-107030Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger HIGH7.56%EPSS 6%ileNVD2026-10-29
CVE-2026-107041Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized aHIGH7.56%EPSS 6%ileNVD2026-10-29
CVE-2026-115708Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to auHIGH7.26%EPSS 6%ileNVD2026-10-29
CVE-2026-116399Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request ForHIGH8.86%EPSS 6%ileNVD2026-10-29
CVE-2026-65566Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This HIGH8.86%EPSS 6%ileNVD2026-10-30
CVE-2026-93862An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster inteHIGH7.26%EPSS 6%ileNVD2026-10-27
CVE-2026-111734P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherTyHIGH7.16%EPSS 6%ileNVD2026-10-29
CVE-2026-111735P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame whilHIGH7.16%EPSS 6%ileNVD2026-10-29
CVE-2026-61671WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controleHIGH8.16%EPSS 6%ileNVD2026-10-29
CVE-2026-107025Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export tHIGH7.56%EPSS 6%ileNVD2026-10-29
CVE-2026-65119NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attackerHIGH8.45%EPSS 5%ileNVD2026-10-27
CVE-2026-112198XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The applicatioHIGH8.35%EPSS 5%ileNVD2026-10-28
CVE-2026-59172Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint <file>` walks upHIGH7.85%EPSS 5%ileNVD2026-10-28
CVE-2026-119116A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWSHIGH8.75%EPSS 5%ileNVD2026-10-30
CVE-2026-116723FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackeHIGH8.55%EPSS 5%ileNVD2026-10-26
CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extHIGH8.55%EPSS 5%ileNVD2026-10-30
CVE-2026-115713Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unHIGH7.55%EPSS 5%ileNVD2026-10-29
CVE-2026-116245libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry HIGH7.15%EPSS 5%ileNVD2026-10-30
CVE-2026-116794russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.50.0-beta.12 unHIGH8.35%EPSS 5%ileNVD2026-10-28
CVE-2026-104349Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary cHIGH7.35%EPSS 5%ileNVD2026-10-27
CVE-2026-119086Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enableHIGH8.25%EPSS 5%ileNVD2026-10-30
CVE-2026-51832An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a HIGH7.85%EPSS 5%ileNVD2026-10-29
CVE-2026-61627libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. PHIGH7.35%EPSS 5%ileNVD2026-10-30
CVE-2026-47486NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successfHIGH7.84%EPSS 4%ileNVD2026-10-27
CVE-2026-47235SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before thHIGH7.54%EPSS 4%ileNVD2026-10-28
CVE-2015-20129CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrativHIGH8.64%EPSS 4%ileNVD2026-10-28
CVE-2026-118378Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute HIGH8.54%EPSS 4%ileNVD2026-10-28
CVE-2026-119117Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the liHIGH8.24%EPSS 4%ileNVD2026-10-30
CVE-2026-62847Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.HIGH8.24%EPSS 4%ileNVD2026-10-30
CVE-2026-63182LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate suppoHIGH8.14%EPSS 4%ileNVD2026-10-30
CVE-2026-22109The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. DefauHIGH8.44%EPSS 4%ileNVD2026-10-30
CVE-2025-13833A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled andHIGH7.74%EPSS 4%ileNVD2026-10-26
CVE-2026-109829undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsHIGH7.44%EPSS 4%ileGitHub2026-10-27
CVE-2026-92797The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.HIGH8.84%EPSS 4%ileNVD2026-10-28
CVE-2026-116724FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel HIGH8.54%EPSS 4%ileNVD2026-10-26
CVE-2026-78402Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows OverfHIGH7.34%EPSS 4%ileNVD2026-10-30
CVE-2026-116576systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js iHIGH7.84%EPSS 4%ileNVD2026-10-26
CVE-2026-115606Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crowd Favorite DXPHIGH7.14%EPSS 4%ileNVD2026-10-28
CVE-2026-115609Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan GetPaid inHIGH7.14%EPSS 4%ileNVD2026-10-28
CVE-2026-119373SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the outputHIGH8.54%EPSS 4%ileNVD2026-10-30
CVE-2026-116641The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. HoweHIGH7.64%EPSS 4%ileNVD2026-10-28
CVE-2026-118765Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and thenHIGH7.34%EPSS 4%ileNVD2026-10-29
CVE-2026-24269NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful eHIGH7.14%EPSS 4%ileNVD2026-10-27
CVE-2026-65120NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful eHIGH7.14%EPSS 4%ileNVD2026-10-27
CVE-2026-119407Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSession, allHIGH7.14%EPSS 4%ileNVD2026-10-30
CVE-2026-118752FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFHIGH8.53%EPSS 3%ileNVD2026-10-28
CVE-2026-118753FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attacHIGH8.53%EPSS 3%ileNVD2026-10-28
CVE-2026-119282Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and HIGH7.33%EPSS 3%ileNVD2026-10-29
CVE-2026-108305Tanium addressed a local privilege escalation vulnerability in End-User Notifications.HIGH7.83%EPSS 3%ileNVD2026-10-27
CVE-2026-118905Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.HIGH7.13%EPSS 3%ileNVD2026-10-29
CVE-2026-99216In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on HIGH8.43%EPSS 3%ileNVD2026-10-28
CVE-2026-108306Tanium addressed a local privilege escalation vulnerability in End-User Notifications.HIGH7.83%EPSS 3%ileNVD2026-10-27
CVE-2026-119333draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell HIGH7.83%EPSS 3%ileNVD2026-10-30
CVE-2026-99142In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushiHIGH7.13%EPSS 3%ileNVD2026-10-28
CVE-2026-119168HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration thHIGH8.83%EPSS 3%ileNVD2026-10-29
CVE-2026-117536REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/HIGH8.63%EPSS 3%ileNVD2026-10-27
CVE-2026-116816llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that alloHIGH8.53%EPSS 3%ileNVD2026-10-27
CVE-2026-99163In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields foHIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-107347HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writesHIGH8.43%EPSS 3%ileNVD2026-10-29
CVE-2026-99116In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clonHIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-93864A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution aHIGH7.13%EPSS 3%ileNVD2026-10-27
CVE-2026-101213Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privHIGH7.83%EPSS 3%ileNVD2026-10-30
CVE-2026-105477A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by aHIGH7.33%EPSS 3%ileNVD2026-10-27
CVE-2026-99112In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flower: validate mask pointer after HIGH7.13%EPSS 3%ileNVD2026-10-28
CVE-2026-86715Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. VHIGH7.13%EPSS 3%ileNVD2026-10-30
CVE-2026-99170In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out can'HIGH8.83%EPSS 3%ileNVD2026-10-28
CVE-2026-92376Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring foHIGH7.83%EPSS 3%ileNVD2026-10-27
CVE-2026-99109In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit HIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-99156In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between st_removeHIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-99164In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bHIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-99167In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put()HIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-99180In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period genericHIGH7.83%EPSS 3%ileNVD2026-10-28
CVE-2026-40573NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` inHIGH8.62%EPSS 2%ileNVD2026-10-30
CVE-2026-112357GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local priHIGH8.52%EPSS 2%ileNVD2026-10-28
CVE-2026-108307Tanium addressed a heap-based buffer overflow vulnerability in Index.HIGH7.82%EPSS 2%ileNVD2026-10-27
CVE-2026-99143In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from proHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-82961The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode callHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-116247When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one coulHIGH7.12%EPSS 2%ileNVD2026-10-30
CVE-2026-99117In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group wHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-99123In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected HIGH7.12%EPSS 2%ileNVD2026-10-28
CVE-2026-99173In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfs_inode after an rcu grace HIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-99213In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established HandlHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-118782Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nodHIGH7.52%EPSS 2%ileNVD2026-10-29
CVE-2026-15564Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who HIGH7.42%EPSS 2%ileNVD2026-10-29
CVE-2026-6064Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet SecurityHIGH7.32%EPSS 2%ileNVD2026-10-28
CVE-2026-91912Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A loHIGH7.32%EPSS 2%ileNVD2026-10-30
CVE-2026-108304Tanium addressed a local privilege escalation vulnerability in End-User Notifications.HIGH7.82%EPSS 2%ileNVD2026-10-27
CVE-2026-99107In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-99177In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sev_gmem_post_populaHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-99203In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer seHIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-99122In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected soHIGH7.32%EPSS 2%ileNVD2026-10-28
CVE-2026-99148In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last HIGH7.02%EPSS 2%ileNVD2026-10-28
CVE-2026-61626libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. FroHIGH7.32%EPSS 2%ileNVD2026-10-30
CVE-2026-99212In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS stHIGH7.02%EPSS 2%ileNVD2026-10-28
CVE-2026-118602Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows HIGH7.82%EPSS 2%ileNVD2026-10-28
CVE-2026-70379When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauHIGH7.11%EPSS 1%ileNVD2026-10-26
CVE-2026-117602Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __HIGH8.61%EPSS 1%ileNVD2026-10-27
CVE-2026-62290cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialHIGH7.31%EPSS 1%ileGitHub2026-10-29
CVE-2026-92377Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior toHIGH7.81%EPSS 1%ileNVD2026-10-27
CVE-2026-111584A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to verHIGH7.31%EPSS 1%ileNVD2026-10-27
CVE-2026-21157Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activHIGH8.31%EPSS 1%ileNVD2026-10-29
CVE-2026-116880Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin becauHIGH7.11%EPSS 1%ileNVD2026-10-27
CVE-2026-92375An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to versioHIGH7.81%EPSS 1%ileNVD2026-10-27
CVE-2026-116839A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) HIGH7.11%EPSS 1%ileNVD2026-10-27
CVE-2026-111582A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.HIGH7.31%EPSS 1%ileNVD2026-10-27
CVE-2026-103593A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who caHIGH7.11%EPSS 1%ileNVD2026-10-27
CVE-2026-75882An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with sHIGH8.51%EPSS 1%ileNVD2026-10-30
CVE-2026-117681A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automaticalHIGH8.01%EPSS 1%ileNVD2026-10-31
CVE-2026-115413Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might alloHIGH7.31%EPSS 1%ileNVD2026-10-27
CVE-2026-116250In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permissioHIGH7.31%EPSS 1%ileNVD2026-10-30
CVE-2026-106435MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex elementHIGH—1%EPSS 1%ileGitHub2026-10-27
CVE-2026-92374A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helpHIGH7.80%EPSS 0%ileNVD2026-10-27
CVE-2026-118040In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographicHIGH7.50%EPSS 0%ileNVD2026-10-28
CVE-2026-114217A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in pHIGH8.60%EPSS 0%ileNVD2026-10-31
CVE-2026-63286Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are stiHIGH7.10%EPSS 0%ileNVD2026-10-28
CVE-2026-102802Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles AHIGH8.9——NVD2026-11-02
CVE-2026-18199Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an auHIGH8.8——NVD2026-11-02
CVE-2026-120446madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API beHIGH8.8——NVD2026-11-02
CVE-2026-58273rucio has an Authorization Bypass on REST API endpoint for signing URLsHIGH8.8——GitHub2026-10-28
USN-8958-1USN-8958-1: .NET vulnerabilitiesHIGH8.8——Ubuntu2026-10-29
CVE-2026-120311Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to reHIGH8.7——NVD2026-11-02
CVE-2026-120312Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlliHIGH8.7——NVD2026-11-02
CVE-2026-120313Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers HIGH8.7——NVD2026-11-02
CVE-2026-120315LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to writeHIGH8.7——NVD2026-11-02
CVE-2026-2613The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the strucHIGH8.7——NVD2026-11-02
CVE-2026-8923Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated ReHIGH8.7——NVD2026-11-02
CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve routHIGH8.7——NVD2026-11-02
CVE-2026-120445madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows aHIGH8.7——NVD2026-11-02
CVE-2026-120460Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to maHIGH8.7——NVD2026-11-02
CVE-2026-120461Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves commaHIGH8.7——NVD2026-11-02
CVE-2026-73695Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.phpHIGH8.7——NVD2026-11-02
CVE-2026-73697Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerabiHIGH8.7——NVD2026-11-02
CVE-2026-114408In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 HIGH8.7——NVD2026-11-02
CVE-2026-120282A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocolHIGH8.6——NVD2026-11-02
CVE-2026-120322A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file HIGH8.6——NVD2026-11-02
CVE-2026-111560Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance produHIGH8.6——NVD2026-11-02
CVE-2026-103419Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.HIGH8.6——NVD2026-11-02
CVE-2026-105600Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5HIGH8.6——NVD2026-11-02
CVE-2026-105602Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.1HIGH8.6——NVD2026-11-02
CVE-2026-120318Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorizatiHIGH8.6——NVD2026-11-02
CVE-2026-120448DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allowsHIGH8.6——NVD2026-11-02
CVE-2026-120487LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades() thatHIGH8.6——NVD2026-11-02
CVE-2026-104080Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API HIGH8.6——NVD2026-11-02
CVE-2026-77877Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows attackeHIGH8.6——NVD2026-11-02
CVE-2026-77878Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API HIGH8.6——NVD2026-11-02
CVE-2026-77880Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API HIGH8.6——NVD2026-11-02
GHSA-j456-xh4h-cpf2NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containmHIGH8.6——GitHub2026-10-27
CVE-2026-120431Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnHIGH8.5——NVD2026-11-02
CVE-2026-120432Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows atHIGH8.5——NVD2026-11-02
CVE-2026-120433Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the piHIGH8.5——NVD2026-11-02
CVE-2026-120434Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoHIGH8.5——NVD2026-11-02
CVE-2026-120435Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm causHIGH8.5——NVD2026-11-02
CVE-2026-120436Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that cHIGH8.5——NVD2026-11-02
CVE-2026-120438QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heHIGH8.5——NVD2026-11-02
CVE-2026-77879Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentiHIGH8.5——NVD2026-11-02
CVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowHIGH8.5——GitHub2026-10-27
CVE-2026-20558In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of pHIGH8.4——NVD2026-11-02
CVE-2026-20565In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation HIGH8.4——NVD2026-11-02
CVE-2026-20591In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escHIGH8.4——NVD2026-11-02
CVE-2026-109140The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 HIGH8.4——NVD2026-11-02
CVE-2026-109141The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every requeHIGH8.4——NVD2026-11-02
CVE-2026-109142When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RHIGH8.4——NVD2026-11-02
CVE-2026-83594Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FilHIGH8.3——NVD2026-11-01
CVE-2026-84170Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resourHIGH8.3——NVD2026-11-01
CVE-2026-120439QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cauHIGH8.3——NVD2026-11-02
CVE-2026-120316http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allowHIGH8.2——NVD2026-11-02
CVE-2026-120317http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes theHIGH8.2——NVD2026-11-02
CVE-2026-117518@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and includiHIGH8.2——NVD2026-11-02
GHSA-w9x9-j56r-h98r@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy ProxyHIGH8.2——GitHub2026-10-29
GHSA-4mfg-r38w-w8fgmcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6HIGH8.2——GitHub2026-10-28
GHSA-g5ff-637f-6q2mLiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`HIGH8.1——GitHub2026-10-27
GHSA-f9j4-qggq-h239GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command executionHIGH8.1——GitHub2026-10-27
GHSA-q84f-53jg-9ppmbetter-auth: Device login approval does not show the requesting client or permissionsHIGH8.1——GitHub2026-10-27
FG-IR-26-188Linux kernel RCE CVE-2026-98432HIGH8.1——Fortinet2026-11-02
FG-IR-26-187Node2Shell CVEsHIGH8.1——Fortinet2026-10-26
CVE-2026-94349Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH8.0——NVD2026-11-02
CVE-2026-20559In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privileHIGH7.8——NVD2026-11-02
CVE-2026-92886Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows PriviHIGH7.8——NVD2026-11-02
CVE-2026-99227In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_HIGH7.8——NVD2026-11-02
CVE-2026-99231In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing ->HIGH7.8——NVD2026-11-02
CVE-2026-99233In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity whenHIGH7.8——NVD2026-11-02
CVE-2026-99235In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the compatiHIGH7.8——NVD2026-11-02
CVE-2026-99236In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressionsHIGH7.8——NVD2026-11-02
CVE-2026-99237In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last HIGH7.8——NVD2026-11-02
CVE-2026-99238In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating moduleHIGH7.8——NVD2026-11-02
CVE-2026-99239In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan aHIGH7.8——NVD2026-11-02
GHSA-wf6j-7hvr-gr93Hydra legacy target blacklist permits unsafe PyYAML loadingHIGH7.8——GitHub2026-10-27
CVE-2026-111089Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes somHIGH7.6——NVD2026-11-01
CVE-2026-82956Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ajax.AjaxNewWindowNotifHIGH7.6——NVD2026-11-01
CVE-2026-95863Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScript that rHIGH7.6——NVD2026-11-01
CVE-2026-88809A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). This endpoint is intendedHIGH7.6——NVD2026-11-02
CVE-2026-20499In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-20545In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-20546In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalationHIGH7.5——NVD2026-11-02
CVE-2026-20547In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-20548In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of prHIGH7.5——NVD2026-11-02
CVE-2026-20549In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalationHIGH7.5——NVD2026-11-02
CVE-2026-20556In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-20557In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-20585In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.5——NVD2026-11-02
CVE-2026-101186DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.HIGH7.5——NVD2026-11-02
CVE-2026-74993Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer aHIGH7.5——NVD2026-11-02
GHSA-494m-4556-wf5pimgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote woHIGH7.5——GitHub2026-10-30
GHSA-mmq5-xm89-9pfgimgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted datHIGH7.5——GitHub2026-10-30
GHSA-vpp8-g58w-m8mpTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream ResetHIGH7.5——GitHub2026-10-29
GHSA-w8jc-g24h-crhwGitPython command wrappers omit unsafe protocol and option checksHIGH7.5——GitHub2026-10-27
GHSA-7w82-6f9j-v9jpmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute PathsHIGH7.5——GitHub2026-10-28
GHSA-f897-62hf-6gxqMCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch lengthHIGH7.5——GitHub2026-10-27
FG-IR-26-163HTTP/2 Bomb CVE-2026-49975HIGH7.5——Fortinet2026-08-12
CVE-2026-65629Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passworHIGH7.40%EPSS 0%ileNVD2026-10-26
CVE-2026-83539Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.HIGH7.4——NVD2026-11-01
CVE-2026-83559Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotHIGH7.4——NVD2026-11-01
CVE-2026-84231Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.ExternHIGH7.4——NVD2026-11-01
GHSA-r4xp-prcw-77qfbetter-auth: OAuth Proxy lets an attacker sign in as another userHIGH7.4——GitHub2026-10-27
CVE-2026-82840Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authenticaHIGH7.2——NVD2026-11-01
CVE-2026-103420Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5HIGH7.2——NVD2026-11-02
CVE-2026-120444GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary HIGH7.2——NVD2026-11-02
CVE-2026-88810A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRulesHIGH7.2——NVD2026-11-02
CVE-2026-20554In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilHIGH7.1——NVD2026-11-02
CVE-2026-101176Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vuHIGH7.1——NVD2026-11-02
CVE-2026-120425Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that alHIGH7.1——NVD2026-11-02
CVE-2026-120429Camaleon CMS before 2.9.2 contains a missing authorization vulnerability in Admin::MediaController that allows low-priviHIGH7.1——NVD2026-11-02
GHSA-3w55-933p-8pv5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File StorageHIGH7.1——GitHub2026-10-27
CVE-2026-120451libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allHIGH7.0——NVD2026-11-02
CVE-2026-115653In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempteHIGH7.0——NVD2026-11-02
CVE-2026-99218In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads HIGH7.0——NVD2026-11-02
CVE-2026-99224In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key HIGH7.0——NVD2026-11-02
CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityHIGH——KEVCISA-KEV2026-10-30
CVE-2026-34157Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOriginsHIGH———GitHub2026-10-27
GHSA-23mf-xhv8-69c2GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-7867HIGH———GitHub2026-10-27
GHSA-m64x-33q8-m5h7GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity linesHIGH———GitHub2026-10-27
CVE-2026-57193Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM6.980%EPSS 80%ileNVD2026-10-26
CVE-2026-117511A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function proceMEDIUM5.576%EPSS 76%ileNVD2026-10-27
CVE-2026-94545Satori-generated SVG has improper escapingMEDIUM—65%EPSS 65%ileGitHub2026-10-27
CVE-2026-118607Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execuMEDIUM6.859%EPSS 59%ileNVD2026-10-28
CVE-2026-120192A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /appMEDIUM5.558%EPSS 58%ileNVD2026-11-01
CVE-2026-104743The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via tMEDIUM4.958%EPSS 58%ileNVD2026-10-28
CVE-2026-120191A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of tMEDIUM5.557%EPSS 57%ileNVD2026-11-01
CVE-2026-104739The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion dMEDIUM4.956%EPSS 56%ileNVD2026-10-30
CVE-2026-9083Keycloak vulnerable to information disclosure through arbitrary filesystem path probingMEDIUM4.956%EPSS 56%ileGitHub2026-10-29
CVE-2026-117503A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/restMEDIUM6.954%EPSS 54%ileNVD2026-10-27
CVE-2026-57192Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM6.051%EPSS 51%ileNVD2026-10-27
CVE-2026-20942Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker MEDIUM4.351%EPSS 51%ileNVD2026-10-29
CVE-2026-116467A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown funcMEDIUM6.951%EPSS 51%ileNVD2026-10-26
CVE-2026-93011A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a feMEDIUM5.350%EPSS 50%ileNVD2026-10-29
CVE-2026-119705SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenMEDIUM6.950%EPSS 50%ileNVD2026-10-30
CVE-2026-113913An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.MEDIUM6.549%EPSS 49%ileNVD2026-10-26
CVE-2026-91153The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulneMEDIUM5.349%EPSS 49%ileNVD2026-10-29
CVE-2026-112629An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, MEDIUM6.549%EPSS 49%ileNVD2026-10-26
CVE-2026-104309IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM6.549%EPSS 49%ileNVD2026-10-29
CVE-2026-102815An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runMEDIUM6.949%EPSS 49%ileNVD2026-10-27
CVE-2026-119701WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers to flood paMEDIUM6.948%EPSS 48%ileNVD2026-10-30
CVE-2026-80067MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated SubMEDIUM5.348%EPSS 48%ileNVD2026-10-29
CVE-2026-112634An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, MEDIUM6.548%EPSS 48%ileNVD2026-10-26
CVE-2026-86971An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2MEDIUM6.548%EPSS 48%ileNVD2026-10-26
CVE-2026-116604A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown funMEDIUM5.547%EPSS 47%ileNVD2026-10-27
CVE-2026-57184Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM6.347%EPSS 47%ileNVD2026-10-26
CVE-2026-112633An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2MEDIUM6.546%EPSS 46%ileNVD2026-10-26
CVE-2026-117504A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the fileMEDIUM6.946%EPSS 46%ileNVD2026-10-27
CVE-2026-112646An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2MEDIUM6.546%EPSS 46%ileNVD2026-10-26
CVE-2026-110185The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPresMEDIUM5.946%EPSS 46%ileNVD2026-10-28
CVE-2026-112415An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM6.546%EPSS 46%ileNVD2026-10-26
CVE-2026-86954An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, MEDIUM6.546%EPSS 46%ileNVD2026-10-26
CVE-2026-65213This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMMEDIUM6.646%EPSS 46%ileNVD2026-10-27
CVE-2026-66911Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. DueMEDIUM5.346%EPSS 46%ileNVD2026-10-29
CVE-2026-18894IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component codeMEDIUM6.544%EPSS 44%ileNVD2026-10-29
CVE-2026-100155The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress MEDIUM6.544%EPSS 44%ileNVD2026-10-31
CVE-2026-116800WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to includeMEDIUM6.943%EPSS 43%ileNVD2026-10-27
CVE-2026-115274Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an MEDIUM6.943%EPSS 43%ileNVD2026-10-30
CVE-2026-109821Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an aMEDIUM6.343%EPSS 43%ileNVD2026-10-30
CVE-2026-112614An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2MEDIUM6.542%EPSS 42%ileNVD2026-10-26
CVE-2026-118259opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telMEDIUM5.342%EPSS 42%ileNVD2026-10-28
CVE-2026-119763changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackerMEDIUM6.942%EPSS 42%ileNVD2026-10-30
CVE-2026-61846Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recurMEDIUM6.342%EPSS 42%ileNVD2026-10-30
CVE-2026-61847Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the `:MEDIUM6.342%EPSS 42%ileNVD2026-10-30
CVE-2026-61848Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass MEDIUM6.342%EPSS 42%ileNVD2026-10-30
CVE-2026-119053lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writMEDIUM6.942%EPSS 42%ileNVD2026-10-29
CVE-2026-112471A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS SequMEDIUM4.342%EPSS 42%ileNVD2026-10-26
CVE-2014-125135A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component FlMEDIUM6.941%EPSS 41%ileNVD2026-10-26
CVE-2026-57185Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM6.541%EPSS 41%ileNVD2026-10-27
CVE-2026-113692Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and MEDIUM6.941%EPSS 41%ileNVD2026-10-29
CVE-2026-119299gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes aMEDIUM5.941%EPSS 41%ileNVD2026-10-30
CVE-2026-118598A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user MEDIUM6.541%EPSS 41%ileNVD2026-10-31
CVE-2026-116602A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink oMEDIUM5.541%EPSS 41%ileNVD2026-10-26
CVE-2026-117468Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming aMEDIUM6.540%EPSS 40%ileNVD2026-10-27
CVE-2026-66912Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in ClaMEDIUM5.340%EPSS 40%ileNVD2026-10-29
CVE-2026-119364ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy that allows aMEDIUM6.040%EPSS 40%ileNVD2026-10-30
CVE-2026-9705Keycloak: Attacker can re-enable and take over disabled clients via registration access tokenMEDIUM6.540%EPSS 40%ileGitHub2026-10-29
CVE-2026-84496An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,MEDIUM6.540%EPSS 40%ileNVD2026-10-26
CVE-2026-86383Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.MEDIUM6.840%EPSS 40%ileNVD2026-10-28
CVE-2026-114610fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'MEDIUM6.540%EPSS 40%ileGitHub2026-10-27
CVE-2026-119146ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMapMEDIUM6.340%EPSS 40%ileNVD2026-10-30
CVE-2026-118680SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePathMEDIUM5.940%EPSS 40%ileNVD2026-10-28
CVE-2026-119646Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sMEDIUM5.340%EPSS 40%ileNVD2026-10-30
CVE-2026-105946Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remMEDIUM5.340%EPSS 40%ileNVD2026-10-27
CVE-2026-119699WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticatMEDIUM6.939%EPSS 39%ileNVD2026-10-30
CVE-2026-119620A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. ThiMEDIUM5.539%EPSS 39%ileNVD2026-10-30
CVE-2026-119417CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email headMEDIUM6.339%EPSS 39%ileNVD2026-10-30
CVE-2026-105456RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link thaMEDIUM5.339%EPSS 39%ileNVD2026-10-30
CVE-2026-119545Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulneraMEDIUM6.939%EPSS 39%ileNVD2026-10-30
CVE-2026-113939An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.MEDIUM6.539%EPSS 39%ileNVD2026-10-26
CVE-2026-113943An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.MEDIUM6.539%EPSS 39%ileNVD2026-10-26
CVE-2026-92294The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file dMEDIUM6.539%EPSS 39%ileNVD2026-10-31
CVE-2026-118192The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL InjMEDIUM6.538%EPSS 38%ileNVD2026-10-29
CVE-2026-57194Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM5.938%EPSS 38%ileNVD2026-10-27
CVE-2026-119328Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated machinMEDIUM6.538%EPSS 38%ileNVD2026-10-30
CVE-2026-105454RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. AMEDIUM5.338%EPSS 38%ileNVD2026-10-30
CVE-2026-118635The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerableMEDIUM6.538%EPSS 38%ileNVD2026-10-30
CVE-2026-94624vllm p2p never connected zmq_exhaustionMEDIUM6.538%EPSS 38%ileGitHub2026-10-27
CVE-2026-119342Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.1MEDIUM5.338%EPSS 38%ileNVD2026-10-30
CVE-2026-116478A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asMEDIUM6.938%EPSS 38%ileNVD2026-10-26
CVE-2026-103390An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session SmaMEDIUM5.338%EPSS 38%ileNVD2026-10-28
CVE-2026-113691Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01MEDIUM5.138%EPSS 38%ileNVD2026-10-29
CVE-2026-113697Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticateMEDIUM4.838%EPSS 38%ileNVD2026-10-29
CVE-2026-116744ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that MEDIUM6.937%EPSS 37%ileNVD2026-10-26
CVE-2026-120204DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remMEDIUM6.337%EPSS 37%ileNVD2026-10-31
CVE-2026-118275A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the MEDIUM5.537%EPSS 37%ileNVD2026-10-28
CVE-2026-76654An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symMEDIUM5.837%EPSS 37%ileNVD2026-10-26
CVE-2026-93007A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive tMEDIUM5.337%EPSS 37%ileNVD2026-10-29
CVE-2026-116579Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 2MEDIUM5.937%EPSS 37%ileNVD2026-10-26
CVE-2026-105457Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS MEDIUM6.537%EPSS 37%ileNVD2026-10-28
CVE-2026-119424OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with wMEDIUM6.137%EPSS 37%ileNVD2026-10-30
CVE-2026-115604Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.MEDIUM5.037%EPSS 37%ileNVD2026-10-30
CVE-2026-102905The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in alMEDIUM6.536%EPSS 36%ileNVD2026-10-30
CVE-2026-110190IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attackMEDIUM6.536%EPSS 36%ileNVD2026-10-29
CVE-2026-115820The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generiMEDIUM6.536%EPSS 36%ileNVD2026-10-30
CVE-2026-118590A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_MEDIUM6.936%EPSS 36%ileNVD2026-10-29
CVE-2026-115223The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being storeMEDIUM4.936%EPSS 36%ileNVD2026-10-28
CVE-2026-92665Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM5.336%EPSS 36%ileNVD2026-10-28
CVE-2026-118653Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-ReMEDIUM5.336%EPSS 36%ileNVD2026-10-28
CVE-2026-120233A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file sMEDIUM5.536%EPSS 36%ileNVD2026-11-01
CVE-2026-119658PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accoMEDIUM5.336%EPSS 36%ileNVD2026-10-30
CVE-2026-117514A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the MEDIUM5.536%EPSS 36%ileNVD2026-10-27
CVE-2026-117515A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. ImpaMEDIUM5.536%EPSS 36%ileNVD2026-10-27
CVE-2026-117516A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of theMEDIUM5.536%EPSS 36%ileNVD2026-10-27
CVE-2026-119599AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-leMEDIUM5.335%EPSS 35%ileNVD2026-10-30
CVE-2026-105455RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incidenMEDIUM5.335%EPSS 35%ileNVD2026-10-30
CVE-2026-117470Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verificatiMEDIUM6.535%EPSS 35%ileNVD2026-10-27
CVE-2026-62121Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability inMEDIUM6.535%EPSS 35%ileNVD2026-10-30
CVE-2026-116590snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, SnaMEDIUM5.935%EPSS 35%ileNVD2026-10-26
CVE-2026-119709Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata PMEDIUM6.935%EPSS 35%ileNVD2026-10-30
CVE-2026-118589A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42MEDIUM6.935%EPSS 35%ileNVD2026-10-29
CVE-2026-119480Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuildeMEDIUM6.535%EPSS 35%ileNVD2026-11-01
CVE-2026-66091In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisationMEDIUM6.934%EPSS 34%ileNVD2026-10-29
CVE-2026-109984The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' paramMEDIUM5.434%EPSS 34%ileNVD2026-10-30
CVE-2026-113696Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.MEDIUM5.334%EPSS 34%ileNVD2026-10-29
CVE-2026-119137Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to craMEDIUM6.934%EPSS 34%ileNVD2026-10-29
CVE-2026-119729A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allowsMEDIUM6.534%EPSS 34%ileNVD2026-10-30
CVE-2026-116685The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.MEDIUM5.934%EPSS 34%ileNVD2026-10-27
CVE-2026-115914vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-MEDIUM6.534%EPSS 34%ileNVD2026-10-26
CVE-2026-116507A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the functionMEDIUM5.534%EPSS 34%ileNVD2026-10-26
CVE-2026-55613uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HTMEDIUM6.934%EPSS 34%ileNVD2026-10-30
CVE-2026-55614uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases headeMEDIUM6.934%EPSS 34%ileNVD2026-10-30
CVE-2026-114691A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a MEDIUM5.934%EPSS 34%ileNVD2026-10-30
CVE-2026-117565Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers MEDIUM6.934%EPSS 34%ileNVD2026-10-27
CVE-2026-118667LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs froMEDIUM4.334%EPSS 34%ileNVD2026-10-28
CVE-2026-119665WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViMEDIUM5.334%EPSS 34%ileNVD2026-10-30
CVE-2026-101274When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not pMEDIUM6.933%EPSS 33%ileNVD2026-10-28
CVE-2026-107147The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address hMEDIUM6.333%EPSS 33%ileNVD2026-10-27
CVE-2026-90991IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to alMEDIUM6.533%EPSS 33%ileNVD2026-10-29
CVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-MEDIUM4.933%EPSS 33%ileGitHub2026-10-27
CVE-2026-110505The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG fMEDIUM6.833%EPSS 33%ileNVD2026-10-29
CVE-2026-13747The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 MEDIUM6.533%EPSS 33%ileNVD2026-10-30
CVE-2026-116623A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of tMEDIUM5.533%EPSS 33%ileNVD2026-10-27
CVE-2026-118263Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a BodyLimit overflow errorMEDIUM6.333%EPSS 33%ileNVD2026-10-28
CVE-2026-61789DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL MEDIUM6.133%EPSS 33%ileNVD2026-10-30
CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFMEDIUM5.433%EPSS 33%ileGitHub2026-10-27
CVE-2026-115927Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked MEDIUM5.332%EPSS 32%ileNVD2026-10-26
CVE-2026-116577Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser acceptMEDIUM5.332%EPSS 32%ileNVD2026-10-26
CVE-2026-110020The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in all versions up to, aMEDIUM6.532%EPSS 32%ileNVD2026-10-28
CVE-2026-116733flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers tMEDIUM6.332%EPSS 32%ileNVD2026-10-26
CVE-2026-116734flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifierMEDIUM6.332%EPSS 32%ileNVD2026-10-26
CVE-2026-62335OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x linMEDIUM6.932%EPSS 32%ileNVD2026-10-30
CVE-2026-116694OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in oMEDIUM6.332%EPSS 32%ileNVD2026-10-27
CVE-2026-118537A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalMEDIUM5.332%EPSS 32%ileNVD2026-10-28
CVE-2026-112544An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.MEDIUM6.532%EPSS 32%ileNVD2026-10-26
CVE-2026-86391Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions MEDIUM6.432%EPSS 32%ileNVD2026-10-28
CVE-2026-119569Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-coMEDIUM6.032%EPSS 32%ileNVD2026-10-30
CVE-2026-115522Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Kit (ADK) for Python (MEDIUM5.332%EPSS 32%ileNVD2026-10-28
CVE-2026-119423OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victimMEDIUM6.932%EPSS 32%ileNVD2026-10-30
CVE-2026-54462Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, theMEDIUM6.532%EPSS 32%ileNVD2026-10-27
CVE-2026-119429phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to removMEDIUM5.331%EPSS 31%ileNVD2026-10-30
CVE-2026-119600tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read processMEDIUM6.331%EPSS 31%ileNVD2026-10-30
CVE-2026-112556A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia MEDIUM4.831%EPSS 31%ileNVD2026-10-26
CVE-2026-119141Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious MEDIUM6.931%EPSS 31%ileNVD2026-10-29
CVE-2026-61618SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without MEDIUM6.931%EPSS 31%ileNVD2026-10-30
CVE-2026-117512A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeMEDIUM5.531%EPSS 31%ileNVD2026-10-27
CVE-2026-101326The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress MEDIUM5.431%EPSS 31%ileNVD2026-10-31
CVE-2026-80069MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenMEDIUM5.331%EPSS 31%ileNVD2026-10-29
CVE-2026-119122Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clMEDIUM6.931%EPSS 31%ileNVD2026-10-29
CVE-2026-119415CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME parMEDIUM6.331%EPSS 31%ileNVD2026-10-30
CVE-2026-109231The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation MEDIUM4.331%EPSS 31%ileNVD2026-10-31
CVE-2026-50541Xibo is an open source digital signage platform with a web content management system and Windows display player softwareMEDIUM6.531%EPSS 31%ileNVD2026-10-28
CVE-2026-50539Xibo is an open source digital signage platform with a web content management system and Windows display player softwareMEDIUM6.531%EPSS 31%ileNVD2026-10-28
CVE-2026-110816qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toMEDIUM5.331%EPSS 31%ileGitHub2026-10-27
CVE-2026-77819IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to imMEDIUM6.530%EPSS 30%ileNVD2026-10-29
CVE-2026-101273Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internaMEDIUM5.330%EPSS 30%ileNVD2026-10-28
CVE-2026-116684The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.MEDIUM6.830%EPSS 30%ileNVD2026-10-27
CVE-2026-119113The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to MEDIUM6.430%EPSS 30%ileNVD2026-10-30
CVE-2026-119278MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.930%EPSS 30%ileNVD2026-10-29
CVE-2026-119700WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determMEDIUM6.930%EPSS 30%ileNVD2026-10-30
CVE-2026-118247Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until GriMEDIUM6.930%EPSS 30%ileNVD2026-10-28
CVE-2026-54850Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.MEDIUM6.530%EPSS 30%ileNVD2026-10-30
CVE-2026-119702WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unautheMEDIUM6.930%EPSS 30%ileNVD2026-10-30
CVE-2026-119414Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allowMEDIUM5.330%EPSS 30%ileNVD2026-10-30
CVE-2026-72757Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving thMEDIUM5.330%EPSS 30%ileNVD2026-10-26
CVE-2026-50000SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documenMEDIUM5.030%EPSS 30%ileNVD2026-10-30
CVE-2026-118128A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdatMEDIUM6.930%EPSS 30%ileNVD2026-10-27
CVE-2026-115828In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when usiMEDIUM5.130%EPSS 30%ileNVD2026-10-30
CVE-2026-108140A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backeMEDIUM5.929%EPSS 29%ileNVD2026-10-27
CVE-2026-108141A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backeMEDIUM5.929%EPSS 29%ileNVD2026-10-27
CVE-2026-109386The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypassMEDIUM4.329%EPSS 29%ileNVD2026-10-31
CVE-2026-113881A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticaMEDIUM6.129%EPSS 29%ileNVD2026-10-27
CVE-2026-119653Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list MEDIUM5.329%EPSS 29%ileNVD2026-10-30
CVE-2026-117566EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and MEDIUM6.929%EPSS 29%ileNVD2026-10-27
CVE-2026-116695Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectlMEDIUM5.329%EPSS 29%ileNVD2026-10-27
CVE-2026-118663@hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveStatic decodes a requesMEDIUM5.329%EPSS 29%ileNVD2026-10-28
CVE-2026-108308Tanium addressed a SQL injection vulnerability in Patch.MEDIUM6.529%EPSS 29%ileNVD2026-10-27
CVE-2026-114618Authlib: Default JWT bearer grant accepts assertions for the wrong audienceMEDIUM6.829%EPSS 29%ileGitHub2026-10-27
CVE-2026-118760Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1MEDIUM6.529%EPSS 29%ileNVD2026-10-29
CVE-2026-119276MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.929%EPSS 29%ileNVD2026-10-29
CVE-2026-119277MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.929%EPSS 29%ileNVD2026-10-29
CVE-2026-119279MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.929%EPSS 29%ileNVD2026-10-29
CVE-2026-116563The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored DOM-BasedMEDIUM5.429%EPSS 29%ileNVD2026-10-31
CVE-2026-118243Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCuMEDIUM5.329%EPSS 29%ileNVD2026-10-28
CVE-2026-115918vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint MEDIUM6.529%EPSS 29%ileNVD2026-10-26
CVE-2026-118773Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including GlMEDIUM6.329%EPSS 29%ileNVD2026-10-29
CVE-2026-119199Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expMEDIUM5.929%EPSS 29%ileNVD2026-10-29
CVE-2026-85330Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over MEDIUM4.329%EPSS 29%ileNVD2026-10-29
CVE-2026-113689Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.MEDIUM5.128%EPSS 28%ileNVD2026-10-29
CVE-2026-39375Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version MEDIUM5.128%EPSS 28%ileNVD2026-10-30
CVE-2026-113690Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.MEDIUM4.828%EPSS 28%ileNVD2026-10-29
CVE-2026-113695Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versionMEDIUM4.828%EPSS 28%ileNVD2026-10-29
CVE-2026-118654Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after routMEDIUM5.928%EPSS 28%ileNVD2026-10-28
CVE-2026-119598Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs tMEDIUM5.328%EPSS 28%ileNVD2026-10-30
CVE-2026-91152The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulneMEDIUM6.128%EPSS 28%ileNVD2026-10-29
CVE-2026-107146The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. DuMEDIUM6.328%EPSS 28%ileNVD2026-10-27
CVE-2026-6877ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – TaskMEDIUM5.328%EPSS 28%ileNVD2026-10-29
CVE-2026-71569Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: fromMEDIUM4.828%EPSS 28%ileNVD2026-10-29
CVE-2026-118194The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and incMEDIUM6.528%EPSS 28%ileNVD2026-10-30
CVE-2026-111548A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servMEDIUM5.328%EPSS 28%ileNVD2026-10-27
CVE-2026-109236The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a PredicMEDIUM4.828%EPSS 28%ileNVD2026-10-28
CVE-2026-109592The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorizatiMEDIUM4.328%EPSS 28%ileNVD2026-10-30
CVE-2026-44344Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1,MEDIUM6.628%EPSS 28%ileNVD2026-10-30
CVE-2026-119560OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append MEDIUM6.028%EPSS 28%ileNVD2026-10-30
CVE-2026-110001The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (shortMEDIUM5.428%EPSS 28%ileNVD2026-10-30
CVE-2026-77817IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM6.528%EPSS 28%ileNVD2026-10-29
CVE-2026-115415Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 migMEDIUM5.928%EPSS 28%ileNVD2026-10-28
CVE-2026-117507A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManagMEDIUM5.328%EPSS 28%ileNVD2026-10-27
CVE-2026-107711The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored CrossMEDIUM6.428%EPSS 28%ileNVD2026-10-31
CVE-2026-57448Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the admMEDIUM6.228%EPSS 28%ileNVD2026-10-28
CVE-2026-103485The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'featMEDIUM5.428%EPSS 28%ileNVD2026-10-29
CVE-2026-107629The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site ScrMEDIUM5.428%EPSS 28%ileNVD2026-10-29
CVE-2026-116763The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in allMEDIUM5.428%EPSS 28%ileNVD2026-10-29
CVE-2026-119703xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that MEDIUM6.328%EPSS 28%ileNVD2026-10-30
CVE-2026-88858A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrMEDIUM6.527%EPSS 27%ileNVD2026-10-28
CVE-2026-116657Tanium addressed a denial of service vulnerability in Enforce.MEDIUM5.327%EPSS 27%ileNVD2026-10-27
CVE-2026-86392Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM4.927%EPSS 27%ileNVD2026-10-28
CVE-2026-84296Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2MEDIUM6.827%EPSS 27%ileNVD2026-10-29
CVE-2026-119200Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-enMEDIUM6.527%EPSS 27%ileNVD2026-10-29
CVE-2026-120007NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act MEDIUM6.927%EPSS 27%ileNVD2026-10-30
CVE-2026-2270A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissionsMEDIUM5.927%EPSS 27%ileNVD2026-10-26
CVE-2026-104308IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to imMEDIUM4.327%EPSS 27%ileNVD2026-10-29
CVE-2026-116686The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.MEDIUM6.527%EPSS 27%ileNVD2026-10-27
CVE-2026-67080HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional MEDIUM6.527%EPSS 27%ileNVD2026-10-28
CVE-2026-117469Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-rMEDIUM5.427%EPSS 27%ileNVD2026-10-27
CVE-2026-116609The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and siMEDIUM6.527%EPSS 27%ileNVD2026-10-28
CVE-2026-92086The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includingMEDIUM5.327%EPSS 27%ileNVD2026-10-29
CVE-2026-113693Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.MEDIUM5.327%EPSS 27%ileNVD2026-10-29
CVE-2026-116658Tanium addressed a denial of service vulnerability in Enforce.MEDIUM6.527%EPSS 27%ileNVD2026-10-27
CVE-2026-118666GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GrMEDIUM6.027%EPSS 27%ileNVD2026-10-28
CVE-2026-7190A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulneraMEDIUM5.127%EPSS 27%ileNVD2026-10-29
CVE-2026-117548A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an atMEDIUM6.527%EPSS 27%ileNVD2026-10-29
CVE-2026-109215The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_reply_content' parameMEDIUM6.427%EPSS 27%ileNVD2026-10-29
CVE-2026-61673WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in `MEDIUM6.327%EPSS 27%ileNVD2026-10-29
CVE-2026-100175The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Autolink in all versionsMEDIUM5.426%EPSS 26%ileNVD2026-10-28
CVE-2026-119842A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle MEDIUM6.526%EPSS 26%ileNVD2026-10-30
CVE-2026-119542A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursivMEDIUM4.326%EPSS 26%ileNVD2026-10-30
CVE-2026-107627The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site ScrMEDIUM5.426%EPSS 26%ileNVD2026-10-29
CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-craMEDIUM6.526%EPSS 26%ileGitHub2026-10-28
CVE-2026-116678Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader vMEDIUM5.826%EPSS 26%ileNVD2026-10-27
CVE-2026-104316IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background woMEDIUM6.526%EPSS 26%ileNVD2026-10-29
CVE-2026-116752The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to MEDIUM6.426%EPSS 26%ileNVD2026-10-31
CVE-2026-119619A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affMEDIUM5.526%EPSS 26%ileNVD2026-10-30
CVE-2026-117556zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes tMEDIUM5.326%EPSS 26%ileNVD2026-10-27
CVE-2026-86390Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.526%EPSS 26%ileNVD2026-10-28
CVE-2026-118084Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.MEDIUM6.526%EPSS 26%ileNVD2026-10-29
CVE-2026-119644Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to moMEDIUM5.326%EPSS 26%ileNVD2026-10-30
CVE-2026-66092In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encodMEDIUM4.826%EPSS 26%ileNVD2026-10-29
CVE-2026-48164Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,MEDIUM4.726%EPSS 26%ileNVD2026-10-30
CVE-2026-117562rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read MEDIUM6.925%EPSS 25%ileNVD2026-10-27
CVE-2026-90960The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, MEDIUM5.325%EPSS 25%ileNVD2026-10-31
CVE-2026-117472Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hMEDIUM4.325%EPSS 25%ileNVD2026-10-27
CVE-2026-107745The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file dMEDIUM4.225%EPSS 25%ileNVD2026-10-28
CVE-2026-118698The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL InjMEDIUM6.525%EPSS 25%ileNVD2026-10-30
CVE-2026-15272The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parametMEDIUM6.525%EPSS 25%ileNVD2026-10-31
CVE-2026-109932undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG bufferingMEDIUM5.925%EPSS 25%ileGitHub2026-10-27
CVE-2026-110533The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_videMEDIUM6.425%EPSS 25%ileNVD2026-10-30
CVE-2026-119176The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject' paMEDIUM6.425%EPSS 25%ileNVD2026-10-30
CVE-2026-9239The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label aMEDIUM6.425%EPSS 25%ileNVD2026-10-30
CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.MEDIUM6.125%EPSS 25%ileNVD2026-10-28
CVE-2026-55098Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remeMEDIUM6.525%EPSS 25%ileNVD2026-10-30
CVE-2026-119761Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unMEDIUM5.325%EPSS 25%ileNVD2026-10-30
CVE-2026-115923Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogMEDIUM6.525%EPSS 25%ileNVD2026-10-26
CVE-2026-81509nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. VerMEDIUM6.125%EPSS 25%ileNVD2026-10-26
CVE-2026-88090Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized MEDIUM5.425%EPSS 25%ileNVD2026-10-29
CVE-2026-107098The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of its map widget's siMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-110506The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget property before storiMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-110524The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-111967The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before oMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-113487The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link vMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-113488The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaScMEDIUM6.825%EPSS 25%ileNVD2026-10-28
CVE-2026-110251The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all MEDIUM5.425%EPSS 25%ileNVD2026-10-31
CVE-2026-62277LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, `PrintMEDIUM6.524%EPSS 24%ileNVD2026-10-30
CVE-2026-104314IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow MEDIUM6.524%EPSS 24%ileNVD2026-10-29
CVE-2026-116477A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fuMEDIUM5.324%EPSS 24%ileNVD2026-10-26
CVE-2026-116479A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSMEDIUM5.324%EPSS 24%ileNVD2026-10-26
CVE-2026-119368Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting MEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-117645Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework pMEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-16889In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does notMEDIUM4.824%EPSS 24%ileNVD2026-10-29
CVE-2026-117541svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash calleMEDIUM6.924%EPSS 24%ileNVD2026-10-27
CVE-2026-119428phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to tMEDIUM6.324%EPSS 24%ileNVD2026-10-30
CVE-2026-86388Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM5.324%EPSS 24%ileNVD2026-10-28
CVE-2026-119425OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming featurMEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-119479Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilderMEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-115916vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_tMEDIUM6.524%EPSS 24%ileNVD2026-10-26
CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolMEDIUM6.524%EPSS 24%ileGitHub2026-10-28
CVE-2026-102918The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includiMEDIUM6.424%EPSS 24%ileNVD2026-10-30
CVE-2026-118586A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fiMEDIUM6.924%EPSS 24%ileNVD2026-10-29
CVE-2026-116679Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployMEDIUM5.424%EPSS 24%ileNVD2026-10-27
CVE-2026-119647RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept tMEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-119714My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticateMEDIUM6.924%EPSS 24%ileNVD2026-10-30
CVE-2026-117505A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queueMEDIUM5.324%EPSS 24%ileNVD2026-10-27
CVE-2026-117506A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificatMEDIUM5.324%EPSS 24%ileNVD2026-10-27
CVE-2026-118691xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint thMEDIUM6.324%EPSS 24%ileNVD2026-10-28
CVE-2026-62303Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResourcMEDIUM5.924%EPSS 24%ileNVD2026-10-30
CVE-2026-119565Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that alMEDIUM5.324%EPSS 24%ileNVD2026-10-30
CVE-2026-113688Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3MEDIUM5.324%EPSS 24%ileNVD2026-10-29
CVE-2026-113694Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.MEDIUM5.324%EPSS 24%ileNVD2026-10-29
CVE-2025-9462The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions upMEDIUM6.524%EPSS 24%ileNVD2026-10-31
CVE-2026-119602libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that alMEDIUM6.324%EPSS 24%ileNVD2026-10-30
CVE-2026-116552The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_MEDIUM4.724%EPSS 24%ileNVD2026-10-30
CVE-2026-70380A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICEMEDIUM6.923%EPSS 23%ileNVD2026-10-26
CVE-2026-82411Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2MEDIUM6.523%EPSS 23%ileNVD2026-10-28
CVE-2026-118539Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core vMEDIUM6.523%EPSS 23%ileNVD2026-10-30
CVE-2026-108310Tanium addressed a denial of service vulnerability in Tanium Server.MEDIUM5.323%EPSS 23%ileNVD2026-10-27
CVE-2026-119651HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that alloMEDIUM5.323%EPSS 23%ileNVD2026-10-30
CVE-2026-90861Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clearMEDIUM6.623%EPSS 23%ileNVD2026-10-29
CVE-2026-119131Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http MEDIUM6.923%EPSS 23%ileNVD2026-10-29
CVE-2026-62347Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SMEDIUM5.923%EPSS 23%ileNVD2026-10-30
CVE-2026-107868Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.MEDIUM5.323%EPSS 23%ileNVD2026-10-30
CVE-2026-103875The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search-string'MEDIUM4.723%EPSS 23%ileNVD2026-10-29
CVE-2026-110707The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress isMEDIUM4.723%EPSS 23%ileNVD2026-10-29
CVE-2026-115455A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internaMEDIUM6.523%EPSS 23%ileNVD2026-10-30
CVE-2026-118655Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, middleware.Static can decode an already decoded Request.URL.Path MEDIUM5.923%EPSS 23%ileNVD2026-10-28
CVE-2026-119210MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.923%EPSS 23%ileNVD2026-10-29
CVE-2026-106648The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substitMEDIUM5.323%EPSS 23%ileNVD2026-10-28
CVE-2026-116659Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.MEDIUM4.323%EPSS 23%ileNVD2026-10-27
CVE-2026-93006A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache isMEDIUM6.823%EPSS 23%ileNVD2026-10-29
CVE-2026-62337SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points MEDIUM6.923%EPSS 23%ileNVD2026-10-30
CVE-2026-108313Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.MEDIUM6.623%EPSS 23%ileNVD2026-10-27
CVE-2026-107145The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lMEDIUM6.323%EPSS 23%ileNVD2026-10-27
CVE-2026-119123ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoderMEDIUM6.323%EPSS 23%ileNVD2026-10-29
CVE-2026-116605A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown functionMEDIUM5.523%EPSS 23%ileNVD2026-10-27
CVE-2026-116846Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly ConMEDIUM5.323%EPSS 23%ileNVD2026-10-29
CVE-2026-119298croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the recMEDIUM4.223%EPSS 23%ileNVD2026-10-30
CVE-2026-55493HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible toMEDIUM6.523%EPSS 23%ileNVD2026-10-30
CVE-2026-118173MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for requMEDIUM6.123%EPSS 23%ileNVD2026-10-27
CVE-2026-120046Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allowsMEDIUM6.023%EPSS 23%ileNVD2026-10-30
CVE-2026-116402Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureFormMEDIUM5.323%EPSS 23%ileNVD2026-10-29
CVE-2026-52710Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#821MEDIUM5.323%EPSS 23%ileNVD2026-10-30
CVE-2026-62057Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact FMEDIUM5.323%EPSS 23%ileNVD2026-10-30
CVE-2026-5697Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript codeMEDIUM4.823%EPSS 23%ileNVD2026-10-29
CVE-2026-5698Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript codeMEDIUM4.823%EPSS 23%ileNVD2026-10-29
CVE-2026-5699Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript codeMEDIUM4.823%EPSS 23%ileNVD2026-10-29
CVE-2026-5700Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript codeMEDIUM4.823%EPSS 23%ileNVD2026-10-29
CVE-2026-59388Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are expMEDIUM6.523%EPSS 23%ileNVD2026-10-30
CVE-2026-105997The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code emailMEDIUM5.323%EPSS 23%ileNVD2026-10-28
CVE-2026-119650HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows auMEDIUM5.323%EPSS 23%ileNVD2026-10-30
CVE-2026-118538A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTrMEDIUM5.123%EPSS 23%ileNVD2026-10-28
CVE-2026-88078Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pMEDIUM4.323%EPSS 23%ileNVD2026-10-29
CVE-2026-104694The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before uMEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-111027The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it MEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-115281The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute befMEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-109979The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, MEDIUM4.322%EPSS 22%ileNVD2026-10-28
CVE-2026-118604Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability alMEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-118609Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vuMEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-118611Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnMEDIUM6.822%EPSS 22%ileNVD2026-10-28
CVE-2026-115869The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater fielMEDIUM6.422%EPSS 22%ileNVD2026-10-30
CVE-2026-118641n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in thMEDIUM6.922%EPSS 22%ileNVD2026-10-28
CVE-2026-119300Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.MEDIUM6.522%EPSS 22%ileNVD2026-10-30
CVE-2026-107268Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / PasswordlessMEDIUM4.322%EPSS 22%ileNVD2026-10-30
CVE-2026-118662Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate seMEDIUM6.922%EPSS 22%ileNVD2026-10-28
CVE-2026-112348Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers MEDIUM6.922%EPSS 22%ileNVD2026-10-30
CVE-2026-119664Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMMEDIUM5.322%EPSS 22%ileNVD2026-10-30
CVE-2026-7003WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers MEDIUM6.922%EPSS 22%ileNVD2026-10-30
CVE-2026-77172App passwords were allowed to bypass password confirmation on sensitive endpoints.MEDIUM5.322%EPSS 22%ileNVD2026-10-27
CVE-2026-9799Keycloak allows unauthorized access to resources via uma permission ticket bypassMEDIUM4.622%EPSS 22%ileGitHub2026-10-29
CVE-2026-116586Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including supMEDIUM6.922%EPSS 22%ileNVD2026-10-26
CVE-2026-119564Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editMEDIUM6.022%EPSS 22%ileNVD2026-10-30
CVE-2026-118764minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1,MEDIUM6.922%EPSS 22%ileNVD2026-10-29
CVE-2026-110504The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content isMEDIUM6.822%EPSS 22%ileNVD2026-10-29
CVE-2026-118438The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing MEDIUM6.822%EPSS 22%ileNVD2026-10-31
CVE-2026-5461The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1MEDIUM6.522%EPSS 22%ileNVD2026-10-30
CVE-2026-115804HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may aMEDIUM6.422%EPSS 22%ileNVD2026-10-26
CVE-2026-110023The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to SensMEDIUM5.922%EPSS 22%ileNVD2026-10-31
CVE-2015-20130Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/repoMEDIUM5.122%EPSS 22%ileNVD2026-10-30
CVE-2026-16491Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted MEDIUM6.522%EPSS 22%ileNVD2026-10-27
CVE-2026-119198Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an expoMEDIUM5.922%EPSS 22%ileNVD2026-10-29
CVE-2026-117554Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register evMEDIUM5.322%EPSS 22%ileNVD2026-10-27
CVE-2026-119147ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skMEDIUM5.322%EPSS 22%ileNVD2026-10-30
CVE-2026-119648Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated MEDIUM5.322%EPSS 22%ileNVD2026-10-30
CVE-2026-119166The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, andMEDIUM5.322%EPSS 22%ileNVD2026-10-31
CVE-2026-110042The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays iMEDIUM4.922%EPSS 22%ileNVD2026-10-31
CVE-2026-90872Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FMEDIUM6.621%EPSS 21%ileNVD2026-10-29
CVE-2026-33522Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A paMEDIUM5.321%EPSS 21%ileNVD2026-10-26
CVE-2026-102799Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16MEDIUM5.321%EPSS 21%ileNVD2026-10-28
CVE-2026-40063A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809MEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-116674systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netwMEDIUM6.521%EPSS 21%ileNVD2026-10-27
CVE-2026-10537A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenMEDIUM6.921%EPSS 21%ileNVD2026-10-27
CVE-2026-59396A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a MEDIUM6.921%EPSS 21%ileNVD2026-10-30
CVE-2026-110910### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even tMEDIUM6.321%EPSS 21%ileNVD2026-10-27
CVE-2026-48202Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-bMEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-119121Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows authMEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-102590IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM5.021%EPSS 21%ileNVD2026-10-29
CVE-2026-63399Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operatiMEDIUM6.921%EPSS 21%ileNVD2026-10-30
CVE-2026-114173The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefronMEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-119556Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missingMEDIUM5.321%EPSS 21%ileNVD2026-10-30
CVE-2026-119343Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST MEDIUM6.821%EPSS 21%ileNVD2026-10-30
CVE-2026-119281MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3MEDIUM5.921%EPSS 21%ileNVD2026-10-29
CVE-2026-48884Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly ConfiguredMEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-76005The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_order' Shortcode AttriMEDIUM6.521%EPSS 21%ileNVD2026-10-28
CVE-2026-48200Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-MEDIUM5.321%EPSS 21%ileNVD2026-10-29
CVE-2026-63410secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalarMEDIUM5.921%EPSS 21%ileNVD2026-10-30
CVE-2026-119652HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList thatMEDIUM5.321%EPSS 21%ileNVD2026-10-30
CVE-2026-118248Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode walMEDIUM6.920%EPSS 20%ileNVD2026-10-28
CVE-2026-111109The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag ofMEDIUM6.120%EPSS 20%ileNVD2026-10-31
CVE-2026-109367The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin foMEDIUM5.320%EPSS 20%ileNVD2026-10-31
CVE-2026-75520Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, theMEDIUM5.420%EPSS 20%ileNVD2026-10-28
CVE-2026-117606NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate otMEDIUM5.320%EPSS 20%ileNVD2026-10-28
CVE-2026-119596UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticMEDIUM5.320%EPSS 20%ileNVD2026-10-30
CVE-2026-91915Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output UMEDIUM6.820%EPSS 20%ileNVD2026-10-30
CVE-2026-103997The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5MEDIUM6.520%EPSS 20%ileNVD2026-10-31
CVE-2026-120210FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files MEDIUM5.320%EPSS 20%ileNVD2026-10-31
CVE-2026-39735Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access CMEDIUM6.520%EPSS 20%ileNVD2026-10-29
CVE-2026-42703Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access CMEDIUM6.520%EPSS 20%ileNVD2026-10-29
CVE-2026-109972The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions pluginMEDIUM6.420%EPSS 20%ileNVD2026-10-28
CVE-2026-2839The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering ofMEDIUM5.320%EPSS 20%ileNVD2026-10-28
CVE-2026-55561InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-MEDIUM5.320%EPSS 20%ileNVD2026-10-28
CVE-2026-117688A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutioMEDIUM5.320%EPSS 20%ileNVD2026-10-29
CVE-2026-118601Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjaceMEDIUM6.320%EPSS 20%ileNVD2026-10-28
CVE-2026-82984When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("YoMEDIUM4.320%EPSS 20%ileNVD2026-10-27
CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhooMEDIUM6.920%EPSS 20%ileNVD2026-10-28
CVE-2026-118376WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-pMEDIUM6.020%EPSS 20%ileNVD2026-10-28
CVE-2026-109088A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_MEDIUM6.520%EPSS 20%ileNVD2026-10-27
CVE-2026-118661Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy MEDIUM6.520%EPSS 20%ileNVD2026-10-28
CVE-2026-104623A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE RMEDIUM6.320%EPSS 20%ileNVD2026-10-30
CVE-2026-110508The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement tMEDIUM5.320%EPSS 20%ileNVD2026-10-28
CVE-2026-119482Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly ConfiguredMEDIUM5.320%EPSS 20%ileNVD2026-10-30
CVE-2026-62056Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly ConfiguredMEDIUM5.320%EPSS 20%ileNVD2026-10-30
CVE-2026-62122Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access ContrMEDIUM5.320%EPSS 20%ileNVD2026-10-30
CVE-2026-85655The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includingMEDIUM4.320%EPSS 20%ileNVD2026-10-28
CVE-2026-111318The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOMMEDIUM5.420%EPSS 20%ileNVD2026-10-29
CVE-2026-62055Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly MEDIUM4.320%EPSS 20%ileNVD2026-10-30
CVE-2026-88942The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_MEDIUM6.119%EPSS 19%ileNVD2026-10-31
CVE-2026-54871Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allMEDIUM5.319%EPSS 19%ileNVD2026-10-29
CVE-2026-119663Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectMEDIUM5.319%EPSS 19%ileNVD2026-10-30
CVE-2026-110181PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function boMEDIUM6.519%EPSS 19%ileNVD2026-10-28
CVE-2026-90870A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versiMEDIUM5.319%EPSS 19%ileNVD2026-10-29
CVE-2026-116817OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access tMEDIUM6.919%EPSS 19%ileNVD2026-10-27
CVE-2026-66089In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves extMEDIUM6.119%EPSS 19%ileNVD2026-10-29
CVE-2026-104926The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'MEDIUM6.119%EPSS 19%ileNVD2026-10-31
CVE-2026-106003The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validaMEDIUM5.319%EPSS 19%ileNVD2026-10-28
CVE-2026-118426In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call MEDIUM5.319%EPSS 19%ileNVD2026-10-29
CVE-2026-63401Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAcMEDIUM5.319%EPSS 19%ileNVD2026-10-30
CVE-2026-7004WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allowMEDIUM5.119%EPSS 19%ileNVD2026-10-30
CVE-2026-111372The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up tMEDIUM4.319%EPSS 19%ileNVD2026-10-28
CVE-2026-116583Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. FMEDIUM5.319%EPSS 19%ileNVD2026-10-26
CVE-2026-118989WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability MEDIUM5.119%EPSS 19%ileNVD2026-10-29
CVE-2026-116689follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16MEDIUM5.919%EPSS 19%ileNVD2026-10-27
CVE-2026-116406Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly ConfMEDIUM4.319%EPSS 19%ileNVD2026-10-29
CVE-2026-104592libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This alloMEDIUM6.518%EPSS 18%ileNVD2026-10-26
CVE-2026-25467Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User RegistratMEDIUM5.318%EPSS 18%ileNVD2026-10-29
CVE-2026-90871Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.MEDIUM5.318%EPSS 18%ileNVD2026-10-29
CVE-2026-114617Authlib: ID token can disable its own nonce validation via the nonce_supported claimMEDIUM4.218%EPSS 18%ileGitHub2026-10-27
CVE-2026-116585Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including supMEDIUM6.918%EPSS 18%ileNVD2026-10-26
CVE-2026-82962ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it intoMEDIUM6.518%EPSS 18%ileNVD2026-10-28
CVE-2026-63402i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` cheMEDIUM5.918%EPSS 18%ileNVD2026-10-30
CVE-2026-119980The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerabMEDIUM6.518%EPSS 18%ileNVD2026-10-31
CVE-2026-117513A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the filMEDIUM5.518%EPSS 18%ileNVD2026-10-27
CVE-2026-55369Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the eMEDIUM6.518%EPSS 18%ileNVD2026-10-28
CVE-2026-119659Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other usMEDIUM5.318%EPSS 18%ileNVD2026-10-30
CVE-2026-103372The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning itMEDIUM5.318%EPSS 18%ileNVD2026-10-28
CVE-2026-107100The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested post is publicly viewaMEDIUM5.318%EPSS 18%ileNVD2026-10-28
CVE-2026-107312Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive AlMEDIUM4.318%EPSS 18%ileNVD2026-10-30
CVE-2026-106078A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token anMEDIUM6.918%EPSS 18%ileNVD2026-10-27
CVE-2026-110691The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating itsMEDIUM6.518%EPSS 18%ileNVD2026-10-28
CVE-2026-116750The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQL Injection via the 'catid' paMEDIUM6.518%EPSS 18%ileNVD2026-10-28
CVE-2026-97073Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control SecuMEDIUM5.318%EPSS 18%ileNVD2026-10-29
CVE-2026-118092Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows MEDIUM4.318%EPSS 18%ileNVD2026-10-29
CVE-2026-87029undici vulnerable to Denial of Service via unhandled exception in the decompress interceptorMEDIUM5.918%EPSS 18%ileGitHub2026-10-27
CVE-2026-76058The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, andMEDIUM5.318%EPSS 18%ileNVD2026-10-28
CVE-2026-90725Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM4.918%EPSS 18%ileNVD2026-10-27
CVE-2026-117605nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAdMEDIUM5.318%EPSS 18%ileNVD2026-10-28
CVE-2026-116566socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to beMEDIUM5.318%EPSS 18%ileNVD2026-10-29
CVE-2026-116774russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65MEDIUM4.318%EPSS 18%ileNVD2026-10-27
CVE-2026-115962Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCrMEDIUM4.318%EPSS 18%ileNVD2026-10-29
CVE-2026-116773russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the cMEDIUM4.318%EPSS 18%ileNVD2026-10-27
CVE-2026-107023Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrariMEDIUM6.517%EPSS 17%ileNVD2026-10-29
CVE-2026-55551ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-idMEDIUM6.517%EPSS 17%ileNVD2026-10-30
CVE-2025-13050Broken Function Level Authorization allows execution of poller post-restart commands by authenticated userMEDIUM5.417%EPSS 17%ileNVD2026-10-29
CVE-2026-104310IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM4.317%EPSS 17%ileNVD2026-10-29
CVE-2026-70381An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-deviMEDIUM6.917%EPSS 17%ileNVD2026-10-26
CVE-2026-103370The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site ScriptMEDIUM6.417%EPSS 17%ileNVD2026-10-28
CVE-2026-109385The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerableMEDIUM6.417%EPSS 17%ileNVD2026-10-28
CVE-2026-118643n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when MEDIUM5.317%EPSS 17%ileNVD2026-10-28
CVE-2026-118647n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error exMEDIUM5.317%EPSS 17%ileNVD2026-10-28
CVE-2026-39782Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access CMEDIUM5.317%EPSS 17%ileNVD2026-10-29
CVE-2026-109217The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure inMEDIUM5.317%EPSS 17%ileNVD2026-10-31
CVE-2026-90731Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7MEDIUM4.917%EPSS 17%ileNVD2026-10-27
CVE-2026-90732Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 throMEDIUM4.917%EPSS 17%ileNVD2026-10-27
CVE-2026-62019Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured AccMEDIUM4.317%EPSS 17%ileNVD2026-10-30
CVE-2026-62047Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly MEDIUM4.317%EPSS 17%ileNVD2026-10-30
CVE-2026-101325The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions upMEDIUM5.317%EPSS 17%ileNVD2026-10-31
CVE-2026-103915The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information ExMEDIUM5.317%EPSS 17%ileNVD2026-10-31
CVE-2026-118777Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theMEDIUM4.817%EPSS 17%ileNVD2026-10-29
CVE-2026-119138Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending caMEDIUM5.917%EPSS 17%ileNVD2026-10-29
CVE-2026-119142Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the FutMEDIUM5.917%EPSS 17%ileNVD2026-10-29
CVE-2026-101935The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected CrossMEDIUM6.117%EPSS 17%ileNVD2026-10-28
CVE-2026-116801Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo MEDIUM5.317%EPSS 17%ileNVD2026-10-27
CVE-2026-119712PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allowsMEDIUM5.317%EPSS 17%ileNVD2026-10-30
CVE-2026-70382Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoMEDIUM5.117%EPSS 17%ileNVD2026-10-26
CVE-2026-10752The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, aMEDIUM4.817%EPSS 17%ileNVD2026-10-27
CVE-2026-69446Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.MEDIUM4.417%EPSS 17%ileNVD2026-10-30
CVE-2026-119727A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream conMEDIUM6.517%EPSS 17%ileNVD2026-10-30
CVE-2026-104727The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'condMEDIUM6.417%EPSS 17%ileNVD2026-10-29
CVE-2026-116893REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets nMEDIUM6.117%EPSS 17%ileNVD2026-10-27
CVE-2026-114609fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled contentMEDIUM5.817%EPSS 17%ileGitHub2026-10-27
CVE-2026-116739VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uniniMEDIUM5.317%EPSS 17%ileNVD2026-10-26
CVE-2026-108316Tanium addressed an information disclosure vulnerability in Tanium Server.MEDIUM4.317%EPSS 17%ileNVD2026-10-27
CVE-2026-33520There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may alloMEDIUM6.117%EPSS 17%ileNVD2026-10-26
CVE-2026-50095There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some coMEDIUM6.117%EPSS 17%ileNVD2026-10-26
CVE-2026-50096There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may alloMEDIUM6.117%EPSS 17%ileNVD2026-10-26
CVE-2026-61573AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and MEDIUM6.116%EPSS 16%ileNVD2026-10-28
CVE-2026-50542Xibo is an open source digital signage platform with a web content management system and Windows display player softwareMEDIUM5.416%EPSS 16%ileNVD2026-10-28
CVE-2026-110509The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unautMEDIUM5.316%EPSS 16%ileNVD2026-10-28
CVE-2026-119547Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerabiliMEDIUM5.316%EPSS 16%ileNVD2026-10-30
CVE-2026-118629The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before renderingMEDIUM5.316%EPSS 16%ileNVD2026-10-31
CVE-2026-82214The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before retMEDIUM5.316%EPSS 16%ileNVD2026-10-31
CVE-2026-54162Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row fMEDIUM4.716%EPSS 16%ileNVD2026-10-28
CVE-2026-119329Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used MEDIUM4.316%EPSS 16%ileNVD2026-10-30
CVE-2026-116746QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAXMEDIUM6.916%EPSS 16%ileNVD2026-10-26
CVE-2026-116828YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placedMEDIUM6.916%EPSS 16%ileNVD2026-10-27
CVE-2026-112356GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail compMEDIUM5.116%EPSS 16%ileNVD2026-10-28
CVE-2026-116810OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any MEDIUM6.916%EPSS 16%ileNVD2026-10-27
CVE-2026-46499Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,MEDIUM4.316%EPSS 16%ileNVD2026-10-30
CVE-2026-104674Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access ContrMEDIUM4.316%EPSS 16%ileNVD2026-10-30
CVE-2026-62023Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, TemplaMEDIUM4.316%EPSS 16%ileNVD2026-10-30
CVE-2026-65627Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows MEDIUM6.916%EPSS 16%ileNVD2026-10-26
CVE-2026-110192IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM6.516%EPSS 16%ileNVD2026-10-29
CVE-2026-62300Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments upMEDIUM6.516%EPSS 16%ileNVD2026-10-30
CVE-2025-68395ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privilegedMEDIUM5.116%EPSS 16%ileNVD2026-10-30
CVE-2026-120274A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of thMEDIUM5.116%EPSS 16%ileNVD2026-11-01
CVE-2026-59993Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affecteMEDIUM6.516%EPSS 16%ileNVD2026-10-30
CVE-2026-119730Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackersMEDIUM5.116%EPSS 16%ileNVD2026-10-30
CVE-2026-117627A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or GooglMEDIUM5.416%EPSS 16%ileNVD2026-10-29
CVE-2026-58458Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the nativeMEDIUM6.916%EPSS 16%ileNVD2026-10-28
CVE-2026-115225The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lMEDIUM5.816%EPSS 16%ileNVD2026-10-28
CVE-2026-115712Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-leMEDIUM4.316%EPSS 16%ileNVD2026-10-29
CVE-2026-52708Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly ConfiguredMEDIUM4.316%EPSS 16%ileNVD2026-10-29
CVE-2026-115706Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalMEDIUM6.816%EPSS 16%ileNVD2026-10-29
CVE-2026-108325Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.MEDIUM6.616%EPSS 16%ileNVD2026-10-27
CVE-2026-118681go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the liveMEDIUM6.316%EPSS 16%ileNVD2026-10-28
CVE-2026-61806Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version MEDIUM5.316%EPSS 16%ileNVD2026-10-30
CVE-2026-103996The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored CMEDIUM6.416%EPSS 16%ileNVD2026-10-28
CVE-2026-104740The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored CMEDIUM6.416%EPSS 16%ileNVD2026-10-28
CVE-2026-109590The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width', 'height' andMEDIUM6.416%EPSS 16%ileNVD2026-10-28
CVE-2026-109978The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPreMEDIUM6.416%EPSS 16%ileNVD2026-10-28
CVE-2026-112353GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the WebmaMEDIUM6.216%EPSS 16%ileNVD2026-10-27
CVE-2026-117570Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilMEDIUM4.816%EPSS 16%ileNVD2026-10-27
CVE-2026-117471Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo devicMEDIUM5.415%EPSS 15%ileNVD2026-10-27
CVE-2026-116407Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly ConfMEDIUM5.415%EPSS 15%ileNVD2026-10-30
CVE-2026-27401Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-foMEDIUM5.315%EPSS 15%ileNVD2026-10-29
CVE-2026-114181Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager alMEDIUM5.315%EPSS 15%ileNVD2026-10-29
CVE-2026-116860Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access ContrMEDIUM5.315%EPSS 15%ileNVD2026-10-30
CVE-2026-12887In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a sMEDIUM5.115%EPSS 15%ileNVD2026-10-27
CVE-2026-77871The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to Stored Cross-Site ScMEDIUM6.415%EPSS 15%ileNVD2026-10-28
CVE-2026-87099Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis MEDIUM5.715%EPSS 15%ileNVD2026-10-28
CVE-2026-72752Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggeredMEDIUM6.515%EPSS 15%ileNVD2026-10-26
CVE-2026-54854Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.MEDIUM6.315%EPSS 15%ileNVD2026-10-30
CVE-2026-111031The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirecMEDIUM4.715%EPSS 15%ileNVD2026-10-28
CVE-2026-115224The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popuMEDIUM4.115%EPSS 15%ileNVD2026-10-28
CVE-2026-118754Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php thatMEDIUM6.915%EPSS 15%ileNVD2026-10-28
CVE-2026-118652Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP and Context.JSONPBlob concatenate an unvalidated caMEDIUM6.115%EPSS 15%ileNVD2026-10-28
CVE-2026-105987KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authMEDIUM5.115%EPSS 15%ileNVD2026-10-27
CVE-2026-120248Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrMEDIUM4.615%EPSS 15%ileNVD2026-11-01
CVE-2026-62991Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show`MEDIUM6.515%EPSS 15%ileNVD2026-10-30
CVE-2026-42690Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.MEDIUM5.415%EPSS 15%ileNVD2026-10-29
CVE-2026-116806OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allowMEDIUM5.315%EPSS 15%ileNVD2026-10-27
CVE-2026-103312The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifiMEDIUM5.315%EPSS 15%ileNVD2026-10-27
CVE-2026-62860Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/auth/login` endpointMEDIUM5.315%EPSS 15%ileNVD2026-10-30
CVE-2026-118071The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an HMEDIUM6.815%EPSS 15%ileNVD2026-10-30
CVE-2026-118165The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox MEDIUM6.815%EPSS 15%ileNVD2026-10-30
CVE-2026-113482The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputtiMEDIUM6.814%EPSS 14%ileNVD2026-11-01
CVE-2026-91920A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encodMEDIUM6.514%EPSS 14%ileNVD2026-10-30
CVE-2026-114711Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.MEDIUM6.514%EPSS 14%ileNVD2026-10-30
CVE-2026-27061Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.MEDIUM6.514%EPSS 14%ileNVD2026-10-30
CVE-2025-68391ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbiMEDIUM5.314%EPSS 14%ileNVD2026-10-30
CVE-2026-65631Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion deMEDIUM6.914%EPSS 14%ileNVD2026-10-26
CVE-2026-116535The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'diMEDIUM6.414%EPSS 14%ileNVD2026-10-31
CVE-2026-110133A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accountMEDIUM5.814%EPSS 14%ileNVD2026-10-30
CVE-2026-65210This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing matMEDIUM4.914%EPSS 14%ileNVD2026-10-27
CVE-2026-110200IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due toMEDIUM6.514%EPSS 14%ileNVD2026-10-29
CVE-2026-119160The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerabMEDIUM6.414%EPSS 14%ileNVD2026-10-31
CVE-2026-119552Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticatedMEDIUM6.314%EPSS 14%ileNVD2026-10-30
CVE-2026-115605Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured AccesMEDIUM4.314%EPSS 14%ileNVD2026-10-29
CVE-2026-103404An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session SmaMEDIUM6.814%EPSS 14%ileNVD2026-10-28
CVE-2026-112934filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user MEDIUM6.114%EPSS 14%ileGitHub2026-10-28
CVE-2026-50571WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websub-20180123, the inteMEDIUM5.714%EPSS 14%ileNVD2026-10-27
CVE-2026-112936filelock: ReadWriteLock follows a symlink at the lock path into SQLiteMEDIUM6.114%EPSS 14%ileGitHub2026-10-28
CVE-2026-116820YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers tMEDIUM6.914%EPSS 14%ileNVD2026-10-27
CVE-2026-118757PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerabMEDIUM6.914%EPSS 14%ileNVD2026-10-28
CVE-2026-100151The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vMEDIUM6.114%EPSS 14%ileNVD2026-10-31
CVE-2026-119367Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting MEDIUM5.414%EPSS 14%ileNVD2026-10-30
CVE-2026-116463A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the componeMEDIUM5.314%EPSS 14%ileNVD2026-10-26
CVE-2026-103331The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of payMEDIUM5.314%EPSS 14%ileNVD2026-10-28
CVE-2026-103382The Casso Flow WordPress plugin before 4.2.0 does not properly authenticate incoming bank-transfer payment notificationMEDIUM5.314%EPSS 14%ileNVD2026-10-28
CVE-2026-106002The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one ofMEDIUM5.314%EPSS 14%ileNVD2026-10-28
CVE-2026-107097The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using tMEDIUM5.314%EPSS 14%ileNVD2026-10-28
CVE-2026-115255The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, aMEDIUM5.314%EPSS 14%ileNVD2026-10-28
CVE-2026-11396The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information DiscMEDIUM5.314%EPSS 14%ileNVD2026-10-31
CVE-2026-116660Tanium addressed an improper access controls vulnerability in Enforce.MEDIUM4.314%EPSS 14%ileNVD2026-10-27
CVE-2026-108328Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.MEDIUM4.214%EPSS 14%ileNVD2026-10-27
CVE-2026-110808The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigMEDIUM4.214%EPSS 14%ileNVD2026-10-31
CVE-2026-118952A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a diffMEDIUM6.514%EPSS 14%ileNVD2026-10-30
CVE-2026-116815OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projecMEDIUM5.314%EPSS 14%ileNVD2026-10-27
CVE-2026-111500Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabiliMEDIUM5.414%EPSS 14%ileNVD2026-10-30
CVE-2026-118425A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solutMEDIUM6.814%EPSS 14%ileNVD2026-10-29
CVE-2026-118093Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting IncorMEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-39741Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting MEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-116856Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexibleMEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-118088Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured AccesMEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-25450Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly ConfMEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-54853Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly ConfigurMEDIUM5.314%EPSS 14%ileNVD2026-10-29
CVE-2026-116248In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the ShaMEDIUM6.014%EPSS 14%ileNVD2026-10-30
CVE-2026-77152Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collectiMEDIUM5.314%EPSS 14%ileNVD2026-10-31
CVE-2026-109216The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via thMEDIUM4.914%EPSS 14%ileNVD2026-10-29
CVE-2026-107267Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.MEDIUM5.314%EPSS 14%ileNVD2026-10-30
CVE-2026-120200Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, MEDIUM5.314%EPSS 14%ileNVD2026-10-31
CVE-2026-116745QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allowMEDIUM6.913%EPSS 13%ileNVD2026-10-26
CVE-2026-61803Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version MEDIUM5.313%EPSS 13%ileNVD2026-10-30
CVE-2026-119054Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows ContMEDIUM5.113%EPSS 13%ileNVD2026-10-29
CVE-2026-120185A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the fiMEDIUM5.113%EPSS 13%ileNVD2026-10-31
CVE-2026-114444The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its FiMEDIUM4.413%EPSS 13%ileNVD2026-10-30
CVE-2026-103405An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in tMEDIUM5.813%EPSS 13%ileNVD2026-10-28
CVE-2026-25448Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control SecuritMEDIUM4.313%EPSS 13%ileNVD2026-10-29
CVE-2026-54865Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.MEDIUM6.513%EPSS 13%ileNVD2026-10-29
CVE-2026-110292The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommMEDIUM6.513%EPSS 13%ileNVD2026-10-28
CVE-2026-87097Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: AcronMEDIUM5.313%EPSS 13%ileNVD2026-10-28
CVE-2026-117563MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows autMEDIUM5.313%EPSS 13%ileNVD2026-10-27
CVE-2013-20009Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackersMEDIUM4.813%EPSS 13%ileNVD2026-10-28
CVE-2026-59386A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper pMEDIUM6.513%EPSS 13%ileNVD2026-10-30
CVE-2026-115711Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (EMEDIUM6.413%EPSS 13%ileNVD2026-10-29
CVE-2026-119550Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows auMEDIUM5.113%EPSS 13%ileNVD2026-10-30
CVE-2026-111213The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass MEDIUM4.313%EPSS 13%ileNVD2026-10-28
CVE-2026-50543Xibo is an open source digital signage platform with a web content management system and Windows display player softwareMEDIUM4.313%EPSS 13%ileNVD2026-10-28
CVE-2026-90862Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202MEDIUM4.313%EPSS 13%ileNVD2026-10-29
CVE-2026-119087The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypaMEDIUM4.313%EPSS 13%ileNVD2026-10-30
CVE-2026-68866PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1MEDIUM6.513%EPSS 13%ileNVD2026-10-27
CVE-2026-42949A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specMEDIUM5.613%EPSS 13%ileNVD2026-10-29
CVE-2026-84595An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, mMEDIUM5.513%EPSS 13%ileNVD2026-10-26
CVE-2026-116761The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][txt] (wysiwyg field MEDIUM5.413%EPSS 13%ileNVD2026-10-28
CVE-2026-120019The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all MEDIUM5.413%EPSS 13%ileNVD2026-10-31
CVE-2026-111070The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site ScrMEDIUM5.413%EPSS 13%ileNVD2026-10-31
CVE-2026-94361The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incominMEDIUM5.313%EPSS 13%ileNVD2026-10-31
CVE-2026-107254Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows AMEDIUM4.813%EPSS 13%ileNVD2026-10-30
CVE-2026-22386Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured AccessMEDIUM4.313%EPSS 13%ileNVD2026-10-29
CVE-2026-111502Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability. A lMEDIUM4.313%EPSS 13%ileNVD2026-10-30
CVE-2026-119711PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackersMEDIUM6.913%EPSS 13%ileNVD2026-10-30
CVE-2026-115683A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registMEDIUM6.813%EPSS 13%ileNVD2026-10-30
CVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathMEDIUM6.113%EPSS 13%ileGitHub2026-10-28
CVE-2026-115624GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnMEDIUM6.912%EPSS 12%ileNVD2026-10-28
CVE-2026-76024Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read mMEDIUM6.512%EPSS 12%ileNVD2026-10-30
CVE-2026-116805OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtainMEDIUM5.312%EPSS 12%ileNVD2026-10-27
CVE-2026-115947Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.MEDIUM6.512%EPSS 12%ileNVD2026-10-30
CVE-2026-119571Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates addressMEDIUM6.312%EPSS 12%ileNVD2026-10-30
CVE-2026-113907A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM6.112%EPSS 12%ileNVD2026-10-26
CVE-2026-114572Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows AuthenticaMEDIUM5.412%EPSS 12%ileNVD2026-10-30
CVE-2026-120199LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated uMEDIUM5.312%EPSS 12%ileNVD2026-10-31
CVE-2026-109980The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up MEDIUM4.312%EPSS 12%ileNVD2026-10-28
CVE-2026-105617PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plansMEDIUM6.512%EPSS 12%ileNVD2026-10-28
CVE-2026-113576Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') MEDIUM6.312%EPSS 12%ileNVD2026-10-29
CVE-2026-112915filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutMEDIUM5.512%EPSS 12%ileGitHub2026-10-28
CVE-2026-119555Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an informMEDIUM5.312%EPSS 12%ileNVD2026-10-30
CVE-2026-61805Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version MEDIUM5.312%EPSS 12%ileNVD2026-10-30
CVE-2026-116802DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeMEDIUM5.112%EPSS 12%ileNVD2026-10-27
CVE-2026-118767Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containiMEDIUM4.812%EPSS 12%ileNVD2026-10-29
CVE-2026-119369Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellMEDIUM6.512%EPSS 12%ileNVD2026-10-30
CVE-2026-87879Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber PrMEDIUM5.912%EPSS 12%ileNVD2026-10-28
CVE-2026-90729Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.712%EPSS 12%ileNVD2026-10-27
CVE-2026-109370The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerable to Stored DOM-BasMEDIUM6.412%EPSS 12%ileNVD2026-10-28
CVE-2026-118500The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based CrossMEDIUM6.412%EPSS 12%ileNVD2026-10-30
CVE-2026-111501Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication AttempMEDIUM5.412%EPSS 12%ileNVD2026-10-30
CVE-2026-119715NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interfacMEDIUM5.312%EPSS 12%ileNVD2026-10-30
CVE-2026-103392An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attMEDIUM4.812%EPSS 12%ileNVD2026-10-28
CVE-2026-55147LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and projectMEDIUM6.312%EPSS 12%ileNVD2026-10-30
CVE-2026-92098The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site ScriptinMEDIUM6.112%EPSS 12%ileNVD2026-10-28
CVE-2026-103962The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend PostMEDIUM6.112%EPSS 12%ileNVD2026-10-31
CVE-2026-119554Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injectioMEDIUM6.012%EPSS 12%ileNVD2026-10-30
CVE-2026-119576ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readRecoMEDIUM5.312%EPSS 12%ileNVD2026-10-30
CVE-2026-76027Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via aMEDIUM4.312%EPSS 12%ileNVD2026-10-30
CVE-2026-116879Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task thaMEDIUM6.912%EPSS 12%ileNVD2026-10-27
CVE-2026-15586Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc.MEDIUM5.312%EPSS 12%ileNVD2026-10-27
CVE-2026-110030The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honMEDIUM5.312%EPSS 12%ileNVD2026-10-29
CVE-2026-118184The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the storeMEDIUM5.312%EPSS 12%ileNVD2026-10-31
CVE-2026-11854The authentication endpoint generates an error message that includes reflected data directly from the request without suMEDIUM6.112%EPSS 12%ileNVD2026-10-28
CVE-2026-56084Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7MEDIUM5.812%EPSS 12%ileNVD2026-10-27
CVE-2026-116631A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call promMEDIUM5.412%EPSS 12%ileNVD2026-10-26
CVE-2026-116632A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to dMEDIUM5.412%EPSS 12%ileNVD2026-10-26
CVE-2026-111068The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' parameter in all verMEDIUM4.412%EPSS 12%ileNVD2026-10-28
CVE-2026-55146LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and projectMEDIUM4.312%EPSS 12%ileNVD2026-10-30
CVE-2025-12523Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated userMEDIUM6.512%EPSS 12%ileNVD2026-10-29
CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated membersMEDIUM5.112%EPSS 12%ileNVD2026-10-28
CVE-2026-77173A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numbMEDIUM4.312%EPSS 12%ileNVD2026-10-27
CVE-2026-119132Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to triggerMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-119143Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest codeMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-116892SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthentiMEDIUM5.311%EPSS 11%ileNVD2026-10-27
CVE-2026-58496Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader'sMEDIUM4.311%EPSS 11%ileNVD2026-10-27
CVE-2026-86386Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions MEDIUM4.311%EPSS 11%ileNVD2026-10-28
CVE-2026-104315IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticatMEDIUM4.311%EPSS 11%ileNVD2026-10-29
CVE-2026-116822YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers tMEDIUM6.911%EPSS 11%ileNVD2026-10-27
CVE-2026-116809OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unautMEDIUM6.911%EPSS 11%ileNVD2026-10-27
CVE-2026-113813The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check MEDIUM6.511%EPSS 11%ileNVD2026-10-28
CVE-2026-19610A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics andMEDIUM6.511%EPSS 11%ileNVD2026-10-29
CVE-2026-119135Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a differenMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-119136Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style andMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-119139Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejecMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-119140Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious MEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-118435Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.MEDIUM5.411%EPSS 11%ileNVD2026-10-28
CVE-2026-109988The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored CroMEDIUM4.411%EPSS 11%ileNVD2026-10-28
CVE-2026-116691MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.MEDIUM6.511%EPSS 11%ileNVD2026-10-27
CVE-2026-116410Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.MEDIUM6.511%EPSS 11%ileNVD2026-10-30
CVE-2026-116853Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.MEDIUM6.511%EPSS 11%ileNVD2026-10-30
CVE-2026-109209The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is MEDIUM6.411%EPSS 11%ileNVD2026-10-28
CVE-2026-103391An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allMEDIUM5.311%EPSS 11%ileNVD2026-10-28
CVE-2026-118651Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP heaMEDIUM5.311%EPSS 11%ileNVD2026-10-28
CVE-2026-37468Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary MEDIUM6.111%EPSS 11%ileNVD2026-10-30
CVE-2026-119186Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nodMEDIUM5.911%EPSS 11%ileNVD2026-10-29
CVE-2026-114270The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allMEDIUM5.311%EPSS 11%ileNVD2026-10-29
CVE-2026-115282The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check before rendering postsMEDIUM5.311%EPSS 11%ileNVD2026-10-29
CVE-2026-78396The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose MEDIUM5.311%EPSS 11%ileNVD2026-10-29
CVE-2026-118100The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporMEDIUM5.311%EPSS 11%ileNVD2026-10-30
CVE-2026-61529Endatix is a self-hosted form and survey management platform with a headless API. Prior to 0.7.0, the anonymous `POST /fMEDIUM4.711%EPSS 11%ileNVD2026-10-28
CVE-2026-111727The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_submMEDIUM6.411%EPSS 11%ileNVD2026-10-28
CVE-2026-108366The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vuMEDIUM6.411%EPSS 11%ileNVD2026-10-28
CVE-2026-118164The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored CMEDIUM6.411%EPSS 11%ileNVD2026-10-28
CVE-2026-116546The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable toMEDIUM6.411%EPSS 11%ileNVD2026-10-31
CVE-2026-76780The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This isMEDIUM6.311%EPSS 11%ileNVD2026-10-28
CVE-2026-111960The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisation checks in one of MEDIUM4.311%EPSS 11%ileNVD2026-10-28
CVE-2026-87085Tanium addressed a SQL injection vulnerability in Provision.MEDIUM6.310%EPSS 10%ileNVD2026-10-27
CVE-2026-118322Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory MEDIUM4.310%EPSS 10%ileNVD2026-10-27
CVE-2026-116857Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmarMEDIUM6.510%EPSS 10%ileNVD2026-10-29
CVE-2026-119365Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media PlaMEDIUM6.510%EPSS 10%ileNVD2026-10-30
CVE-2026-39739Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force UMEDIUM6.510%EPSS 10%ileNVD2026-10-30
CVE-2026-119201Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecrMEDIUM4.810%EPSS 10%ileNVD2026-10-29
CVE-2026-118778Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theMEDIUM5.910%EPSS 10%ileNVD2026-10-29
CVE-2026-87897A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authenticMEDIUM4.610%EPSS 10%ileNVD2026-10-27
CVE-2026-119059The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capabiMEDIUM4.310%EPSS 10%ileNVD2026-10-30
CVE-2026-90730Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.510%EPSS 10%ileNVD2026-10-27
CVE-2026-103288Ghost: Authorization Bypass in Comment Like FeatureMEDIUM6.510%EPSS 10%ileGitHub2026-10-27
CVE-2026-116476A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskPMEDIUM5.310%EPSS 10%ileNVD2026-10-26
CVE-2026-93009A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option bMEDIUM4.310%EPSS 10%ileNVD2026-10-29
CVE-2026-118644n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of MEDIUM5.110%EPSS 10%ileNVD2026-10-28
CVE-2026-116404Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data EmbeMEDIUM6.510%EPSS 10%ileNVD2026-10-28
CVE-2026-105620PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL AnonymiMEDIUM6.510%EPSS 10%ileNVD2026-10-28
CVE-2026-107710The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Stored Cross-Site ScMEDIUM6.410%EPSS 10%ileNVD2026-10-28
CVE-2026-109975The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPreMEDIUM6.410%EPSS 10%ileNVD2026-10-28
CVE-2026-110071The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versioMEDIUM6.410%EPSS 10%ileNVD2026-10-28
CVE-2026-118634The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all MEDIUM6.410%EPSS 10%ileNVD2026-10-30
CVE-2026-119566Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IMEDIUM6.310%EPSS 10%ileNVD2026-10-30
CVE-2026-119317On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the MEDIUM6.010%EPSS 10%ileNVD2026-10-29
CVE-2026-96554The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions MEDIUM6.410%EPSS 10%ileNVD2026-10-31
CVE-2026-118593A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9MEDIUM5.910%EPSS 10%ileNVD2026-10-30
CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use cMEDIUM5.110%EPSS 10%ileNVD2026-10-28
CVE-2026-119371SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPMEDIUM6.810%EPSS 10%ileNVD2026-10-30
CVE-2026-107250Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*.MEDIUM5.910%EPSS 10%ileNVD2026-10-30
CVE-2026-107253Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*.MEDIUM5.910%EPSS 10%ileNVD2026-10-30
CVE-2026-117535REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, wherMEDIUM5.110%EPSS 10%ileNVD2026-10-27
CVE-2026-107251Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. ThisMEDIUM6.510%EPSS 10%ileNVD2026-10-30
CVE-2026-102813An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interfacMEDIUM6.110%EPSS 10%ileNVD2026-10-27
CVE-2026-112839Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows ExploitinMEDIUM4.310%EPSS 10%ileNVD2026-10-26
CVE-2026-118318Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a craMEDIUM4.310%EPSS 10%ileNVD2026-10-27
CVE-2026-42707Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting IncMEDIUM4.310%EPSS 10%ileNVD2026-10-29
CVE-2026-118947A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core lMEDIUM4.310%EPSS 10%ileNVD2026-10-30
CVE-2026-118168The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renderMEDIUM5.310%EPSS 10%ileNVD2026-11-01
CVE-2026-118656Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target MEDIUM6.19%EPSS 9%ileNVD2026-10-28
CVE-2026-107307Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker MEDIUM4.39%EPSS 9%ileNVD2026-10-30
CVE-2026-107310Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue afMEDIUM4.39%EPSS 9%ileNVD2026-10-30
CVE-2026-116854Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.MEDIUM6.59%EPSS 9%ileNVD2026-10-30
CVE-2026-113409The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to storeMEDIUM4.89%EPSS 9%ileNVD2026-10-29
CVE-2026-116610The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 dueMEDIUM4.39%EPSS 9%ileNVD2026-10-28
CVE-2026-118959A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request iMEDIUM5.49%EPSS 9%ileNVD2026-10-30
CVE-2026-93515A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 cMEDIUM6.89%EPSS 9%ileNVD2026-10-28
CVE-2026-107257Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versionMEDIUM6.59%EPSS 9%ileNVD2026-10-30
CVE-2026-105616PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. MEDIUM5.79%EPSS 9%ileNVD2026-10-28
CVE-2026-10511The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' paraMEDIUM6.49%EPSS 9%ileNVD2026-10-27
CVE-2026-107625The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugiMEDIUM6.49%EPSS 9%ileNVD2026-10-28
CVE-2026-109974The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is MEDIUM6.49%EPSS 9%ileNVD2026-10-28
CVE-2026-116749The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cMEDIUM6.49%EPSS 9%ileNVD2026-10-28
CVE-2026-77188The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting viMEDIUM6.49%EPSS 9%ileNVD2026-10-28
CVE-2026-107765The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versiMEDIUM6.49%EPSS 9%ileNVD2026-10-31
CVE-2026-111592The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vuMEDIUM6.49%EPSS 9%ileNVD2026-10-31
CVE-2026-63121Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versionsMEDIUM6.39%EPSS 9%ileNVD2026-10-30
CVE-2026-117859A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue ocMEDIUM5.49%EPSS 9%ileNVD2026-10-29
CVE-2026-115259The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks wMEDIUM4.99%EPSS 9%ileNVD2026-10-29
CVE-2026-84614A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOSMEDIUM4.69%EPSS 9%ileNVD2026-10-26
CVE-2026-118581A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-decMEDIUM6.99%EPSS 9%ileNVD2026-10-28
CVE-2026-119284joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standarMEDIUM6.99%EPSS 9%ileNVD2026-10-29
CVE-2026-93516A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server bMEDIUM5.59%EPSS 9%ileNVD2026-10-28
CVE-2026-93010A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does nMEDIUM4.39%EPSS 9%ileNVD2026-10-29
CVE-2025-11455The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability cMEDIUM4.39%EPSS 9%ileNVD2026-10-31
CVE-2026-116873Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module thatMEDIUM6.99%EPSS 9%ileNVD2026-10-27
CVE-2026-116890Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module MEDIUM6.99%EPSS 9%ileNVD2026-10-27
CVE-2026-54852Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows ExploMEDIUM5.39%EPSS 9%ileNVD2026-10-29
CVE-2026-16307Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows AccessiMEDIUM4.39%EPSS 9%ileNVD2026-10-27
CVE-2026-107261Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows AMEDIUM4.29%EPSS 9%ileNVD2026-10-30
CVE-2026-117615Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being reMEDIUM6.59%EPSS 9%ileNVD2026-10-28
CVE-2026-39742Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellMEDIUM6.59%EPSS 9%ileNVD2026-10-29
CVE-2026-116680HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wiMEDIUM6.49%EPSS 9%ileNVD2026-10-27
CVE-2026-42691Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-manageMEDIUM5.49%EPSS 9%ileNVD2026-10-29
CVE-2026-118640n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-onlyMEDIUM5.39%EPSS 9%ileNVD2026-10-28
CVE-2026-118169The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Stored Cross-Site ScMEDIUM4.99%EPSS 9%ileNVD2026-10-28
CVE-2026-116582Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. PMEDIUM4.78%EPSS 8%ileNVD2026-10-26
CVE-2026-93293The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's MEDIUM6.48%EPSS 8%ileNVD2026-10-29
CVE-2026-48380Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memoMEDIUM5.58%EPSS 8%ileNVD2026-10-27
CVE-2026-27063Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly ConfiguredMEDIUM5.38%EPSS 8%ileNVD2026-10-29
CVE-2026-118685ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the strMEDIUM6.98%EPSS 8%ileNVD2026-10-28
CVE-2026-118658Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-ForwardedMEDIUM4.78%EPSS 8%ileNVD2026-10-28
CVE-2026-117572The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter beforMEDIUM4.18%EPSS 8%ileNVD2026-10-30
CVE-2026-84594A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 MEDIUM5.58%EPSS 8%ileNVD2026-10-26
CVE-2026-22114HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustiMEDIUM5.38%EPSS 8%ileNVD2026-10-30
CVE-2026-108763The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler tMEDIUM4.38%EPSS 8%ileNVD2026-10-29
CVE-2026-113644In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certifiMEDIUM5.58%EPSS 8%ileNVD2026-10-27
CVE-2026-107259Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code IMEDIUM5.48%EPSS 8%ileNVD2026-10-30
CVE-2026-107264Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allMEDIUM5.48%EPSS 8%ileNVD2026-10-30
CVE-2026-116885Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmMEDIUM5.38%EPSS 8%ileNVD2026-10-27
CVE-2026-105613PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited MEDIUM4.78%EPSS 8%ileNVD2026-10-28
CVE-2026-105614PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowinMEDIUM4.78%EPSS 8%ileNVD2026-10-28
CVE-2026-118599A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webexteMEDIUM5.58%EPSS 8%ileNVD2026-10-31
CVE-2026-115302The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX action that deletes stMEDIUM5.38%EPSS 8%ileNVD2026-10-29
CVE-2026-78395The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when procMEDIUM5.38%EPSS 8%ileNVD2026-10-29
CVE-2026-105323Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software andMEDIUM6.18%EPSS 8%ileNVD2026-10-27
CVE-2026-116849Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCasMEDIUM6.58%EPSS 8%ileNVD2026-10-29
CVE-2026-116850Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy AddonMEDIUM6.58%EPSS 8%ileNVD2026-10-29
CVE-2026-118095Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren MediMEDIUM6.58%EPSS 8%ileNVD2026-10-29
CVE-2026-117621Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browMEDIUM6.18%EPSS 8%ileNVD2026-10-28
CVE-2026-117622Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponsMEDIUM6.18%EPSS 8%ileNVD2026-10-28
CVE-2026-117613Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, alMEDIUM5.48%EPSS 8%ileNVD2026-10-28
CVE-2026-117623Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overMEDIUM5.48%EPSS 8%ileNVD2026-10-28
CVE-2026-104331IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticatMEDIUM5.48%EPSS 8%ileNVD2026-10-29
CVE-2026-107265Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allMEDIUM5.48%EPSS 8%ileNVD2026-10-30
CVE-2026-62141Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly ConfiguredMEDIUM5.48%EPSS 8%ileNVD2026-10-30
CVE-2026-115919Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeMEDIUM6.27%EPSS 7%ileNVD2026-10-26
CVE-2026-115920Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, MEDIUM6.27%EPSS 7%ileNVD2026-10-26
CVE-2026-116823YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inMEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-116824YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that alloMEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-116804DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expressionMEDIUM5.17%EPSS 7%ileNVD2026-10-27
CVE-2026-105618PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to tMEDIUM5.77%EPSS 7%ileNVD2026-10-28
CVE-2026-93524A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenMEDIUM6.97%EPSS 7%ileNVD2026-10-28
CVE-2026-119375SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cMEDIUM6.87%EPSS 7%ileNVD2026-10-30
CVE-2026-103400An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in tMEDIUM5.57%EPSS 7%ileNVD2026-10-28
CVE-2026-5702Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticatMEDIUM4.87%EPSS 7%ileNVD2026-10-29
CVE-2026-61575AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI` MEDIUM4.77%EPSS 7%ileNVD2026-10-28
CVE-2026-108326Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.MEDIUM6.57%EPSS 7%ileNVD2026-10-27
CVE-2026-103332The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of iMEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-115601Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows ExploitiMEDIUM5.37%EPSS 7%ileNVD2026-10-29
CVE-2026-116387Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured AccMEDIUM5.37%EPSS 7%ileNVD2026-10-29
CVE-2026-118091Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured AccesMEDIUM5.37%EPSS 7%ileNVD2026-10-29
CVE-2026-117539darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attMEDIUM5.17%EPSS 7%ileNVD2026-10-27
CVE-2026-110182PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These fMEDIUM4.37%EPSS 7%ileNVD2026-10-28
CVE-2026-107342The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability checkMEDIUM4.37%EPSS 7%ileNVD2026-11-01
CVE-2026-112617An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An appMEDIUM5.57%EPSS 7%ileNVD2026-10-26
CVE-2026-102260HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API eMEDIUM4.37%EPSS 7%ileNVD2026-10-29
CVE-2026-119416CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection thMEDIUM6.37%EPSS 7%ileNVD2026-10-30
CVE-2026-116677OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manageMEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-115277The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflectiMEDIUM4.77%EPSS 7%ileNVD2026-10-30
CVE-2026-116874SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthentiMEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-116875SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which MEDIUM5.37%EPSS 7%ileNVD2026-10-27
CVE-2026-116891SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthentiMEDIUM5.17%EPSS 7%ileNVD2026-10-27
CVE-2026-118319Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory iMEDIUM4.37%EPSS 7%ileNVD2026-10-27
CVE-2026-42694Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allowMEDIUM4.37%EPSS 7%ileNVD2026-10-29
CVE-2026-67187Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows uMEDIUM5.17%EPSS 7%ileNVD2026-10-28
CVE-2026-112374FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST /apMEDIUM5.17%EPSS 7%ileNVD2026-10-30
CVE-2026-119721Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in rMEDIUM6.96%EPSS 6%ileNVD2026-10-30
CVE-2026-119563phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE priMEDIUM5.16%EPSS 6%ileNVD2026-10-30
CVE-2026-104063Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when deMEDIUM6.96%EPSS 6%ileNVD2026-10-30
CVE-2026-118029Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) beforMEDIUM5.96%EPSS 6%ileNVD2026-10-28
CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared wMEDIUM5.16%EPSS 6%ileNVD2026-10-28
CVE-2026-115966Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing TeMEDIUM6.56%EPSS 6%ileNVD2026-10-26
CVE-2026-116398Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content SMEDIUM6.56%EPSS 6%ileNVD2026-10-26
CVE-2026-116400Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button BlMEDIUM6.56%EPSS 6%ileNVD2026-10-26
CVE-2026-116408Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PMEDIUM6.56%EPSS 6%ileNVD2026-10-26
CVE-2026-115957Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion BoarMEDIUM6.56%EPSS 6%ileNVD2026-10-28
CVE-2026-118087Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site RMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-118094Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad InserMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-24533Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy BlMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-48196Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali ForMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-52709Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video GalMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-56056Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid TheMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-48195Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF PosteMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-54862Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import aMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-110881Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-118097Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-39737Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElemMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-119370Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellMEDIUM6.56%EPSS 6%ileNVD2026-10-30
CVE-2026-45141Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebook_from_skill`, `savMEDIUM6.56%EPSS 6%ileNVD2026-10-30
CVE-2026-65444Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes BlMEDIUM6.56%EPSS 6%ileNVD2026-10-30
CVE-2026-84634A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden GatMEDIUM6.36%EPSS 6%ileNVD2026-10-26
CVE-2026-118072The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manaMEDIUM5.46%EPSS 6%ileNVD2026-10-30
CVE-2026-108302Tanium addressed an improper access controls vulnerability in Comply.MEDIUM4.36%EPSS 6%ileNVD2026-10-27
CVE-2026-102816An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthentMEDIUM5.36%EPSS 6%ileNVD2026-10-27
CVE-2026-107258Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects IMEDIUM5.46%EPSS 6%ileNVD2026-10-30
CVE-2026-107263Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versionMEDIUM5.46%EPSS 6%ileNVD2026-10-30
CVE-2025-68392ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved fMEDIUM5.16%EPSS 6%ileNVD2026-10-30
CVE-2026-82986The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for aMEDIUM4.66%EPSS 6%ileNVD2026-10-27
CVE-2026-106036Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS cMEDIUM6.96%EPSS 6%ileNVD2026-10-29
CVE-2026-93536A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server befMEDIUM5.36%EPSS 6%ileNVD2026-10-28
CVE-2026-107046A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attMEDIUM5.36%EPSS 6%ileNVD2026-10-29
CVE-2026-81472Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iMEDIUM4.26%EPSS 6%ileNVD2026-10-28
CVE-2026-118677n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop apMEDIUM5.96%EPSS 6%ileNVD2026-10-28
CVE-2026-119189Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nodMEDIUM5.96%EPSS 6%ileNVD2026-10-29
CVE-2026-119339Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata MEDIUM5.56%EPSS 6%ileNVD2026-10-30
CVE-2026-62250LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_preMEDIUM5.56%EPSS 6%ileNVD2026-10-30
CVE-2026-62254LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger aMEDIUM5.56%EPSS 6%ileNVD2026-10-30
CVE-2026-102787Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5MEDIUM5.36%EPSS 6%ileNVD2026-10-27
CVE-2026-115795P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next bMEDIUM5.36%EPSS 6%ileNVD2026-10-29
CVE-2026-88928The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment notMEDIUM6.56%EPSS 6%ileNVD2026-10-29
CVE-2026-116803DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armedMEDIUM5.16%EPSS 6%ileNVD2026-10-27
CVE-2026-119378SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make appliMEDIUM6.86%EPSS 6%ileNVD2026-10-30
CVE-2026-67079HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application withiMEDIUM6.46%EPSS 6%ileNVD2026-10-28
CVE-2026-119728A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file withMEDIUM5.56%EPSS 6%ileNVD2026-10-30
CVE-2026-118266Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a safe HTTP method as thMEDIUM5.36%EPSS 6%ileNVD2026-10-28
CVE-2026-119272Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory insideMEDIUM4.36%EPSS 6%ileNVD2026-10-30
CVE-2026-105924A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.MEDIUM4.36%EPSS 6%ileNVD2026-10-30
CVE-2026-118030A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and acMEDIUM4.26%EPSS 6%ileNVD2026-10-29
CVE-2026-103313The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confiMEDIUM5.35%EPSS 5%ileNVD2026-10-28
CVE-2026-103330The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifiMEDIUM5.35%EPSS 5%ileNVD2026-10-28
CVE-2026-114619Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensMEDIUM4.65%EPSS 5%ileGitHub2026-10-27
CVE-2026-112455An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-112708A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.MEDIUM5.35%EPSS 5%ileNVD2026-10-26
CVE-2026-110183PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertainiMEDIUM4.35%EPSS 5%ileNVD2026-10-28
CVE-2026-113481The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a poMEDIUM4.35%EPSS 5%ileNVD2026-11-01
CVE-2026-79656A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC MEDIUM6.05%EPSS 5%ileNVD2026-10-28
CVE-2026-112685An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, maMEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-96389Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versionMEDIUM6.55%EPSS 5%ileNVD2026-10-30
CVE-2026-116884SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.MEDIUM5.35%EPSS 5%ileNVD2026-10-27
CVE-2026-116889SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with paMEDIUM5.35%EPSS 5%ileNVD2026-10-27
CVE-2026-65397An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-86920An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-119376SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPMEDIUM6.85%EPSS 5%ileNVD2026-10-30
CVE-2026-115910Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the atMEDIUM6.85%EPSS 5%ileGitHub2026-10-28
CVE-2026-104729The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_index, empty_nMEDIUM6.45%EPSS 5%ileNVD2026-10-28
CVE-2026-112658This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden GMEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-86987An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. MEDIUM5.55%EPSS 5%ileNVD2026-10-26
CVE-2026-116881Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to injectMEDIUM5.35%EPSS 5%ileNVD2026-10-27
CVE-2026-112678A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOSMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-103393An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjMEDIUM4.34%EPSS 4%ileNVD2026-10-28
CVE-2026-119134Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-model resource handle tables onlyMEDIUM6.94%EPSS 4%ileNVD2026-10-29
CVE-2026-112559An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-118101The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of theMEDIUM5.34%EPSS 4%ileNVD2026-10-30
CVE-2026-116502A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequentMEDIUM4.84%EPSS 4%ileNVD2026-10-26
CVE-2026-107343The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability checkMEDIUM4.34%EPSS 4%ileNVD2026-11-01
CVE-2026-115906zip: AES Entry HMAC Authentication Bypass on Premature EOFMEDIUM6.54%EPSS 4%ileGitHub2026-10-29
CVE-2026-105619PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL AnoMEDIUM4.84%EPSS 4%ileNVD2026-10-28
CVE-2026-101034An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and MEDIUM6.84%EPSS 4%ileNVD2026-10-27
CVE-2026-93008A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME targMEDIUM6.84%EPSS 4%ileNVD2026-10-29
CVE-2026-108332Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.MEDIUM6.34%EPSS 4%ileNVD2026-10-27
CVE-2026-120206Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forgMEDIUM5.94%EPSS 4%ileNVD2026-10-31
CVE-2026-112533An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-112675This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-107252Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaMEDIUM5.44%EPSS 4%ileNVD2026-10-30
CVE-2026-119546Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in resMEDIUM6.84%EPSS 4%ileNVD2026-10-30
CVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual MEDIUM6.34%EPSS 4%ileGitHub2026-10-28
CVE-2026-43736An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS MEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-116882Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticateMEDIUM4.84%EPSS 4%ileNVD2026-10-27
CVE-2026-116883Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticateMEDIUM4.84%EPSS 4%ileNVD2026-10-27
CVE-2026-116888SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with thMEDIUM4.84%EPSS 4%ileNVD2026-10-27
CVE-2026-119251A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in MEDIUM6.74%EPSS 4%ileNVD2026-10-29
CVE-2026-57203Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2MEDIUM6.94%EPSS 4%ileNVD2026-10-27
CVE-2026-112616An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-86925An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, maMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-118756gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to MEDIUM6.74%EPSS 4%ileNVD2026-10-28
CVE-2026-51902SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/MEDIUM6.54%EPSS 4%ileNVD2026-10-29
CVE-2026-118372LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers byMEDIUM6.34%EPSS 4%ileNVD2026-10-28
CVE-2026-119291Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect sMEDIUM5.54%EPSS 4%ileNVD2026-10-30
CVE-2026-120249Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/MEDIUM6.94%EPSS 4%ileNVD2026-11-01
CVE-2026-88941Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerabilMEDIUM6.24%EPSS 4%ileNVD2026-10-29
CVE-2026-63115ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handleMEDIUM5.34%EPSS 4%ileNVD2026-10-30
CVE-2026-87878Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (LMEDIUM6.34%EPSS 4%ileNVD2026-10-28
CVE-2026-112618An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionMEDIUM5.54%EPSS 4%ileNVD2026-10-26
CVE-2026-118693CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusMEDIUM5.63%EPSS 3%ileNVD2026-10-28
CVE-2026-112706A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOSMEDIUM5.53%EPSS 3%ileNVD2026-10-26
CVE-2026-119704Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allowMEDIUM5.33%EPSS 3%ileNVD2026-10-30
CVE-2026-112506A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may beMEDIUM5.53%EPSS 3%ileNVD2026-10-26
CVE-2026-116886Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with pMEDIUM5.33%EPSS 3%ileNVD2026-10-27
CVE-2026-116887Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with pMEDIUM5.33%EPSS 3%ileNVD2026-10-27
CVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerMEDIUM4.73%EPSS 3%ileGitHub2026-10-28
CVE-2026-119338Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys tMEDIUM6.93%EPSS 3%ileNVD2026-10-30
CVE-2026-115610Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PubliMEDIUM6.53%EPSS 3%ileNVD2026-10-29
CVE-2026-111499Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vMEDIUM5.53%EPSS 3%ileNVD2026-10-30
CVE-2026-118265Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-supMEDIUM5.33%EPSS 3%ileNVD2026-10-28
CVE-2026-116900REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by MEDIUM5.13%EPSS 3%ileNVD2026-10-27
CVE-2026-120252imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG DefinMEDIUM6.83%EPSS 3%ileNVD2026-11-01
CVE-2026-109891Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting IncorrMEDIUM6.43%EPSS 3%ileNVD2026-10-29
CVE-2026-61725sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z archMEDIUM6.13%EPSS 3%ileNVD2026-10-30
CVE-2026-22063The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affectedMEDIUM6.03%EPSS 3%ileNVD2026-10-27
CVE-2026-65630Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key througMEDIUM5.93%EPSS 3%ileNVD2026-10-26
CVE-2026-116855Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting InMEDIUM5.43%EPSS 3%ileNVD2026-10-28
CVE-2026-116731Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to cMEDIUM6.93%EPSS 3%ileNVD2026-10-26
CVE-2026-117608Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers tMEDIUM6.93%EPSS 3%ileNVD2026-10-28
CVE-2026-116725gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROMEDIUM6.83%EPSS 3%ileNVD2026-10-26
CVE-2026-116728libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024MEDIUM6.83%EPSS 3%ileNVD2026-10-26
CVE-2026-116730Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/MEDIUM6.83%EPSS 3%ileNVD2026-10-26
CVE-2026-118371LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url() MEDIUM6.33%EPSS 3%ileNVD2026-10-28
CVE-2026-65628jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. ItMEDIUM5.93%EPSS 3%ileNVD2026-10-26
CVE-2026-112547A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may bMEDIUM5.53%EPSS 3%ileNVD2026-10-26
CVE-2026-116842DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup MEDIUM6.93%EPSS 3%ileNVD2026-10-27
CVE-2026-113485The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media LibrMEDIUM6.53%EPSS 3%ileNVD2026-10-28
CVE-2026-113486The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, sMEDIUM6.53%EPSS 3%ileNVD2026-10-28
CVE-2026-108301Tanium addressed an improper access controls vulnerability in Comply.MEDIUM6.03%EPSS 3%ileNVD2026-10-27
CVE-2026-104381A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticaMEDIUM6.03%EPSS 3%ileNVD2026-10-27
CVE-2026-118657Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers frMEDIUM5.93%EPSS 3%ileNVD2026-10-28
CVE-2026-16020Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK DefteMEDIUM5.43%EPSS 3%ileNVD2026-10-28
CVE-2026-116727gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM commaMEDIUM4.83%EPSS 3%ileNVD2026-10-26
CVE-2026-116729libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001aMEDIUM4.83%EPSS 3%ileNVD2026-10-26
CVE-2026-112935filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersMEDIUM4.73%EPSS 3%ileGitHub2026-10-28
CVE-2026-119372SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in MEDIUM6.83%EPSS 3%ileNVD2026-10-30
CVE-2026-115921Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, MEDIUM6.23%EPSS 3%ileNVD2026-10-26
CVE-2026-115922Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_MEDIUM6.23%EPSS 3%ileNVD2026-10-26
CVE-2026-107067An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive informationMEDIUM6.23%EPSS 3%ileNVD2026-10-27
CVE-2026-112609This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to acMEDIUM5.53%EPSS 3%ileNVD2026-10-26
CVE-2026-116732libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the tableMEDIUM4.83%EPSS 3%ileNVD2026-10-26
CVE-2026-114706Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong TeMEDIUM6.53%EPSS 3%ileNVD2026-10-29
CVE-2026-116848Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH InnovatioMEDIUM6.53%EPSS 3%ileNVD2026-10-29
CVE-2026-117555CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an iMEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-117557SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/MEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-119285Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomainMEDIUM5.92%EPSS 2%ileNVD2026-10-29
CVE-2026-119466Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross SiMEDIUM5.42%EPSS 2%ileNVD2026-10-30
CVE-2026-116829llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackersMEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-116840llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-MEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-116743libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows aMEDIUM6.82%EPSS 2%ileNVD2026-10-26
CVE-2026-119720Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that readMEDIUM6.82%EPSS 2%ileNVD2026-10-30
CVE-2026-116726Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify filMEDIUM4.82%EPSS 2%ileNVD2026-10-26
CVE-2026-116735libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackersMEDIUM6.92%EPSS 2%ileNVD2026-10-26
CVE-2026-116736Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c MEDIUM6.92%EPSS 2%ileNVD2026-10-26
CVE-2026-116737libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_patMEDIUM6.92%EPSS 2%ileNVD2026-10-26
CVE-2026-115707Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (EMEDIUM6.42%EPSS 2%ileNVD2026-10-29
CVE-2026-59959SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. PMEDIUM4.82%EPSS 2%ileNVD2026-10-28
CVE-2026-119124ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause wMEDIUM4.82%EPSS 2%ileNVD2026-10-29
CVE-2026-111487An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.MEDIUM4.32%EPSS 2%ileNVD2026-10-30
CVE-2026-119591SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to craMEDIUM6.82%EPSS 2%ileNVD2026-10-30
CVE-2026-120243FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows atMEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-120244FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackersMEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-120245FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heMEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-120246FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memMEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-120247FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attacMEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-120251imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows MEDIUM6.82%EPSS 2%ileNVD2026-11-01
CVE-2026-90726Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.02%EPSS 2%ileNVD2026-10-27
CVE-2026-7005WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows atMEDIUM5.32%EPSS 2%ileNVD2026-10-30
CVE-2026-116742HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c thatMEDIUM4.82%EPSS 2%ileNVD2026-10-26
CVE-2026-113908A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may beMEDIUM5.52%EPSS 2%ileNVD2026-10-26
CVE-2026-119601AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupMEDIUM6.92%EPSS 2%ileNVD2026-10-30
CVE-2025-71439llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows aMEDIUM6.82%EPSS 2%ileNVD2026-10-27
CVE-2026-116841DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_fMEDIUM6.82%EPSS 2%ileNVD2026-10-27
CVE-2026-119340Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h readsMEDIUM5.52%EPSS 2%ileNVD2026-10-30
CVE-2026-107262Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This isMEDIUM5.32%EPSS 2%ileNVD2026-10-30
CVE-2026-106484Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attackerMEDIUM4.42%EPSS 2%ileNVD2026-10-28
CVE-2024-58399llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read MEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and AMEDIUM6.92%EPSS 2%ileNVD2026-10-27
CVE-2026-115402OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) viMEDIUM5.72%EPSS 2%ileNVD2026-10-28
CVE-2026-112701An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.52%EPSS 2%ileNVD2026-10-26
CVE-2026-113914An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2MEDIUM5.52%EPSS 2%ileNVD2026-10-26
CVE-2026-107472An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in QMEDIUM4.32%EPSS 2%ileNVD2026-10-27
CVE-2026-67077HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the apMEDIUM4.22%EPSS 2%ileNVD2026-10-28
CVE-2026-87880Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following prodMEDIUM6.82%EPSS 2%ileNVD2026-10-28
CVE-2026-82332An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allowMEDIUM5.72%EPSS 2%ileNVD2026-10-27
CVE-2026-120250OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and uMEDIUM6.02%EPSS 2%ileNVD2026-11-01
CVE-2026-65625The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attackeMEDIUM5.92%EPSS 2%ileNVD2026-10-26
CVE-2026-97209Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another useMEDIUM5.42%EPSS 2%ileNVD2026-10-30
CVE-2026-103359The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payMEDIUM5.32%EPSS 2%ileNVD2026-10-27
CVE-2026-113896A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2MEDIUM4.72%EPSS 2%ileNVD2026-10-26
CVE-2026-118673KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2MEDIUM4.12%EPSS 2%ileNVD2026-10-29
CVE-2026-114608Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOMEMEDIUM—2%EPSS 2%ileGitHub2026-10-27
CVE-2026-119193PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/RuMEDIUM5.41%EPSS 1%ileNVD2026-10-29
CVE-2026-115885LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputMEDIUM5.41%EPSS 1%ileGitHub2026-10-28
CVE-2026-88781Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an MEDIUM6.81%EPSS 1%ileNVD2026-10-27
CVE-2026-117530In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commandMEDIUM6.71%EPSS 1%ileNVD2026-10-27
CVE-2026-108309Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.MEDIUM5.51%EPSS 1%ileNVD2026-10-27
CVE-2026-116575Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScriptMEDIUM6.31%EPSS 1%ileNVD2026-10-26
CVE-2026-114690A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementaMEDIUM6.21%EPSS 1%ileNVD2026-10-30
CVE-2026-114409Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local applMEDIUM5.71%EPSS 1%ileNVD2026-10-27
CVE-2026-111498OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged aMEDIUM4.71%EPSS 1%ileNVD2026-10-30
CVE-2025-64394A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installaMEDIUM4.31%EPSS 1%ileNVD2026-10-27
CVE-2026-110983The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of itsMEDIUM4.31%EPSS 1%ileNVD2026-10-29
CVE-2026-116895REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET MEDIUM5.11%EPSS 1%ileNVD2026-10-27
CVE-2026-117534REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attMEDIUM5.11%EPSS 1%ileNVD2026-10-27
CVE-2026-90728Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.31%EPSS 1%ileNVD2026-10-27
CVE-2026-87101Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber PrMEDIUM6.21%EPSS 1%ileNVD2026-10-28
CVE-2026-118766Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while poMEDIUM6.11%EPSS 1%ileNVD2026-10-29
CVE-2026-115300The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or request origin on two adMEDIUM4.31%EPSS 1%ileNVD2026-10-29
CVE-2026-27062Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery.MEDIUM4.31%EPSS 1%ileNVD2026-10-29
CVE-2026-65626The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_dMEDIUM5.90%EPSS 0%ileNVD2026-10-26
CVE-2026-115299The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before saving its mail settinMEDIUM5.40%EPSS 0%ileNVD2026-10-29
CVE-2026-65632The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyinMEDIUM5.10%EPSS 0%ileNVD2026-10-26
CVE-2026-116844Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only tMEDIUM6.30%EPSS 0%ileNVD2026-10-27
CVE-2026-118373LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP URMEDIUM6.30%EPSS 0%ileNVD2026-10-28
CVE-2026-41022Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could explMEDIUM5.90%EPSS 0%ileNVD2026-10-27
CVE-2026-90720Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7MEDIUM6.70%EPSS 0%ileNVD2026-10-28
CVE-2026-115408In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions MEDIUM5.50%EPSS 0%ileNVD2026-10-27
CVE-2026-115495Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows aMEDIUM5.70%EPSS 0%ileNVD2026-10-27
CVE-2026-82557Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted aMEDIUM6.9——NVD2026-11-01
CVE-2026-82704Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRequestHandler invokes an IRequeMEDIUM6.9——NVD2026-11-01
CVE-2026-120314Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows MEDIUM6.9——NVD2026-11-02
CVE-2026-120437Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in MEDIUM6.9——NVD2026-11-02
CVE-2026-120440QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the MEDIUM6.9——NVD2026-11-02
CVE-2026-120441OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows unautMEDIUM6.9——NVD2026-11-02
CVE-2026-120449Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpublMEDIUM6.9——NVD2026-11-02
CVE-2026-120455rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows attMEDIUM6.9——NVD2026-11-02
CVE-2026-120456L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() MEDIUM6.9——NVD2026-11-02
CVE-2026-115654In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that aMEDIUM6.9——NVD2026-11-02
CVE-2026-120501An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attacMEDIUM6.9——NVD2026-11-02
CVE-2026-77881Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated MEDIUM6.9——NVD2026-11-02
CVE-2026-20553In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priMEDIUM6.8——NVD2026-11-02
CVE-2026-91907Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page GeneraMEDIUM6.8——NVD2026-11-02
CVE-2026-118052In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releMEDIUM6.8——NVD2026-11-02
CVE-2026-120454The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that aMEDIUM6.8——NVD2026-11-02
CVE-2026-120458Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers toMEDIUM6.8——NVD2026-11-02
GHSA-hhww-mrg2-969hLiteLLM vulnerable to reflected XSS in /sso/debug/callbackMEDIUM6.8——GitHub2026-10-27
CVE-2026-20567In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of prMEDIUM6.7——NVD2026-11-02
CVE-2026-20568In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a maMEDIUM6.7——NVD2026-11-02
CVE-2026-20569In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege iMEDIUM6.7——NVD2026-11-02
CVE-2026-20570In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of priviMEDIUM6.7——NVD2026-11-02
CVE-2026-20571In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege ifMEDIUM6.7——NVD2026-11-02
CVE-2026-20572In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privMEDIUM6.7——NVD2026-11-02
CVE-2026-20573In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a MEDIUM6.7——NVD2026-11-02
CVE-2026-20574In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege ifMEDIUM6.7——NVD2026-11-02
CVE-2026-20575In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege ifMEDIUM6.7——NVD2026-11-02
CVE-2026-20576In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of prMEDIUM6.7——NVD2026-11-02
CVE-2026-20581In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege ifMEDIUM6.7——NVD2026-11-02
CVE-2026-20582In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a MEDIUM6.7——NVD2026-11-02
CVE-2026-20584In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privMEDIUM6.7——NVD2026-11-02
CVE-2026-20595In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioMEDIUM6.7——NVD2026-11-02
CVE-2026-20599In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalaMEDIUM6.7——NVD2026-11-02
CVE-2026-68589In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of MEDIUM6.7——NVD2026-11-02
CVE-2026-68591In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation oMEDIUM6.7——NVD2026-11-02
CVE-2026-101178Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability mMEDIUM6.6——NVD2026-11-02
CVE-2026-20552In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of servMEDIUM6.5——NVD2026-11-02
CVE-2026-101173DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.MEDIUM6.5——NVD2026-11-02
CVE-2026-118871SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injeMEDIUM6.5——NVD2026-11-02
GHSA-2wrx-84qj-4pcganacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoSMEDIUM6.5——GitHub2026-10-30
GHSA-2hw4-c9m4-f2fjknative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionMEDIUM6.5——GitHub2026-10-28
GHSA-fx3j-rwgx-fr94GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule nameMEDIUM6.5——GitHub2026-10-27
GHSA-jf75-q64q-g65rWaline login accepts a non-string email as a match-all MongoDB queryMEDIUM6.5——GitHub2026-10-28
CVE-2026-91905Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerMEDIUM6.4——NVD2026-11-02
CVE-2026-82115Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the requestMEDIUM6.3——NVD2026-11-01
CVE-2026-82705Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthoMEDIUM6.3——NVD2026-11-01
CVE-2026-84172Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.PackageResourceGuard decides whethMEDIUM6.3——NVD2026-11-01
CVE-2026-84177Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that comMEDIUM6.3——NVD2026-11-01
CVE-2026-120309Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams thMEDIUM6.3——NVD2026-11-02
CVE-2026-120492Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass patMEDIUM6.3——NVD2026-11-02
CVE-2026-20550In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serviMEDIUM6.2——NVD2026-11-02
CVE-2026-20564In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of sMEDIUM6.2——NVD2026-11-02
CVE-2026-101172Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affecMEDIUM6.2——NVD2026-11-02
CVE-2026-91903Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted DirecMEDIUM6.1——NVD2026-11-02
CVE-2026-91911Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted DirecMEDIUM6.1——NVD2026-11-02
CVE-2026-2102wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. TheMEDIUM6.1——NVD2026-11-02
CVE-2026-120463Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an auMEDIUM6.0——NVD2026-11-02
CVE-2026-118768Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response MEDIUM5.90%EPSS 0%ileNVD2026-10-29
CVE-2026-101182Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may aMEDIUM5.9——NVD2026-11-02
CVE-2026-101183UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availMEDIUM5.9——NVD2026-11-02
CVE-2026-101185OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect servicMEDIUM5.9——NVD2026-11-02
CVE-2026-117531@fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 thMEDIUM5.9——NVD2026-11-02
CVE-2026-120214@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In vMEDIUM5.9——NVD2026-11-02
CVE-2026-120216fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero hMEDIUM5.9——NVD2026-11-02
GHSA-f3fj-9625-rv3mcharmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated usersMEDIUM5.9——GitHub2026-10-30
GHSA-4ffr-jq9g-5ffxNodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of serviceMEDIUM5.9——GitHub2026-10-27
GHSA-4g23-2xm8-66gcNodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial MEDIUM5.9——GitHub2026-10-27
CVE-2025-13647The affected component fails to enforce expected validation constraints on the `content-type` header when processing cerMEDIUM5.8——NVD2026-11-02
CVE-2026-120457libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackersMEDIUM5.8——NVD2026-11-02
CVE-2026-112938filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directorMEDIUM5.8——GitHub2026-10-28
CVE-2026-101174DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.MEDIUM5.7——NVD2026-11-02
CVE-2026-91908Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerMEDIUM5.7——NVD2026-11-02
CVE-2026-91910Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted DirecMEDIUM5.7——NVD2026-11-02
CVE-2026-120278A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the MEDIUM5.5——NVD2026-11-02
CVE-2026-120324A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the function Path.MEDIUM5.5——NVD2026-11-02
CVE-2026-20551In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serviMEDIUM5.5——NVD2026-11-02
CVE-2026-120336A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0MEDIUM5.5——NVD2026-11-02
CVE-2026-120337A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d4MEDIUM5.5——NVD2026-11-02
CVE-2026-120341A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function oMEDIUM5.5——NVD2026-11-02
CVE-2026-120342A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of MEDIUM5.5——NVD2026-11-02
CVE-2026-120347A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/CoMEDIUM5.5——NVD2026-11-02
CVE-2026-120348A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_MEDIUM5.5——NVD2026-11-02
CVE-2026-101181Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect sMEDIUM5.5——NVD2026-11-02
CVE-2026-120349A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace MEDIUM5.5——NVD2026-11-02
CVE-2026-101184Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affeMEDIUM5.5——NVD2026-11-02
CVE-2026-91904Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vMEDIUM5.5——NVD2026-11-02
CVE-2026-91906Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vMEDIUM5.5——NVD2026-11-02
CVE-2024-2372The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validatiMEDIUM5.4——NVD2026-11-02
CVE-2026-120323A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the fileMEDIUM5.3——NVD2026-11-02
CVE-2026-20555In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of servMEDIUM5.3——NVD2026-11-02
CVE-2026-20560In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serviceMEDIUM5.3——NVD2026-11-02
CVE-2026-20561In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of serMEDIUM5.3——NVD2026-11-02
CVE-2026-20562In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of serMEDIUM5.3——NVD2026-11-02
CVE-2026-20563In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of MEDIUM5.3——NVD2026-11-02
CVE-2026-20578In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remoMEDIUM5.3——NVD2026-11-02
CVE-2026-20593In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of seMEDIUM5.3——NVD2026-11-02
CVE-2026-20594In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of servMEDIUM5.3——NVD2026-11-02
CVE-2026-20596In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of sMEDIUM5.3——NVD2026-11-02
CVE-2026-20597In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of servMEDIUM5.3——NVD2026-11-02
CVE-2026-20598In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of serviceMEDIUM5.3——NVD2026-11-02
CVE-2026-20600In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a MEDIUM5.3——NVD2026-11-02
CVE-2026-68588In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of serMEDIUM5.3——NVD2026-11-02
CVE-2026-68590In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial oMEDIUM5.3——NVD2026-11-02
CVE-2026-103310The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifiMEDIUM5.3——NVD2026-11-02
CVE-2026-105601Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5MEDIUM5.3——NVD2026-11-02
CVE-2026-120427MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_doctemp view that allows authenticated useMEDIUM5.3——NVD2026-11-02
CVE-2026-120430Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerability in Admin::CategoriesController thatMEDIUM5.3——NVD2026-11-02
CVE-2026-120450LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with rMEDIUM5.3——NVD2026-11-02
CVE-2026-120489Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenMEDIUM5.3——NVD2026-11-02
CVE-2026-120500An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that MEDIUM5.3——NVD2026-11-02
CVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bitMEDIUM5.3——GitHub2026-10-28
CVE-2026-112910filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACLMEDIUM5.3——GitHub2026-10-28
GHSA-fgxm-5hvv-x4vhcharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositoriesMEDIUM5.3——GitHub2026-10-30
GHSA-g73g-hqqh-jr95Nodemailer: RFC 5322 comment inside an angle-bracket address is never strippedMEDIUM5.3——GitHub2026-10-27
CVE-2026-120452libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that alloMEDIUM5.2——NVD2026-11-02
CVE-2026-120275A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown partMEDIUM5.1——NVD2026-11-01
CVE-2026-102801Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extensionMEDIUM5.1——NVD2026-11-02
CVE-2026-120428PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackeMEDIUM5.1——NVD2026-11-02
CVE-2026-120443GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to injeMEDIUM5.1——NVD2026-11-02
CVE-2026-120488LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with posMEDIUM5.1——NVD2026-11-02
CVE-2026-120491Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client uMEDIUM5.1——NVD2026-11-02
CVE-2026-119301Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDMEDIUM5.0——NVD2026-11-02
CVE-2024-9517The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. ThisMEDIUM4.9——NVD2026-11-02
CVE-2026-20566In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of serMEDIUM4.8——NVD2026-11-02
CVE-2024-5617The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identicalMEDIUM4.8——NVD2026-11-02
CVE-2025-12544The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role toMEDIUM4.8——NVD2026-11-02
CVE-2025-71450inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to readMEDIUM4.8——NVD2026-11-02
CVE-2026-120453The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfMEDIUM4.8——NVD2026-11-02
CVE-2026-54442NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571MEDIUM4.8——GitHub2026-10-30
CVE-2026-101179Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affeMEDIUM4.7——NVD2026-11-02
CVE-2024-7075The user search function within the management console fails to properly encode user-supplied input before rendering it MEDIUM4.6——NVD2026-11-02
CVE-2026-91909Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a ComMEDIUM4.6——NVD2026-11-02
CVE-2026-20577In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service MEDIUM4.4——NVD2026-11-02
CVE-2026-20580In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a maliciouMEDIUM4.4——NVD2026-11-02
CVE-2026-20583In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a maliciouMEDIUM4.4——NVD2026-11-02
CVE-2026-20590In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicMEDIUM4.4——NVD2026-11-02
CVE-2026-18800When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected pMEDIUM4.4——NVD2026-11-02
CVE-2026-101175Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may aMEDIUM4.3——NVD2026-11-02
CVE-2026-101180DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabilMEDIUM4.3——NVD2026-11-02
CVE-2024-12141The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when pMEDIUM4.3——NVD2026-11-02
CVE-2026-117549@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 MEDIUM4.2——NVD2026-11-02
GHSA-7wpf-ch8f-5f4xsignalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcherMEDIUM4.2——GitHub2026-10-30
CVE-2026-20592In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to locaMEDIUM4.1——NVD2026-11-02
CVE-2026-101170DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabilMEDIUM4.0——NVD2026-11-02
GHSA-c8m5-c952-6cm4Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKsMEDIUM4.0——GitHub2026-10-27
CVE-2026-116958CVE-2026-116958MEDIUM———Red Hat2026-10-30
GHSA-763v-5pjm-fx36Strands Agents: Default FileSessionManager storage is world-readable on shared systemsMEDIUM———GitHub2026-10-27
GHSA-gq48-pqfc-9p58GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktreeMEDIUM———GitHub2026-10-27
GHSA-473q-m89c-ghf8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password seMEDIUM———GitHub2026-10-28
CVE-2026-57198Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attaLOW2.357%EPSS 57%ileNVD2026-10-27
CVE-2026-57196Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2LOW2.356%EPSS 56%ileNVD2026-10-26
CVE-2026-57189Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attaLOW2.354%EPSS 54%ileNVD2026-10-27
CVE-2026-117510A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr0LOW2.142%EPSS 42%ileNVD2026-10-27
CVE-2026-57199Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2LOW2.342%EPSS 42%ileNVD2026-10-27
CVE-2026-118256Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escLOW2.141%EPSS 41%ileNVD2026-10-28
CVE-2026-112255Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows ExLOW2.941%EPSS 41%ileNVD2026-10-29
CVE-2026-116578Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL temLOW2.140%EPSS 40%ileNVD2026-10-26
CVE-2026-61448Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklistLOW—36%EPSS 36%ileGitHub2026-10-29
CVE-2026-117509A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of thLOW2.135%EPSS 35%ileNVD2026-10-27
CVE-2026-120237A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired ofLOW2.135%EPSS 35%ileNVD2026-11-01
CVE-2026-120190A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functioLOW2.033%EPSS 33%ileNVD2026-11-01
CVE-2026-119661ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint thatLOW2.332%EPSS 32%ileNVD2026-10-30
CVE-2026-109823An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/cLOW2.331%EPSS 31%ileNVD2026-10-27
CVE-2026-103995Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpretLOW2.030%EPSS 30%ileNVD2026-10-27
CVE-2026-120235A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStreamLOW2.129%EPSS 29%ileNVD2026-11-01
CVE-2026-116514A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file LOW2.128%EPSS 28%ileNVD2026-10-26
CVE-2026-101272The mechanism binding files generated during a shredding process to the authentication method is not working correctly aLOW2.328%EPSS 28%ileNVD2026-10-28
CVE-2026-118129A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6ba17b39cbc. The affected elemenLOW2.128%EPSS 28%ileNVD2026-10-28
CVE-2026-119334Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. PriorLOW2.228%EPSS 28%ileNVD2026-10-30
CVE-2026-110970Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-TLOW2.327%EPSS 27%ileNVD2026-10-30
CVE-2026-119657FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated LOW2.326%EPSS 26%ileNVD2026-10-30
CVE-2026-115730i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} LOW3.125%EPSS 25%ileGitHub2026-10-28
CVE-2026-120223A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file LOW1.325%EPSS 25%ileNVD2026-11-01
CVE-2026-103394An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attackerLOW3.724%EPSS 24%ileNVD2026-10-28
CVE-2026-118775Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asnLOW3.724%EPSS 24%ileNVD2026-10-29
CVE-2026-119548Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows userLOW2.324%EPSS 24%ileNVD2026-10-30
CVE-2026-118271A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the fiLOW2.124%EPSS 24%ileNVD2026-10-28
CVE-2026-118273A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set ofLOW2.124%EPSS 24%ileNVD2026-10-28
CVE-2026-118274A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality oLOW2.124%EPSS 24%ileNVD2026-10-28
CVE-2026-119280MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3LOW3.723%EPSS 23%ileNVD2026-10-29
CVE-2026-120234A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component HLOW2.123%EPSS 23%ileNVD2026-11-01
CVE-2026-61840Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates LOW2.323%EPSS 23%ileNVD2026-10-30
CVE-2026-116775pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate witLOW2.322%EPSS 22%ileNVD2026-10-27
CVE-2026-116603A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admLOW2.022%EPSS 22%ileNVD2026-10-27
CVE-2026-55612uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an inLOW3.722%EPSS 22%ileNVD2026-10-30
CVE-2026-118258i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. PriLOW3.721%EPSS 21%ileNVD2026-10-28
CVE-2026-100355Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the serLOW3.120%EPSS 20%ileNVD2026-10-30
CVE-2026-101209Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A highLOW2.720%EPSS 20%ileNVD2026-10-30
CVE-2026-61694go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by LOW3.720%EPSS 20%ileNVD2026-10-30
CVE-2026-114614Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLLOW2.620%EPSS 20%ileGitHub2026-10-27
CVE-2026-119573Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the crLOW2.120%EPSS 20%ileNVD2026-10-30
CVE-2026-120217A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loLOW2.119%EPSS 19%ileNVD2026-11-01
CVE-2026-119048JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that LOW2.319%EPSS 19%ileNVD2026-10-29
CVE-2026-63400Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the passwoLOW2.319%EPSS 19%ileNVD2026-10-30
CVE-2026-120236A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionLOW2.119%EPSS 19%ileNVD2026-11-01
CVE-2026-119126Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values wLOW2.318%EPSS 18%ileNVD2026-10-29
CVE-2026-3583When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does not immediately invaliLOW3.118%EPSS 18%ileNVD2026-10-28
CVE-2026-90727Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7LOW3.818%EPSS 18%ileNVD2026-10-27
CVE-2026-85498A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authenticatioLOW3.518%EPSS 18%ileNVD2026-10-29
CVE-2026-108685The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its profilLOW3.718%EPSS 18%ileNVD2026-10-29
CVE-2026-120218A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of thLOW2.017%EPSS 17%ileNVD2026-11-01
CVE-2026-116687CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, speciaLOW3.117%EPSS 17%ileNVD2026-10-27
CVE-2026-116482A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2LOW2.017%EPSS 17%ileNVD2026-10-26
CVE-2026-116554A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argillaLOW2.017%EPSS 17%ileNVD2026-10-26
CVE-2026-119125Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSaveLOW2.317%EPSS 17%ileNVD2026-10-29
CVE-2026-119570Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to reLOW2.317%EPSS 17%ileNVD2026-10-30
CVE-2026-21830HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent LOW3.716%EPSS 16%ileNVD2026-10-28
CVE-2026-116515A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown codLOW2.116%EPSS 16%ileNVD2026-10-26
CVE-2026-118272A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionELOW2.116%EPSS 16%ileNVD2026-10-28
CVE-2026-104312IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive coLOW3.516%EPSS 16%ileNVD2026-10-29
CVE-2026-108311Tanium addressed an insufficient logging vulnerability in Tanium Server.LOW2.715%EPSS 15%ileNVD2026-10-27
CVE-2026-115917vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configuLOW3.415%EPSS 15%ileNVD2026-10-26
CVE-2026-110507The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments users can add to itsLOW2.715%EPSS 15%ileNVD2026-10-28
CVE-2026-113494The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listinLOW2.715%EPSS 15%ileNVD2026-10-28
CVE-2026-116385A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some uLOW2.015%EPSS 15%ileNVD2026-10-26
CVE-2026-118276A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString oLOW2.015%EPSS 15%ileNVD2026-10-28
CVE-2026-119130Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values LOW2.115%EPSS 15%ileNVD2026-10-29
CVE-2026-118577A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the cLOW2.114%EPSS 14%ileNVD2026-10-28
CVE-2026-119427phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated useLOW2.313%EPSS 13%ileNVD2026-10-30
CVE-2026-115303The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted fiLOW3.713%EPSS 13%ileNVD2026-10-29
CVE-2026-119330Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation ALOW3.513%EPSS 13%ileNVD2026-10-30
CVE-2026-109848GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use oLOW2.313%EPSS 13%ileNVD2026-10-28
CVE-2026-115456A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminatLOW3.713%EPSS 13%ileNVD2026-10-30
CVE-2026-118578A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown LOW2.113%EPSS 13%ileNVD2026-10-28
CVE-2026-116461A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the fileLOW2.113%EPSS 13%ileNVD2026-10-26
CVE-2026-119567vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute deniLOW2.312%EPSS 12%ileNVD2026-10-30
CVE-2026-108686The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, allLOW3.712%EPSS 12%ileNVD2026-10-29
CVE-2026-112912filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock tLOW2.512%EPSS 12%ileGitHub2026-10-28
CVE-2026-119133Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causLOW2.111%EPSS 11%ileNVD2026-10-29
CVE-2026-116555A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-fLOW1.911%EPSS 11%ileNVD2026-10-26
CVE-2026-116556A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componenLOW1.911%EPSS 11%ileNVD2026-10-26
CVE-2026-107311Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful BrowsinLOW3.711%EPSS 11%ileNVD2026-10-30
CVE-2026-118437The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachmeLOW3.710%EPSS 10%ileNVD2026-10-31
CVE-2026-111404Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme LOW3.710%EPSS 10%ileNVD2026-10-26
CVE-2026-119558OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-prLOW2.310%EPSS 10%ileNVD2026-10-30
CVE-2026-120242A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1LOW1.910%EPSS 10%ileNVD2026-11-01
CVE-2026-116639A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2LOW2.010%EPSS 10%ileNVD2026-10-27
CVE-2026-116640A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8LOW2.010%EPSS 10%ileNVD2026-10-27
CVE-2026-118585A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79adLOW2.010%EPSS 10%ileNVD2026-10-29
CVE-2026-116471A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the fileLOW2.110%EPSS 10%ileNVD2026-10-26
CVE-2026-107309Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy BreadcruLOW3.710%EPSS 10%ileNVD2026-10-30
CVE-2026-110737The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-AlloLOW2.39%EPSS 9%ileNVD2026-10-27
CVE-2026-106647The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configurLOW3.89%EPSS 9%ileNVD2026-10-28
CVE-2026-111032The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted producLOW3.89%EPSS 9%ileNVD2026-10-28
CVE-2026-111961The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a reqLOW3.89%EPSS 9%ileNVD2026-10-28
CVE-2026-107306Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link ALOW3.89%EPSS 9%ileNVD2026-10-30
CVE-2026-117680Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud LOW2.19%EPSS 9%ileNVD2026-11-01
CVE-2026-86401Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions LOW2.78%EPSS 8%ileNVD2026-10-28
CVE-2026-90719Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions LOW2.78%EPSS 8%ileNVD2026-10-28
CVE-2026-90723Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions LOW2.78%EPSS 8%ileNVD2026-10-28
CVE-2026-90724Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions LOW2.78%EPSS 8%ileNVD2026-10-28
CVE-2026-93571Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update reqLOW2.38%EPSS 8%ileNVD2026-10-29
CVE-2026-72755Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a knowLOW3.88%EPSS 8%ileNVD2026-10-26
CVE-2026-114555Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field LOW3.58%EPSS 8%ileNVD2026-10-30
CVE-2026-67400A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or gLOW3.58%EPSS 8%ileNVD2026-10-27
CVE-2026-59385A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enLOW2.78%EPSS 8%ileNVD2026-10-30
CVE-2026-87098Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber ProteLOW3.17%EPSS 7%ileNVD2026-10-28
CVE-2026-117537REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to injeLOW2.17%EPSS 7%ileNVD2026-10-27
CVE-2026-117538REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the funcLOW2.17%EPSS 7%ileNVD2026-10-27
CVE-2026-105272GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper usLOW2.37%EPSS 7%ileNVD2026-10-28
CVE-2026-115794P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a LOW2.37%EPSS 7%ileNVD2026-10-29
CVE-2026-119562phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplyLOW2.37%EPSS 7%ileNVD2026-10-30
CVE-2026-77171A public shared collective always allowed recipients of the link to create pages.LOW3.57%EPSS 7%ileNVD2026-10-27
CVE-2024-3586The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow highLOW3.57%EPSS 7%ileNVD2026-10-29
CVE-2026-105258The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settingsLOW3.57%EPSS 7%ileNVD2026-10-29
CVE-2026-118780Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theLOW3.77%EPSS 7%ileNVD2026-10-29
CVE-2026-84605An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2LOW3.36%EPSS 6%ileNVD2026-10-26
CVE-2026-105612PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roLOW3.56%EPSS 6%ileNVD2026-10-28
CVE-2026-116894REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account aLOW2.36%EPSS 6%ileNVD2026-10-27
CVE-2026-85007The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJALOW3.84%EPSS 4%ileNVD2026-10-29
CVE-2026-118608Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. ThiLOW3.54%EPSS 4%ileNVD2026-10-28
CVE-2026-18451The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation mLOW3.14%EPSS 4%ileNVD2026-10-27
CVE-2026-116608A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the functionLOW2.14%EPSS 4%ileNVD2026-10-27
CVE-2026-107308Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allLOW3.14%EPSS 4%ileNVD2026-10-30
CVE-2026-105615PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked roLOW3.54%EPSS 4%ileNVD2026-10-28
CVE-2026-108331Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.LOW3.34%EPSS 4%ileNVD2026-10-27
CVE-2026-117526A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of LOW1.94%EPSS 4%ileNVD2026-10-27
CVE-2026-112922A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specLOW3.33%EPSS 3%ileNVD2026-10-30
CVE-2026-112941filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directorLOW3.33%EPSS 3%ileGitHub2026-10-28
CVE-2026-118776Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theLOW3.73%EPSS 3%ileNVD2026-10-29
CVE-2026-108330Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.LOW3.62%EPSS 2%ileNVD2026-10-27
CVE-2026-116673systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) imLOW3.32%EPSS 2%ileNVD2026-10-27
CVE-2026-117533REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves upLOW2.12%EPSS 2%ileNVD2026-10-27
CVE-2026-108333Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.LOW2.52%EPSS 2%ileNVD2026-10-27
CVE-2026-120226A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by tLOW1.92%EPSS 2%ileNVD2026-11-01
CVE-2026-90721Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7LOW3.42%EPSS 2%ileNVD2026-10-28
CVE-2026-107590An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (QtLOW1.92%EPSS 2%ileNVD2026-10-27
CVE-2026-54610LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write toLOW3.32%EPSS 2%ileNVD2026-10-30
CVE-2026-118781Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theLOW2.92%EPSS 2%ileNVD2026-10-29
CVE-2026-119377SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only forLOW2.02%EPSS 2%ileNVD2026-10-30
CVE-2026-82983The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting userLOW3.32%EPSS 2%ileNVD2026-10-27
CVE-2026-83813Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address ValidationLOW3.12%EPSS 2%ileGitHub2026-10-27
CVE-2026-103325The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its paymeLOW3.71%EPSS 1%ileNVD2026-10-27
CVE-2026-116696russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russhLOW3.31%EPSS 1%ileNVD2026-10-27
CVE-2026-116671Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.LOW2.11%EPSS 1%ileNVD2026-10-26
CVE-2026-118475A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadataLOW3.61%EPSS 1%ileNVD2026-10-30
CVE-2026-116251pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own changLOW2.31%EPSS 1%ileNVD2026-10-30
CVE-2026-118774Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theLOW3.71%EPSS 1%ileNVD2026-10-29
CVE-2026-87100Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: LOW3.61%EPSS 1%ileNVD2026-10-28
CVE-2026-117499@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behaviLOW3.71%EPSS 1%ileNVD2026-10-27
CVE-2026-101177Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affeLOW3.7——NVD2026-11-02
CVE-2026-120215@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that reLOW3.7——NVD2026-11-02
GHSA-44jh-23m7-hpcf@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQLLOW3.7——GitHub2026-10-27
GHSA-w44r-93j7-qv28rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a clasLOW3.7——GitHub2026-10-27
GHSA-h2v8-394m-p7vvRustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentLOW3.7——GitHub2026-10-27
CVE-2026-101171Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulneLOW3.6——NVD2026-11-02
CVE-2026-120340A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing ofLOW2.9——NVD2026-11-02
CVE-2026-82558Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's natLOW2.3——NVD2026-11-01
CVE-2026-82559Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest()LOW2.3——NVD2026-11-01
CVE-2026-87718Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render request LOW2.3——NVD2026-11-01
CVE-2026-120310Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update responses withoLOW2.3——NVD2026-11-02
CVE-2026-107457A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settinLOW2.3——NVD2026-11-02
GHSA-vp88-798v-h67frustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alertLOW2.3——GitHub2026-10-27
CVE-2026-82898Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListeLOW2.1——NVD2026-11-01
CVE-2026-120319A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updateAmound ofLOW2.1——NVD2026-11-02
CVE-2026-120325A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFilLOW2.1——NVD2026-11-02
CVE-2026-120334A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of thLOW2.1——NVD2026-11-02
CVE-2026-120339A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code LOW2.1——NVD2026-11-02
CVE-2026-120343A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the filLOW2.1——NVD2026-11-02
CVE-2026-120320A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecutoLOW2.0——NVD2026-11-02
CVE-2026-100140An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.LOW1.9——NVD2026-11-02
CVE-2026-120335A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the filLOW0.9——NVD2026-11-02
CVE-2026-55458Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak throughLOW———GitHub2026-10-28
CVE-2026-46350dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASSLOW———GitHub2026-10-27
GHSA-c33x-vcv4-vg3gCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergenceLOW———GitHub2026-10-29
CVE-2026-13575HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::SessioUNKNOWN—61%EPSS 61%ileNVD2026-11-01
CVE-2026-97631CVE-2026-97631: Pre-boot RCE in EDK II PXE driverUNKNOWN—50%EPSS 50%ileOSS-Security2026-10-28
CVE-2026-114523Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal FfmpeUNKNOWN—45%EPSS 45%ileNVD2026-10-30
CVE-2026-62298mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointeNONE0.043%EPSS 43%ileNVD2026-10-30
CVE-2026-78191WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne dUNKNOWN—39%EPSS 39%ileNVD2026-10-31
CVE-2026-112526A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS SequUNKNOWN—32%EPSS 32%ileNVD2026-10-26
CVE-2026-112671A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—29%EPSS 29%ileNVD2026-10-26
CVE-2026-112690This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 aUNKNOWN—29%EPSS 29%ileNVD2026-10-26
CVE-2026-113897This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, UNKNOWN—28%EPSS 28%ileNVD2026-10-26
CVE-2026-112510An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—28%EPSS 28%ileNVD2026-10-26
CVE-2026-115533The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretraiUNKNOWN—28%EPSS 28%ileNVD2026-10-26
CVE-2026-116132HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The mulUNKNOWN—28%EPSS 28%ileNVD2026-10-28
CVE-2026-116135HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decodUNKNOWN—28%EPSS 28%ileNVD2026-10-28
CVE-2026-102479CVE-2026-102479: Request smuggling in Eclipse Vert.x HTTP/1.x decoderUNKNOWN—27%EPSS 27%ileOSS-Security2026-10-28
CVE-2026-112682An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.UNKNOWN—26%EPSS 26%ileNVD2026-10-26
CVE-2026-116130HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS UNKNOWN—26%EPSS 26%ileNVD2026-10-30
CVE-2026-108097Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core aUNKNOWN—26%EPSS 26%ileNVD2026-10-30
CVE-2026-112410A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—26%EPSS 26%ileNVD2026-10-26
CVE-2026-112451An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—26%EPSS 26%ileNVD2026-10-26
CVE-2026-112607An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOUNKNOWN—25%EPSS 25%ileNVD2026-10-26
CVE-2026-118995CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator. creatUNKNOWN—25%EPSS 25%ileNVD2026-10-30
CVE-2026-84590An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—25%EPSS 25%ileNVD2026-10-26
CVE-2026-108099Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List UNKNOWN—25%EPSS 25%ileNVD2026-10-30
CVE-2026-86958The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2UNKNOWN—24%EPSS 24%ileNVD2026-10-26
CVE-2026-116131HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fUNKNOWN—24%EPSS 24%ileNVD2026-10-28
CVE-2026-116133HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a misUNKNOWN—24%EPSS 24%ileNVD2026-10-28
CVE-2026-116134HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The mUNKNOWN—24%EPSS 24%ileNVD2026-10-28
CVE-2026-117182An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allUNKNOWN—23%EPSS 23%ileNVD2026-10-30
CVE-2026-116285HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked rUNKNOWN—21%EPSS 21%ileNVD2026-10-28
CVE-2026-116531HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inUNKNOWN—21%EPSS 21%ileNVD2026-10-28
CVE-2026-112595This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden GatUNKNOWN—19%EPSS 19%ileNVD2026-10-26
CVE-2026-119341Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPTNONE0.019%EPSS 19%ileNVD2026-10-30
CVE-2026-118562Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affectUNKNOWN—19%EPSS 19%ileNVD2026-10-30
CVE-2026-114230When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frUNKNOWN—19%EPSS 19%ileNVD2026-10-29
CVE-2026-116296The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositUNKNOWN—19%EPSS 19%ileNVD2026-11-01
CVE-2026-111108Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the senUNKNOWN—18%EPSS 18%ileNVD2026-10-28
CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart uUNKNOWN—18%EPSS 18%ileNVD2026-10-28
CVE-2026-86991A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS UNKNOWN—18%EPSS 18%ileNVD2026-10-26
CVE-2026-112430An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden GUNKNOWN—18%EPSS 18%ileNVD2026-10-26
CVE-2026-115644Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners iUNKNOWN—18%EPSS 18%ileNVD2026-10-28
CVE-2026-51903SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllUNKNOWN—17%EPSS 17%ileNVD2026-10-29
CVE-2026-65385An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—17%EPSS 17%ileNVD2026-10-26
CVE-2026-86990An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, UNKNOWN—17%EPSS 17%ileNVD2026-10-26
CVE-2026-115943Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExceUNKNOWN—17%EPSS 17%ileNVD2026-10-29
CVE-2026-112414A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS UNKNOWN—17%EPSS 17%ileNVD2026-10-26
CVE-2026-113898A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.UNKNOWN—17%EPSS 17%ileNVD2026-10-26
CVE-2026-65384An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2.UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-78189WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in theUNKNOWN—16%EPSS 16%ileNVD2026-10-31
CVE-2026-114349When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressedUNKNOWN—16%EPSS 16%ileNVD2026-10-28
CVE-2026-112567This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-112624This issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-112660An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-84545A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOSUNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-114573Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allUNKNOWN—16%EPSS 16%ileNVD2026-10-30
CVE-2026-115946XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. AffeUNKNOWN—16%EPSS 16%ileNVD2026-11-01
CVE-2026-86972A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-51851modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FilUNKNOWN—16%EPSS 16%ileNVD2026-10-29
CVE-2026-51912OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witnUNKNOWN—16%EPSS 16%ileNVD2026-10-29
CVE-2026-117184An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a craftUNKNOWN—16%EPSS 16%ileNVD2026-10-30
CVE-2026-113915A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-65350A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-84495A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—16%EPSS 16%ileNVD2026-10-26
CVE-2026-112638A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112571A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112576A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112606A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112656An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-64789This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOSUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-84610A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS SequoiUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-86937A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiaUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-86941A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS SequUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-117501HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. UNKNOWN—15%EPSS 15%ileNVD2026-10-28
CVE-2026-115865Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting meUNKNOWN—15%EPSS 15%ileNVD2026-10-30
CVE-2026-115866Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding cUNKNOWN—15%EPSS 15%ileNVD2026-10-30
CVE-2026-116128Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked reUNKNOWN—15%EPSS 15%ileNVD2026-10-30
CVE-2026-78190WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing UNKNOWN—15%EPSS 15%ileNVD2026-10-31
CVE-2026-112462A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-118988CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in tUNKNOWN—15%EPSS 15%ileNVD2026-10-30
CVE-2026-112627An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112632An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112642An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112665An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadUNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112705An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-86942An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-112488A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2UNKNOWN—15%EPSS 15%ileNVD2026-10-26
CVE-2026-111115Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender anUNKNOWN—15%EPSS 15%ileNVD2026-10-28
CVE-2026-112423An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112628This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOSUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112676This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112683An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112689An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86943The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112501A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112502A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS SequUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112514A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112516A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112517A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112521A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS SequUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112561An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-113910A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86970An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86992The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 andUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112596An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112611An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112619An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112621An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112622An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112698The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 andUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-113909A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-113952A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112620A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112692This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-64750An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-65363The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86969An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112446This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS GoldUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112466An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112470An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112476An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112477A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112515An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-65368A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2,UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112428A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112447An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112512A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS SequoUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112534This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiaUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112557The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOSUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-105042A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. ThiUNKNOWN—14%EPSS 14%ileNVD2026-10-29
CVE-2026-112531A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112647An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOSUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112668A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112670An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-113900A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-65392A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS SequoUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-84494An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-84498The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-84528A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 1UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-84542An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS SequUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86923An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Golden Gate 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86936A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86945This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86968An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS GoldeUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86978This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112459A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS GoldUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112474A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, mUNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112479An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112560An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112565An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112566A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112610An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112630An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-112691An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-86966This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27UNKNOWN—14%EPSS 14%ileNVD2026-10-26
CVE-2026-116593Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate coUNKNOWN—13%EPSS 13%ileNVD2026-10-28
CVE-2026-112434A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112475An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112480A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112481An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112497This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112530A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-113899The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOSUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112413An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112416An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112425An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112461An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112464An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112468An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112469An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112485The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden GatUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112486An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112491An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112672The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOSUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112375An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or UNKNOWN—13%EPSS 13%ileNVD2026-10-28
CVE-2026-111551Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array,UNKNOWN—13%EPSS 13%ileNVD2026-10-28
CVE-2026-78192WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer UNKNOWN—13%EPSS 13%ileNVD2026-10-31
CVE-2026-112518An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-112554An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-113950An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.UNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-86964A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, maUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-86988The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tUNKNOWN—13%EPSS 13%ileNVD2026-10-26
CVE-2026-118132NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsaUNKNOWN—13%EPSS 13%ileNVD2026-10-27
CVE-2026-115638[OSSA-2026-049] Ironic: Conductor DoS via gzip bomb configdrive (CVE-2026-115638)UNKNOWN—13%EPSS 13%ileOSS-Security2026-10-29
CVE-2026-112493A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112508An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112519An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS SUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112524A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112532The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-86946A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-86984A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This iUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112432A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS GoldeUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112444This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An appUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112449An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112467This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An appUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112522An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112523This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS SequoiUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112536An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112540An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS SUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112541A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112545A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112552An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112555A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112562A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112563An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112575The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27.2, macUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-65373A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS SequoUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-86896A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-118176Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed UNKNOWN—12%EPSS 12%ileNVD2026-10-27
CVE-2026-112421A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112424An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112429An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112437A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112441This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 1UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112453A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS SequoUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112473An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112482An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112487A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS SequoUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112492A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112498An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOSUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112500A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden GaUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112504A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112505An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112525An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112535A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112537This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112539A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112542A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS SeqUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112543A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112548A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112553An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2,UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112558A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112569An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOSUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112570An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOSUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112625An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112443The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112494A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS TahoUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112546An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112568A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112454The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden GatUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112511A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112604An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112687This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. AnUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112704An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS SeUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-84539An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, mUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-86939A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS TahUNKNOWN—12%EPSS 12%ileNVD2026-10-26
CVE-2026-112442A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia UNKNOWN—11%EPSS 11%ileNVD2026-10-26
CVE-2026-118994CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes the logiUNKNOWN—11%EPSS 11%ileNVD2026-10-30
CVE-2026-117677When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for `Chart.yaUNKNOWN—11%EPSS 11%ileNVD2026-11-01
CVE-2025-60475CVE-2025-60475: GPAC/MP4Box: Global Buffer Overflow Read in gf_ac4_parser_bs on crafted AC-4 streamUNKNOWN—11%EPSS 11%ileOSS-Security2026-10-28
CVE-2026-112697A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—11%EPSS 11%ileNVD2026-10-26
CVE-2026-84493An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.UNKNOWN—11%EPSS 11%ileNVD2026-10-26
CVE-2026-112696An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.UNKNOWN—11%EPSS 11%ileNVD2026-10-26
CVE-2026-117649The issue timeline API and the web issue page hid cross-reference events that point at issues the reader cannot access, UNKNOWN—11%EPSS 11%ileNVD2026-11-01
CVE-2026-112593An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, mUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112456An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS UNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112551An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112679A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, mUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-86931A privacy issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS SequoiUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-111073The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against telUNKNOWN—10%EPSS 10%ileNVD2026-10-28
CVE-2026-111496Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuaUNKNOWN—10%EPSS 10%ileNVD2026-10-28
CVE-2026-97045In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integraUNKNOWN—10%EPSS 10%ileNVD2026-10-27
CVE-2026-112483A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS SequoUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112495An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112529An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS UNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112550A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOSUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-112639A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-117903Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESUNKNOWN—10%EPSS 10%ileNVD2026-10-27
CVE-2026-107059An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switchUNKNOWN—10%EPSS 10%ileNVD2026-10-29
CVE-2026-112478An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2UNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-119627The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a UNKNOWN—10%EPSS 10%ileNVD2026-11-01
CVE-2026-112601An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app maUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-113935An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-113942An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—10%EPSS 10%ileNVD2026-10-26
CVE-2026-117346Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limitUNKNOWN—10%EPSS 10%ileNVD2026-10-30
CVE-2026-108514Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal coreUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-108515Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal coreUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-112577A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Golden Gate 27.2. An app may be ablUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113934The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be ableUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113936An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113938An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113940An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113941An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113944An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113948A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app maUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-117912Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, FirUNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-117925Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-87768DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_lUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-119625The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope.UNKNOWN—9%EPSS 9%ileNVD2026-11-01
CVE-2026-112599A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112615A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112640A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112684This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26UNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112686A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-114539Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication ByUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-118554Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows AuthenticaUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-116271MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, lUNKNOWN—9%EPSS 9%ileNVD2026-10-28
CVE-2026-112653A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112669A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.UNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112673A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112695A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-112699An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113901A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113903A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-113949A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and UNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-86973An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPUNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-86974A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.UNKNOWN—9%EPSS 9%ileNVD2026-10-26
CVE-2026-117860Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153UNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-117928Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, FirUNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-117965Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-117967Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-117998Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153UNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-118174When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's conUNKNOWN—9%EPSS 9%ileNVD2026-10-27
CVE-2026-118550Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows ExUNKNOWN—9%EPSS 9%ileNVD2026-10-30
CVE-2026-112417An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a malUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-113946An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.UNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-112666A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-112693A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-117862Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in FUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117863Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in FirefoxUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117866Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117867Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117868Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefoUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117869Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117870Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FireUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117872Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117873Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117874Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117876Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117878Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117879Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117880Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117881Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117882Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117883Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117884Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESRUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117886Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117887Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117889Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox EUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117891Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117892Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117893Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117895Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117896Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117897Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117899Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117900Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117901Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117905Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117906Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 11UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117907Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESRUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117908Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117911Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117914Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117915Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, FiUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117917Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117918Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117919Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117921Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 11UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117922Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117923Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117924Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117926Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117927Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117929Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117930Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117931Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117934Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117935Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117936Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117937Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117938Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117939Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117941Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117942Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, FireUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117943Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117944Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117946Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox EUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117948Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117949Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117950Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117951Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117952Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117954Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117966Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117968Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, FirefUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117971Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, FirefoUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117974Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117978Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117979Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, FirefoxUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117992Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, FirefoUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2025-49602An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having UNKNOWN—8%EPSS 8%ileNVD2026-10-30
CVE-2026-83525Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 beUNKNOWN—8%EPSS 8%ileNVD2026-10-28
CVE-2026-78661When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string conUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-112887Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, orgUNKNOWN—8%EPSS 8%ileNVD2026-11-01
CVE-2026-118172The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirectUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-112654A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-113904A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-113945An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-86985This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.UNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-86986A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 andUNKNOWN—8%EPSS 8%ileNVD2026-10-26
CVE-2026-118572Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows AutUNKNOWN—8%EPSS 8%ileNVD2026-10-30
CVE-2026-118582Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. ThUNKNOWN—8%EPSS 8%ileNVD2026-10-30
CVE-2026-117861Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117864Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117865Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117871Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117875Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESRUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117877Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117885Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbirUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117888Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117890JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117894Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox EUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117898Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117902Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117904Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117909Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117910Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117913Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, anUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117916Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, aUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117920Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117932Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117933Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117940Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117945Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117947Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, anUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117953Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117955JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117956Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117957Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117958Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117959Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117960Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117961Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, FireUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117962Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117963Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, FirefoUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117964Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThuUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117969Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117970Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117972Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117973Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117975Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117976Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, TUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117977Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, aUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117980Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117981Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbiUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117982Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117983Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117984Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117985Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESRUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117986Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117987Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117988Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixedUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117989Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117990Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed iUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117991Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, FireUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117993Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThundeUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117994Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, ThunderbUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117995Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, FireUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117996Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, TUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117997Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-117999Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, anUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118000Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118002Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, FUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118003Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118004Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 1UNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-107256Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue UNKNOWN—8%EPSS 8%ileNVD2026-10-30
CVE-2026-118175When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different meUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118177When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, ThundUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118178A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscriptionUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-118179Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and pUNKNOWN—8%EPSS 8%ileNVD2026-10-27
CVE-2026-107048An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to executeUNKNOWN—8%EPSS 8%ileNVD2026-10-29
CVE-2026-99175In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector tUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-99196In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash aUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-99198In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116264MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters aftUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116265MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 conUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116266MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116267MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeplyUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116268MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters. TUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116269MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an emUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116270MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords. ForUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116273MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-15466Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in harUNKNOWN—7%EPSS 7%ileNVD2026-10-30
CVE-2026-99190In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_cUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-116272MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a neUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-79589The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attackerUNKNOWN—7%EPSS 7%ileNVD2026-10-29
CVE-2026-73322Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is eUNKNOWN—7%EPSS 7%ileNVD2026-10-30
CVE-2026-74759Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS exteUNKNOWN—7%EPSS 7%ileNVD2026-11-01
CVE-2026-99159In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix the sub-buffer array base in rb_meUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-112680An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPUNKNOWN—7%EPSS 7%ileNVD2026-10-26
CVE-2026-65584Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in thUNKNOWN—7%EPSS 7%ileNVD2026-10-30
CVE-2026-119036Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before UNKNOWN—7%EPSS 7%ileNVD2026-10-30
CVE-2025-70102CVE-2025-70102: dhcpcd: NULL Pointer Dereference in Configuration Option ParsingUNKNOWN—7%EPSS 7%ileOSS-Security2026-10-30
CVE-2026-112513This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app mayUNKNOWN—7%EPSS 7%ileNVD2026-10-26
CVE-2026-113937An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An appUNKNOWN—7%EPSS 7%ileNVD2026-10-26
CVE-2026-112612A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 2UNKNOWN—7%EPSS 7%ileNVD2026-10-26
CVE-2026-118180When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response witUNKNOWN—7%EPSS 7%ileNVD2026-10-27
CVE-2026-99120In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in #NPUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-99202In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume UNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-107029Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading toUNKNOWN—7%EPSS 7%ileNVD2026-10-29
CVE-2026-107038Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exporteUNKNOWN—7%EPSS 7%ileNVD2026-10-29
CVE-2026-99103In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pwUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-99104In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix the bypass dispatch claim for scheduUNKNOWN—7%EPSS 7%ileNVD2026-10-28
CVE-2026-112608An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS GoUNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-113429Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that iUNKNOWN—6%EPSS 6%ileNVD2026-11-01
CVE-2026-117625A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-117626Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the filUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-112507An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.UNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-99105In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stall when a task enqueued with SCX_UNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99134In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref on local->aUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99158In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix false warning in ring_buffer_map_gUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99160In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer_meta for CPUs withoUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-107050An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in theUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-114526Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole UNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-118545Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (ArtificUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-118546Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (ArtificUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-118549Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (ArtificUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-118552Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (ArtificUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-118553Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (ArtificUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-117350Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.UNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-112681This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27UNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-112707A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPUNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-86880This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27UNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-99111In the Linux kernel, the following vulnerability has been resolved: smb: client: fix data corruption with concurrent wrUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99137In the Linux kernel, the following vulnerability has been resolved: cifs: don't update i_size in cifs_do_truncate withoUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99184In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when a core isUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-107016Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.UNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107018Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read aUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107021Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows uUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107027Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exportedUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107035Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107036Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an expoUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107040Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported componentUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107045Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attaUNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-107057An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.UNKNOWN—6%EPSS 6%ileNVD2026-10-29
CVE-2026-119038Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting aUNKNOWN—6%EPSS 6%ileNVD2026-10-30
CVE-2026-112652A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.UNKNOWN—6%EPSS 6%ileNVD2026-10-26
CVE-2026-99108In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfs_trim_fs() alUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99119In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs ThisUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-99145In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't transfer shrinker pages for pinned boUNKNOWN—6%EPSS 6%ileNVD2026-10-28
CVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API withouUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-120263When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the link-account UNKNOWN—5%EPSS 5%ileNVD2026-11-01
CVE-2026-107260Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector DistUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-110738Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin TUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114525Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows UNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114527Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons alUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114528Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point UNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114529Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field aUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114531Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114532Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons alUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114534Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block AttriUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114536Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS ParagUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118990CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when takinUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118504The web interface blocks issue and pull request changes on archived repositories, but several issue routes of the REST AUNKNOWN—5%EPSS 5%ileNVD2026-11-01
CVE-2026-116127Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persiUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-116627Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in DevUNKNOWN—5%EPSS 5%ileNVD2026-10-27
CVE-2026-118993CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expreUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118996CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserCUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118986CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). ThUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118987CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cookUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2025-60482CVE-2025-60482: GPAC/MP4Box: Heap Use-After-Free in AC-4 Descriptor CleanupUNKNOWN—5%EPSS 5%ileOSS-Security2026-10-29
CVE-2026-99214In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtimeUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-118560Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce StUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118575Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature pUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-118576Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File UNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-114199`GET /api/v1/users/{username}/heatmap` computed the contribution heatmap with the repository access of the token owner aUNKNOWN—5%EPSS 5%ileNVD2026-11-01
CVE-2026-117646The repositories, stars and watching tabs of user profiles and the repository list of organization home pages included pUNKNOWN—5%EPSS 5%ileNVD2026-11-01
CVE-2026-118395Gitea 1.27.3 stopped personal access tokens restricted to public resources (`public-only`) from creating repositories thUNKNOWN—5%EPSS 5%ileNVD2026-11-01
CVE-2026-99102In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_setattr_size() UNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99125In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocatUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99129In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid mulUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99141In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in print_graph_function_event() UNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99144In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix use-after-free of a destroyed user DUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99149In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99151In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 UNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99162In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99168In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap UNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99183In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when looking uUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99186In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get_seUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99188In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status inteUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-107024Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anotUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-107033Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorizeUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-107043Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-117028Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::cheUNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-117349Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.UNKNOWN—5%EPSS 5%ileNVD2026-10-30
CVE-2026-102508Re: CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silentUNKNOWN—5%EPSS 5%ileOSS-Security2026-10-30
CVE-2026-113906A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—5%EPSS 5%ileNVD2026-10-26
CVE-2026-86989An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2UNKNOWN—5%EPSS 5%ileNVD2026-10-26
CVE-2026-99208In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_typUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99209In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_UNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-99210In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure roUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-106971An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attacUNKNOWN—5%EPSS 5%ileNVD2026-10-28
CVE-2026-107051Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-107053Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write aUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-107056Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorizedUNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-51831An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a UNKNOWN—5%EPSS 5%ileNVD2026-10-29
CVE-2026-86877A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicUNKNOWN—4%EPSS 4%ileNVD2026-10-26
CVE-2026-118548Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affecUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118005Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118006Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 1UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118007Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118009Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and ThundeUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118010Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118011Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and ThunderbirUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118012Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118013Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118014Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118015Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-114542Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID ConnectUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114546Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114548Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows ExploitiUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118551Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118540Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce CoreUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118541Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce CoreUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118542Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce CoreUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118555Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce LUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118556Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-116289Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions rUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-117635The `/api/v1/admin` route group did not enforce the `public-only` restriction of personal access tokens. A public-only tUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-117685The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction,UNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-118386Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the forkUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-118394The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizatioUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-119441`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, but it did not enforce the public-only reUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-119533Repository and organization project boards listed the pull requests that reference each issue on the board without checkUNKNOWN—4%EPSS 4%ileNVD2026-11-01
CVE-2026-99193In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fiUNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99194In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to UNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99195In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash etUNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99197In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash UNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99199In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04_eth: Move setting of netops tUNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99200In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops UNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99205In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks UNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-99207In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delaUNKNOWN—4%EPSS 4%ileNVD2026-10-28
CVE-2026-118561External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affeUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118563Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*.UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118564Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*.UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118565Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versioUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118016Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118017Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118019Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 1UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118020Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118021Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and ThunderbirdUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118022Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 15UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118023Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 aUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118024Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118025Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118026Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.UNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118170The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made wUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-118171The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. TUNKNOWN—4%EPSS 4%ileNVD2026-10-27
CVE-2026-107255Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects RestriUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-107266Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versiUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114524Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114530Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114533Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects ÁgorUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114535Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formaUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114537Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View UnpubUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114540Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: froUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114543Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects SimpUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114544Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media BulUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114545Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects FullcalenUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114547Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: froUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114553Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend EUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114554Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to UNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-114571Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole verUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-118544Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. TUNKNOWN—4%EPSS 4%ileNVD2026-10-30
CVE-2026-18629A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-19199Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-65586Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in useUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-65587A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-74912On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-74915A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or wrUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118568Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve EmbeddeUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118571Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118557Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce UNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118567Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects BulkUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118569Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versiUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118573Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 TUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-115942A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certifUNKNOWN—3%EPSS 3%ileNVD2026-10-29
CVE-2026-84633A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app UNKNOWN—3%EPSS 3%ileNVD2026-10-26
CVE-2026-113957An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content UNKNOWN—3%EPSS 3%ileNVD2026-10-29
CVE-2026-112602An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be abUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-112605This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to reUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-105031When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs(UNKNOWN—3%EPSS 3%ileNVD2026-10-29
CVE-2026-118018Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.UNKNOWN—3%EPSS 3%ileNVD2026-10-27
CVE-2026-118027Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.UNKNOWN—3%EPSS 3%ileNVD2026-10-27
CVE-2026-118574Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting IncorrectUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118583Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field PerUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118584Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field PerUNKNOWN—3%EPSS 3%ileNVD2026-10-30
CVE-2026-118543Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue afUNKNOWN—2%EPSS 2%ileNVD2026-10-30
CVE-2026-110985A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidatUNKNOWN—2%EPSS 2%ileNVD2026-10-28
CVE-2026-78188WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attribUNKNOWN—2%EPSS 2%ileNVD2026-10-31
CVE-2026-74760Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcUNKNOWN—2%EPSS 2%ileNVD2026-11-01
CVE-2026-110952A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies UNKNOWN—2%EPSS 2%ileNVD2026-10-28
CVE-2026-119037Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or eUNKNOWN—2%EPSS 2%ileNVD2026-10-30
CVE-2026-116474The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-actions` system user, and the `/api/v1/user` email UNKNOWN—1%EPSS 1%ileNVD2026-11-01
CVE-2026-114541Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issueUNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-118991CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getCUNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-13576CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed witUNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-118558Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue UNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-118570Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affecUNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-118559Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This isUNKNOWN—1%EPSS 1%ileNVD2026-10-30
CVE-2026-77215Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-77216Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-65685Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-65686Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-66042Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-66043Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-66044Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-66045Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-77924Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-26
CVE-2026-97028Rejected reason: Maintainers determined it is not a vulnerability.UNKNOWN———NVD2026-10-27
CVE-2026-107458Rejected reason: This CVE has been rejected by Upstream, as they failed to create a meaningful exploitUNKNOWN———NVD2026-10-27
CVE-2026-111054Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is aUNKNOWN———NVD2026-10-27
CVE-2026-39928Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2025-12534Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-111467Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-111479Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-111563Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-112155Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-18326Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-27
CVE-2026-117692Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117693Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117694Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117695Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117696Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117697Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117698Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117699Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117700Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117701Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117702Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117703Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117704Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117705Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117706Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117707Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117708Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117709Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117710Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117711Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117712Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117713Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117714Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117715Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117716Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117717Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117718Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117719Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117720Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117721Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117722Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117723Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117724Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117725Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117726Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117727Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117728Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117729Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117730Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117731Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117732Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117733Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117734Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117735Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117736Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117737Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117738Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117739Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117740Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117741Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117742Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117743Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117744Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117745Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117746Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117747Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117748Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117749Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117750Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117751Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117752Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117753Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117754Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117755Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117756Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117757Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117758Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117759Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117760Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117761Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117762Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117763Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117764Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117765Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117766Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117767Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117768Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117769Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117770Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117771Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117772Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117773Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117774Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117775Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117776Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117777Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117778Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117779Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117780Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117781Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117782Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117783Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117784Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117785Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117786Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117787Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117788Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117789Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117790Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117791Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117792Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117793Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117794Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117795Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117796Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117797Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117798Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117799Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117800Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117801Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117802Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117803Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117804Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117805Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117806Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117807Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117808Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117809Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117810Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117811Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117812Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117813Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117814Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117815Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117816Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117817Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117818Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117819Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117820Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117821Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117822Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117823Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117824Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117825Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117826Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117827Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117828Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117829Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117830Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117831Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117832Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117833Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117834Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117835Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117836Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117837Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117838Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117839Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117840Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117841Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117842Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117843Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117844Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117845Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117846Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117847Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117848Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117849Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117850Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117851Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117852Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117853Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117854Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117855Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117856Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117857Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-117858Rejected reason: Reserved in error; never associated with a vulnerability.UNKNOWN———NVD2026-10-28
CVE-2026-111478Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-28
CVE-2026-111486Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-28
CVE-2026-111575Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-28
CVE-2026-117174Rejected reason: VUL-2026-008368 為先回報之相同問題UNKNOWN———NVD2026-10-29
CVE-2026-60111Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-58118Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-58119Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-58120Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-67203Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-67205Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-112211Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-29
CVE-2026-64860Rejected reason: Further research determined the issue is not a vulnerability.UNKNOWN———NVD2026-10-30
CVE-2026-49115Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-30
CVE-2026-49116Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-30
CVE-2026-109213Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is aUNKNOWN———NVD2026-10-30
CVE-2026-66025Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-30
CVE-2026-66026Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-30
CVE-2026-95673Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a UNKNOWN———NVD2026-10-30
CVE-2026-111477Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN———NVD2026-10-30
CVE-2026-109083Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlementsUNKNOWN———NVD2026-11-02
CVE-2026-110535Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to confUNKNOWN———NVD2026-11-02
CVE-2026-111959Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 5UNKNOWN———NVD2026-11-02
CVE-2026-113511Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocUNKNOWN———NVD2026-11-02
CVE-2026-113687Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlemenUNKNOWN———NVD2026-11-02
CVE-2026-114364Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. UNKNOWN———NVD2026-11-02
CVE-2025-62819Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via theUNKNOWN———NVD2026-11-02
CVE-2026-16306Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote uUNKNOWN———NVD2026-11-02
CVE-2026-99217In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after scheUNKNOWN———NVD2026-11-02
CVE-2026-99219In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec(UNKNOWN———NVD2026-11-02
CVE-2026-99220In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs TheUNKNOWN———NVD2026-11-02
CVE-2026-99221In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unsUNKNOWN———NVD2026-11-02
CVE-2026-99222In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type reUNKNOWN———NVD2026-11-02
CVE-2026-99223In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel adUNKNOWN———NVD2026-11-02
CVE-2026-99225In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keUNKNOWN———NVD2026-11-02
CVE-2026-99226In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named UNKNOWN———NVD2026-11-02
CVE-2026-99228In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends worUNKNOWN———NVD2026-11-02
CVE-2026-99229In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list UNKNOWN———NVD2026-11-02
CVE-2026-99230In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in ->hash_nodUNKNOWN———NVD2026-11-02
CVE-2026-99232In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultaUNKNOWN———NVD2026-11-02
CVE-2026-99234In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when UNKNOWN———NVD2026-11-02
CVE-2026-99240In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for UNKNOWN———NVD2026-11-02
CVE-2026-99241In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkwUNKNOWN———NVD2026-11-02
CVE-2026-99242In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads ThUNKNOWN———NVD2026-11-02
CVE-2026-106803A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a UNKNOWN———NVD2026-11-02
CVE-2026-106804A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() fuUNKNOWN———NVD2026-11-02
CVE-2026-106805A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF doUNKNOWN———NVD2026-11-02
CVE-2026-106807A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transactUNKNOWN———NVD2026-11-02
CVE-2026-120596A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack inclUNKNOWN———NVD2026-11-02
CVE-2026-65059Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflateUNKNOWN———NVD2026-11-02
CVE-2026-119724CVE-2026-119724: Apache JClouds: XML External Entity (XXE) in provider-response parsingUNKNOWN———OSS-Security2026-11-02
CVE-2026-119641CVE-2026-119641: Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownershipUNKNOWN———OSS-Security2026-11-02
USN-8956-2USN-8956-2: Brotli vulnerabilityUNKNOWN———Ubuntu2026-10-27
USN-8957-1USN-8957-1: authd vulnerabilityUNKNOWN———Ubuntu2026-10-27
OSS-20261102-1Multiple vulnerabilities in C-KermitUNKNOWN———OSS-Security2026-11-02
OSS-20261102-6libexpat 2.10.0 fixes two vulnerabilitiesUNKNOWN———OSS-Security2026-11-02
OSS-20261101-3Google::Auth for Perl (2 CVEs)UNKNOWN———OSS-Security2026-11-01
OSS-20261101-4Apache Wicket: 19 CVEs fixed in 8.20.0, 9.25.0 and 10.12.0UNKNOWN———OSS-Security2026-11-01
OSS-20261031-4WebDyne for Perl (5 CVEs)UNKNOWN———OSS-Security2026-10-31
OSS-20261030-2Multiple vulnerabilities in Suricata before 8.0.8UNKNOWN———OSS-Security2026-10-30
OSS-20261030-13Starlet versions before 0.33 for Perl (4 CVEs)UNKNOWN———OSS-Security2026-10-30
OSS-20261030-14Business::GoCardless versions before 1.01 for Perl (3 CVEs)UNKNOWN———OSS-Security2026-10-30
OSS-20261030-15CallBackery versions before 0.62.0 for Perl (10 CVEs)UNKNOWN———OSS-Security2026-10-30
OSS-20261030-17The GNU C Library security advisories update for 2026-10-30UNKNOWN———OSS-Security2026-10-30
OSS-20261028-3Re: Information for Python users regarding eMudhra / emSign CA certificate security incidentUNKNOWN———OSS-Security2026-10-28
OSS-20261028-5Re: Information for Python users regarding eMudhra / emSign CA certificate security incidentUNKNOWN———OSS-Security2026-10-28
OSS-20261028-6Multiple vulnerabilities in JenkinsUNKNOWN———OSS-Security2026-10-28
OSS-20261028-20HTTP::Body versions before 1.24_01 for Perl (9 CVEs)UNKNOWN———OSS-Security2026-10-28
OSS-20261028-21MIME-tools versions before 5.521 for Perl (10 CVEs)UNKNOWN———OSS-Security2026-10-28
OSS-20261027-2Re: Fwd: X.Org Security Advisory: multiple security issues in X.Org X client librariesUNKNOWN———OSS-Security2026-10-27
OSS-20261027-3Seccomp denylist bypass via 32-bit syscall argument truncationUNKNOWN———OSS-Security2026-10-27
OSS-20261027-5Re: Fwd: X.Org Security Advisory: multiple security issues in X.Org X client librariesUNKNOWN———OSS-Security2026-10-27
OSS-20261027-6Multiple vulnerabilities in HTSlib &lt;= 1.24UNKNOWN———OSS-Security2026-10-27
OSS-20261027-7Multiple vulnerabilities in samtools &lt;= 1.24UNKNOWN———OSS-Security2026-10-27
OSS-20261027-8Godot 4.x: remote client crash via multiplayer spawn packet sync_len overflowUNKNOWN———OSS-Security2026-10-27
OSS-20261027-9Godot 3.x/4.x: remote crash via DTLS receive-callback heap buffer overflowUNKNOWN———OSS-Security2026-10-27
OSS-20261027-10Vulnerabilities in golang.org/x/netUNKNOWN———OSS-Security2026-10-27
GHSA-24rc-8hj2-v98cGHSA-24rc-8hj2-v98cUNKNOWN———OSV2026-10-29
GHSA-27h8-gf7j-v5hcGHSA-27h8-gf7j-v5hcUNKNOWN———OSV2026-10-27
GHSA-3j72-p6qg-6xp7GHSA-3j72-p6qg-6xp7UNKNOWN———OSV2026-10-29
GHSA-4558-3h8r-v8xpGHSA-4558-3h8r-v8xpUNKNOWN———OSV2026-10-27
GHSA-4rm8-3hmm-39fgGHSA-4rm8-3hmm-39fgUNKNOWN———OSV2026-10-29
GHSA-4rr5-89j8-mwwmGHSA-4rr5-89j8-mwwmUNKNOWN———OSV2026-10-27
GHSA-58r4-6rv3-gfh8GHSA-58r4-6rv3-gfh8UNKNOWN———OSV2026-10-28
GHSA-5x8w-8jj5-q52hGHSA-5x8w-8jj5-q52hUNKNOWN———OSV2026-10-28
GHSA-654x-cwwv-5j9cGHSA-654x-cwwv-5j9cUNKNOWN———OSV2026-10-29
GHSA-7mwm-ghpf-9vrmGHSA-7mwm-ghpf-9vrmUNKNOWN———OSV2026-10-28
GHSA-8g5g-8vmr-9782GHSA-8g5g-8vmr-9782UNKNOWN———OSV2026-10-28
GHSA-9v9v-9qvf-h2hjGHSA-9v9v-9qvf-h2hjUNKNOWN———OSV2026-10-29
GHSA-cp9v-662q-vvx9GHSA-cp9v-662q-vvx9UNKNOWN———OSV2026-10-28
GHSA-g4qv-2jxx-769hGHSA-g4qv-2jxx-769hUNKNOWN———OSV2026-10-29
GHSA-g7cr-3p24-7wf7GHSA-g7cr-3p24-7wf7UNKNOWN———OSV2026-10-29
GHSA-g842-9rc4-69pwGHSA-g842-9rc4-69pwUNKNOWN———OSV2026-10-29
GHSA-mrfp-p49p-3hf2GHSA-mrfp-p49p-3hf2UNKNOWN———OSV2026-10-29
GHSA-p8hx-v2p6-rp84GHSA-p8hx-v2p6-rp84UNKNOWN———OSV2026-10-29
GHSA-pchr-8j38-3x4pGHSA-pchr-8j38-3x4pUNKNOWN———OSV2026-10-28
GHSA-v9pv-5gc8-w2m6GHSA-v9pv-5gc8-w2m6UNKNOWN———OSV2026-10-29
GHSA-xgh8-jp6q-p5x8GHSA-xgh8-jp6q-p5x8UNKNOWN———OSV2026-10-28
PYSEC-2026-4326PYSEC-2026-4326UNKNOWN———OSV2026-10-27
PYSEC-2026-4327PYSEC-2026-4327UNKNOWN———OSV2026-10-27
PYSEC-2026-4328PYSEC-2026-4328UNKNOWN———OSV2026-10-27
PYSEC-2026-4329PYSEC-2026-4329UNKNOWN———OSV2026-10-28
PYSEC-2026-4330PYSEC-2026-4330UNKNOWN———OSV2026-10-28
PYSEC-2026-4331PYSEC-2026-4331UNKNOWN———OSV2026-10-28
PYSEC-2026-4332PYSEC-2026-4332UNKNOWN———OSV2026-10-28
PYSEC-2026-4333PYSEC-2026-4333UNKNOWN———OSV2026-10-28
PYSEC-2026-4334PYSEC-2026-4334UNKNOWN———OSV2026-10-28
PYSEC-2026-4335PYSEC-2026-4335UNKNOWN———OSV2026-10-28
PYSEC-2026-4336PYSEC-2026-4336UNKNOWN———OSV2026-10-29
PYSEC-2026-4337PYSEC-2026-4337UNKNOWN———OSV2026-10-29
PYSEC-2026-4338PYSEC-2026-4338UNKNOWN———OSV2026-10-29
PYSEC-2026-4339PYSEC-2026-4339UNKNOWN———OSV2026-10-29
PYSEC-2026-4340PYSEC-2026-4340UNKNOWN———OSV2026-10-29
PYSEC-2026-4341PYSEC-2026-4341UNKNOWN———OSV2026-10-29
PYSEC-2026-4342PYSEC-2026-4342UNKNOWN———OSV2026-10-29
PYSEC-2026-4343PYSEC-2026-4343UNKNOWN———OSV2026-10-29
GHSA-7wqf-h36w-47mcGHSA-7wqf-h36w-47mcUNKNOWN———OSV2026-10-26
GHSA-c732-xvv8-g94cGHSA-c732-xvv8-g94cUNKNOWN———OSV2026-10-27
GHSA-c92r-g8j5-vhcxGHSA-c92r-g8j5-vhcxUNKNOWN———OSV2026-10-26
GHSA-rmf2-pwfq-h75jGHSA-rmf2-pwfq-h75jUNKNOWN———OSV2026-10-26
GHSA-2mjx-qc3c-rqvcGHSA-2mjx-qc3c-rqvcUNKNOWN———OSV2026-10-27
GHSA-c8m5-c952-6cm4GHSA-c8m5-c952-6cm4UNKNOWN———OSV2026-10-27
GHSA-h2v8-394m-p7vvGHSA-h2v8-394m-p7vvUNKNOWN———OSV2026-10-27
GHSA-vp88-798v-h67fGHSA-vp88-798v-h67fUNKNOWN———OSV2026-10-27
GHSA-w44r-93j7-qv28GHSA-w44r-93j7-qv28UNKNOWN———OSV2026-10-27
GHSA-j3rv-43j4-c7qmGHSA-j3rv-43j4-c7qmUNKNOWN———OSV2026-10-28
FG-IR-26-186PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)UNKNOWN———Fortinet2026-10-21
FG-IR-26-180Arbitrary file write in grpc phQueryMasterUNKNOWN———Fortinet2026-10-13
FG-IR-26-183Broken authorizationUNKNOWN———Fortinet2026-10-13
FG-IR-26-182Double free in signal handlerUNKNOWN———Fortinet2026-10-13
FG-IR-26-179Fabric API Authentication bypassUNKNOWN———Fortinet2026-10-13
FG-IR-26-181GUI Denial of ServiceUNKNOWN———Fortinet2026-10-13
FG-IR-26-185Improper access control and session management in the web management interfaceUNKNOWN———Fortinet2026-10-13
FG-IR-26-178Multiple Arbitrary File Read/Write via SQL InjectionUNKNOWN———Fortinet2026-10-13
FG-IR-26-176Persistent Denial of Service in Admin ProfileUNKNOWN———Fortinet2026-10-13
FG-IR-26-184SQL command injection in webmailUNKNOWN———Fortinet2026-10-13
FG-IR-26-177arbitrary command execution in fgfmsd daemonUNKNOWN———Fortinet2026-10-13
FG-IR-26-175Improper limitation of a pathname to a restricted directoryUNKNOWN———Fortinet2026-10-01
FG-IR-26-165Arbitrary process termination from exposed minifilter communication portUNKNOWN———Fortinet2026-09-08
FG-IR-26-164Broken Access control on Websocket streamsUNKNOWN———Fortinet2026-09-08
FG-IR-26-167Cron Job Injection in Remote BackupUNKNOWN———Fortinet2026-09-08
FG-IR-26-168Improper Authentication of FortiPAM ServerUNKNOWN———Fortinet2026-09-08
FG-IR-26-170JWT used for authentication in web GUI signed with static keyUNKNOWN———Fortinet2026-09-08
FG-IR-26-173Null Pointer Dereference in Log ReportUNKNOWN———Fortinet2026-09-08
FG-IR-26-169Open Redirect on FortiSIEMUNKNOWN———Fortinet2026-09-08
FG-IR-26-166Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive InformationUNKNOWN———Fortinet2026-09-08
FG-IR-26-172Uncontrolled Resource Consumption in SNMPUNKNOWN———Fortinet2026-09-08
FG-IR-26-171Workflow session email approval process bypassUNKNOWN———Fortinet2026-09-08
FG-IR-26-174ZTNA Portal Improper Certificate ValidationUNKNOWN———Fortinet2026-09-08
FG-IR-26-158Broken access control in the RADIUS type admin groupUNKNOWN———Fortinet2026-08-12
FG-IR-26-157Content-Encoding WAF EvasionUNKNOWN———Fortinet2026-08-12
FG-IR-26-160FGFM Authentication Weakening via CLI ConfigurationUNKNOWN———Fortinet2026-08-12
FG-IR-26-156Heap overflow in kernel driver due to missing size validationUNKNOWN———Fortinet2026-08-12
FG-IR-26-159Server-Side Request Forgery (SSRF)UNKNOWN———Fortinet2026-08-12
FG-IR-26-161Stack buffer overflow in WADUNKNOWN———Fortinet2026-08-12
FG-IR-26-162UI DoS attackUNKNOWN———Fortinet2026-08-12
FG-IR-26-154Buffer overread in authd and wad daemonUNKNOWN———Fortinet2026-07-14
FG-IR-26-149Cross-Site Scripting in Domain parameterUNKNOWN———Fortinet2026-07-14
FG-IR-26-152Header injection in Web Filter warning pageUNKNOWN———Fortinet2026-07-14
FG-IR-26-153Header injection in captive portal authentication formUNKNOWN———Fortinet2026-07-14
FG-IR-26-147Missed certificate verification in AD Connector communication with FortiClient EMSUNKNOWN———Fortinet2026-07-14
FG-IR-26-146Out of bounds read in GUIUNKNOWN———Fortinet2026-07-14
FG-IR-26-151Path traversal in CLI command allows deletion of root file systemUNKNOWN———Fortinet2026-07-14
FG-IR-26-150SSL-VPN Reflected XSSUNKNOWN———Fortinet2026-07-14
FG-IR-26-148Stack Buffer Overflow in Log ReportUNKNOWN———Fortinet2026-07-14
FG-IR-26-155Supers override fails to properly override supervisor addressUNKNOWN———Fortinet2026-07-14
FG-IR-26-145Unauthenticated VNC access exposed on all interfacesUNKNOWN———Fortinet2026-07-14
FG-IR-25-1052LDAP authentication bypass in Agentless VPN and FSSOUNKNOWN———Fortinet2026-02-10
FG-IR-26-140Improper access control in API endpointsUNKNOWN———Fortinet2026-06-09
FG-IR-26-143Restricted CLI escape using LuaUNKNOWN———Fortinet2026-06-09

Updated 2026-11-02. Sources: NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB and more. JSON API available for automation.